SearchProtectToolbar_827e36d983

by malwarelabrobot on February 13th, 2018 in Malware Descriptions.

not-a-virus:HEUR:AdWare.Win32.Generic (Kaspersky), Adware.iBryte.628 (DrWeb), PUA.AdkDLLWrapper (Ikarus), FileRepMetagen [Adw] (AVG), FileRepMetagen [Adw] (Avast), Trojan.Win32.Swrort.3.FD, SearchProtectToolbar.YR, PUPSpigot.YR, BankerGeneric.YR (Lavasoft MAS)
Behaviour: Banker, Trojan, PUP, Adware


The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Requires JavaScript enabled!

Summary
Dynamic Analysis
Static Analysis
Network Activity
Map
Strings from Dumps
Removals

MD5: 827e36d98328a94985e90d3ed3c03c4d
SHA1: 75c4107f1f07162428382f0c3ad1c06cb0cec5af
SHA256: a413a54d28b44b49100512edc8b76163d961810cde19647c94a4309449821162
SSDeep: 49152:NdkcuC8JW6RbJKfSml90lG8J2O1g7L7SAv3/ZTCS6:Ndk08JW6RbJtmCMOael
Size: 1937920 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: 2014-09-11 23:29:15
Analyzed on: Windows7 SP1 32-bit


Summary:

Banker. Steals data relating to online banking systems, e-payment systems and credit card systems.

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):
No processes have been created.
The Trojan injects its code into the following process(es):

RunDll32.exe:3828
%original file name%.exe:2448

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process %original file name%.exe:2448 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JYNOWECL\impression[1].htm (2046 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\toolbar_offer.benc (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\uttB7EB.tmp (603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\25FDO7QC\impression[1].htm (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i_temp.temp (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\LSEQ5S66.txt (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ADKAppsOfferManager.dll (458 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\settings.dat.new (71 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\uttAD5F.tmp.new (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-732923889-1296844034-1208581001-1000\1f91d2d17ea675d4c2c3192e241743f9_88dcd395-b062-45b3-a6cd-79f37c0eba08 (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\toolbar.benc.new (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4ZZNMJGQ\offers[1].htm (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\LT75XVQO.txt (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\uttDA3B.tmp.new (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\OFQ7P9Y0.txt (89 bytes)

The Trojan deletes the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\uttAD5F.tmp.22759.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\uttAD5F.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\OFQ7P9Y0.txt (0 bytes)

Registry activity

The process RunDll32.exe:3828 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3E 00 00 00 09 00 00 00 00 00 00 00"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process %original file name%.exe:2448 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Tracing\827e36d98328a94985e90d3ed3c03c4d_RASAPI32]
"EnableFileTracing" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Classes\FalconBetaAccount]
"remote_access_client_id" = "1103237489"

[HKCU\Software\BitTorrent\uTorrent]
"OfferProvider" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\827e36d98328a94985e90d3ed3c03c4d_RASAPI32]
"ConsoleTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Tracing\827e36d98328a94985e90d3ed3c03c4d_RASMANCS]
"MaxFileSize" = "1048576"

[HKCU\Software\BitTorrent\uTorrent]
"OfferViaCAU" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\827e36d98328a94985e90d3ed3c03c4d_RASAPI32]
"FileTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Tracing\827e36d98328a94985e90d3ed3c03c4d_RASMANCS]
"ConsoleTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Tracing\827e36d98328a94985e90d3ed3c03c4d_RASAPI32]
"MaxFileSize" = "1048576"
"FileDirectory" = "%windir%\tracing"

[HKCU\Software\BitTorrent]
"computerid" = "F4 2C 45 49 0C 07 A3 8E 52 9E 07 54 B4 BE 8C 18"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3D 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Tracing\827e36d98328a94985e90d3ed3c03c4d_RASMANCS]
"EnableFileTracing" = "0"
"EnableConsoleTracing" = "0"
"FileTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Tracing\827e36d98328a94985e90d3ed3c03c4d_RASAPI32]
"EnableConsoleTracing" = "0"

[HKCU\Software\BitTorrent\uTorrent]
"OfferAccepted" = "0"
"OfferName" = ""

[HKLM\SOFTWARE\Microsoft\Tracing\827e36d98328a94985e90d3ed3c03c4d_RASMANCS]
"FileDirectory" = "%windir%\tracing"

[HKCU\Software\Classes\Local Settings\MuiCache\63\52C64B7E]
"LanguageList" = "en-US, en"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"AutoConfigURL"

Dropped PE files

MD5 File path
41835598a59dec2e98ce476b520e9e73 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\ADKAppsOfferManager.dll
7a9bf84ae6f5793548177fb6998ce922 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\uttB7EB.tmp

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: BitTorrent Inc.
Product Name: HD Player
Product Version: 3.4.2.33870
Legal Copyright: (c)2014 BitTorrent, Inc. All Rights Reserved.
Legal Trademarks:
Original Filename: uTorrent.exe
Internal Name: uTorrent.exe
File Version: 3.4.2.33870
File Description:
Comments:
Language: Language Neutral

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
UPX0 4096 2531328 0 0 d41d8cd98f00b204e9800998ecf8427e
UPX1 2535424 1286144 1283072 5.54505 9b2810e645d235462f057452179eb6b5
.rsrc 3821568 126976 124416 4.87408 90bba012a29ad20235fbcbb20b0f388a
.opcandy 3948544 303104 300032 5.51512 7a9bf84ae6f5793548177fb6998ce922
.adknow 4251648 241664 229376 5.40729 41835598a59dec2e98ce476b520e9e73

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL IP
hxxp://update.utorrent.com/installoffer.php?h=DAejjlKeB1S0vowY&v=109413454&w=1DB10106&l=en&c=US&db=iexplore.exe&cl=uTorrent&tsub=1&svp=4 67.215.246.203
hxxp://update.utorrent.com/installstats.php?cl=uTorrent&v=109413454&h=DAejjlKeB1S0vowY&w=1DB10106&bu=0&pr=0&cmp=0&ocmp=0&showtbexists&pid=2448&cau=0&tbe=0&cd=0&view=win32 67.215.246.203
hxxp://update.utorrent.com/installstats.php?cl=uTorrent&v=109413454&h=DAejjlKeB1S0vowY&w=1DB10106&bu=0&pr=0&cmp=0&ocmp=0&offerretrievedfromserver&pid=2448&cau=0&ServerOfferRetrieved=1&sec_offs=oc,adk&view=win32 67.215.246.203
hxxp://imp.install-zone.com/impression.do/?user_id=0615E89D-EE62-476A-BC20-3BC24EA37F2F&event=setup_run&spsource=68E633381BD14a69BD08A05C22B72D6A&traffic_source=68E633381BD14a69BD08A05C22B72D6A&browser=IE&implementation_id=dll 204.11.56.48
hxxp://imp.install-zone.com/68E633381BD14a69BD08A05C22B72D6A/offers.json?version=1.0&pid=2&ts=&browser=IE 204.11.56.48
hxxp://imp.install-zone.com/impression.do/?user_id=0615E89D-EE62-476A-BC20-3BC24EA37F2F&event=install_bad_config&spsource=68E633381BD14a69BD08A05C22B72D6A&referrer=3344|hxxp://config.install-zone.com/68E633381BD14a69BD08A05C22B72D6A/offers.json?version=1.0&pid=2&ts=&browser=IE&traffic_source=68E633381BD14a69BD08A05C22B72D6A&browser=IE 204.11.56.48
hxxp://update.utorrent.com/installstats.php?cl=uTorrent&v=109413454&h=DAejjlKeB1S0vowY&w=1DB10106&bu=0&pr=0&cmp=0&ocmp=0&mismexecute&pid=2448&cau=0&download=0&execute=0&error=mism execute succeeded&mismreturn=0&mismresult=provider:9,search:0,homepage:1&view=win32 67.215.246.203
hxxp://bittorrent.vo.llnwd.net/offers/spigot-yandex-20140709.bmp
router.utorrent.com 82.221.103.244
bench.utorrent.com 208.72.195.5
ll.download3.utorrent.com 178.79.242.19
config.install-zone.com 204.11.56.48
router.bittorrent.com 67.215.246.10
api.opencandy.com


IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

ET P2P Bittorrent P2P Client User-Agent (uTorrent)
ET P2P BTWebClient UA uTorrent in use

Traffic

GET /installstats.php?cl=uTorrent&v=109413454&h=DAejjlKeB1S0vowY&w=1DB10106&bu=0&pr=0&cmp=0&ocmp=0&mismexecute&pid=2448&cau=0&download=0&execute=0&error=mism execute succeeded&mismreturn=0&mismresult=provider:9,search:0,homepage:1&view=win32 HTTP/1.1
Accept-Encoding: gzip
User-Agent: uTorrent(33870)/3.4.2
Host: update.utorrent.com
Cache-Control: no-cache


HTTP/1.1 200 OK
Server: nginx/1.4.7
Date: Mon, 12 Feb 2018 11:55:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.4.30
0..


