MD5: ab35c5a6b662cafbb78e2cc6cc20fdc7
SHA1: cf7530f58199620fb3b8ca4247cbac58b8d08b96
SHA256: b951421bd27b8081fd729678c836e1aaeabe3c03627d3838e8ef1cf2a4da1470
SSDeep: 98304:KMCanqM3y XI b5XKkOW4BrIuxAiU9aNY13djMiO7OcIJGkv2Di:XChM3y XHsD2WIuKRsOcVkv2Di
Size: 5614592 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: SQW
Created at: 2017-06-15 16:28:16
Analyzed on: Windows7 SP1 32-bit

Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

Process activity

The Trojan creates the following process(es):

1.exe:1652
%original file name%.exe:1672
REZ Injector by -Sp0ng3b0b-.exe:2452
2.exe:2384

The Trojan injects its code into the following process(es):

UGF.exe:1024

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process 1.exe:1652 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\php158.tmp (581 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\php159.tmp (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\phpEA.tmp (297 bytes)

The process UGF.exe:1024 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Windows\MKPDOO\UGF.02 (57 bytes)
C:\ProgramData\HMW\UGF.004 (14668 bytes)
C:\Windows\MKPDOO\UGF.01 (81 bytes)

The process %original file name%.exe:1672 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Windows\MKPDOO\UGF.02 (55 bytes)
C:\Windows\MKPDOO\UGF.00 (1 bytes)
C:\Windows\MKPDOO\UGF.01 (81 bytes)
C:\REZ Injector by -Sp0ng3b0b-.exe (294 bytes)
C:\Windows\MKPDOO\UGF.exe (147 bytes)

The process REZ Injector by -Sp0ng3b0b-.exe:2452 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\1.exe (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.exe (148 bytes)

The process 2.exe:2384 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\ProgramData\IIKMQP\QIL.00 (2 bytes)
C:\ProgramData\IIKMQP\QIL.exe (148 bytes)
C:\ProgramData\IIKMQP\QIL.02 (0 bytes)
C:\ProgramData\IIKMQP\QIL.01 (81 bytes)

Registry activity

The process UGF.exe:1024 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"UGF Start" = "C:\Windows\MKPDOO\UGF.exe"

The process %original file name%.exe:1672 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process REZ Injector by -Sp0ng3b0b-.exe:2452 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process 2.exe:2384 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

Dropped PE files

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

No information is available.

PE Sections

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

No activity has been detected.

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

Web Traffic was not found.

The Trojan connects to the servers at the folowing location(s):

.text

`.rdata

@.data

.rsrc

SSh8BS

udPh

SSh@ S

PSSSSSSh

PSSSSSSh!

vSSSh

FTPjK

FtPj;

C.PjRV

tGHt.Ht&

.EKSWU

FTPG

FTPj

FtPS

=KNILw.tT=RCNEw

_0 _8 _4;_,

SHA1 block transform for x86, CRYPTOGAMS by <appro@openssl.org>

SHA256 block transform for x86, CRYPTOGAMS by <appro@openssl.org>

DlSHA512 block transform for x86, CRYPTOGAMS by <appro@openssl.org>

Montgomery Multiplication for x86, CRYPTOGAMS by <appro@openssl.org>

6-9'6-9'

$6.:$6.:

*?#1*?#1

>8$4,8$4,

AES for x86, CRYPTOGAMS by <appro@openssl.org>

Camellia for x86 by <appro@openssl.org>

RC4 for x86, CRYPTOGAMS by <appro@openssl.org>

FRegDeleteKeyExW

gmail.com

MARGIN-BOTTOM: 11px; BORDER-STYLE: solid; BORDER-COLOR: #DFDFE5; BORDER-WIDTH: 2px; BACKGROUND-COLOR: #DFDFE5; }H2 { COLOR: black; BACKGROUND-COLOR: #FFFFF; FONT-SIZE: 12pt; FONT-WEIGHT: normal; MARGIN-BOTTOM: 0px; MARGIN-TOP: 10px;}</STYLE></HEAD><META http-equiv=Content-Type content="text/html; charset=utf-8"><BODY>

mail@domain.com

Date: %d %s %d %d:%d:%d

EHLO %s

,qop=%s

,response=%s

,digest-uri="%s"

,cnonce="%s"

,nc=%s

,nonce="%s"

,realm="%s"

charset=utf-8,username="%s"

smtp/

AUTH PLAIN %s

^%s^%s

AUTH LOGIN

LOGIN

--%s--

RCPT TO:<%s>

MAIL FROM:<%s>

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

operator

GetProcessWindowStation

USER32.DLL

portuguese-brazilian

ADVAPI32.DLL

kernel32.dll

UxTheme.dll

OLEACC.dll

passed a null parameter

DSO support routines

x509 certificate routines

error:lX:%s:%s:%s

ssl_sess_cert

ssl_cert

evp_pkey

x509_pkey

%s(%d): OpenSSL internal error, assertion failed: %s

lhash part of OpenSSL 1.0.0d 8 Feb 2011

Stack part of OpenSSL 1.0.0d 8 Feb 2011

supportedAlgorithms

crossCertificatePair

certificateRevocationList

cACertificate

userCertificate

userPassword

supportedApplicationContext

Microsoft Local Key set

LocalKeySet

id-Gost28147-89-None-KeyMeshing

id-Gost28147-89-CryptoPro-KeyMeshing

password based MAC

id-PasswordBasedMAC

X509v3 Certificate Issuer

certificateIssuer

certicom-arc

Proxy Certificate Information

proxyCertInfo

Microsoft Smartcardlogin

msSmartcardLogin

joint-iso-itu-t

JOINT-ISO-ITU-T

set-rootKeyThumb

setAttr-Cert

setCext-cCertRequired

setCext-certType

setct-CertResTBE

setct-CertReqTBEX

setct-CertReqTBE

setct-AcqCardCodeMsgTBE

setct-CertInqReqTBS

setct-CertResData

setct-CertReqTBS

setct-CertReqData

setct-PCertResTBS

setct-PCertReqData

setct-AcqCardCodeMsg

certificate extensions

set-certExt

set-msgExt

id-ecPublicKey

id-cmc-confirmCertAcceptance

id-cmc-getCert

id-regInfo-certReq

id-regCtrl-protocolEncrKey

id-regCtrl-oldCertID

id-it-revPassphrase

id-it-keyPairParamRep

id-it-keyPairParamReq

id-it-unsupportedOIDs

id-it-caKeyUpdateInfo

id-it-encKeyPairTypes

id-it-signKeyPairTypes

id-it-caProtEncCert

id-mod-attribute-cert

id-mod-qualified-cert-93

id-mod-qualified-cert-88

id-smime-aa-ets-certCRLTimestamp

id-smime-aa-ets-certValues

id-smime-aa-ets-CertificateRefs

id-smime-aa-ets-otherSigCert

id-smime-aa-smimeEncryptCerts

id-smime-aa-signingCertificate

id-smime-aa-encrypKeyPref

id-smime-aa-msgSigDigest

id-smime-ct-publishCert

id-smime-mod-msg-v3

sdsiCertificate

x509Certificate

localKeyID

certBag

pkcs8ShroudedKeyBag

keyBag

pbeWithSHA1And2-KeyTripleDES-CBC

pbeWithSHA1And3-KeyTripleDES-CBC

TLS Web Client Authentication

TLS Web Server Authentication

X509v3 Extended Key Usage

extendedKeyUsage

X509v3 Authority Key Identifier

authorityKeyIdentifier

X509v3 Certificate Policies

certificatePolicies

X509v3 Private Key Usage Period

privateKeyUsagePeriod

X509v3 Key Usage

keyUsage

X509v3 Subject Key Identifier

subjectKeyIdentifier

Netscape Certificate Sequence

nsCertSequence

Netscape CA Policy Url

nsCaPolicyUrl

Netscape Renewal Url

nsRenewalUrl

Netscape CA Revocation Url

nsCaRevocationUrl

Netscape Revocation Url

nsRevocationUrl

Netscape Base Url

nsBaseUrl

Netscape Cert Type

nsCertType

Netscape Certificate Extension

nsCertExt

extendedCertificateAttributes

challengePassword

dhKeyAgreement

Big Number part of OpenSSL 1.0.0d 8 Feb 2011

ASN.1 part of OpenSSL 1.0.0d 8 Feb 2011

keylen <= sizeof key

EVP_CIPHER_key_length(cipher) <= (int)sizeof(md_tmp)

len>=0 && len<=(int)sizeof(ctx->key)

j <= (int)sizeof(ctx->key)

keylength

keyfunc

EVP part of OpenSSL 1.0.0d 8 Feb 2011

.\crypto\pkcs12\p12_key.c

SHA1 part of OpenSSL 1.0.0d 8 Feb 2011

SHA-256 part of OpenSSL 1.0.0d 8 Feb 2011

SHA-512 part of OpenSSL 1.0.0d 8 Feb 2011

RSA part of OpenSSL 1.0.0d 8 Feb 2011

RAND part of OpenSSL 1.0.0d 8 Feb 2011

You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html

value.bag

value.safes

value.shkeybag

value.keybag

value.sdsicert

value.x509cert

value.other

cert_info

hexkey

rsa_keygen_pubexp

rsa_keygen_bits

NETAPI32.DLL

KERNEL32.DLL

value.single

value.set

PKCS8_PRIV_KEY_INFO

pkey

pkeyalg

enc_key

key_enc_algor

cert

d.encrypted

d.digest

d.signed_and_enveloped

d.enveloped

d.sign

d.data

d.other

X509_PUBKEY

public_key

.\crypto\asn1\x_pubkey.c

%d.%d.%d.%d/%d.%d.%d.%d

%*s%s:

d.registeredID

d.iPAddress

d.uniformResourceIdentifier

d.ediPartyName

d.directoryName

d.dNSName

d.rfc822Name

d.otherName

name.relativename

name.fullname

certificateHold

Certificate Hold

cessationOfOperation

Cessation Of Operation

keyCompromise

Key Compromise

%*sOnly Attribute Certificates

%*sOnly CA Certificates

%*sOnly User Certificates

AUTHORITY_KEYID

keyid

X509_CERT_PAIR

X509_CERT_AUX

%d.%d.%d.%d

EC part of OpenSSL 1.0.0d 8 Feb 2011

ECDSA part of OpenSSL 1.0.0d 8 Feb 2011

.\crypto\ec\ec_key.c

DSA part of OpenSSL 1.0.0d 8 Feb 2011

Diffie-Hellman part of OpenSSL 1.0.0d 8 Feb 2011

.\crypto\dh\dh_key.c

\X

<unsupported>

IP Address:%d.%d.%d.%d

URI:%s

DNS:%s

email:%s

EdiPartyName:<unsupported>

X400Name:<unsupported>

othername:<unsupported>

d.usernotice

d.cpsuri

CERTIFICATEPOLICIES

%*sExplicit Text: %s

%*sNumber%s:

%*sOrganization: %s

%*sCPS: %s

ddddddZ

ddddddZ

pubkey

priv_key

pub_key

EC_PRIVATEKEY

publicKey

privateKey

value.implicitlyCA

value.parameters

value.named_curve

p.char_two

p.prime

p.ppBasis

p.tpBasis

p.onBasis

p.other

.\crypto\evp\evp_pkey.c

ECDH part of OpenSSL 1.0.0d 8 Feb 2011

%'%1$=%C%K%O%s%

.%.-.3.7.9.?.W.[.o.y.

C%C'C3C7C9COCWCiC

%s: (%d bit)

Public-Key

Private-Key

recommended-private-length: %d bits

public-key:

private-key:

PKCS#3 DH Public-Key

PKCS#3 DH Private-Key

Public-Key: (%d bit)

Private-Key: (%d bit)

X.509 part of OpenSSL 1.0.0d 8 Feb 2011

OPENSSL_ALLOW_PROXY_CERTS

x%s

%s - d:d:d%.*s %d%s

'() ,-./:=?

CONF part of OpenSSL 1.0.0d 8 Feb 2011

%*sPolicy Text: %s

%*scrlUrl:

EXTENDED_KEY_USAGE

%*sZone: %s, User:

.\crypto\x509v3\v3_akey.c

PKEY_USAGE_PERIOD

keyCertSign

Certificate Sign

keyAgreement

Key Agreement

keyEncipherment

Key Encipherment

.\crypto\x509v3\v3_skey.c

MD5 part of OpenSSL 1.0.0d 8 Feb 2011

PROXY_CERT_INFO_EXTENSION

D:/Projects/openssl-10.0d/ssl/certs

D:/Projects/openssl-10.0d/ssl/cert.pem

SSL_CERT_DIR

SSL_CERT_FILE

Basis Type: %s

Field Type: %s

ASN1 OID: %s

%s %s%lu (%s0x%lx)

%lu:%s:%s:%d:%s

CONF_def part of OpenSSL 1.0.0d 8 Feb 2011

[[%s]]

[%s] %s=%s

crlUrl

certStatus

certId

OCSP_CERTSTATUS

value.unknown

value.revoked

value.good

value.byKey

value.byName

reqCert

OCSP_CERTID

issuerKeyHash

certs

d.receiptList

d.allOrFirstTier

d.compressedData

d.authenticatedData

d.encryptedData

d.digestedData

d.envelopedData

d.signedData

d.ori

d.pwri

d.kekri

d.kari

d.ktri

CMS_PasswordRecipientInfo

keyDerivationAlgorithm

keyIdentifier

CMS_KeyAgreeRecipientInfo

recipientEncryptedKeys

CMS_OriginatorIdentifierOrKey

d.originatorKey

CMS_OriginatorPublicKey

CMS_RecipientEncryptedKey

CMS_KeyAgreeRecipientIdentifier

d.rKeyId

CMS_RecipientKeyIdentifier

CMS_OtherKeyAttribute

keyAttr

keyAttrId

CMS_KeyTransRecipientInfo

encryptedKey

keyEncryptionAlgorithm

certificates

d.crl

d.subjectKeyIdentifier

d.issuerAndSerialNumber

CMS_CertificateChoices

d.v2AttrCert

d.v1AttrCert

d.extendedCertificate

d.certificate

CMS_OtherCertificateFormat

otherCert

otherCertFormat

%s.dll

PEM part of OpenSSL 1.0.0d 8 Feb 2011

phrase is too short, needs to be at least %d chars

Enter PEM pass phrase:

TRUSTED CERTIFICATE

CERTIFICATE REQUEST

NEW CERTIFICATE REQUEST

CERTIFICATE

X509 CERTIFICATE

PRIVATE KEY

ENCRYPTED PRIVATE KEY

ANY PRIVATE KEY

.\crypto\evp\evp_key.c

nkey <= EVP_MAX_KEY_LENGTH

?456789:;<=

!"#$%&'()* ,-./0123

Verifying - %s

OpenSSL 1.0.0d 8 Feb 2011

%-23s %s Kx=%-8s Au=%-4s Enc=%-9s Mac=%-4s%s

EXPORT56

EXPORT40

EXPORT

.\ssl\ssl_cert.c

SSLv3 part of OpenSSL 1.0.0d 8 Feb 2011

TLSv1 part of OpenSSL 1.0.0d 8 Feb 2011

SSLv2 part of OpenSSL 1.0.0d 8 Feb 2011

s->session->master_key_length >= 0 && s->session->master_key_length < (int)sizeof(s->session->master_key)

wrong number of key bits

unsupported status type

unsupported ssl version

unsupported protocol

unsupported elliptic curve

unsupported digest type

unsupported compression algorithm

unsupported cipher

unknown pkey type

unknown key exchange type

unknown certificate type

unable to find public key parameters

unable to extract public key

unable to decode ecdh certs

unable to decode dh certs

tried to use unsupported cipher

tls peer did not respond with certificate list

tls client cert req with anon cipher

tlsv1 unsupported extension

tlsv1 certificate unobtainable

tlsv1 bad certificate status response

tlsv1 bad certificate hash value

tlsv1 alert export restriction

sslv3 alert unsupported certificate

sslv3 alert no certificate

sslv3 alert certificate unknown

sslv3 alert certificate revoked

sslv3 alert certificate expired

sslv3 alert bad certificate

signature for non signing certificate

reuse cert type not zero

reuse cert length not zero

public key not rsa

public key is not rsa

public key encrypt error

peer error unsupported certificate type

peer error no certificate

peer error certificate

peer did not return a certificate

null ssl method passed

no publickey

no private key assigned

no privatekey

Peer haven't sent GOST certificate, required for selected ciphersuite

no client cert received

no client cert method

no ciphers passed

no certificate specified

no certificate set

no certificate returned

no certificate assigned

no certificates returned

missing tmp rsa pkey

missing tmp rsa key

missing tmp ecdh key

missing tmp dh key

missing rsa signing cert

missing rsa encrypting cert

missing rsa certificate

missing export tmp rsa key

missing export tmp dh key

missing dsa signing cert

missing dh rsa cert

missing dh key

missing dh dsa cert

krb5 server rd_req (keytab perms?)

key arg too long

invalid ticket keys length

http request

https proxy request

error generating tmp rsa key

ecc cert should have sha1 signature

ecc cert should have rsa signature

ecc cert not for signing

ecc cert not for key agreement

cert length mismatch

certificate verify failed

bad ecc cert

bad dh pub key length

TLS1_SETUP_KEY_BLOCK

tls1_cert_verify_mac

SSL_VERIFY_CERT_CHAIN

SSL_use_RSAPrivateKey_file

SSL_use_RSAPrivateKey_ASN1

SSL_use_RSAPrivateKey

SSL_use_PrivateKey_file

SSL_use_PrivateKey_ASN1

SSL_use_PrivateKey

SSL_use_certificate_file

SSL_use_certificate_ASN1

SSL_use_certificate

SSL_SET_PKEY

SSL_SET_CERT

SSL_SESS_CERT_NEW

SSL_GET_SIGN_PKEY

SSL_GET_SERVER_SEND_CERT

SSL_CTX_use_RSAPrivateKey_file

SSL_CTX_use_RSAPrivateKey_ASN1

SSL_CTX_use_RSAPrivateKey

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey_ASN1

SSL_CTX_use_PrivateKey

SSL_CTX_use_certificate_file

SSL_CTX_use_certificate_chain_file

SSL_CTX_use_certificate_ASN1

SSL_CTX_use_certificate

SSL_CTX_set_client_cert_engine

SSL_CTX_check_private_key

SSL_CHECK_SRVR_ECC_CERT_AND_ALG

SSL_check_private_key

SSL_CERT_NEW

SSL_CERT_INSTANTIATE

SSL_CERT_INST

SSL_CERT_DUP

SSL_add_file_cert_subjects_to_stack

SSL_add_dir_cert_subjects_to_stack

SSL3_SETUP_KEY_BLOCK

SSL3_SEND_SERVER_KEY_EXCHANGE

SSL3_SEND_SERVER_CERTIFICATE

SSL3_SEND_CLIENT_KEY_EXCHANGE

SSL3_SEND_CLIENT_CERTIFICATE

SSL3_SEND_CERTIFICATE_REQUEST

SSL3_OUTPUT_CERT_CHAIN

SSL3_GET_SERVER_CERTIFICATE

SSL3_GET_KEY_EXCHANGE

SSL3_GET_CLIENT_KEY_EXCHANGE

SSL3_GET_CLIENT_CERTIFICATE

SSL3_GET_CERT_VERIFY

SSL3_GET_CERT_STATUS

SSL3_GET_CERTIFICATE_REQUEST

SSL3_GENERATE_KEY_BLOCK

SSL3_CHECK_CERT_AND_ALGORITHM

SSL3_ADD_CERT_TO_BUF

SSL2_SET_CERTIFICATE

SSL2_GENERATE_KEY_MATERIAL

REQUEST_CERTIFICATE

GET_CLIENT_MASTER_KEY

DTLS1_SEND_SERVER_KEY_EXCHANGE

DTLS1_SEND_SERVER_CERTIFICATE

DTLS1_SEND_CLIENT_KEY_EXCHANGE

DTLS1_SEND_CLIENT_CERTIFICATE

DTLS1_SEND_CERTIFICATE_REQUEST

DTLS1_OUTPUT_CERT_CHAIN

DTLS1_ADD_CERT_TO_BUF

CLIENT_MASTER_KEY

CLIENT_CERTIFICATE

key expansion

client write key

server write key

c->iv_len <= (int)sizeof(s->session->key_arg)

s->s2->key_material_length <= sizeof s->s2->key_material

Corrupt JPEG data: found marker 0xx instead of RST%d

Warning: unknown JFIF revision number %d.d

Corrupt JPEG data: %u extraneous bytes before marker 0xx

Inconsistent progression sequence for component %d coefficient %d

Unknown Adobe color transform code %d

Obtained XMS handle %u

Freed XMS handle %u

Unrecognized component IDs %d %d %d, assuming YCbCr

JFIF extension marker: RGB thumbnail image, length %u

JFIF extension marker: palette thumbnail image, length %u

JFIF extension marker: JPEG-compressed thumbnail image, length %u

Opened temporary file %s

Closed temporary file %s

Ss=%d, Se=%d, Ah=%d, Al=%d

Component %d: dc=%d ac=%d

Start Of Scan: %d components

Component %d: %dhx%dv q=%d

Start Of Frame 0xx: width=%u, height=%u, components=%d

Smoothing not supported with nonstandard sampling ratios

RST%d

At marker 0xx, recovery action %d

Selected %d colors for quantization

Quantizing to %d colors

Quantizing to %d = %d*%d*%d colors

%4u %4u %4u %4u %4u %4u %4u %4u

Unexpected marker 0xx

Miscellaneous marker 0xx, length %u

with %d x %d thumbnail image

JFIF extension marker: type 0xx, length %u

Warning: thumbnail image size does not match data length %u

JFIF APP0 marker: version %d.d, density %dx%d %d

= = = = = = = =

Obtained EMS handle %u

Freed EMS handle %u

Define Restart Interval %u

Define Quantization Table %d precision %d

Define Huffman Table 0xx

Define Arithmetic Table 0xx: 0xx

Unknown APP14 marker (not Adobe), length %u

Unknown APP0 marker (not JFIF), length %u

Adobe APP14 marker: version %d, flags 0xx 0xx, transform %d

Unsupported marker type 0xx

Failed to create temporary file %s

Unsupported JPEG process: SOF type 0xx

Cannot quantize to more than %d colors

Cannot quantize to fewer than %d colors

Cannot quantize more than %d color components

Insufficient memory (case %d)

Not a JPEG file: starts with 0xx 0xx

Quantization table 0xx was not defined

Huffman table 0xx was not defined

Backing store not supported

Cannot transcode due to multiple use of quantization table %d

Maximum supported image dimension is %u pixels

Empty JPEG image (DNL not supported)

Bogus DQT index %d

Bogus DHT index %d

Bogus DAC value 0x%x

Bogus DAC index %d

Unsupported color conversion request

Too many color components: %d, max %d

Buffer passed to JPEG library is too small

JPEG parameter struct mismatch: library thinks size is %u, caller expects %u

Improper call to JPEG library in state %d

Invalid scan script at entry %d

Invalid progressive parameters at scan script entry %d

Invalid progressive parameters Ss=%d Se=%d Ah=%d Al=%d

Unsupported JPEG data precision %d

Invalid memory pool code %d

Wrong JPEG library version: library is %d, caller expects %d

IDCT output block size %d not supported

Invalid component ID %d in SOS

Bogus message code %d

;Warning: highpass filter disabled. highpass frequency too small

hXXp://lame.sf.net

3.99.5

Opera

?INTERNAL ERROR IN VBR NEW CODE, please send bug report

@INTERNAL ERROR IN VBR NEW CODE (986), please send bug report

INTERNAL ERROR IN VBR NEW CODE (1313), please send bug report

maxbits=%d usedbits=%d

hip: invalid layer %d

hip: error audio data exceeds framesize by %d bytes

hip: bitstream problem, resyncing skipping %d bytes...

Sorry, layer %d not supported

hip: Can't rewind stream by %d bits!

hip: Bogus region length (%d)

ADVAPI32.dll

F%D,3

QVisual C   CRT: Not enough memory to complete call to strerror.