GET /68E633381BD14a69BD08A05C22B72D6A/offers.json?version=1.0&pid=2&ts=&browser=IE HTTP/1.1
User-Agent: ADKAppsOfferManager
Host: config.install-zone.com


HTTP/1.1 200 OK
Date: Mon, 12 Feb 2018 11:55:33 GMT
Server: Apache
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4 L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_pHzxty34MHarHgbVsJZyRIp1JiyHu1pQRKYb5bz/b6DmzoiZYwxGvjjUTUDojdGvQZMnX jR1UJvj6t Pir34g==
Content-Length: 3344
Content-Type: text/html; charset=UTF-8
<!--...top.location="hXXp://config.install-zone.com/?fp=JhIDAVjahCG
hCE02xUAx4wIEG7xsZ+1qdrO5/LI46/3rMgIOu+G7QfaKBNrz0WSy64o+KQO
drgiJKJz2/hjVlg==&prvtof=vkucZQ/uPrc4/KJeWkfjXRW2PPpw2o0rj5e
LK/fOeJ0=&poru=NbbIEJC2DY9dMQo7jgLtWJHYsdrmJmrNy1u6kt8xFmU7sTAMAL3
DnM0pijoBeNZaJRGKfvEvlZ4dwA4+A6sLfYvGRpEdvuYUHNDGQ7PVLbyc548NBfIVnlu
peHikuzNtwedAPg4riYDqGAHj0Ypf5+0AGfW11Jnl1/Sn1WjWNY4=&cifr=1&ver
sion=1.0&ts=&browser=IE";.../*..-->..<html data-adblockkey="MFww
DQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4 L2entqri0lzh6pk
AaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_pHzxty34MHarHgb
VsJZyRIp1JiyHu1pQRKYb5bz/b6DmzoiZYwxGvjjUTUDojdGvQZMnX jR1UJvj6t Pir34
g=="><head>...... <meta http-equiv="Content-Type" content
="text/html; charset=UTF-8">...... <meta name="viewport" conten
t="width=device-width"><meta http-equiv="X-UA-Compatible" conten
t="IE=EmulateIE7"><script type="text/javascript">...<!--..
.dimensionUpdated = 0;...function applyFrameKiller()...{....if(window.
top != self)....{.....cHeight = 0;.....if( typeof( window.innerHeight
) != 'undefined' ) {.....//Non-IE.....cHeight = window.innerHeight;...
..dimensionUpdated = 1;.....} else if( document.documentElement && ( d
ocument.documentElement.clientWidth || document.documentElement.client
Height ) ) {.....//IE 6 in 'standards compliant mode'.....cHeight =
document.documentElement.clientHeight;.....dimensionUpdated = 1;.....}
else if( document.body && ( document.body.clientWidth || document

<<< skipped >>>

GET /installstats.php?cl=uTorrent&v=109413454&h=DAejjlKeB1S0vowY&w=1DB10106&bu=0&pr=0&cmp=0&ocmp=0&offerretrievedfromserver&pid=2448&cau=0&ServerOfferRetrieved=1&sec_offs=oc,adk&view=win32 HTTP/1.1
Accept-Encoding: gzip
User-Agent: uTorrent(33870)/3.4.2
Host: update.utorrent.com
Cache-Control: no-cache


HTTP/1.1 200 OK
Server: nginx/1.4.7
Date: Mon, 12 Feb 2018 11:55:26 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.4.30
0..


GET /installstats.php?cl=uTorrent&v=109413454&h=DAejjlKeB1S0vowY&w=1DB10106&bu=0&pr=0&cmp=0&ocmp=0&showtbexists&pid=2448&cau=0&tbe=0&cd=0&view=win32 HTTP/1.1
Accept-Encoding: gzip
User-Agent: uTorrent(33870)/3.4.2
Host: update.utorrent.com
Cache-Control: no-cache


HTTP/1.1 200 OK
Server: nginx/1.4.7
Date: Mon, 12 Feb 2018 11:55:31 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.4.30
0..


GET /installoffer.php?h=DAejjlKeB1S0vowY&v=109413454&w=1DB10106&l=en&c=US&db=iexplore.exe&cl=uTorrent&tsub=1&svp=4 HTTP/1.1
Accept-Encoding: gzip
User-Agent: uTorrent(33870)/3.4.2
Host: update.utorrent.com
Cache-Control: no-cache


HTTP/1.1 200 OK
Server: nginx/1.4.7
Date: Mon, 12 Feb 2018 11:55:24 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.4.30
Expires: Thu, 21 Jul 1980 00:00:00 GMT
Cache-Control: private
Last-Modified: Mon, 12 Feb 2018 11:55:24 GMT
8ea..d16:secondary_offersl2:oc3:adke2:oci1e3:adki1e8:toolbar0d5:title2
4:Free Yandex Search Offer8:subtitle0:13:body_text_rtf95:{\rtf1\ansi\a
nsicpg1252\u181?Torrent suggests you install the Yandex settings descr
ibed below.}11:footer_text258:By clicking "Accept" and selecting one o
r more of the checkboxes above, you are verifying that you have read a
nd accepted our <a href="hXXp://legal.yandex.ru/confidential/">P
rivacy Policy</a> and <a href="hXXp://legal.yandex.ru/termsof
use/">Terms of Use</a>.2:id13:spigot-yandex9:image_url66:http
://ll.download3.utorrent.com/offers/spigot-yandex-20140709.bmp10:image
_hash20:...Rw...U......J...'9:image_sig256:...g........U.....{.m.=...o
!.hf.K........./... 2. ......r"kv.*..t>....m...;.C.v..S...7.s.s...2
...@..Ef.w0..&4..'..X.F$.}p.U.........K.....v...F..._u..:.pX.`...0.`..
...Y....a.....9...g...=..-.!#......].V$._..SD_.c.... .v...,9...A...7..
g.-.4.\!.\KZ}kK(."1...10:image_sizei353958e10:offer_urlsl69:hXXp://ll.
download3.utorrent.com/offers/spigot-yandex-en-20140708.exe69:hXXp://l
l.download3.utorrent.com/offers/spigot-yandex-en-20140708.exe66:http:/
/download3.utorrent.com/offers/spigot-yandex-en-20140708.exe58:hXXp://
67.215.246.206/offers/spigot-yandex-en-20140708.exee10:offer_hash20:.l
M1.....u..x..dp...9:offer_sig256:..F..pc...l.,.A4.."P...lX./.V.../....
5`..|.....|0!........h.oo....U.eY.m.g.s..!}@...7h......^..WM..R...s...
Hul...m.D$.......v.c.....f9._. ...8yZxq....(7..Y..:-..@(.8...#.i.Iq.&l
t;.j.J..^....8.7.D.gK...[.P.5K.G..eX.J..R..*...'. .{..5}....6.../`

<<< skipped >>>

GET /offers/spigot-yandex-20140709.bmp HTTP/1.1
Host: ll.download3.utorrent.com
User-Agent: BTWebClient/3420(33870)
Accept-Encoding: gzip
Connection: Close


HTTP/1.1 404 Not Found
Server: nginx/1.4.7
Date: Mon, 12 Feb 2018 11:55:45 GMT
Content-Type: text/html
Content-Length: 168
Connection: close
<html>..<head><title>404 Not Found</title><
/head>..<body bgcolor="white">..<center><h1>404 N
ot Found</h1></center>..<hr><center>nginx/1.4.
7</center>..</body>..</html>....


GET /impression.do/?user_id=0615E89D-EE62-476A-BC20-3BC24EA37F2F&event=setup_run&spsource=68E633381BD14a69BD08A05C22B72D6A&traffic_source=68E633381BD14a69BD08A05C22B72D6A&browser=IE&implementation_id=dll HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: imp.install-zone.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 12 Feb 2018 11:55:32 GMT
Server: Apache
Set-Cookie: vsid=918vr2659821324602541; expires=Sat, 11-Feb-2023 11:55:32 GMT; Max-Age=157680000; path=/; domain=imp.install-zone.com; HttpOnly
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4 L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_TUhzGbBCYMyPk4w0FiC ODSDbN/6SAK1jjdYYQ2jgdrUJf5zij10BqQj7VhvIoG0NWgUi8 EIbYDoqw27NijTg==
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
Cache-Control: private
Content-Encoding: gzip
Transfer-Encoding: chunked
16A5.............\iw....<9'..CN.v...V.8/..m..n..N#.$.fI.~.......`..
..2............Z-t.[...zz(#..T....U.(....|1./.J..U.C......z.Ed.1....b.
[.1...[.8.......NLt.....\P.KM....^l6../.M....Q,.UC.N.U.R.,.....[._..B=
.X......".h.o...^:.,.ug.....p7.^'L.!....t..R.u-..i........S...ts3..t.B
..z..*.^ Y,6V.&gJz.._....\n.j...a..T[=L.....?....a=.j.o..D|zz.&c.j...k
e.2...I.#....S...J.S.:|*....]W&.q..*F....-X.. geJ..#-.........c...y~.w
[.@.lK.hY......V......`hqs.....r..\.x..W3...t.Q...X.U)_x(I.$8.'/..z!.W
..j.Q...0...1...#.U...G. rr....(.=...h.....3e./..v....m.Wo=r...D.7.%~j
/..Ry......s..f..............ve.u;.u.i...[.Ys...\.f.F7.l.........Fs]..
.e...r.ua..k.S.....e.[[.....~.~.."...7....*.M.L.( .x.N......A>.,...
.g......"f......f.=...$.#.k.N.hG.`.......Q.K.Gh.;b.4.:BB.hW.GH........
.T<.....4..eu..".......fQ.y..s..;p..N...z....H..eKN...D3.G>.W.."
-L....t^(.#.Di..R..."EW...Q[...cO....6...3[........nP....N.>-.6....
.....1.......3......B..%..0..3..p....*.D....l.%.%.#....0.l.:3...bm{1 .
p..1A..5R.gx.$/s.V....8C."..sQ.M...h\=..Z......s....AD?.....p.sYR.2..#
..&..@/k...........v..q.O.........a...U.r...-..).....(.>E6..(.]...!
..c......R.}`'b..G...]P...$*x0...`.......X.....-....~.....u..xsy......
l..6..[..p.8.........}x*.WLE...\\ns.{.Y[~.kX......1..I...........,.b..
|d <s.2.....s2..T......p..P....Hs.d.U...BFy.I.....Tcq.b...J#g.N_..;
g..-2..<R.....rs.....@..!-^@.Zt..MB#.)......B...G=....a.Z..9_......
Z.*...G#..?$. M..&I.08.>d.....u.^..1..F$E."a.v@......u...6h......
.zn.....i{..~..Ld...eA......,..-.b..m....y.yh,C....'.o. .z^PW<.