Broken pipe

Inappropriate I/O control operation

Operation not permitted

%S#[k

?#%X.y

.\crypto\engine\eng_pkey.c

RSA PRIVATE KEY

DSA PRIVATE KEY

EC PRIVATE KEY

Load certs from files in a directory

%s%clx.%s%d

unsupported type

unsupported recpientinfo type

unsupported recipient type

unsupported kek algorithm

unsupported content type

signer certificate not found

private key does not match certificate

no public key

no private key

no msgsigdigest

no key or cert

no key

not supported for this key type

not key transport

msgsigdigest wrong length

msgsigdigest verification failure

msgsigdigest error

invalid key length

invalid encrypted key length

error setting key

error getting public key

certificate verify error

certificate has no keyid

certificate already present

CMS_SIGNERINFO_VERIFY_CERT

CMS_RecipientInfo_set0_pkey

CMS_RecipientInfo_set0_key

CMS_RecipientInfo_ktri_cert_cmp

cms_msgSigDigest_add1

CMS_GET0_CERTIFICATE_CHOICES

CMS_EncryptedData_set1_key

CMS_decrypt_set1_pkey

CMS_decrypt_set1_key

CMS_add1_recipient_cert

CMS_add0_recipient_key

CMS_add0_cert

unsupported requestorname type

no certificates in chain

error parsing url

PARSE_HTTP_LINE1

OCSP_parse_url

OCSP_cert_id_new

unimplemented public key method

invalid cmd number

invalid cmd name

failed loading public key

failed loading private key

cmd not executable

ENGINE_UNLOAD_KEY

ENGINE_load_ssl_client_cert

ENGINE_load_public_key

ENGINE_load_private_key

ENGINE_get_pkey_meth

ENGINE_get_pkey_asn1_meth

ENGINE_ctrl_cmd_string

ENGINE_ctrl_cmd

ENGINE_cmd_is_executable

unsupported version

unsupported md algorithm

invalid signer certificate purpose

ess signing certificate error

ess add signing cert error

TS_VERIFY_CERT

TS_TST_INFO_set_msg_imprint

TS_RESP_CTX_set_signer_cert

TS_RESP_CTX_set_certs

TS_REQ_set_msg_imprint

TS_MSG_IMPRINT_set_algo

TS_CHECK_SIGNING_CERTS

ESS_SIGNING_CERT_NEW_INIT

ESS_CERT_ID_NEW_INIT

ESS_ADD_SIGNING_CERT

functionality not supported

WIN32_JOINER

unsupported pkcs12 mode

key gen error

PKCS8_add_keyusage

PKCS12_PBE_keyivgen

PKCS12_newpass

PKCS12_MAKE_SHKEYBAG

PKCS12_MAKE_KEYBAG

PKCS12_key_gen_uni

PKCS12_key_gen_asc

PKCS12_add_localkeyid

unsupported option

unable to get issuer keyid

policy syntax not currently supported

operation not defined

no proxy cert policy language defined

no issuer certificate

extension setting not supported

V2I_EXTENDED_KEY_USAGE

V2I_AUTHORITY_KEYID

S2I_SKEY_ID

S2I_ASN1_SKEY_ID

R2I_CERTPOL

unsupported cipher type

unknown operation

unable to find certificate

signing not supported for this key type

operation not supported on this type

no recipient matches key

no recipient matches certificate

encryption not supported for this key type

decrypted key is wrong length

PKCS7_add_certificate

unsupported method

no port specified

no port defined

no accept port specified

broken pipe

BIO_get_port

ECDH_compute_key

data too large for key size

unsupported field

passed null parameter

not a supported NIST prime

missing private key

keys not set

invalid private key

PKEY_EC_SIGN

PKEY_EC_PARAMGEN

PKEY_EC_KEYGEN

PKEY_EC_DERIVE

PKEY_EC_CTRL_STR

PKEY_EC_CTRL

o2i_ECPublicKey

i2o_ECPublicKey

i2d_ECPrivateKey

EC_KEY_print_fp

EC_KEY_print

EC_KEY_new

EC_KEY_generate_key

EC_KEY_copy

EC_KEY_check_key

ECKEY_TYPE2PARAM

ECKEY_PUB_ENCODE

ECKEY_PUB_DECODE

ECKEY_PRIV_ENCODE

ECKEY_PRIV_DECODE

ECKEY_PARAM_DECODE

ECKEY_PARAM2TYPE

DO_EC_KEY_PRINT

d2i_ECPrivateKey

zlib not supported

wrong public key type

unsupported public key type

unsupported encryption algorithm

unsupported any defined by type

unknown public key type

unable to decode rsa private key

unable to decode rsa key

streaming not supported

private key header missing

digest and key type not supported

bad password read

X509_PKEY_new

i2d_RSA_PUBKEY

i2d_PublicKey

i2d_PrivateKey

i2d_EC_PUBKEY

i2d_DSA_PUBKEY

d2i_X509_PKEY

d2i_PublicKey

d2i_PrivateKey

d2i_AutoPrivateKey

unsupported algorithm

unknown key type

unable to get certs public key

public key encode error

public key decode error

no cert set for us to verify

method not supported

loading cert dir

key values mismatch

key type mismatch

cert already in hash table

cant check dh key

X509_verify_cert

X509_STORE_add_cert

X509_REQ_check_private_key

X509_PUBKEY_set

X509_PUBKEY_get

X509_load_cert_file

X509_load_cert_crl_file

X509_get_pubkey_parameters

X509_check_private_key

GET_CERT_BY_SUBJECT

ADD_CERT_DIR

PKEY_DSA_KEYGEN

PKEY_DSA_CTRL

unsupported key components

unsupported encryption

read key

public key no rsa

problems getting password

keyblob too short

keyblob header parse error

expecting public key blob

expecting private key blob

error converting private key

PEM_WRITE_PRIVATEKEY

PEM_READ_PRIVATEKEY

PEM_READ_BIO_PRIVATEKEY

PEM_PK8PKEY

PEM_F_PEM_WRITE_PKCS8PRIVATEKEY

DO_PK8PKEY_FP

DO_PK8PKEY

d2i_PKCS8PrivateKey_fp

d2i_PKCS8PrivateKey_bio

unsupported salt type

unsupported private key algorithm

unsupported prf

unsupported key size

unsupported key derivation function

unsupported keylength

unsuported number of rounds

private key encode error

private key decode error

operaton not initialized

operation not supported for this keytype

no operation set

no key set

keygen failure

invalid operation

expecting a ec key

expecting a ecdsa key

expecting a dsa key

expecting a dh key

expecting an rsa key

different key types

ctrl operation not implemented

command not supported

camellia key setup failed

bn pubkey error

bad key length

aes key setup failed

PKEY_SET_TYPE

PKCS5_v2_PBE_keyivgen

PKCS5_PBE_keyivgen

EVP_PKEY_verify_recover_init

EVP_PKEY_verify_recover

EVP_PKEY_verify_init

EVP_PKEY_verify

EVP_PKEY_sign_init

EVP_PKEY_sign

EVP_PKEY_paramgen_init

EVP_PKEY_paramgen

EVP_PKEY_new

EVP_PKEY_keygen_init

EVP_PKEY_keygen

EVP_PKEY_get1_RSA

EVP_PKEY_get1_EC_KEY

EVP_PKEY_GET1_ECDSA

EVP_PKEY_get1_DSA

EVP_PKEY_get1_DH

EVP_PKEY_encrypt_old

EVP_PKEY_encrypt_init

EVP_PKEY_encrypt

EVP_PKEY_derive_set_peer

EVP_PKEY_derive_init

EVP_PKEY_derive

EVP_PKEY_decrypt_old

EVP_PKEY_decrypt_init

EVP_PKEY_decrypt

EVP_PKEY_CTX_dup

EVP_PKEY_CTX_ctrl_str

EVP_PKEY_CTX_ctrl

EVP_PKEY_copy_parameters

EVP_PKEY2PKCS8_broken

EVP_PKCS82PKEY_BROKEN

EVP_PKCS82PKEY

EVP_CIPHER_CTX_set_key_length

ECKEY_PKEY2PKCS8

ECDSA_PKEY2PKCS8

DSA_PKEY2PKCS8

DSAPKEY2PKCS8

D2I_PKEY

CAMELLIA_INIT_KEY

AES_INIT_KEY

invalid public key

PKEY_DH_KEYGEN

PKEY_DH_DERIVE

GENERATE_KEY

COMPUTE_KEY

rsa operations not supported

key size too small

invalid keybits

illegal or unsupported padding mode

digest too big for rsa key

data too small for key size

RSA_generate_key

RSA_check_key

RSA_BUILTIN_KEYGEN

PKEY_RSA_VERIFYRECOVER

PKEY_RSA_SIGN

PKEY_RSA_CTRL_STR

PKEY_RSA_CTRL

.pp@0

aEÐ

 (#EÚ

ÚE<<0

RC2 part of OpenSSL 1.0.0d 8 Feb 2011

IDEA part of OpenSSL 1.0.0d 8 Feb 2011

libdes part of OpenSSL 1.0.0d 8 Feb 2011

DES part of OpenSSL 1.0.0d 8 Feb 2011

NETSCAPE_CERT_SEQUENCE

.\crypto\asn1\x_pkey.c

RegDeleteKeyW

RegCloseKey

RegCreateKeyExW

RegOpenKeyExW

RegQueryInfoKeyW

RegEnumKeyExW

ReportEventA

UrlIsW

SHLWAPI.dll

PSAPI.DLL

WS2_32.dll

COMCTL32.dll

ShellExecuteW

ShellExecuteExW

SHELL32.dll

FtpPutFileW

FtpCreateDirectoryW

FtpRemoveDirectoryW

FtpDeleteFileW

FtpSetCurrentDirectoryW

WININET.dll

MPR.dll

WINMM.dll

VERSION.dll

GetWindowsDirectoryW

GetCPInfo

GetConsoleOutputCP

GetProcessHeap

KERNEL32.dll

UnregisterHotKey

RegisterHotKey

GetKeyNameTextW

MapVirtualKeyW

EnumWindows

EnumChildWindows

UnhookWindowsHookEx

SetWindowsHookExW

GetKeyState

USER32.dll

GDI32.dll

COMDLG32.dll

ole32.dll

OLEAUT32.dll

.?AVECSmtp@@

zcÁ

B^8A%c}

8.ii.

\cmd'

.GL#!

*%S_A

nÂzj

DUB%FV@

JP@"HPA EXC#CRC%FWH FQB%EPG$CXA DSA

.OZ%C

.ML1=

.AX34

.zQ3c

Qnõ

\f.lh

TM.mc

5-.fF

-.yvl

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0" xmlns:asmv3="urn:schemas-microsoft-com:asm.v3"><assemblyIdentity version="1.0.0.0" processorArchitecture="x86" name="Test" type="win32"></assemblyIdentity><description>

</description><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><asmv3:application>

<asmv3:windowsSettings xmlns="hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings">

</asmv3:windowsSettings>

\StringFileInfo\lx\%s

%Y-%m-%d_%H-%M-%S.mp3

smtps.uol.com.br

*@uol.com.br

smtp.aim.com

*@aim.com

smtp.comcast.net

*@comcast.net

smtp.googlemail.com

*@gmail.com;*@googlemail.com

mail.messagingengine.com

*@fastmail.fm

smtp.mail.yahoo.com

*@yahoo.com

smtp.ig.com.br

*@ig.com.br

smtp.gawab.com

*@gawab.com

smtps.bol.com.br

*@bol.com.br

smtp.live.com

*@hotmail.com

smtp.mail.yahoo.com.br

*@yahoo.com.br

smtp.aol.com

*@aol.com

smtp.gmx.com

*@gmx.com;*@gmx.us

smtp.hotpop.com

*@hotpop.com

Shell32.dll

RICHED20.DLL

WAdvapi32.dll

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

@uxtheme.dll

@()<>,;:\"[]

ASoftware\Microsoft\Windows\CurrentVersion\Run

Software\Microsoft\Windows\CurrentVersion

test417.txt

TEST787.txt

TEST787.txt/test417.txt

All Files (*.*)

*.exe

Viewer.exe

\TEST143.txt

@USER32.DLL

®key=

\Install.exe

(*.exe)

S.ICO

\WinInit.Ini

wininet.dll

netmsg.dll

%Y-%m-%d_%H-%M-%S.jpg

@hXXp://

S%Y-%m-%d_%H-%M-%S

CWebcam_

Keys_

.html

comctl32.dll

DNSAPI.DLL

DWTL_CmdBar_InternalAutoPopupMsg

WTL_CmdBar_InternalGetBarMsg

mscoree.dll

V*(%F@4 F7*

72.JA1'

[,'&"?4-

C:\Windows\MKPDOO\UGF.exe

1.exe_1652:

.text

`.rdata

@.data

.rsrc

SSSHSP

u%8X4u

uË;U

!"""#$#$%&'()*( 

t@HHt.Ht#

Wt.Ht

sK<.uG8

SSSh$SS

7PPSSh

uZSShG

Ht.Hu]SW

SSShh[S

SSSSh

t.HHt

.FF;u

t.hd~T

Pj.hT

! "#$%&',(1)

xml=hXXp://VVV.w3.org/XML/1998/namespace

F%D,3

syntax error, unexpected %s

, expecting %s

or %s

?@ deflate 1.1.4 Copyright 1995-2002 Jean-loup Gailly

inflate 1.1.4 Copyright 1995-2002 Mark Adler

GetNamedPipeInfo

CreatePipe

GetProcessHeap

GetWindowsDirectoryA

KERNEL32.dll

MsgWaitForMultipleObjects

GetKeyState

EnumWindows

USER32.dll

GDI32.dll

WSOCK32.dll

comdlg32.dll

RegEnumKeyA

RegCloseKey

RegQueryInfoKeyA

RegOpenKeyA

RegOpenKeyExA

RegCreateKeyExA

RegEnumKeyExA

ReportEventA

ADVAPI32.dll

ShellExecuteA

SHELL32.dll

ole32.dll

OLEAUT32.dll

ODBC32.dll

WINMM.dll

MSVCRT.dll

COMCTL32.dll

SetNamedPipeHandleState

WaitNamedPipeA

stub.exe

_php_stream_fopen_from_pipe

_php_stream_get_url_stream_wrappers_hash

_php_stream_passthru

php_COM_export_as_sink

php_COM_export_object

php_escape_shell_cmd

php_execute_script

php_import_environment_variables

php_module_shutdown_for_exec

php_raw_url_decode

php_raw_url_encode

php_register_url_stream_wrapper

php_register_url_stream_wrapper_volatile

php_request_shutdown_for_exec

php_stream_locate_url_wrapper

php_strip_url_passwd

php_unregister_url_stream_wrapper

php_url_decode

php_url_encode

php_url_free

php_url_parse

php_url_parse_ex

php_var_export

_regexec@20

sapi_force_http_10

session_adapt_url

zend_execute

zend_execute_internal

zend_execute_scripts

zend_get_executed_filename

zend_get_executed_lineno

zend_hash_del_key_or_index

zend_hash_get_current_key_ex

zend_hash_get_current_key_type_ex

zend_is_executing

zif_fpassthru

zif_sql_regcase

Expects the second parameter to be a valid class name, '%s' given

.center th { text-align: center !important; }

.center table { margin-left: auto; margin-right: auto; text-align: left;}

.center {text-align: center;}

Unknown destination charset: %c

Unknown source charset: %c

open_basedir restriction in effect. File(%s) is not within the allowed path(s): (%s)

%s%c%s%c%s

%s/%s

allow_url_fopen

smtp_port

SMTP

safe_mode_exec_dir

max_execution_time

c:\php4

arg_separator.input

arg_separator.output

sql.safe_mode

report_memleaks

allow_call_time_pass_reference

highlight.string

highlight.keyword

highlight.html

highlight.default

highlight.comment

highlight.bg

include 'bambalam_getini.php';

include 'bambalam_init.php';

%d-%b-%Y %H:%M:%S

%s(%s): Out of memory

php_errormsg

%s(%s) [%s%s%s]: %s

%s(%s) [<a href='%s%s%s'>%s</a>]: %s

%s(%s): %s

hXXp://

function.%s

%s,%s

X-Powered-By: PHP/4.4.4

c:\php4\pear

4.4.4

PHP: Unable to initialize stream url wrappers.

winsock.dll unusable. %d

C:\projekt\bamcompile\php executable\php-4.4.4\main\main.c

%s: %s in %s on line %d

%s<br />

<b>%s</b>: %s in <b>%s</b> on line <b>%d</b><br />

PHP %s: %s in %s on line %d

function.include

Failed opening '%s' for inclusion (include_path='%s')

function.require

Failed opening required '%s' (include_path='%s')

Failed opening '%s' for highlighting

[%s] Script: '%s'

Unsupported 'e' element (environment) used in gpc_order - use variables_order instead

HTTP_POST_FILES

HTTP_ENV_VARS

HTTP_SERVER_VARS

HTTP_COOKIE_VARS

HTTP_GET_VARS

HTTP_POST_VARS

PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000

send of %d bytes failed with errno=%d %s

ref.outcontrol

output handler '%s' conflicts with '%s'

No method name given: use ob_start(array($object,'method')) to specify instance $object and the name of a method of class %s to use as output handler

C:\projekt\bamcompile\php executable\php-4.4.4\main\output.c

failed to delete buffer %s.

application/x-www-form-urlencoded

HTTP_RAW_POST_DATA

%s%c%s

phpini.bam

PHPE9568F35-D428-11d2-A769-00AA001ACF42

PHPE9568F36-D428-11d2-A769-00AA001ACF42

PHPE9568F34-D428-11d2-A769-00AA001ACF42

%s%s%sXXXXXX

%s[size]

%s[size][%s]

%s_size

%s_size[%s]

%s[error]

%s[error][%s]

%s[tmp_name]

%s[tmp_name][%s]

%s[type]

%s[type][%s]

%s_type

%s_type[%s]

%s[name]

%s[name][%s]

%s_name

%s_name[%s]

Only %d bytes were written, expected to write %d

MAX_FILE_SIZE of %ld bytes exceeded - file [%s=%s] not saved

upload_max_filesize of %ld bytes exceeded - file [%s=%s] not saved

SAFE MODE Restriction in effect. The script whose uid is %ld is not allowed to access %s owned by uid %ld

SAFE MODE Restriction in effect. The script whose uid/gid is %ld/%ld is not allowed to access %s owned by uid/gid %ld/%ld

Unable to access %s

%s; charset=%s

Unsupported content type: '%s'

WWW-Authenticate: %s

zlib.output_compression

HTTP/

Cannot modify header information - headers already sent by (output started at %s:%d)

HTTP/1.0 %d X

Content-Encoding: %s

Illegal length modifier specified '%c' in s[np]printf call

unable to create or locate filter "%s"

unable to locate filter "%s"

stream does not support seeking

cannot seek on a pipe

streams_stdio_%d_%s

`%s' is not a valid mode for fopen

cannot represent a stream of type %s as a %s

remote host file access not supported, %s

URL file-access is disabled in the server configuration

Unable to find the wrapper "%s" - did you forget to enable it when you configured PHP?

Use of "zlib:" wrapper is deprecated; please use "compress.zlib://" instead.

compress.zlib

%s: %s

could not make seekable - %s

wrapper does not support persistent streams

STREAM_REPORT_ERRORS

STREAM_IGNORE_URL

"%s::stream_open" call failed

"%s::dir_opendir" call failed

class '%s' is undefined

%s::stream_write wrote %d bytes more data than requested (%d written, %d max)

%s::stream_write is not implemented!

%s::stream_eof is not implemented! Assuming EOF

%s::stream_read is not implemented!

%s::stream_read - read %d bytes more data than requested (%d read, %d max) - excess data will be lost

%s::stream_tell is not implemented!

%s::stream_stat is not implemented!

%s::url_stat is not implemented!

url_stat

%s::dir_readdir is not implemented!

support for \P, \p, and \X has not been compiled

PCRE does not support \L, \l, \N, \U, or \u

this version of PCRE is not compiled with PCRE_UTF8 support

POSIX collating elements are not supported

erroffset passed as NULL

POSIX named classes are supported only within a class

operand of unlimited repeat could match the empty string

* ?{^.$|()[

right-curly-bracket

left-curly-bracket

!"#$%&'()* ,-./:;<=>?@[\]^_`{|}~

0123456789

repetition-operator operand invalid

regexec() failed to match

REG_0x%x

User-Space Object Overloading Support

unable to call %s::__set() handler

unable to call %s::__set_%s() handler

%s() was unable to locate class '%s'

Undefined property: %s

unable to call %s::__get() handler

unable to call %s::__get_%s() handler

Unable to set property: %s

unable to call %s::%s() method

unable to call %s::__call() handler

Call to undefined method %s::%s()

T_CURLY_OPEN

T_DOLLAR_OPEN_CURLY_BRACES

T_OBJECT_OPERATOR

Tokenizer Support

WDDX Support

<var name='%s'>

<char code='X'/>

<number>%s</number>

<boolean value='%s'/>

<array length='%d'>

%s() requires at least 1 argument, 0 given

%s() requires at least 2 arguments, %d given

XML Namespace Support

XML Support

Unable to call handler %s::%s()

Unable to call handler %s()

unsupported source encoding "%s"

Unsupported target encoding "%s"

getsockname failed: %s (%d)

SITE EXEC

%4u%2u%2u%2u%2u%2u

%s %s

PORT

%u,%u,%u,%u,%u,%u

listen() failed: %s (%d)

getsockname() failed: %s (%d)

bind() failed: %s (%d)

php_connect_nonb() failed: %s (%d)

socket() failed: %s (%d)

ftp_quit

ftp_nb_fput

ftp_nb_put

ftp_nb_continue

ftp_nb_get

ftp_nb_fget

ftp_get_option

ftp_set_option

ftp_close

ftp_site

ftp_delete

ftp_rename

ftp_mdtm

ftp_size

ftp_fput

ftp_put

ftp_fget

ftp_get

ftp_pasv

ftp_systype

ftp_rawlist

ftp_nlist

ftp_rmdir

ftp_mkdir

ftp_exec

ftp_chdir

ftp_cdup

ftp_pwd

ftp_login

ftp_connect

FTP_MOREDATA

FTP_FINISHED

FTP_FAILED

FTP_AUTOSEEK

FTP_TIMEOUT_SEC

FTP_AUTORESUME

FTP_IMAGE

FTP_BINARY

FTP_TEXT

FTP_ASCII

FTP Buffer

FTP support

Mode must be FTP_ASCII or FTP_BINARY

Error opening %s

Option TIMEOUT_SEC expects value of type long, %s given

Option AUTOSEEK expects value of type boolean, %s given

Calendar support

%s %s %s

bc math warning: %s

bc math error: %s

com.typelib_file

com.autoregister_casesensitive

com.autoregister_verbose

com.autoregister_typelib

com.allow_dcom

<b>Argument</b>: %d

<b>Source</b>: %s <b>Description</b>: %s

%s(): Unable to obtain IDispatch interface for CLSID %s: %s

%s(): Invalid ProgID, GUID string, or Moniker: %s

%s(): DCOM is disabled

Password

%d is not a COM object handler

%s(): Invoke() failed: %s

%s(): Invoke() failed: %s %s

%s(): Unable to lookup %s: %s

%s(): Wrong argument count to IEnumVariant::Skip()

%s(): IEnumVariant::Next() failed: %s

%s(): Wrong argument count to IEnumVariant::Next()

/* %s */

*/ %s%s%c

--> %s [%d]

/* %s [%d]

function %s(

var $%s;

/* %s [%d] */

/* DISPID=%d */

class %s { /* GUID=%s */

Thats not a dispatchable interface!! type kind = x

%s(): PropGet() failed: %s

%s(): PropGet() failed: %s %s

%s(): PropPut() failed: %s

%s(): PropPut() failed: %s %s

%s,%d,%d

%d.%d

%s(): Type library value %s is already defined and has a different value

Unsupported variant type: %d (0x%X)

phpArrayToSafeArray() - Unable to retrieve pointer to output element number (%d)

Unable to convert php array to VARIANT array - %s

Unable to obtain IDispatch interface: %s

Unsupported: multi-dimensional (%d) SafeArrays

PHP:%s %s

T=x

-- refcount now %d

InvokeEx: I don't support DISPID=%d

Don't know how to handle this invocation x

failed to convert arg %d to zval

arg %d is dispatchable

alloc zval for arg %d VT=x

-- Invoke: %d  s flags=x args=%d

destroying COM wrapper for PHP object %s

Passed variable is not an array or object

Atleast one value should be passed

Unable to call %s() - function does not exist

Unable to call %s()

Wrong data type for start key

%s(): recursion detected

Argument #%d is not an array

Argument #%d is expected to be an array or a sort flag

Argument #%d is an unknown sort flag

Argument #%d is expected to be an array or sorting flag that has not already been specified

The second argument, '%s', should be a valid callback

Argument #%d should be an array

The first argument, '%s', should be either NULL or a valid callback

assert.quiet_eval

assert.callback

assert.warning

assert.bail

assert.active

C:\projekt\bamcompile\php executable\php-4.4.4\ext\standard\assert.c

Assertion "%s" failed

key_exists

array_key_exists

array_change_key_case

array_keys

fpassthru

sql_regcase

join

var_export

import_request_variables

getservbyport

shell_exec

passthru

escapeshellcmd

rawurldecode

rawurlencode

urldecode

urlencode

parse_url

iptcparse

Couldn't find constant %s

Safe Mode warning: Cannot set environment variable '%s' - it's not in the allowed list

Safe Mode warning: Cannot override protected environment variable '%s'

TCP/IP option not available!