<<< skipped >>>

GET /impression.do/?user_id=0615E89D-EE62-476A-BC20-3BC24EA37F2F&event=install_bad_config&spsource=68E633381BD14a69BD08A05C22B72D6A&referrer=3344|hXXp://config.install-zone.com/68E633381BD14a69BD08A05C22B72D6A/offers.json?version=1.0&pid=2&ts=&browser=IE&traffic_source=68E633381BD14a69BD08A05C22B72D6A&browser=IE HTTP/1.1

Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: imp.install-zone.com
Connection: Keep-Alive
Cookie: vsid=918vr2659821324602541


HTTP/1.1 200 OK
Date: Mon, 12 Feb 2018 11:55:33 GMT
Server: Apache
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4 L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_NT48owmk2CuY60bVf4B3Mil3YxCes9cEr0EBZ8pL VmFR9gaKupJ/K68uWzX8b5CQFTe0HZyETdpc8bkAYV93Q==
ntCoent-Length: 4902
Keep-Alive: timeout=5, max=56
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
Cache-Control: private
Content-Encoding: gzip
Content-Length:       2323
...........W[..H.~.........e=r.p...\..E.._:...  ..3.....==.;...4.Cp.[V
~U.ef=......U..OI.9U...^XU......?EiY9I..f)x.....A>..d..L..H.U..;...
d~i....*.....B.?..TS#<J[.Z..`].....U#l.jn.j....6L7.4Y.!.x?.....1...
.i..X%....=..Y..A...b8f..q.N297......N.Y*.......`.0....T.7...m..N.Aa^.
a[*[..I..q.....7....hH..]....O,....6.T...'.!.L.kM....JB{l.;.W.1....C.J
.G.I..Z}!....Jk.d.bK.:Q. ..Z....h8.y..8.....B..0rRb....QH..O..d)&.g[..
/..d.'.Ywr.....FZ.....g....F...O8...t........F.u..3 _L.....*..Q$8..[A/
..1.p.A.>..(..Ef$.E...$M.}...>.......K....j.b .]...ei...........
#R.A0.'`.C.8.eXt..8G...>. .E..1A.....l...B..}...1.....]..J...e..!..
..F..bO.CU...".!Xh..U..A...F.{o!u.?..........:&..TN..]..8....Iu-,me...
......qKV0j.6X.cg[.....n.......S2/u.g...z*"4..T...V.e.K.......&...d.Zj
.To.!...... .y..Yv9....$......6......-J...A9........?...j.wf.\..(...n.
w./%...] .~.1n........=...!.W.B..#.....>8.....gi....6.=.nbW..*.T.n.
."^..%...)...g.R....K.j.....u.W.......[............C..&.* .c.xN..."...
^...RA5_.;8..^{S...%.....z..n3..1.v&..S......I .P.Y.$...G..K.*.~.....'
.j...H...k.7... .......7.2.}...)(^....x<.>........h0.gi_.?.....4
...vo...I..N.?...[...GL@.A...?o}.`PH.M.?...~..G`.@.E....R...?.../....$
r..........I...n.........'......yCr..?.....j~{w....<F.!.i..(8.f./6.
.w....@...t..)....5....=X.nr.=s3.*s.Kw.. .v.D...t....p.%.N..]<v.C%.
.U....E.....E.B.r..P.4m.V...!n..av..R.m.T.rS...ZA..3R..[.......h....1.
...1.w:....e^...U{...`......;.........&..I-_...gN...q.q..h. .B..,.Y!/.
5.%e.. . .a.mAI.F..J...hv..s<.OWh...@E.,..n.E.$.sA.6....yV.u.b.

<<< skipped >>>

The Trojan connects to the servers at the folowing location(s):

%original file name%.exe_2448_rwx_00401000_003A2000:

t.Wj _ |$
SSSSh
SSh(_`
tgf9.tb
SSSSSh
L$,SSh
L$0SSh<
L$(SSh
t$0SShT~`
SShT~`
|$,SSh
L$XSSh
L$$SShT~`
L$$SSh<
PSSh$
FH<.tP<[tL<\tH<*tD<|t@<^t<<$t8
P$SSh
>httpum
SSSSSSSh
CSSh4
uùA
SSShp4a
USShXOa
?httpu
SSh,Da
SShXDa
SShhDa
D$()D$0SSh
Cj.Xf9D$`u
EL %c
EP(%c
ET0%c
EX8%c
E\@%c
E`H%c
F\ FTP
SShX<c
j.Xf;
t.HHt
UDP0u
HTTPu
9HTTPu#f
PSSSSSSh
t.Ht$
>HTTPu
D$0PSSh
Zu.Vj<j
tFj.Zf;
$hL%d
D$LPSSh
%uoSh
<. UDPu
<. TCPuS
t.Ph`Kd
keyA
keyB
j.Yf;
_tcPVj@
.PjRW
Error downloading file. Msg: %s.
Error downloading file. Msg: Empty download.
Error downloading file. Msg: Could not save downloaded file.
autoexecutestart
mismexecute
kernel32.dll
hXXp://utclient.utorrent.com/plus/utorrent/index.html
hXXps://activate.utorrent.com
hXXp://offers.bittorrent.com/w/1.0/arj
hXXp://events.bittorrent.com/startConversion
hXXp://cdn.ap.bittorrent.com/control/tags/bt.json
hXXp://cdn.ap.bittorrent.com/control/tags/ut.json
hXXp://cdn.ap.bittorrent.com/control/tags/staging_bt.json
hXXp://cdn.ap.bittorrent.com/control/tags/staging_ut.json
hXXp://apps.bittorrent.com/conduit/eula/ByChoosingToInstall.html
%u %d %S
CollectToolbarPreferences: _ACTIVE_BROWSER: %S
provider:%S,search:%d,homepage:%d
mism execute succeeded
CollectToolbarPreferences: mism execute succeeded
CollectToolbarPreferences: mism execute FAILED
toolbar%d
hXXp://update.utorrent.com/uninstall?type=%s-%U&h=%s&v=%d
content_offer_url
attempted_to_receive_server_search_url
"elevated":%d, "message":"%S", "error_code":%d
hXXp://VVV.utorrent.com
IsYandexInstalled %s
GetConduitInstalledState: Found key: HKEY_LOCAL_MACHINE %S
GetConduitInstalledState: HKEY_LOCAL_MACHINE %S = %d
GetConduitInstalledState: Found key: HKEY_CLASSES_ROOT %S
GetConduitInstalledState: installed=%d visible=%d enabled=%d
IsConduitInstalled: %d
GetToolbarDict: %s, id: %s
GetToolbarDict: count=%d
GetToolbarDict: Found %s in '%s' key
GetToolbarDict: DID NOT find %s in '%s' key
ask-surf-firefox
ask-surf-chrome
IsConduitToolbarOffer %s
checkboxes: %s
TBDownloadCallback err: %s size: %I64d
TBDownloadCallback write FAILED: %S
TBDownloadCallback write OK: %S
Using default offer? [%S]
passed_hash_check? %s
base_parameter: [%S]
chrome_param
TBDownloadCallback: flag: %s
toolbar commandline: %s
TBDownloadCallback: RAN %S %S RETURN: %d
offer_urls
WhichConduitSettingsAreActive: %s
ShowYandexOffer: %d
ShowYandexSearchOffer: %d
ShowConduitBing: %d
ShowConduitGoogle: %d
image_url
&bin=%stoolbar
TBRequestThread Parsed OK?: %s
TBRequestThread FAILED. err: %S
content_offer_autoexec
offer_retrieved: %s
empty_offer: %s
default_offer: %s
showToolbar: %s
onOfferDownload: Using default offer. g_is_default_offer: %s
onOfferDownload: %s
eula_url
hXXp://%%s/offers/%s
hXXp://update.utorrent.com/installoffer.php
RetrieveOffer browser %S
db=%U
cl=%s
tsub=%d
RetrieveOffer %s
The source code, design, and structure of the Software are trade secrets. You will not disassemble, decompile, or reverse engineer itor otherwise attempt to discover the source code of the Software, in whole or in part, except to the extent expressly permitted by law, or distribute it. You will not use the Software for illegal purposes. You will comply with all export laws. The Software is licensed, not sold.
The Software accelerates downloads by enabling your computer to grab pieces of files from other BitTorrent users simultaneously. Your use of the Software to download files will, in turn, enable other users to download pieces of those files from you, thereby maximizing download speeds for all users. In the Software, only files that you are explicitly downloading or sharing or have downloaded or shared through BitTorrent will be made available to others. You consent to other users' use of your network connection to download portions of such files from you. At any time, you may uninstall the Software through the Add/Remove Programs control panel utility. In addition, for the BitTorrent or
BitTorrent, Inc. disclaims any responsibility for harm resulting from the Software or any software or content downloaded using the Software, whether or not BitTorrent, Inc. approved such software or content. BitTorrent, Inc. approval does not guarantee that software or content from an approved partner will function, sound, or appear as offered or hoped, or be complete, accurate, or free from bugs, errors, viruses, or other harmful content. BitTorrent, Inc. expressly disclaims all warranties and conditions, express or implied, including any implied warranties and conditions of merchantability, fitness for a particular purpose, and noninfringement, and any warranties and conditions arising out of course of dealing or usage of trade regarding the Software or any software or content you download using the Software. No advice or information, whether oral or written, obtained from BitTorrent, Inc. or elsewhere will create any warranty or condition not expressly stated in this agreement. Some jurisdictions do not allow certain limitations on implied warranties, so the above limitation may not apply to you to its full extent.
BitTorrent, Inc.'s total liability to you from all causes of action and under all theories of liability will be limited to $50.00. In no event and under no theory of liability will BitTorrent, Inc. be liable to you for any special, incidental, exemplary, or consequential damages arising out of or in connection with this agreement or the software whether or not BitTorrent, Inc. has been advised of the possibility of such damages. The foregoing limitations will survive even if any limited remedy specified is found to have failed of its essential purpose. Some jurisdictions do not allow the limitation or exclusion of liability for incidental or consequential damages, so the above limitation or exclusion may not apply to you to its full extent.
In an attempt to provide increased value to our visitors, we may choose various third party web sites or services to link to, and/or frame within, the Sites or Services. We may also include offers from third parties as part of the installation process for our software, which in some instances may include but is not limited to offers made through SweetLabs, Inc. (OpenCandy), whose End User License Agreement is hXXp://VVV.opencandy.com/eulas/b/sneula.html. We also participate in co-branding and other relationships to offer e-commerce and other services and features to our users. However, even if the third party is affiliated with us, we have no control over these sites or services, each of which has separate privacy and data collection practices independent of us. We have no responsibility or liability for these independent policies or actions, and are not responsible for the privacy practices or the content of any such web sites or services. These linked sites or services are only for your convenience and you therefore access them at your own risk.
These BitTorrent, Inc. terms will be governed by and construed in accordance with the laws of California, USA, without regard to conflicts of law rules. The United Nations Convention on Contracts for the International Sale of Goods will not apply. The failure by either party to enforce any provision will not constitute a waiver. Any waiver, modification, or amendment of the BitTorrent, Inc. terms will be effective only if signed. If any provision is held to be unenforceable, it will be enforced to the maximum extent possible and will not diminish other provisions. BitTorrent, Inc. may make changes to these terms from time to time. When these changes are made, BitTorrent, Inc. will make a new copy of the terms available at VVV.bittorrent.com/legal/eula. You understand and agree that if you use the Software after the date on which the terms have changed, BitTorrent, Inc. will treat your use as acceptance of the updated terms. You agree that BitTorrent, Inc. may provide you with notices, including those regarding changes to the terms, by postings on VVV.bittorrent.com/legal/eula. This and the Privacy Policy at VVV.bittorrent.com/legal/privacy are BitTorrent, Inc.'s complete and exclusive understanding with you regarding your use of the Software as an end user, except that sometimes additional terms or product requirements (including age requirements) may apply. Additional terms will be available with the relevant Software, and those additional terms become part of your agreement with us if you use those Software.
If you have any questions, contact us at legal@bittorrent.com.
onPageInit:DLG_OFFER_NON_GOOGLE: checkbox %d %s [%s]
Result: %s
&bin=%sbmp
hXXp://apps.bittorrent.com/utorrent-onboarding/welcome-upsell.btapp
hXXp://apps.bittorrent.com/utorrent-onboarding/player.btapp
hXXp://bundles.bittorrent.com/onboarding/utorrent?url=http://bundles.bittorrent.com/
no toolbar url
bundled_url
%s %s
ShellExecuteExW
shell32.dll
cbhomepage=%d
cbsearch=%d
cbtoolbar=%d
cbrevert=%d
au=%d
installresult=%d
exit=%d
au=%u
tbe=%d
cd=%d
tbofferresult=%d
tb=%s
tbinstallresult=%d
error=%d
msg=%U
url=%U
prog=%u
toroffer=%d
torofferid=%s
&shoffer=%d
cancellastpage=%U
ServerOfferRetrieved=%d
sec_offs=%U
OfferError=%U
OfferProvider=%U
OfferType=%U
Offer=%U
Accepted=%d
toroffername=%s
torexecresult=%d
download=%d
execute=%d
error=%U
mismreturn=%d
mismresult=%U
view=%s
SendStaticURLThread
3.4.2.33870
autoexecfailed
uTCBTWebClient
had_version_already = %s
running_from_install_dir = %s
Target version = %d
HasPendingUpdate = %s
IsThisTargetVersion = %s