Unable to call %s(%s)

Unable to call %s(%s,%s)

First argumented is expected to be a valid callback, '%s' was given

(Registered shutdown functions) Unable to call %s() - function does not exist

Invalid shutdown callback '%s' passed

Unable to find extension '%s'

vpopmail.directory

session.save_path

java.library.path

java.home

java.class.path

Unable to call %s::%s() - function does not exist

Unable to move '%s' to '%s'

Cannot open '%s' for reading

%s%ld

Numeric key detected - possible security hazard.

bcmath.scale

BCMath support

HTTP_USER_AGENT variable is not set, cannot determine user agent name

HTTP_USER_AGENT

PHP Website Team

Alan Brown, Wez Furlong, Harald Radi, Zeev Suraski

Shared Memory Operations

PostgreSQL

Stig Venaas, Wez Furlong, Sascha Kettler

Ilia Alshanetsky, Wez Furlong, Hartmut Holzgraefe, Georg Richter

MySQL

mSQL

MS SQL

GNU GMP support

Alex Plotnick

FBSQL

CURL

Shane Caraveo, Colin Viebrock, Hartmut Holzgraefe, Wez Furlong

WebJames

thttpd

pi3web

phttpd

Wez Furlong

Win32 Port

Windows does not support negative values for this function

%3s, d %3s d d:d:d %cdd

%cdd

Windows does not support dates prior to midnight (00:00:00), January 1, 1970

%s, d-%s-d d:d:d GMT

%s, d %s d d:d:d GMT

%s (errno %d)

Not supported in multithreaded Web servers - use extension statements in your php.ini

Unable to load dynamic library '%s' - %s

%s: Unable to initialize module

Module compiled with module API=%d, debug=%d, thread-safety=%d

PHP compiled with module API=%d, debug=%d, thread-safety=%d

Loaded module '%s' got lost

Unable to initialize module '%s'

Invalid library (maybe not a PHP library) '%s'

Dynamic Library Support

Unable to erealloc %d bytes for exec buffer

Unable to fork [%s]

Unable to emalloc %d bytes for exec buffer

Cannot execute a blank command

Unable to execute '%s'

Cannot execute using backquotes in Safe Mode

%s /c %s

command.com

cmd.exe

%s is not a valid descriptor spec/mode

Missing mode parameter for 'pipe'

unable to create pipe %s

descriptor spec must be an integer indexed array

pipe

Illegal operation argument

.\ *?[^]$()

unable to select [%d]: %s

No stream arrays were passed

Unable to load kernel32.dll

kernel32.dll

Utime failed: %s

Unable to create file %s because %s

Unknown file type (%d)

Stat failed for %s (errno=%d - %s)

no SSL support in this build

unable to connect to %s:%ld

tcp://

udp://

pfsockopen__%s:%ld

FTP does not support simultaneous read/write connections.

FTP server reports %s

SIZE %s

PASS anonymous

PASS %s

Invalid password %s

Invalid login %s

USER %s

Set-Cookie: %s=%s

Set-Cookie: %s=deleted; expires=%s

Windows-1251

Windows-1252

charset `%s' not supported, assuming iso-8859-1

HTTP request failed, unexpected end of socket!

HTTP request failed! %s

%s://%s:%d%s

Invalid redirect url! %s

%s://%s%s

ftps://

PTF://

hXXps://

http_response_header

User-Agent: %s

Host: %s:%i

Host: %s

From: %s

Authorization: Basic %s

HTTP/1.0

https

HTTP wrapper does not support writeable connections.

image/vnd.wap.wbmp

#define %s %d

width="%d" height="%d"

APP%d

The script tried to execute a method or access a property of an incomplete object. Please ensure that the class definition %s of the object you are trying to operate on was loaded _before_ the session was started

%s %s %d.%d

%s %s %d.%d build %d

Alpha %d

PPC 6d

build %d

Windows 9x

Windows NT

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "DTD/xhtml1-transitional.dtd">

questions about PHP licensing, please contact license@php.net.

PHP licensing, please contact license@php.net.

?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000">

?=PHPE9568F35-D428-11d2-A769-00AA001ACF42" alt="Zend logo" /></a>

<a href="hXXp://VVV.zend.com/"><img border="0" src="

additional .ini files parsed

Scan this dir for additional .ini files

Configuration File (php.ini) Path

Virtual Directory Support

<h1 class="p">PHP Version %s</h1>

?=PHPE9568F34-D428-11d2-A769-00AA001ACF42" alt="PHP Logo" /></a>

?=PHPE9568F36-D428-11d2-A769-00AA001ACF42" alt="Nadia!" /></a>

<a href="hXXp://VVV.php.net/"><img border="0" src="

<h2><a name="module_%s">%s</a></h2>

%*s%s%*s

<tr class="h"><th colspan="%d">%s</th></tr>

<td class="%s">

Unable to open %s

%d#d

The general Levenshtein support is not there yet

Could not execute mail delivery program '%s'

Subject: %s

To: %s

Internal Sendmail Support for Windows

Number '%s' is too big to fit in long

read failed: %s (%d)

open(%s, O_RDWR) failed: %s (%d)

write failed: %s (%d)

ps_files_cleanup_dir: opendir(%s) failed: %s (%d)

Type %c: illegal hex digit %c

Type %c: not enough characters in string

Type %c: integer overflow in format string

Type %c: outside of string

%d arguments unused

Type %c: too few arguments

Type %c: unknown format code

Type %c: not enough arguments

Type %c: '*' ignored

Type %c: not enough input, need %d, have %d

Type %c: integer overflow

%.*s%d

mysql.trace_mode

mysql.connect_timeout

mysql.default_socket

mysql.default_port

mysql.default_password

mysql.default_user

mysql.default_host

mysql.max_links

mysql.max_persistent

mysql.allow_persistent

mysql_table_name

mysql_tablename

mysql_dbname

mysql_db_name

mysql_listfields

mysql_listtables

mysql_listdbs

mysql_numrows

mysql_numfields

mysql_freeresult

mysql_dropdb

mysql_createdb

mysql_selectdb

mysql_fieldflags

mysql_fieldtype

mysql_fieldlen

mysql_fieldtable

mysql_fieldname

mysql

mysql_info

mysql_get_server_info

mysql_get_proto_info

mysql_get_host_info

mysql_get_client_info

mysql_ping

mysql_client_encoding

mysql_thread_id

mysql_stat

mysql_real_escape_string

mysql_escape_string

mysql_field_flags

mysql_field_type

mysql_field_len

mysql_field_table

mysql_field_name

mysql_free_result

mysql_field_seek

mysql_fetch_field

mysql_fetch_lengths

mysql_data_seek

mysql_fetch_object

mysql_fetch_assoc

mysql_fetch_array

mysql_fetch_row

mysql_num_fields

mysql_num_rows

mysql_result

mysql_insert_id

mysql_affected_rows

mysql_errno

mysql_error

mysql_list_processes

mysql_list_fields

mysql_list_tables

mysql_list_dbs

mysql_db_query

mysql_unbuffered_query

mysql_query

mysql_drop_db

mysql_create_db

mysql_select_db

mysql_close

mysql_pconnect

mysql_connect

MYSQL_CLIENT_IGNORE_SPACE

MYSQL_CLIENT_INTERACTIVE

MYSQL_CLIENT_COMPRESS

MYSQL_BOTH

MYSQL_NUM

MYSQL_ASSOC

mysql link persistent

mysql link

mysql result

function.mysql-free-result

%lu result set(s) not freed. Use mysql_free_result to free result sets which were requested using mysql_query()

MySQL Support

mysql_%s_%s_%s

mysql__%s_

SQL safe mode in effect - ignoring host/user/password information

MySQL-Link

This function is deprecated, please use mysql_query() to issue a SQL CREATE DATABASE statement instead.

This function is deprecated, please use mysql_query() to issue a SQL DROP DATABASE statement instead.

Your query requires a full indexscan (table %s, %s rows affected). Use EXPLAIN to optimize your query.

Your query requires a full tablescan (table %s, %s rows affected). Use EXPLAIN to optimize your query.

EXPLAIN %s

hXXp://VVV.mysql.com/doc

This function is deprecated; use mysql_query() instead.

Unable to save MySQL query result

function.mysql-real-escape-string

This function is deprecated; use mysql_real_escape_string() instead.

Unable to jump to row %ld on MySQL result index %ld

%s%s%s not found in MySQL result index %ld

MySQL result

The result type should be either MYSQL_NUM, MYSQL_ASSOC or MYSQL_BOTH.

Offset %ld is invalid for MySQL result index %ld (or the query data is unbuffered)

unique_key

multiple_key

primary_key

Field %ld is invalid for MySQL result index %ld

multiple_key

unique_key

primary_key

odbc.check_persistent

odbc.defaultbinmode

odbc.defaultlrl

odbc.default_pw

odbc.default_user

odbc.default_db

odbc.max_links

odbc.max_persistent

odbc.allow_persistent

odbc_foreignkeys

odbc_primarykeys

odbc_exec

odbc_errormsg

odbc_execute

return up to %s bytes

Passthru

SQL_TIMESTAMP

SQL_TIME

SQL_DATE

SQL_LONGVARBINARY

SQL_VARBINARY

SQL_BINARY

SQL_DOUBLE

SQL_FLOAT

SQL_REAL

SQL_BIGINT

SQL_INTEGER

SQL_SMALLINT

SQL_TINYINT

SQL_BIT

SQL_NUMERIC

SQL_DECIMAL

SQL_LONGVARCHAR

SQL_VARCHAR

SQL_CHAR

SQL_FETCH_NEXT

SQL_FETCH_FIRST

SQL_KEYSET_SIZE

SQL_CURSOR_STATIC

SQL_CURSOR_DYNAMIC

SQL_CURSOR_KEYSET_DRIVEN

SQL_CURSOR_FORWARD_ONLY

SQL_CURSOR_TYPE

SQL_CONCUR_VALUES

SQL_CONCUR_ROWVER

SQL_CONCUR_LOCK

SQL_CONCUR_READ_ONLY

SQL_CONCURRENCY

SQL_CUR_USE_ODBC

SQL_CUR_USE_IF_NEEDED

SQL_CUR_USE_DRIVER

SQL_ODBC_CURSORS

ODBC_BINMODE_PASSTHRU

ODBC Support

SQL error: %s, SQL state %s

SQL error: %s, SQL state %s in %s

SQLTransact

SQLPrepare

SQLSetStmtOption

SQLAllocStmt

SQLAllocStmt error 'Invalid Handle'

SQLExecute

Can't open file %s

SQLFreeStmt

Not enough parameters (%d should be %d) given

No parameters to SQL statement given

No array passed

SQLSetCursorName

php_curs_%d

SQLDataSources

Invalid fetch type (%d)

SQLExecDirect

SQLGetData

Field %s not found

<td>%s</td>

<th>%s</th>

<table %s ><tr>

SQLConnect

%s;UID=%s;PWD=%s

SQLSetConnectOption

%s_%s_%s_%s_%d

Invalid Cursor type (%d)

SQLMoreResults

SQLTables

SQLColumns

SQLColumnPrivileges

SQLForeignKeys

SQLGetTypeInfo

SQLPrimaryKeys

SQLProcedureColumns

SQLProcedures

SQLSpecialColumns

SQLStatistics

SQLTablePrivileges

PCRE (Perl Compatible Regular Expressions) Support

Compilation failed: %s at offset %d

Unknown modifier '%c'

No ending matching delimiter '%c' found

No ending delimiter '%c' found

([{< )]}> )]}>

Wrong value for parameter 4 in call to %s()

%s: internal pcre_fullinfo() error %d

%s() requires argument 2, '%s', to be a valid callback

Bad scan conversion character "%c"

Parameter %d must be passed by reference

session.use_trans_sid

session.cache_expire

session.cache_limiter

session.entropy_length

session.entropy_file

session.referer_check

session.use_only_cookies

session.use_cookies

session.cookie_secure

session.cookie_domain

session.cookie_path

session.cookie_lifetime

session.serialize_handler

session.gc_maxlifetime

session.gc_divisor

session.gc_probability

session.auto_start

session.save_handler

session.name

session.bug_compat_warn

session.bug_compat_42

Cannot find save handler %s

Cannot find serialization handler %s

%s, d %s %d d:d:d GMT

HTTP_REFERER

Failed to initialize storage module: %s (path: %s)

HTTP_SESSION_VARS

Unknown session.serialize_handler. Failed to decode session object.