IsThisTargetVersion_2 = %s
"status":"Manually ran non target version","from_install_dir":"%d"
IsThisVersionBlacklisted = %s
client_manager.IsThisVersionBlacklisted() || client_manager.DidOptOutOfThisVersion() && running_from_install_dir
g_version < target_version = %d
res == %d
Cancel Downgrade -- cvm.RemoveRunningVersion
2012-12-04 23:04:37 -0800
BTWebClient
hXXp://apps.bittorrent.com/webui/version.json
hXXp://beta.bundles.bittorrent.com/onboarding/utorrent?url=http://beta.bundles.bittorrent.com/
beta.bundles.bittorrent.com
bundles.bittorrent.com
hXXp://beta.%s
INSTALL_FAIL_USER_CANCEL -- cvm.RemoveRunningVersion
()$^.* ?[]|\-{},:=!
\System32\mshta.exe
\SysWOW64\mshta.exe
mshta.exe not found
update.utorrent.com
hXXp://
Cannot load DBGHELP.DLL
Cannot load MiniDumpWriteDump from DBGHELP.DLL
hXXp://bench.utorrent.com/e?i=50
(. ?)://([^/:] )(?::([0-9] ))?([^?]*)(?:\?(.*))?
Not a recognizable URL: "
https
HttpRequest redirect to HTTPS. Not supported
User-Agent: Hydra HttpRequest
HTTP/1.1
] ([0-9] )[
HttpRequest status line not recognizable "
"az_id":"%s"
"url":"
"name":"%s","errCode":%d,"requestTime":%Ld
%s,"action":"%s"
Ft ad unit will next refresh in %d seconds
Lrec ad unit will next refresh in %d seconds
AdUnitManager::CanInitViaSettings? EnableAds? %d lrec %d ft %d
ftEnabled = %d
lrecEnabled = %d
ftRefreshRatePattern = [%s]
lrecRefreshRatePattern = [%s]
adRefreshRatePattern = [%s]
ftClickUrl = '%s'
lrecClickUrl = '%s'
ftAdId = %d
lrecAdId = %d
contactRate = %d
lrecCode = '%s'
ftCode = '%s'
adServerType = '%s'
send_conversion = %d
server dom url = '%s'
serverUrl[%d] = '%s'
<iframe width='%d' height='%d' frameborder='no' framespacing='0' scrolling='no' src='hXXp://ppc.ap.bittorrent.com/fppc'></iframe>
<iframe width='%d' height='%d' frameborder='no' framespacing='0' scrolling='no' src='hXXp://ppc.ap.bittorrent.com/lrec'></iframe>
cfu EnableAds? %d cfu lrec %d cfu banner %d; user lrec %d user banner %d plus expired %d
offers.adcookie
offers.ad_user_key
offers.server_ad_site
offers.server_ad_logging
offers.cfu_left_rail_offer_enabled
offers.cfu_sponsored_torrent_offer_enabled
offers.stat_sent_time
offers.lifetime_clicks_ft
offers.lifetime_clicks_lrec
offers.lifetime_impressions_ft
offers.lifetime_impressions_lrec
offers.lifetime_ad_autoexec_errors
offers.lifetime_ad_image_errors
offers.lifetime_ad_missing_errors
offers.lifetime_ad_req_errors
offers.ad_traffic_tag
offers.site_id
offers.send_conversion
offers.enabled
offers.ftEnabled
offers.lrecEnabled
offers.lrecXButton
offers.lrecXUpgradeUrl
offers.piSettings
offers.survey
offers.adRefreshRatePattern
offers.ftRefreshRatePattern
offers.lrecRefreshRatePattern
offers.lrecAdTypes
offers.ftAdTypes
offers.contactRate
offers.serverUrls
offers.adServerType
offers.serverDomUrl
offers.ftCode
offers.lrecCode
offers.ftClickUrl
offers.lrecClickUrl
offers.ftAdId
offers.lrecAdId
offers.geoip_country
offers.clientReceivedAdRulesFromServer
offers.graphicscard_check_timestamp
"%s":%u,
{"%s":%d,
"%s":"%s",
"%s":%d,
"%s":%Ld,
"%s":"%S",
autoexec
def_exe
"%s":%Lu,
"%s":%d
AdUnitStats::asJSONStringComplete %s
AdUnitStats::asJSONStringAbbreviated %s
--AdUnit requesting %s at time %d
POST /api/v2 HTTP/1.1
badsiteid.%s
keywords
but http code
%s?adid=%d&h=%s
--ParseJson failed on unit id %d; check alt text!
--AdUnit %d got %d ad.
noadsserved.%d
clickUrl
impressionUrl
clickurltype
infoImageUrl
%s.%s.%d.%s.%s
%s.%s.%s.%d.%s
imageUrl
--lrec is disabled: user %d cfu %d
--ft is disabled: user %d cfu %d
@offer.log
offer2.log
------------- log opened %s
%s: %s
adrules.nohvalue
Out of Base64 range -- ones: %d, tens: %d
adrules.badhvalue.
0?hXXp://ads.bittorrent.com/blank.html
domurl
ftClickUrl
lrecClickUrl
--ParseAdControls skipping dict not matching client version %d.%d.%d
--ParseAdControls skipping dict not matching client campaign code %d
--ParseAdControls url
lrecXUpgradeUrl
--ParseAdRules name %s
--ParseAdRules skipping dict not matching client version %d.%d
--ParseAdRules skipping dict not matching client id %s
--ParseAdRules skipping dict not matching client country %s
--ParseAdRules skipping dict not matching client language %s
--ParseAdRules skipping dict not matching client campaign code %d
--ParseAdRules %s %d
--ParseAdRules %s %d
--ParseAdRules %s [%s]
hXXp://utclient.utorrent.com/offers/plus-xpromo-cc84/
error %d w/o string nor data but http code %d ok
noerrormsg
?456789:;<=
!"#$%&'()* ,-./0123
activation response (%d): body = %s, err = %S
activation response: signature = %s
license_key
POST %s HTTP/1.1
{ "license_key": "%s", "fingerprint": "%s", "can_update_license": true }
activation request: %s
key %s%s%s
{ "license_key": "%s", "fingerprint": "%s" }
SetThreadExecutionState
Opening help file: %S %S
hXXp://download.utorrent.com/help/utorrent-help-3421.zip
utorrent.chm
hXXp://VVV.utorrent.com?client=%s%s
hXXp://forum.utorrent.com?client=%s%s
hXXp://content.bittorrent.com?client=%s%s
hXXp://bit.ly/18x3YHD?client=%s%s
hXXp://VVV.utorrent.com/faq?client=%s%s
bittorrent.com
utorrent.com
.torrent
.btsearch
.btkey
.btinstall
.btapp
onWmClose: %s
onWmClose: msg %d
hXXp://update.bittorrent.com/time.php
hXXp://VVV.facebook.com/utorrent
hXXp://twitter.com/utorrent
DoDestroy %s
"action":"%s.%d.%d.d.%d.d"
hXXp://bundles.bittorrent.com/
hXXp://beta.bundles.bittorrent.com/
BundlesRules_ut.json
hXXp://bundles.bittorrent.com/feed.rss
hXXp://beta.bundles.bittorrent.com/feed.rss
[autorestart] Attempting to upgrade: (%S) -> (%S)
http%s://%s:%d%s
VVV.bittorrent.com
Can't connect to %s Remote - username or password incorrect/invalid
udp://tracker.openbittorrent.com:80/announce
udp://tracker.publicbt.com:80/announce
udp://tracker.ccc.de:80/announce
WM_ENDSESSION mode %d lparam %x
english.txt
MsgBoxData
TaskDialogIndirect
comctl32.dll
uxtheme.dll
ll.download3.utorrent.com
llsw.download3.utorrent.com
error %d
UxTheme.dll
user32.dll
inspsearch.com
%s/favicon.ico
file=%U
%S#hXXp://localhost:%d
Shell32.dll
update.utorrent.li
Mininova|hXXp://VVV.mininova.org/search/?cat=0&search=
http%s://%s/checkupdate.php
hXXp://%s/updatestats.php
hXXp://%s/installstats.php
hXXp://%s/update_event.php
%s Updater
"g_version":%d, "action":"autoupdate window click", "choice":"%s", "no_sau":%d
u.url
u.siz
u.sha
u.sig
u.ver
l.url
l.siz
l.sha
l.sig
l.ver
u.msg
tb_badge_url
specialOfferAcceptUrl
%sÌid=%s&cc=%d&l=%d
sv.id
sv.mode
sv.title
sv.url
sv.dur
sv.min
sv.max
sv.spcnt
IgnoreCheckNewVerCallback: error=%S,err=%d, reply=%s
Received search: %S
New search URL added (first check): %S
After removing duplicate previously seen searches: %S
served_search_list set to %S
After removing duplicate user searches: %S
search_list set to %S
CheckNewVerCallback: error=%S,err=%d, reply=%s
Got autoupdate response [%s]
searchUrls
trayOfferImageUrl
trayOfferTargetUrl
specialOfferImageUrl
Got blacklist with %u items.
bv[%i]: %i (build %S)
MS_Windows
%u,%u,%u,%u,%u
tk=%U
sids=%s
&lv=%d_%d_%U
%s:%d
rgc=%d
pt=%s
ap=%s
incodecs=%s
outcodecs=%s
doainstalled=%U
ie=%S
secp=%U
secn=%U
cehh=%S
Sending autoupdate request [%s]
%s.%d.%d.d.%d.d
"tags":[ %s ]
Sending autoupdate exit ping [%s]
%s?h=%s&v=%d&ol=%U&ul=%U&tk=%U&c=%U
%s?license_key=%s&fingerprint=%s
hXXp://apps.bittorrent.com
Failed to connect to host at: %s
CrashMsgBoxThread
download_url
update_url_btinstall
.opcandy
.bunndle
.opinstall
.adknow
Portuguese (Brazil)!ptBR
Portuguese (Portugal)!pt
hXXp://utorrent.com/download/langpacks/dl.php?build=33870&ref=client&client=utorrent&sys_l=%s&sel_l=%d&tk=%s
gui.last_tree_node_installer
gui.granular_priority
gui.overhead_in_statusbar
gui.show_av_icon
gui.show_rss_favicons
gui.ulrate_menu
gui.dlrate_menu
gui.manual_ratemenu
gui.show_player_node
gui.use_fuzzy_dates
gui.show_notorrents_node
gui.find_pane_user_clicked
gui.bundles_tab_user_clicked
gui.auto_restart
webui.remote_enable
gui.dblclick_seed
gui.dblclick_dl
gui.color_progress_bars
gui.launch_plus_app
btapps.startup_app_url
btapps.startup_app_arg
vpn.dark_mode
offers.left_rail_offer_enabled
offers.sponsored_torrent_offer_enabled
offers.featured_content_badge_enabled
offers.featured_content_notifications_enabled
offers.featured_content_rss_enabled
offers.featured_content_rss_url
offers.featured_content_rss_update_interval
offers.featured_content_rss_randomize
offers.404_url
offers.days_to_show
offers.featured_content_url
gui.last_preference_tab-1.8
gui.last_overview_tab-1.8
gui.last_tree_node
gui.last_bundle_visit
gui.last_badging_check
gui.bundle_rss_etag
gui.bundle_rss_last_modified
gui.cat_all_expanded
gui.cat_labels_expanded
gui.cat_rss_expanded
gui.cat_devices_expanded
ERROR VerifyVersion failed with: %S
{"path":"%s","version":"%d","blacklisted":"%d","crash_count":"%d","opt_out":"%d","running":"%s"}
Saving new version to %S
SaveExeFail
Saving new lang file to %S
Checking for update on %s
"dmver":%d, "cau":%d
"status":"%S"
LaunchTargetVersion removed non-existent target: %S
"status":"Removed missing target:%d"
Launching version: %d with command line: %S
Target path: %S
JSON dump: %s
LaunchVersion: ShellExecute returned %d.
"status":"ShellExecute returned:%d"
CopyVersionToInstallDir new_path = %S
CopyVersionToInstall failed on WaitForSingleObject: %d
"status":%d
Relocate Version didn't find updates\ in path: %S
Failed to CopyVersionToInstallDir %S
Launching %S with command line: %S
RelocateVersion: ShellExecute returned %d.
"status":"ShellExecute returned %d"
"launched_target":%d,"updated":%d,"relocated":%d,
Failed to create directory: %S
,"res":"%s"
"res":"ReportCAUSuccess"
"res":"%s"
%s, "action":"%s", "g_version":%d, "no_sau":%d
[OnSAUPingDone] Handle: 0x%x
[OnSAUPingDone] Error: %d -- %S
%s%s"action":"%s","nosau":%d,"dl":%Lu,"fv":%d,"ev":%d,"cau":%d
[SendSAUMetrics] %s: %s
[SendSAUMetrics] Handle: 0x%x
error:%d msg:%S
download.utorrent.com
download.bittorrent.com
nvappfilter.dll
nvlsp.dll
MxAVlsp.dll
ifw_xfilter.dll
Niphk.dll
SARAH.dll
imon.dll
MImp.dll
MIPro.dll
radhslib.dll
Naomi Web Filter
adguard.dll
HMIPCore.dll
dnsq.dll
jesterrun0.dll
protect.dll
laf1.dll
Win32/Hoax.Renos.NAV
laf2.dll
laf3.dll
laf4.dll
laf5.dll
t0.dll
Trojan-Downloader.Agent.Pto
t1.dll
ftp34.dll
'%s' (%s)
'%s' (%s) (known malware!)
virus.bd_state
wininet.dll
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
%d.%d
\DBGHELP.DLL
DBGHELP.DLL
\%d-%s.%.4x.dmp
%s/%s
bench.utorrent.com
{"h":"%s","cl":"%s","v":%d,"l":"%s","w":"%s","cts":%Ld,"tsi":%Ld,"eventName":"crash","action":"%s.%d.%d.d.%d.d","plus":%d,"bad_dlls":"%s"%s}
can't load wininet.dll
/crash.php?cl=%s&ver=%dU&h=%s&p=%dU&pr=%dU&s=%dU&svp=%d&ov=%d&plus=%d
&dl=%s
HttpOpenRequest failed
HttpSendRequest failed
HttpQueryInfo failed
Error %d :
ntdll.dll
hXXps://
OV_COL_SOURCE_URL
player.btinstall
bitdefender.btinstall
%s='//
%s="//
src=%chXXp://
LRecXUpgradeUrl
%s%cplus=%d&client=%s&x-source=%s
update_%s
%s?starttime=%Ld
%s&starttime=%Ld
%s&badge=%d
file=%s
badcert
plus=%d&cid=%s&code=%d
{\rtf1\ansi\ansicpg1252 \fs16 %S}
{\rtf1\ansi\ansicpg1252 \fs16 \b %S\b0 \line %S}
{\rtf1\ansi\ansicpg1252 \fs16 \b %S\b0 %S}
RSS_COL_SOURCE_URL
hXXp://VVV.utorrent.com/help/guides/rss
winmm.dll
hXXp://remote.utorrent.com/send?btih=
%s%H&dn=%U&message=%U&sid=%s&cid=%U
%s%H&dn=%U&message=%U
hXXp://tinyurl.com/api-create.php?url=%U
ndt.iupui.par01.measurement-lab.org
ndt.iupui.ath01.measurement-lab.org
ndt.iupui.ams01.measurement-lab.org
ndt.iupui.ams02.measurement-lab.org
ndt.iupui.lhr01.measurement-lab.org
ndt.iupui.lax01.measurement-lab.org
ndt.iupui.nuq01.measurement-lab.org
ndt.iupui.mia01.measurement-lab.org
ndt.iupui.atl01.measurement-lab.org
ndt.iupui.ord01.measurement-lab.org
ndt.iupui.lga01.measurement-lab.org
ndt.iupui.lga02.measurement-lab.org
ndt.iupui.dfw01.measurement-lab.org
ndt.iupui.sea01.measurement-lab.org
100kb.test
500kb.test
1mb.test
2mb.test
7mb.test
15mb.test
30mb.test
75mb.test
100mb.test
150mb.test
hXXp://ll.VVV.bittorrent.com/llspeedtest/
hXXp://update.utorrent.com/speedstats.php?result=
%s%d:%d:%d:%d:%s
hXXp://utorrent.com/testport?plain=1
&port=%d
hXXp://ll.VVV.bittorrent.com/llspeedtest/speedtestobjects.txt
hXXp://update.utorrent.com/speedserverlist.php
hXXp://VVV.utorrent.com/testport.php?port=%d
graph_import
tcp_upload_limit
tcp_download_limit
tcp_upload_rate
tcp_download_rate
drawimagefailure.%d
drawimagefailure.nonad
%s.%d
%s.%s
hXXps://VVV.facebook.com/connect/login_success.html
hXXp://VVV.facebook.com/connect/login_success.html
hXXps://VVV.facebook.com/login.php
hXXp://VVV.facebook.com/login.php
hXXps://VVV.facebook.com/connect/uiserver.php
hXXp://VVV.facebook.com/connect/uiserver.php
hXXps://VVV.facebook.com/dialog/permissions.request
hXXp://VVV.facebook.com/dialog/permissions.request
hXXps://VVV.facebook.com/checkpoint/
hXXp://VVV.facebook.com/checkpoint/
&scope=%S
client_id=%S&redirect_uri=%s&response_type=token&display=popup%s
hXXps://VVV.facebook.com/dialog/oauth
hXXp://VVV.facebook.com/dialog/oauth
&to=%S
app_id=%S&display=popup&message=%s&redirect_uri=%s%s
hXXps://VVV.facebook.com/dialog/apprequests
libvlc_video_set_key_input
libvlccore.dll
libvlc.dll
^  ;;;; \
000000000
;70>:3QLC@<52/*63.UPFVQG#!
)'".,'972
^553---021-5
-03@1@30-
,5$8<445,
version.dll
PE_COL_PORT
%s%S,
hXXp://bundles.bittorrent.com/bundle_tab
hXXp://beta.bundles.bittorrent.com/bundle_tab
%s?torrent_hash=%h
&ext=%s
"source":%d,"imageUrl":"%s","acceptUrl":"%s","offerTitle":"%s","response":%d
{\rtf1\ansi\ansicpg1252\deff0\deflang1033{\fonttbl{\f0\fnil\fcharset0 Arial;}}\viewkind4\uc1\pard\fs16 Sponsored torrents are \b free torrent downloads\b0 like games, music and software tools made by %s's \b trusted partners.\b0 \par \par \b %s values your privacy\b0 and will never store any personal information. \b Your consent is required\b0 for any new software installations.
.mpeg
.alac
.mp4v
.divx
.flac
.rmvb
.webm
.dvr-ms
ACould not invoke external browser. Click url empty
PPRIO_HTTP
registerPurchase_keyMissing
btresource://%S/index.html
%s(%s)
hXXp://VVV.apple.com/itunes
port
certifiedlabel
client.os.name:Windows
client.browser.name:%s
client.kernel.version:%s
client.version:3.3.13
client.utorrent.version:%d
read: got error: %d
Download Bytes: %lu, time: %f
Download: %s
Upload: got error: %d
Upload Bytes: %lu, time: %f
Upload: elasped time: %f
Upload: %s
123456 654321
hXXp://help.utorrent.com/customer/portal/articles/257678
10.0.0.0
192.168.0.0
169.254.0.0
172.16.0.0
127.0.0.0
%u.%u.%u.%u.in-addr.arpa
%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.ip6.arpa
255.255.255.255
advapi32.dll
dwmapi.dll
Failed to read from file: %s
"%s":[ %d ]
rpcrt4.dll
Can't create UUID - %d
Can't get computer name - %d %d
InternetOpenUrlA
%s(%d)/%s
Accept-Language: %s
DNS lookup can't resolve host '%s'
HTTP/1.1
hXXp://%s%s%s
%s(%d)
Host: %s%s
User-Agent: %s
Accept-Encoding:%s
Referer: %s
Authorization: Basic %s
If-Modified-Since: %s
If-None-Match: %s
X-Requested-With: XMLHttpRequest
%U=%U
Content-Length: %d
Content-Type: application/x-www-form-urlencoded
HTTP/1.
https:
max-age=%d
DownloadURL(%s) called.
image/vnd.microsoft.icon
%3s, d %3s M d:d:d GMT
Can't validate '%s' because no digits were encountered
Can't validate '%s' - error %d %s
NA-%d
%d.%d.%d.%d.%d.%s
d10:.fileguard40:%H
d10:.fileguard40:
]: %s: %d
%d/%d blocks. %d/%d bytes.
Can't decode encoded encryption key in magnet URL %s
magnet:?xt=urn:btih:%H&dn=%U
&key=%s
&tr=%U
&ws=%U
&as=%U
boss_key
boss_key_salt
use_boss_key_pw
boss_key_pw
rss.update_interval
rss.smart_repack_filter
rss.feed_as_default_label
bt.save_resume_rate
?bt.magnetlink_check_existing_files
gui.sg_mode
gui.delete_to_trash
gui.default_del_action
gui.speed_in_title
gui.limits_in_statusbar
gui.graphic_progress
streaming.safety_factor
gui.piecebar_progress
streaming.failover_rate_factor
gui.show_status_icon_in_dl_list
streaming.failover_set_percentage
gui.tall_category_list
gui.wide_toolbar
gui.show_gate_explaination
gui.show_gate_delete
gui.show_gate_notify
gui.find_pane
gui.toolbar_labels
gui.category_list_spaces
streaming.preview_player
streaming.peer_timeout
streaming.buffer_size
tray.show
btapps.auto_update_btapps
tray.single_click
btapps.auto_update_btinstalls
btapps.install_unsigned_apps
btapps.reveal_app
btapps.skin_url
bind_port
btapps.enable_activex
gui.show_devices
gui.show_plus_upsell
gui.show_plus_av_upsell
gui.show_plus_conv_upsell
gui.plus_upsell_foreground
gui.show_plus_upsell_nodes
stats.first_time_user
stats.installed_from_bundle
stats.video1.time_watched
stats.video2.time_watched
stats.video3.time_watched
stats.video1.finished
stats.video2.finished
stats.video3.finished
stats.welcome_page_useful
gui.report_problems
gui.persistent_labels
gui.enable_ratings
gui.compat_diropen
gui.enable_comments
gui.alternate_color
magnet.download_wait
gui.transparent_graph_legend
sys.prevent_standby
sys.enable_wine_hacks
gui.combine_listview_status_done
gui.update_rate
selfcert
plus.transcode_queue_parallel
plus.transcode_delete_transcripts
resume.enable_resume_dir
resume.dir_only
distributed_share.enable
distributed_share.tracker
udp://dishes-dev.trnt.us:8080
distributed_share.server_host
use_udp_trackers
dishes.utorrent.com
distributed_share.pinned
distributed_share.server_port
upnp.external_tcp_port
distributed_share.auth_key
upnp.external_udp_port
upnp.external_ip
distributed_share.skip_authentication
distributed_share.initial_update
distributed_share.churn_delay
distributed_share.churn_threshold
finish_cmd
silent_auto_update_exe
state_cmd
next_market_share_report
max_speed_down_tcp
max_speed_up_tcp
s_url
offers.content_offer_url
offers.content_offer_autoexec
asdlurl
rand_port_on_start
logger.log_upnp_to_file
net.bind_ip
net.outgoing_ip
net.outgoing_port
net.outgoing_max_port
net.low_cpu
net.calc_overhead
net.calc_rss_overhead
net.calc_tracker_overhead
net.max_halfopen
net.diffserv_codepoint
net.limit_excludeslocal
net.upnp_tcp_only
net.disable_incoming_ipv6
diskio.sparse_files
btapps.show_apps
net.ratelimit_utp
net.friendly_name
net.update_secure
isp.bep22
isp.primary_dns
isp.secondary_dns
isp.fqdn
isp.peer_policy_enable
isp.peer_policy_url
isp.peer_policy_date
isp.peer_policy_expy
isp.peer_policy_override
ipfilter.enable
dht.collect_feed
dht.rate
gui.log_date
webui.ssdp_uuid
campaigncode.txt
.fileguard
Validating value '%s' for setting %d type %d
Invalid Username/Password
Can't set SO_REUSEADDR option on socket %d - %d %s
Can't bind connecting socket %d to IP %A - %d %s
%s:%s
Proxy-Authorization: Basic %s
CONNECT %s:%d HTTP/1.0
CONNECT %A HTTP/1.0
WSAEnumNetworkEvents error (%d)
Bound listening socket %d to IP %A
Can't listen on socket %d IP %A
*** TCP, uTP buffer stats ***
Error code: HTTP %d
utp.log
looking up dishes: %s %i
[%s] %s
%d:%d
%s('invalid request')
Can't parse authorization header %s
Can't find device pairing for ID %S
HTTP/1.1 301 Moved Permanently
Location: %s
HTTP/1.1 u %s
WWW-Authenticate: Basic realm="%s"
HTTP/1.1 %d %s
Connection: %s
Content-Type: %s
%s%s%s%s%s%s%s%s%s%s%s%s
%sContent-Length: %u