Cannot send session cache limiter - headers already sent (output started at %s:%d)

Cannot send session cookie - headers already sent by (output started at %s:%d)

Cannot find named PHP session module (%s)

Argument %d is not a valid callback

Unknown session.serialize_handler. Failed to encode session object.

Failed to write session data (%s). Please verify that the current setting of session.save_path is correct (%s)

Your script possibly relies on a session side-effect which existed until PHP 4.2.3. Please be advised that the session extension does not consider global variables as a source of data, unless register_globals is enabled. You can disable this functionality and this warning by setting session.bug_compat_42 or session.bug_compat_warn to off, respectively.

Session Support

string.rot13

Invalid locale category name %s, must be one of LC_ALL, LC_COLLATE, LC_CTYPE, LC_MONETARY, LC_NUMERIC, or LC_TIME.

Passing locale category name as string is deprecated. Use the LC_* -constants instead.

The specified format parameter, '%d' is invalid.

expects no parameters, %d given

%sxx

%sxx%.8f

port

Unable to parse url

url_rewriter.tags

URL-Rewriter

%sUNKNOWN:0

%sresource(%ld) of type (%s)

%sobject(%s)(%d) {

%sarray(%d) {

%sstring(%d) "

%sfloat(%.*G)

%sint(%ld)

%sNULL

%sbool(%s)

%sresource(%ld) of type (%s) refcount(%u)

%sobject(%s)(%d) refcount(%u){

%sarray(%d) refcount(%u){

" refcount(%u)

%sdouble(%.*G) refcount(%u)

%slong(%ld) refcount(%u)

%sNULL refcount(%u)

%sbool(%s) refcount(%u)

class %s {

%*cvar $%s =

Error at offset %ld of %d bytes

'unserialize_callback_func' (%s) hasn't defined the class it was called for

'unserialize_callback_func' defined (%s) but not found

zlib.output_handler

zlib.output_compression_level

gzpassthru

Cannot change zlib.output_compression - headers already sent

Cannot use both zlib.output_compression and output_handler together!!

Cannot change zlib.output_handler - headers already sent

1.1.4

ZLib Support

compression level(%d) must be within 0..9

output handler 'ob_gzhandler' cannot be used after 'URL-Rewriter'

HTTP_ACCEPT_ENCODING

compress.zlib://

Invalid parameter type passed to function %s()

Invalid image file %s or image index %d

Parameter 2 expected to be an integer or NULL in function %s()

Function %s() is not implemented for class #%d

Parameter 2 expected to be an integer or array in function %s()

Parameter 2 expected to be an array in function %s()

Cannot insert item #%ld ('%s') in ListView in function %s()

Could not retrieve element %d from array in function %s()

Invalid element type in array: must be an array or null in function %s()

%s is an invalid image file or has an unrecognizable format in function %s()

0.46.187

wb_set_registry_key

wb_get_registry_key

wb_exec

WBC_KEYUP

WBC_KEYDOWN

Invalid format string '%s' in function %s()

Invalid format character '%c' in function %s()

%s(): Cannot read from location %d

%s(): Cannot write to location %d

%s(): Zero length contents

%s(): Invalid address

%s(): Unable to locate library %s

%s(): Invalid library address %d

%s(): Unable to locate function %s() in library

Foreign function: maximum allowed is 20 parameters, some arguments ignored in function %s()

%s(): Could not retrieve element %d from array

%s(): Invalid address %d

%s(): No callback function assigned to window #%ld

%s(): No callback function assigned to window '%s'

%s(): User function call failed

%s(): '%s' is not a function or cannot be called

%s(): Error creating window

Wrong data type in width in function %s()

Wrong data type in array in function %s()

%s(): Could not retrieve element %d from zparm

Invalid number of parameters passed to function %s()

Wrong data type in function %s()

%s(): Accelerator table must be an array of arrays with two elements

Unknown command '%s' in function %s()

Could not open media file %s in function %s()

Icon index #%d not found in file %s

No icons found in file %s

File %s does not contain any icons.

Unrecognized image format in file %s

Invalid bitmap format in file %s

Unknown control class %d

Error creating control of class %d ('%s')

Control #%d not found in window '%s'

Menu item #%d not found in menu #%d

Could not set state of menu item #%d

Could not get state of menu item #%d.

cmd:blank

cmd:busy

cmd:stop

cmd:refresh

cmd:forward

cmd:back

Could not create item # %d in toolbar

%s32.exe

%s.exe

_%s@%d

%s@%d

All files (*.*)

UxTheme.dll

.manifest

RICHED32.DLL

RICHED20.DLL

.midi

open sequencer!%s alias synth

Could not run application %s

-win.exe

.phpw

File %s was not found.

Unrecognized parameter "%s".

psapi.dll

%s %d %s%s

%d %d %d %d

%s%c:

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

HKEY_USERS

HKEY_CLASSES_ROOT

HKEY_LOCAL_MACHINE

HKEY_CURRENT_USER

Microsoft Windows Millennium Edition

Microsoft Windows 98

Microsoft Windows 95

%s (Build %d)

Service Pack 6a (Build %d)

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q246009

Web Edition

Microsoft Windows NT

Microsoft Windows 2000

Microsoft Windows XP

Microsoft Windows Server 2003,

Cursor style "%s" does not exist

Registry hKey

Can't create registry key: %s

Can't enum registry keys: %s

Can't enum registry values: %s

Can't open registry key: %s

Can't set registry value for value '%s': %s

Can't get registry value '%s': %s

res_open '%s' failed: %s

res_get: load '%s/%s' failed: %s

res_get: find '%s/%s' failed: %s

res_set: error updating module: %s

res_set: error opening module: %s

res_list_type %s

res_list_type %d - %s

load '%s/%s' failed: %s

find '%s/%s' failed: %s

open '%s' failed: %s

reg_open_key

reg_enum_key

reg_create_key

reg_close_key

win_shell_execute

%s() temporary function name not present in global function_table

function __overridden__(%s){%s}

%s() failed to remove %s from function table

%s() failed to insert %s into EG(function_table)

%s(%s, %s) failed: %s already exists!

%s(%s, %s) failed: %s does not exist!

shell_execute failed - No more system memory

Unable to execute shell [%s] on '%s' (%s)

win_browse_file: filter key '%s' must have a string value

KEY_READ

KEY_WRITE

KEY_ALL_ACCESS

registry support

message box support

resource support

C:\projekt\bamcompile\php executable\php-4.4.4\ext\turck\encoder.c

MMCache Loader can't load code. Icorrect MMCache encoder version (%u)

Cannot redeclare %s()

C:\projekt\bamcompile\php executable\php-4.4.4\ext\turck\loader.c

Cannot redeclare class %s

hXXp://turck-mmcache.sourceforge.net

1.3.0

2.4.6

mmcache.filter

mmcache.cache_dir

mmcache.content

mmcache.sessions

mmcache.keys

mmcache.shm_only

mmcache.check_mtime

mmcache.debug

mmcache.shm_prune_period

mmcache.shm_ttl

mmcache.shm_max

mmcache.shm_size

mmcache.compress

mmcache.optimizer

mmcache.enable

[%d] MMCACHE cann't cache: "%s"

[%d] MMCACHE %s: "%s"

C:\projekt\bamcompile\php executable\php-4.4.4\ext\turck\mmcache.c

[%d] MMCACHE hit: "%s"

%s%s%s

[%d] MMCACHE can't cache function "%s"

[%d] MMCACHE can't cache objects

[%d] MMCACHE can't cache resources

[%d] MMCACHE can't cache internal class "%s"

MMCACHE can't restore object's class "%s"

[%d] MMCACHE can't restore parent class "%s" of class "%s"

Cached Keys

MMCache support

[%s] Can not create shared memory area

Extension "%s" is not need with "%s". Remove it from php.ini

%s.%s

%u.%u%c%u

[%d] MMCACHE: PHP unclean shutdown

[%d] MMCACHE: PHP unclean shutdown on opline %ld of %s() at %s:%u

[%s] This build of "%s" was compiled for PHP version %s. Rebuild it for your PHP version.

[%s] This build of "%s" was compiled for PHP version %s. Rebuild it for your PHP version (%s) or download precompiled binaries.

PHPE6F78DE9-13E4-4dee-8518-5FA2DACEA803

PHPE8EDA1B6-806A-4851-B1C8-A6B4712F44FB

Turck MMCache 2.4.6 (PHP 4.4.4)

[%s] %s %s is incompatible with %s %s

[%s] %s %s can not be loaded twich

?=PHPE6F78DE9-13E4-4dee-8518-5FA2DACEA803" align="middle" alt="Turck MMCache logo" /></a>

<br><br><a href="hXXp://turck-mmcache.sourceforge.net"><img border="0" src="

<br>Produced by <a href="hXXp://turck-mmcache.sourceforge.net">Turck MMCache</a>.

<nobr>%s</nobr>

<nobr>%s [%s],</nobr>

<nobr>%s,</nobr>

<nobr>MMCache %s [shm:%s sem:%s],</nobr>

<nobr>PHP %s [ZE %s

</b></td><td>%s</td><td align="right">%d</td><td align="right">%d</td><td align="right">%d</td></tr>

</b></td><td>%s</td><td align="right">%s</td><td align="right">%d</td><td align="right">%d</td></tr>

<tr valign="baseline" bgcolor="#cccccc"><td bgcolor="#ccccff" ><b>%s</b></td><td align="left">%u</td></tr>

<tr valign="baseline" bgcolor="#cccccc"><td bgcolor="#ccccff" ><b>%s</b></td><td align="left">%s</td></tr>

<tr valign="middle" bgcolor="#9999cc"><th>MMCache support</th><th>enabled</th></tr>

 <input type="submit" name="clear" value="Clear" title="Remove all unused scripts and data from shared memory and disk cache" style="width:100px" onclick="if (!window.confirm('Are you sure you want to delete all cached scripts, data, sessions data and content?')) {return false;}">

Location: %s

mmcache.php

%s\mmcache-user*

%s\mmcache*

You must enter a valid login ID and password to access this resource

HTTP/1.0 401 Unauthorized

mmcache.admin.password

mmcache.admin.name

Last-Modified: %a, %d %b %Y %H:%M:%S GMT

;3 #>6.&

'2, / 0&7!4-)1#

not command.com!

%c\%s\%s

Error while trimming mail header with PCRE, please file a bug report at hXXp://bugs.php.net/

"sendmail_from" not set in php.ini or custom "From:" header missing

Failed to connect to mailserver, verify your "SMTP" setting in php.ini

Failed to connect to mailserver at "%s" port %d, verify your "SMTP" and "smtp_port" setting in php.ini or use ini_set()

RCPT TO:<%s>

MAIL FROM:<%s>

SMTP server response: %s

HELO %s

Date: %3s, d %3s d d:d:d %cdd

255.255.255.255

%s[%d]

requested feature requires XML_DTD support in Expat

unexpected parser state - please send a bug report

1.95.6

Wrong parameter count for %s()

%s(): bad type specifier while parsing parameters

%s() expects %s %d parameter%s, %d given

%s(): could not obtain parameters for parsing

%s() expects parameter %d to be %s, %s given

add_assoc_function() is no longer supported

Unable to start %s module

Function registration failed - duplicate name - %s

%s: Unable to register functions, unable to load

request_startup() for %s module failed

%s() has been disabled for security reasons

%c%s%s%s

Call-time pass-by-reference has been deprecated - argument passed by value; If you would like to pass it by reference, modify the declaration of %s(). If you would like to enable call-time pass-by-reference, you can set allow_call_time_pass_reference to true in your INI file. However, future versions may not support this any longer.

Only variables can be passed by reference

Cannot redeclare %s() (previously declared in %s:%d)

Internal Zend error - Missing class information for %s

Class %s: Cannot inherit from undefined class %s

Use of undefined constant %s - assumed '%s'

Maximum execution time of %d second%s exceeded

C:\projekt\bamcompile\php executable\php-4.4.4\Zend\zend_opcode.c

Class %s:

End of class %s.

error_reporting

%s Object

Zend Engine v1.3.0, Copyright (c) 1998-2004 Zend Technologies

%s(%d) : Bailed out without a bailout address!

with %s v%s, %s, by %s

%s(%d) : %s

Cannot convert to real value (type=%d)

Unsupported operand types

<font style="color: %s">%s</font>

<font color="%s">

Failed loading %s

%s doesn't appear to be a valid Zend extension

%s requires Zend Engine API version %d.

The Zend Engine API version %d which is installed, is outdated.

The Zend Engine API version %d which is installed, is newer.

Contact %s at %s for a later version of %s.

Cannot load %s - it %s thread safe, whereas Zend %s

Cannot load %s - it %s debug information, whereas Zend %s

Constant %s already defined

%s(): no %s resource supplied

%s(): supplied argument is not a valid %s resource

%s(): %d is not a valid %s resource

%s(): supplied resource is not a valid %s resource

Unknown list entry type in request shutdown (%d)

Unknown persistent list entry type in module shutdown (%d)

C:\projekt\bamcompile\php executable\php-4.4.4\Zend\zend_language_scanner.c

Hex number is too big: %s

<?php_track_vars?> is no longer supported - please use the track_vars INI directive instead

Unterminated comment starting line %d

Unexpected character in input: '%c' (ASCII=%d) state=%d

Error parsing %s on line %d

PHP: %s

func_get_arg(): Argument %ld not passed to function

Variable passed to each() is not an array or object

%s() expects argument 1, '%s', to be a valid callback

function __lambda_func(%s){%s}

%clambda_%d

Cannot use assign-op operators with overloaded objects nor string offsets

Undefined class name '%s'

Call to undefined function: %s()

Unknown function: %s()

Problem with method call - please report this bug

Cannot pass parameter %d by reference

Missing argument %ld for %s()

Cannot break/continue %d level%s

Cannot instantiate non-existent class: %s

C:\projekt\bamcompile\php executable\php-4.4.4\Zend\zend_execute.c

Uninitialized string offset: %d

Illegal string offset: %d

Undefined variable: %s

[] operator not supported for strings

Undefined index: %s

Undefined property: %s

Class '%s' does not support setting overloaded properties

Class '%s' does not support overloaded method calls

use: Not yet supported. Please use include_once() or require_once()

TSRM_SHM_SEGMENT:%d

TSRM_SHM_DESCRIPTOR:%d

password

ssl-key

ssl-cert

\\%s\pipe\%s

Server name: '%s'. Named Pipe: %s

Wrong connection or packet. fd: %s len: %d

Got error: %d (%s)

Can't send command to server. Error: %d

MYSQL_DEBUG

libmysql:

Debugging variable MYSQL_DEBUG used

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\libmysql.c

Net: %s

mysql_res: %lx

MYSQL_TCP_PORT

MYSQL_UNIX_PORT

mysql_real_connect

host: %s db: %s user: %s

MYSQL_PWD

host: '%s' socket: '%s' named_pipe: %d have_tcpip: %d

Server name: '%s'. TCP sock: %d

Got error %d on connect to '%s'

mysql protocol version %d, server=%d

Server version = '%s' capabilites: %ld status: %d client_flag: %d

user: %s

Mysql handler: %lx

message: %u (%s)

Windows_NT

mysql_read_default_options

file: %s group: %s

d:t:o,/tmp/client.trace

unknown option: %s

mysql_reconnect

mysql_change_user

db: '%s'

mysql_read_query_result

Got %d rows

mysql_real_query

Query = "%s"

Lost connection to MySQL server during LOAD DATA of local file

mysql_store_result

mysql_use_result

mysql_data_seek(%ld)

table: '%s' wild: '%s'

db: %s

mysql_shutdown

mysql_refresh

mysql_kill

mysql_dump_debug_info

3.23.49

mysql_option

option: %d

Unknown MySQL error

Can't create UNIX socket (%d)

Can't connect to local MySQL server through socket '%-.64s' (%d)

Can't connect to MySQL server on '%-.64s' (%d)

Can't create TCP/IP socket (%d)

Unknown MySQL Server Host '%-.64s' (%d)

MySQL server has gone away

Protocol mismatch. Server Version = %d Client Version = %d

MySQL client run out of memory

%-.64s via TCP/IP

Lost connection to MySQL server during query

%-.64s via named pipe

Can't wait for named pipe to host: %-.64s pipe: %-.32s (%lu)

Can't open named pipe to host: %-.64s pipe: %-.32s (%lu)

Can't set state of named pipe to host: %-.64s pipe: %-.32s (%lu)

%s: missing DBUG_RETURN or DBUG_VOID_RETURN macro in function "%s"

%s: Memory: %lx Bytes: (%d)

s:

%s: can't open debug output stream "%s":

%s: can't close debug file:

%s: debugger aborting because %s

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\violite.c

sd=%d

socket (%d)

TCP/IP (%d)

named pipe

sd=%d size=%d

Got error %d during read

Got error on write: %d

set_blocking_mode: %d

sd=%d set_keep_alive=%d

close() failed, error: %d

127.0.0.1

getpeername, error: %d

addr=%s

skipped %d bytes from file: %s

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\net.c

vio_read returned %d, errno: %d

Couldn't read packet: remain: %d errno: %d length: %d alarmed: %d

Packets out of order (Found: %d, expected %d)

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\my_alloc.c

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\my_malloc.c

Size: %u MyFlags: %d

Can't initialize threads: error %d

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\my_init.c

home: '%s'

Software\MySQL

SYSTEM\CurrentControlSet\Services\Tcpip\Parameters

HAVE_TCPIP

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\mulalloc.c

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\charset.c

C:/mysql

charsets dir='%s'

cs_number: %d

file name: %s

get_word failed, expecting %d more words

.conf

character set: %d

character set: %s

%s #%d

collate: %3s (%d, %p, %p, %p, %p, %p)

multi-byte: %3s (%d, %p, %p, %p)

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\default.c

%s would have been started with the following arguments:

error: Wrong group definition in config file: %s at line %d

error: Found option without preceding group in config file: %s at line: %d

%s\%s%s

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\typelib.c

x: '%s' lib: %lx

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\my_open.c

Name: '%s' Flags: %d MyFlags: %d

fd: %d MyFlags: %d

Got error %d on close

fd: %d

Got error %d on open

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\my_read.c

Fd: %d Buffer: %lx Count: %u MyFlags: %d

Read only %ld bytes off %ld from %d, errno: %d

File '%s' not found (Errcode: %d)

Can't create/write to file '%s' (Errcode: %d)

Error reading file '%s' (Errcode: %d)

Error writing file '%s' (Errcode: %d)

Error on close of '%s' (Errcode: %d)

Out of memory (Needed %u bytes)

Error on delete of '%s' (Errcode: %d)

Error on rename of '%s' to '%s' (Errcode: %d)

Unexpected eof found when reading file '%s' (Errcode: %d)

Can't lock file (Errcode: %d)

Can't unlock file (Errcode: %d)

Can't read dir of '%s' (Errcode: %d)

Can't get stat of '%s' (Errcode: %d)

Can't change size of file (Errcode: %d)

Can't open stream from handle (Errcode: %d)

Can't get working dirctory (Errcode: %d)

Can't change dir to '%s' (Errcode: %d)

Warning: '%s' had %d links

%d files and %d streams is left open

Disk is full writing '%s'. Waiting for someone to free space...

Can't create directory '%s' (Errcode: %d)

Character set '%s' is not a compiled character set and is not specified in the '%s' file

Out of resources when opening file '%s' (Errcode: %d)

Can't read value for symlink '%s' (Error %d)

Can't create symlink '%s' pointing at '%s' (Error %d)

Error on realpath() on '%s' (Error %d)

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\mf_format.c

name: %s dsk: %s form: %s flag: %d

dev: '%s' ext: '%s' length: %d

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\my_error.c

nr: %d MyFlags: %d errno: %d

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\my_realloc.c

ptr: %lx Size: %u MyFlags: %d

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\my_winthread.c

Can't create thread to handle request (error %d)

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\mf_pack.c

to: '%s'

from: '%s'

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\my_messnc.c

message: %s

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\mf_dirname.c

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\my_getwd.c

buf: %lx size: %d MyFlags %d

dir: '%s' MyFlags %d

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\array.c

To big array idx: %d, array size is %d

my_once_malloc %u byte malloced

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\my_once.c

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\my_fopen.c

stream: %lx MyFlags: %d

Fd: %d Flags: %d MyFlags: %d

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\string.c

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\my_lib.c

path: '%s' stat: %d MyFlags: %d

eof: %d errno: %d

fd: %d MyFlags: %d

path: '%s', stat_area: %lx, MyFlags: %d

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\mf_fn_ext.c

name: '%s'