%sConnection: close
Can't accept invalid address '%s'
Can't accept invalid dot notation mask '%s'
Can't accept IP '%s' with invalid mask '%s'
Iphlpapi.dll
GetExtendedTcpTable
4.2.2.1
.payload
.options
update_url
badging_url
file:///%S\apps\%S\index.html
PlusKeyInjected
{"event": "%s", "properties": {
"distinct_id":"%s",
"h":"%s",
"v":"%d",
"c":"%S",
"token":"%s",
"svp":"%d",
"view":"%s",
"cc":%d,
"bucket":"%S",
"%s":"%S"
hXXp://yogi.apps.bittorrent.com/track/?data=%s&ip=1
X-ClientID: %s
Sending autoupdate stats [%s]
ip=%s
dlurl=%U
POST /e?i=%d HTTP/1.1
"%s":"%s"
"%s":%u
"%s":%Lu
hXXp://bench.utorrent.com
[u:u][%s]
&license=%U
http%s://%U:%U@%s:%d/attach?name=%U&clientid=%U&version=%d&p=%d&ip=%I%s
proxy = hXXp://localhost:%d/proxy/0/; expires = %s GMT
hXXp://localhost
-%c%c%s-
127.0.0.1
0.0.0.0
"peer_id":"%s", "addr":"%A"
"markpt":"%s"
"trigger":%u
,"%u":%u
,"%s":%u
,"%s":%Lu
,"%u": [
Pairing request rejected - unsupported
%d.%d.%d
%s/%d%d%d(%d)
%d%d%d
%d%d%d%s
udp://
cmdline
%S: is 100%% completed
verified signature with embedded certificate for identity:%s
verified signature for trusted identity: %s
update-url
gate-info-url
certificate
url-list
Windows-
website
name.utf-8
path.utf-8
WARNING: avoiding connecting to web seed because it's blocked by policy '%s'
tracker: failure reason="%s"
for torrent file: %s
got tracker error response: %s
got HTTP tracker response for: %s
tracker response: %s
tracker warning: %s
got udp tracker error response: %s
got UDP tracker response for: %s
****** REQ(%s): for torrent file '%S' connecting to tracker: %S
tracker not tracking: %s
&ip=%U
%S%cinfo_hash=%.20U&peer_id=%.20U&port=%d&uploaded=%Ld&downloaded=%Ld&left=%Ld&corrupt=%Ld&key=%.8X%s&numwant=%d&compact=1&no_peer_id=1%s
tracker request: %s
for tracker %s
tracker: failure reason="%S"
valid scrape from %S
%.*S/scrape%S%cinfo_hash=%.20U
Initiating UDP scrape for torrent file: %s
Tracker URL: %s
Initiating TCP scrape for torrent file: %s
gate_url
%s?h=%s
%s?info_hash=%h&h=%s&gate_type=%s
****** update url: %s
****** gate url: %s
Could not download metadata for torrent %H (%S): %S
http:
%S: is %.2f%% completed
Adding '%S' as storage path for '%S'
** Saving '%S' as root folder for '%S'
app_url
feed_url
web_seeding_enabled
gate_info_url
autoexecute
hideautoexecuteui
tfurl
webseeds
KCan't accept '%s' as argument
router.utorrent.com
router.bittorrent.com
hr.hdtv
hr.pdtv
webrip
ac3.5.1
dd.dd.dd
dddd.dd.dd
Initiating RSS download of url %s
POST /e?i=%s HTTP/1.0
{"eventName":"ut_prof_ip","b":%Ld,"r":%d,"sequenceID":%d,"clientID":"%s","uniqueID":"%s","st":[
hXXp://bench.utorrent.com/e?i=%s
proxy.proxy
proxy.type
proxy.port
proxy.auth
proxy.resolve
proxy.username
proxy.password
%s Remote disconnected: reset by proxy
http_pending_limit
min_http_connections
%H:%Lx:%x
HTTP/1.1 200 OK
Last-Modified: %s
Content-Disposition: attachment; filename="%s"
Content-Disposition: %s
HTTP/1.1 %s
%s%s%s%sServer: BitTorrentProxy/1.0
%s([""
%s; filename="%s"
_prio_window is %d
%S:%s
Server: %s
Content-Disposition: attachment; filename="%s"; size=%Lu
Date: %s
ETag: "%s"
%s%s%s%s%s%sConnection: close
%s%s%s
HTTP/1.1 %d Error
Certification Services Division1!0
premium-server@thawte.com0
*.utorrent.com0
/hXXp://crl.thawte.com/ThawteServerPremiumCA.crl0
hXXp://ocsp.thawte.com0
.RH(Y
)hXXp://svr-ov-crl.thawte.com/ThawteOV.crl0
Certification Services Division1806
GoDaddy.com, Inc.1301
*hXXp://certificates.godaddy.com/repository100.
'Go Daddy Secure Certification Authority1
079692870
*.bittorrent.com1!0
*.bittorrent.com0
"hXXp://crl.godaddy.com/gds1-14.crl0S
 hXXp://certificates.godaddy.com/repository/0
hXXp://ocsp.godaddy.com/0J
>hXXp://certificates.godaddy.com/repository/gd_intermediate.crt0
*.bittorrent.com
bittorrent.com0
*.utorrent.li1!0
*.utorrent.li0
"hXXp://crl.godaddy.com/gds1-82.crl0S
*.utorrent.li
utorrent.li0
Security.dll
Secur32.dll
1.2.840.113549.1.1.5
1.3.6.1.5.5.7.3.1
1.3.6.1.4.1.311.10.3.3
2.16.840.1.113730.4.1
1.3.6.1.5.5.7.3.2
\u00x
"name": "%s"%c %s%c %s
%s %dx%d
"video_codec": "%s", "video_bitrate": %d, "fps": %d, "video_x": %d, "video_y": %d
%s %dkbps
"audio_codec": "%s", "bitrate": %d, "sample_rate": %d
DEBUG: Marking %a as %s
DEBUG: IP %a is already cached. Returning %s
DEBUG: Initiating tracker prefs resolve %s
DEBUG: Hostname %s is already cached. Returning %a
DEBUG: Hostname %s cache error %d
DEBUG: Initiating resolve %s
DEBUG: Reverse %s lookup %a (FQDN: %d)
DEBUG: Reverse lookup done: %s
_bittorrent-tracker._tcp.%s
DEBUG: Processing TXT: %s
DEBUG: Resolving %s service %u
DnsApi.dll
keyhash
Saving serialized device pairing set with %lu pairings at %S
Can't create pairing from hierarchy at %u from %S
Can't load non-dictionary hierarchy at %u into pairing set from %S
Can't load non-list hierarchy into pairing set from %S
%s serialized device pairing set (%lu devices) from %S
diskio.no_zero
diskio.use_partfile
diskio.smart_hash
diskio.smart_sparse_hash
diskio.coalesce_writes
diskio.coalesce_write_size
diskio.rsize_factor
diskio.max_write_queue
diskio.cache_reduce_minutes
diskio.cache_stripe
diskio.quick_hash
diskio.mark_of_the_web
diskio.minimize_kernel_caching
diskio.all_writes_sync
cache.override
cache.override_size
cache.reduce
cache.write
cache.writeout
cache.writeimm
cache.read
cache.read_turnoff
cache.read_prune
cache.read_thrash
JT_IMPORT
Error: COMPACT_NOT_FOUND. P=%d,T=%d
** FileStorage::SetFolderRoot(%S) failed with _folder '%S'
** FileStorage::SetFolderRoot(%S) failed: _folder is NULL or empty.
** FileStorage::SetFolderRoot(%S): setting for folder '%S'
Warning: Delete to trash failed for %S. Error: %d. Deleting permanently.
"to_trash":%d, "error_code":%d
%s:%H:%d:%s
queue.dont_count_slow_dl
queue.dont_count_slow_ul
queue.slow_dl_threshold
queue.slow_ul_threshold
queue.use_seed_peer_ratio
queue.prio_no_seeds
queue.switchtime
queue.switchtime_prio
?queue.started_bonus
bt.tcp_rate_control
gui.graph_tcp_rate_control
gui.graph_overhead
gui.graph_legend
bt.ratelimit_tcp_only
bt.prioritize_partial_pieces
bt.transp_disposition
net.utp_target_delay
net.utp_packet_size_interval
net.utp_receive_target_delay
net.utp_initial_packet_size
net.utp_dynamic_packet_size
net.discoverable
bt.enable_pulse
bt.pulse_weight
bt.extra_ul_rand
bt.extra_ul_max
bt.prio_piece_thres
bt.few_pieces_thres
bt.http_pending_limit
bt.dl_queue_factor
bt.ul_queue_factor
bt.scrape_stopped
bt.compact_allocation
bt.progressive_piece_picker
bt.progressive_piece_span_mb
bt.enable_tracker
bt.use_dns_tracker_prefs
bt.read_only_on_complete
bt.multiscrape
bt.send_have_to_seed
bt.set_sockbuf
bt.rcv_max_sockbuf
bt.snd_max_sockbuf
bt.connect_speed
bt.prio_first_last_piece
bt.randomize_peer_id
bt.sequential_download
bt.sequential_files
bt.allow_same_ip
bt.use_similar_torrent_data
bt.no_connect_to_services
bt.no_connect_to_services_list
bt.ban_threshold
bt.use_ban_ratio
bt.ban_ratio
bt.use_rangeblock
bt.graceful_shutdown
bt.shutdown_tracker_timeout
bt.shutdown_upnp_timeout
peer.lazy_bitfield
peer.lazy_bitfield_mode
peer.lazy_bitfield_factor
peer.lazy_bitfield_nohave
peer.resolve_country
peer.disconnect_inactive
peer.disconnect_inactive_interval
choker.interval_auto
choker.interval
choker.interval_optim
choker.slots_auto
diskio.flush_files
zz.countries.nerd.dk
%I.%s
DEBUG: Skipping torrent peer resolve: %t 0xX %d
"url"
<html><head><title>µTorrent Search</title></head><frameset rows="90px,*"><frame src="hXXp://search.utorrent.com/bntop.html" frameborder="0" marginheight="0" marginwidth="0" scrolling="no" noresize="noresize" /><frame src="hXXp://search.conduit.com/Results.aspx?ctid=CT3083945&searchsource=45&&%s" frameborder="0" /></frameset></html>
js%d();
HTTP/1.0 200 OK
features/device_pairing/supported_types
Can't install web UI archive version (%d)
Can't install default UI version (%d)
version.txt
{ "name": "%s", "version": %s }
GET /favicon.ico
Can't accept non-IPv4 address as IP match for %s
Can't match using invalid subnet mask %s
Found valid subnet mask %s %x
Ignoring filter IP containing invalid CIDR notation %s
IP matches IPv4 restriction %s%s%s
Can't match using IPv4 filter %s%s%s mip %x mask %x
Can't accept non-IPv6 restriction address %s
IP matches IPv6 restriction %s%s
Can't match using IPv6 filter %s%s
Can't support device pairing request lacking a PIN
Can't support invalid PIN '%s'
Can't support invalid PIN value %Ld
Can't support device pairing type '%s'
hXXp://apps.bittorrent.com/torque/pairing/style.%s%scss
<html><head><link rel="stylesheet" type="text/css" href="%s"></head><body><script>var key = "%s";var source = "%s";</script><h3>%s wants access to %s</h3><p>If you click yes, this site will have access to your data</p><input type="button" value="Allow" onclick="window.parent.postMessage(key,'*')" /><input type="button" value="Deny" onclick="window.parent.postMessage('denied','*')" /></body></html>
HTTP: IP %a: GET %.200s
HTTP: IP %a: Blocked: GET %.100s
"headers": { "Content-Type": %s
, "Set-Cookie": %s
"html":%s
"error": %s
,[%S,%J,%J,%I,%I,%I,%B,%I,%I,%I,%I,%J
,[%s,%s,%s,%I,%I,%S,%S,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I]
autoexec_hide_ui
Can't accept value '%s' for torrent property '%s'
Can't accept overflow value '%s' for torrent property '%s'
Can't accept negative value '%s' for torrent property '%s'
Can't accept value '%s' for unknown torrent property '%s'
{"hash": %s
,"trackers": %S
,"autoexec": %I
,"autoexec_hide_ui": %I
password
,"code": %I, "message": %s