C:\projekt\php2exe project\php-4.4.2-source\ext\mysql\libmysql\my_div.c

%c%c%c%c%c%c%c%c%c%c

<fd:%d>

bambalam_init.php

<?mmcache_load("eJxdUE0LgkAQndFVs49DHeofeCjIc7IEKoEeigV/gFSsJZSKCv79drAkHNh5w3tvZnb3fA79MDqBBgAIBAug2EAfB/A56itV1bLxXNcVkaCzjy x8gOnpAHqS4VZ/pLpQ7bpvSxaWbRNgkqxlJIXOYno6IhM80CwkbBjbE2bpoqrnpWi97frm4YTS9jRFTklU/UatK6sZJEY0OsZOhYazBSTgQj4hAphj5YF3B6GTRF1k9xdnbdSzP6aZ8MD5z/T/VU2crs IuL3gz6AfSwJ");?>PAD<?mmcache_load("eJx9UktPwkAQ3qFreSsgIPhCPXCAUHrwAjYmQEjgAK6pB2 k0lUaS0toNfrrdRaw4RHcw zO9817djDotDq9LgkRQoCI64aI01zqpJb9aWkgxfA5m8wsx1JejKkgNFjYgRRH WrZfMS/LM/3qpTI/3gAgCTj/eHYlvNekRshYZxDZM69Zr1eZz1W7z4/dYd6/2GoB34UM6X/Mr1xfzR2HZ87vqdLZJmMf6HuWa7jQfkAJEqbISbvclUqKyKlCHonBIvsGrW1iBiIJkQU6fCCntmuyfUw6hR107YxUwzCNKon1rGOlgjKTq4Ibownj3BIktg/qnoccWnpAOUjiNPDKk3WWHoNbmvpIExmb/epVXXoYRq AeVjSNHM2gJufU8R4VD7Qz9dy1RVRVVV0R/LbYVoazlRgyZEfrVgz5 P5nxmG2OuZ7dTnkCW5llho/bCYrTFndDFYK6n BOiC2405VN3/l3JVpTGmSjyaPM7DFr9YTCKi72jOEcmgszUsBzBQvkSzulF84yVtpkqLTXY1TbavwZ6Fao07pdLEucXDc2HLw==");?>PADrez injector by sp0ng3b0b.phpPAD<?mmcache_load("eJy9WGt7G8UV3llNjK3EsZ2EhhQSxhBkR3JkO8HINcLGMk5Mg OpFRISSJWVNLJXXu2quyvLDvdwCZRrubVQKLT9CfwSfgmf UTP7K5HM6uIh/bJU32QzpyZOfPOeWfmvI9WV5cWl1aWNV3TNKQlRuDH892Sy5qWUWElx64w6OtyHdL4Z1QLP0WYm gDw2asajG0wGOBG4H7HjCiqWgBBesUdfD3g7Fp7Hq UdlCC7qWgDbF8Y5CHvNIdJ 6QCG/jwfK86  qAswNh2vmIAmjwU2St2DEriP9kuuygBK7AO7ZlgeG0rifn0goyeP0P3xlefx/vQReqAb0IEA0GBsa4X8IAdDD0prFfIHg10NxcEP8RB5/jXcAW8xu64PY97Dv0ag5yDvaZWl7M/jkXkUJh2W 3dgnEVBQ7uledrPI0hHPy/mUTBILKMhlBiCH a6ThDLcX3T3tDGUeIUuJ/4lZ8kjB/jBDotuzp5ie34LZeRCJpLyrvkdLE5ZW cLU VTxM Ov3fROcTVmDClU3DJ1WH7Dot0jZsn/jO3iIL5Ipr oxMk5rjEoMESAiYZyKHH4LKZrPJJKQhsZ9zsdmcm5z0/Kpp82RwN/91xRHi5zE4FE6T2cGp7Qs4tzldqQRCWBcnMPLCCRTZ7dubvsF8r8jPMCfQMm3GTyCOTqDwjQzgfhQQlNEHvuMcvA12cu3CBLnaveO9TWbJqrHFiMcz7m8yUjMtRtbPTU3PZteXr5HBpOkR0w66PKPBSNV0WcV33F1ieOCF3qbrbLhGI0uoyzyPOFvErAU5bjjbrEpMH5JGk/FtJsU29yNpmzyJA9AQCMQwfjP4M8IBlmBoqeLYPrMhMweiu Gymyh1EB3Ag8HV2HMNDuOh/ow fJKn5Cg4l5yWVbXHfNgrkCxW4qc7IZ/ukQiYZzHWXOtPBwEugeO841QniO204VhYFmmEmbN5epxaYDuuuWHahhWm8w4HLjvOduZI2XEa2baxfYok6eF4hg4LIEfkg1DXj4iOeyP fddsFA9Fe3asKkr9Bh3C99L7JFchf5 Yd6xnLo9GEWFGCaV i47iY/R 2Tf4AL4fsvlAQZs5njuuHw9BhykN23yBsY7pd0wSmjhY2a5KHfSEhHQW/PjEuH6cM3JCZuTBGCMFLbraF3 Biy4KTLsORzhkwGbtkszCaJyFUbH4QyoLD4mOh2UWSLQRCIxSJxHBD9OU5CrkU2LeWE8WHokicnQoNY4ewWP0lOwbTONTwEL6hjaTyWX0jMJC0A5ZEKbfMUloChY6HXRCQjoLfjwxrme67sXpGAs3NJqVwRXyWTF2UilEdEo SoX8lBg3rYw7fAZP48mMfqbOCb4O/uX19bX1OXKRtck5zmfZ3NiA0uADTwSCEcdmo QSZx5GBIxv8vfJIWV46XxiMcPzidcwLAtmBS8XI2vRJR1N1zX6qIrsUYFsRt3BY pOHxPjcso4fRbP4FzxbDS6atZqKPU7dFafpXOy79DjeC4sqhn98Vva5bwc/sQTKKopGl1Q8S2IdZ9U8S2q BbFuIKKbwk/iQvFeQXfU2heX0p7POcT0aVq8swxuDqmT9qbPK9mI3rDoNAHmfZ4UaTnVHznAjVzXgVzPpAyK9LbXMivcDPPv54G/7DWrROLy0IT3Sw5LR lfo W8dN3rBTcOSg7s4XFC6IeX0AhnIrT3O05nf 2xZRVpYQ/o4X9kKuL6Bm8SteEo5BfC7ZMY2ALeSqC/QGFFNTaXGzQdWnyuuCpuDeoYjkeAypOQuOp4HyvwUGHuMCGR8qgGlvNMajfK8Y2PHItm9/TffI9vSTf0/QZRJ9V5MJl/CxCenDyLk8iWOg22L3VQiTLeuqF3F3VC1fi7/AVsa3neumFnKIXrvV8Xa/KeuF5dBVfoy/IeuE6fgHe1uvf99YLuTvqhT/G3sXv77pe8CqGm636O7xS3Yhn6IYAYqiVyhAdZblSlWS9UEElXKZM0QtMzKv1zGVV0QsbqIprdFPRCybehGyaP2gz9VxdryuVKmiHlUqYfsckoSkqVaeDbsl6Afx4a1yvd kFK8bID3dFL8gs2HEWbLG4o7LgiI6mzEJD1gt/Qg3cpJ6iFzwxz /JgqvohRZysU 3Fb3QxtvAQvtHbWYnt6PvKCwE7ZAFYfodk4SmYKHTQXdlvQB vDuu73Tdi5sxFn7U6ItqYXhRjH1JrWYvq1XlZTHuFVUvvIpfwS9l9Fd/ v/ohZ80 rqK7HWB7Ja6gzfUnb4hxr2p1uO38C38ZvE1pR6/jV7T36K3Fb3wDr69pxfeGUGX31X0wp/Ru3t64X0V3/ti3Q9UfB q D4U4z5S8X2MP8AfFd9T8P0Fvad/nNbR/6IXPlXxfRoUz89UMJ8FeuFzRS98LvTCF730widxvfBX9An 4o6VQtYLuS698LceeiHXWy98peiFLzt64e/oS/wV/Voq V8HW/6mSy98I4L9Q9UL30qTvxU8fXfX9MI/Y3oBYh3jEENK4aGBq DY1i6ZDv4ZGeUBsBzgX3KA fC/CP75D0l85kY=");?>PAD(

?456789:;<=

!"#$%&'()* ,-./0123

!"#$%&'()* ,-./

0123456789:;

!"#$%&'()* ,-./* 

$%&'()* ,-./

!"#$%&'()* ,-./ !"#$%&'()* ,-./

!"#$"%&'())*" ,-."

565556578596666665

!%!,!!!!.

! !-!!!! (012013012013

4 !!%!/.-*)

'&#"'&#"

- ,   ((()))22233377888899*9::':&%$"!

BAMBALAM_GETINI.PHP

BAMBALAM_INIT.PHP

REZ INJECTOR BY SP0NG3B0B.PHP

conhost.exe_312:

.text

`.data

.rsrc

@.reloc

GDI32.dll

USER32.dll

msvcrt.dll

ntdll.dll

API-MS-Win-Core-LocalRegistry-L1-1-0.dll

KERNEL32.dll

IMM32.dll

ole32.dll

OLEAUT32.dll

PutInputInBuffer: EventsWritten != 1 (0x%x), 1 expected

Invalid message 0x%x

InitExtendedEditKeys: Unsupported version number(%d)

Console init failed with status 0x%x

CreateWindowsWindow failed with status 0x%x, gle = 0x%x

InitWindowsStuff failed with status 0x%x (gle = 0x%x)

InitSideBySide failed create an activation context. Error: %d

GetModuleFileNameW requires more than ScratchBufferSize(%d) - 1.

GetModuleFileNameW failed %d.

Invalid EventType: 0x%x

Dup handle failed for %d of %d (Status = 0x%x)

Couldn't grow input buffer, Status == 0x%x

InitializeScrollBuffer failed, Status = 0x%x

CreateWindow failed with gle = 0x%x

Opening Font file failed with error 0x%x

\ega.cpi

NtReplyWaitReceivePort failed with Status 0x%x

ConsoleOpenWaitEvent failed with Status 0x%x

NtCreatePort failed with Status 0x%x

GetCharWidth32 failed with error 0x%x

GetTextMetricsW failed with error 0x%x

GetSystemEUDCRangeW: RegOpenKeyExW(%ws) failed, error = 0x%x

RtlStringCchCopy failed with Status 0x%x

Cannot allocate 0n%d bytes

|%SWj

O.fBf;

ReCreateDbcsScreenBuffer failed. Restoring to CP=%d

Invalid Parameter: 0x%x, 0x%x, 0x%x

ConsoleKeyInfo buffer is full

Invalid screen buffer size (0x%x, 0x%x)

SetROMFontCodePage: failed to memory allocation %d bytes

FONT.NT

Failed to set font image. wc=x, sz=(%x,%x)

Failed to set font image. wc=x sz=(%x, %x).

Failed to set font image. wc=x sz=(%x,%x)

FullscreenControlSetColors failed - Status = 0x%x

FullscreenControlSetPalette failed - Status = 0x%x

WriteCharsFromInput failed 0x%x

WriteCharsFromInput failed %x

RtlStringCchCopyW failed with Status 0x%x

CreateFontCache failed with Status 0x%x

FTPh

\>.Sj

GetKeyboardLayout

MapVirtualKeyW

VkKeyScanW

GetKeyboardState

UnhookWindowsHookEx

SetWindowsHookExW

GetKeyState

ActivateKeyboardLayout

GetKeyboardLayoutNameA

GetKeyboardLayoutNameW

_amsg_exit

_acmdln

ShipAssert

NtReplyWaitReceivePort

NtCreatePort

NtEnumerateValueKey

NtQueryValueKey

NtOpenKey

NtAcceptConnectPort

NtReplyPort

SetProcessShutdownParameters

GetCPInfo

conhost.pdb

%$%a%b%V%U%c%Q%W%]%\%[%

%<%^%_%Z%T%i%f%`%P%l%g%h%d%e%Y%X%R%S%k%j%

version="5.1.0.0"

name="Microsoft.Windows.ConsoleHost"

<requestedExecutionLevel

name="Microsoft.Windows.ConsoleHost.SystemDefault"

publicKeyToken="6595b64144ccf1df"

name="Microsoft.Windows.SystemCompatible"

version="6.0.0.0"

publicKeyToken="6595b64144ccf1df"

< =$>:>@>

2%2X2

%SystemRoot%

\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Console\TrueTypeFont

\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Console\FullScreen

WindowSize

ColorTableu

ExtendedEditkeyCustom

ExtendedEditKey

Software\Microsoft\Windows\CurrentVersion

\ !:=/.<>;|&

%d/%d

cmd.exe

desktop.ini

\console.dll

%d/%d

6.1.7601.17641 (win7sp1_gdr.110623-1503)

CONHOST.EXE

Windows

Operating System

6.1.7601.17641

Remove it with Ad-Aware

1. Click (here) to download and install Ad-Aware Free Antivirus.
2. Update the definition files.
3. Run a full scan of your computer.

Manual removal*

1. Terminate malicious process(es) (How to End a Process With the Task Manager):
   

   1.exe:1652
   %original file name%.exe:1672
   REZ Injector by -Sp0ng3b0b-.exe:2452
   2.exe:2384

2. Delete the original Trojan file.
   
3. Delete or disinfect the following files created/modified by the Trojan:
   

   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\php158.tmp (581 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\php159.tmp (2 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\phpEA.tmp (297 bytes)
   C:\Windows\MKPDOO\UGF.02 (57 bytes)
   C:\ProgramData\HMW\UGF.004 (14668 bytes)
   C:\Windows\MKPDOO\UGF.01 (81 bytes)
   C:\Windows\MKPDOO\UGF.00 (1 bytes)
   C:\REZ Injector by -Sp0ng3b0b-.exe (294 bytes)
   C:\Windows\MKPDOO\UGF.exe (147 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\1.exe (50 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.exe (148 bytes)
   C:\ProgramData\IIKMQP\QIL.00 (2 bytes)
   C:\ProgramData\IIKMQP\QIL.exe (148 bytes)
   C:\ProgramData\IIKMQP\QIL.02 (0 bytes)
   C:\ProgramData\IIKMQP\QIL.01 (81 bytes)

4. Delete the following value(s) in the autorun key (How to Work with System Registry):
   

   [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
   "UGF Start" = "C:\Windows\MKPDOO\UGF.exe"

5. Reboot the computer.
   

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.