Can't recognize torrent hash '%s'
Can't accept file number '%s'
Can't use file number '%s' - invalid for selected torrent
{"name":%S, "hash":%H, "sid":%s, "complete":%B, "completed_on":%J, "primary_label":%S, "files": [
{"name":%S, "fileno":%J, "length":%J, "complete":%B, "type":%s, "fullpath":%S,
{"name":%S, "fileno":%J, "length":%J, "complete":%B, "type":%s,
"codecs": [%s,%s]
{"name":%S, "fileno":%J, "media":%s, "length":%J, "complete":%B, "type":%s,
,"error": %S
add-url
get-url
add-unknown-url
Ignoring setting %d name %s value %s
{ "name": %s
app_update_url
,[%s,%I,%S,{"access":%s}]
, {"path": %s, "available": "%J"}
webui
, %s : [
, "name" : %s, "version" :
,{"guid":%s, "created":%J, "updated":%J, "peer_ip":%a, "sock_ip":%a, "reported_ip":%s, "user_agent":%s, "persistent":true, "custom":%s }
,{"guid":%s, "created":%J, "updated":%J, "peer_ip":%a, "sock_ip":%a, "reported_ip":%s, "user_agent":%s, "persistent":%B, "custom":%s }
Can't log out session - invalid GUID %s specified
Can't log out requester's session %s
%s out current session %s
[%S,%s,%s]
,"token": %s
Can't accept configuration change from other than administrative login
webui.uconnect_question_opted_out
webui.uconnect_username
webui.uconnect_password
webui.uconnect_enable
, "movetorrent":{"target":%S, "status":%d}
[%H,%I,%S,%J,%I,%J,%J,%I,%I,%I,%I,%S,%I,%I,%I,%I,%I,%I,%J,%s,%s,%S,%s,%J,%J,%s,%S,%I,%s]
[%S, %I]
[%I,%B,%B,%B,%B,%I,%S,%I,[
[%S,%S,%s,%I,%I,%J,%I,%I,%I,%I,%B,%B]
[%I,%I,%S,%S,%S,%S,%I,%I,%S,%I,%I,%I,%I,%S,%B,%B]
getmsg
%s({"encbody":"
,"GUID":"%s"
,"x-bt-seq":"%s"
<script src="/static/js/bt.js"></script>
.html
token.html
HTTP/1.1 304 Not Modified
<meta http-equiv="refresh" content="1" />Please wait while the µTorrent WebUI is installed... You will be automatically redirected.
index.html
The µTorrent WebUI does not seem to be installed. Click <a href="download_webui">here</a> to try to install it, or see the <a href="hXXp://utorrent.com/webui-guide.php">guide</a> for more details.
index.html?error=1
<b>There was a problem installing µTorrent WebUI, please see the µTorrent log for more details.</b></br></br>
download_webui
HTTP/1.1 404 Not Found
%s({response:%s, guid:"%s"})
%s({ "sessionid": "%s", "message": "%s", "code": %d })
%s({ "message": "%s", "code": %d })
Can't create session for device ID %s
Can't accept remote pairing key
Can't accept device pairing key '%s'
Can't process pair connection authentication request without pairing key
/gui/guest.html
Unable to listen for HTTP traffic on port %d
Unable to listen for HTTP traffic on v6 port %d
%s({ "pairing_key": "%s", "pairing_type": %d, "code": %d })
psapi.dll
BaseCreateTorr::OnDoneBitrate: error(%s): %u
BaseCreateTorr::OnDoneBitrate: parse error(%s): %u
BaseCreateTorr::OnDoneBitrate: success(%S) rate=%u, duration=%u, width=%u, height=%u
hXXp://%s/talon/seed/%S/content/%x
[%u] log closed
streaming_url
rss_feed_url
Failed btapp function %S, reason '%s'
JS> %S
webui.restrict
Setting value of setting %s key %d to %s
UDP setsockopt(SO_RCVBUF, %d) failed: %d
UDP setsockopt(SO_SNDBUF, %d) failed: %d
DEBUG: ICMP%s is not available on this platform
webui.guest
webui.port
webui.cookie
webui.pair_hashes
webui.download_folders
webui.raptor_host
raptor.utorrent.com
webui.raptor_port
webui.raptor_secure
webui.talon_host
remote.utorrent.com
webui.talon_port
webui.talon_secure
webui.uconnect_toolbar_ever
webui.uconnect_enable_ever
webui.uconnect_connected_ever
webui.uconnect_actions_count
webui.uconnect_actions_list_count
webui.uconnect_cred_status
webui.update_message
webui.proxy_auth
webui.update_url
hXXp://pr.apps.bittorrent.com/client-webui/3.4/client-webui.json
webui.enable
webui.enable_guest
webui.enable_listen
webui.token_auth
webui.token_auth_filter
webui.username
webui.password
webui.hashword
webui.uconnect_hashword
webui.uconnect_username_anonymous
webui.uconnect_hashword_anonymous
webui.uconnect_computername
webui.allow_pairing
webui.salt
239.255.255.250
Created SSDP UUID %s
The external port cannot be wild-carded
The port mapping entry specified conflicts with a mapping assigned previously to another client
Internal and External port values must be the same
The NAT implementation only supports permanent lease times on port mappings
ExternalPort must be a wildcard and cannot be a specific port
UPnP: Discovered host: %s
UPnP: Checking cached host %s
UPnP: Cached host %s (%I) is not part of our subnet %I/%I.
UPnP: Queueing cached host %s
UPnP: Unable to bind to UPnP port: %d
UPnP: Joined multicast group
M-SEARCH * HTTP/1.1
HOST: 239.255.255.250:1900
NOTIFY * HTTP/1.1
LOCATION: hXXp://%A
SERVER: %s/%s UPnP/1.1 %s/%s
NTS: %s
USN: uuid:%s
FRIENDLYNAME:%S
HH:%s
%s(%s)(%s)
CACHE-CONTROL: max-age = %d
LOCATION:hXXp://%A
USN:uuid:%s
recvfrom ERROR: %d
UPnP: Found location from upnp notify: %s
urlbase
controlurl
eventsuburl
scpdurl
NewExternalPort
NewInternalPort
hXXp://%s:%d/%s
UPnP: The device "%s" is not a UPnP router (%s)
AddPortMapping
DeletePortMapping
GetGenericPortMappingEntry
<s:Envelope xmlns:s="hXXp://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="hXXp://schemas.xmlsoap.org/soap/encoding/">
<u:%s xmlns:u="%s">
<NewRemoteHost></NewRemoteHost><NewExternalPort>%d</NewExternalPort><NewProtocol>%s</NewProtocol><NewInternalPort>%d</NewInternalPort><NewInternalClient>%I</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>%s (%s)</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration>
<NewRemoteHost></NewRemoteHost><NewExternalPort>%d</NewExternalPort><NewProtocol>%s</NewProtocol>
<NewPortMappingIndex>%d</NewPortMappingIndex>
</u:%s>
GET %s HTTP/1.1
Host: %s:%d
HOST: %s:%d
CONTENT-LENGTH: %d
SOAPACTION: "%s#%s"
%s port %d -> %I:%d
%s port %d
UPnP: %s is already mapped. Not re-mapping.
UPnP: Removed %s
UPnP: ERROR removing %s: (%d) %s
UPnP: Mapped %s
UPnP: %s mapped successfully.
UPnP: Host '%s' added to cache.
UPnP: ERROR mapping %s. Deleting mapping and trying again: (%d) %s
UPnP: ERROR mapping %s: (%d) %s
UPnP: Device error "%s": (%d) %S
UPnP: Could not map UPnP Port on this pass, retrying.
UPnP: Could not detect external IP on this pass, retrying.
UPnP: Unable to map port %I:%d with UPnP.
Unsupported Version
Not Authorized/Refused (e.g. box supports mapping, but user has turned feature off)
Unsupported opcode
NAT-PMP: error: %s
NAT-PMP: %s %s port %d -> %I:%d
NAT-PMP: Unable to map port with NAT-PMP.
,"os":"%d.%d.%d.%d.%d.%s"
keys
msg_type
8:msg_typeiÞ
3:numiÞ
6:filter%d:
%A: [%s (%:.1d)] picked no blocks
%A: [%s (%:.1d)] picked %u blocks, first: %u
8:msg_typei%ue
5:piecei%ue
5:added%d:
7:added.f%d:
6:added6%d:
8:added6.f%d:
7:dropped%d:
8:dropped6%d:
d1:eiÞ
12:complete_agoiÞ
11:upload_onlyiÞ
11:lt_donthaveiÞ
12:ut_holepunchiÞ
11:ut_metadataiÞ
6:ut_pexiÞ
10:ut_commentiÞ
13:metadata_sizeiÞ
1:piÞ4:reqqiÞ%s1:v%d:%s2:ypiÞ
Windows
OS info: name %s release %s version %s machine %s
UTP_GET_UDP_MTU
UTP_GET_UDP_OVERHEAD
%sversion-%s
hXXp://utorrent.com/webui/webui-%s-%s.zip
Web UI archive entity tag '%s'
Could not match any version from json %s
Attempting to download file %s to %S
Attempting to download web UI archive from %s to %S
Moving %S to %S
Moving %S back to %S
Attempting to read archived file %s
%p %s d %s
MTU [PROBE] floor:%d ceiling:%d current:%d
MTU [PROBE-TIMEOUT] floor:%d ceiling:%d current:%d
Packet timeout. Resend. seq_nr:%u. timeout:%u max_window:%u cur_window_packets:%d
MTU [DONE] floor:%d ceiling:%d current:%d
MTU [RESET] floor:%d ceiling:%d current:%d
Packet %u lost. Resending
actual_delay:%u our_delay:%d their_delay:%u off_target:%d max_window:%u delay_base:%u delay_sum:%d target_delay:%d acked_bytes:%u cur_window:%u scaled_gain:%f rtt:%u rate:%u wnduser:%u rto:%u timeout:%d get_microseconds:%I64u cur_window_packets:%u packet_size:%u their_delay_base:%u their_actual_delay:%u average_delay:%d clock_drift:%d clock_drift_raw:%d delay_penalty:%d current_delay_sum:%I64ucurrent_delay_samples:%d average_delay_base:%d last_maxed_out_window:%I64u opt_sndbuf:%d current_ms:%I64u
MTU [DUPACK] floor:%d ceiling:%d current:%d
MTU [ACK] floor:%d ceiling:%d current:%d
UTP_Connect conn_seed:%u packet_size:%u (B) target_delay:%u (ms) delay_history:%u delay_base_history:%u (minutes)
MTU [ICMP] floor:%d ceiling:%d current:%d
%s: scrape response had %d torrents, request had %d
unsupported action
UDP Tracker disabled
UTrackAnnounce(%s) called.
UTrackScrape(%s) called.
UDP Trackers disabled.
Invalid tracker URL.
** Generated %d character session cookie: GUID=%s
reported_ip
global_key
Searching for device pair session with id %s
Can't accept id %s as a GUID
"period":%d,
"n_samples":%d
,"active_seeds":"%s"
,"active_downloads":"%s"
,"up_tcp":"%s"
,"down_tcp":"%s"
,"up_utp":"%s"
,"down_utp":"%s"
,"up_tcp_max":%u
,"up_utp_max":%u
,"down_tcp_max":%u
,"down_utp_max":%u
UPnP(XP): Removed TCP port %d
UPnP(XP): Removed UDP port %d
UPnP(XP): %s port %d -> %I:%d is already mapped. Not re-mapping.
UPnP(XP): %s port %d -> %I:%d mapped successfully.
-----BEGIN CERTIFICATE-----
com.bittorrent
%s trusted
5:owner%d:%s4:text%d:%s9:timestampi%Lde4:likeiÞ
239.192.152.143
BT-SEARCH * HTTP/1.1
Host: 239.192.152.143:6771
Port: %u
Infohash: %s
port:
CbDP.jR6YD6wAj2ByQWxQxQZ7.9J9xkn2.Uqb3zVm16vQyizprhBw9hi80psatZ8k54vwZfiIeEHZVsDnyqeWSSIpWso.wh5GD4OFgdhVI3
iqJ7nFZ4bGCRjE1F.FXEwL085Zb0kLM2TdHDaVVCdq0cKxvnH/0FLskJTKlDtt6sDl89dc//aEULTVFGtcbA/tDzc.bnFE.DWthQOu2n2JwKjgKfgCR2lZFWXdnWmoOh
Ewl2hcjiutMd3Fu2lgFnUXWSc67TVyy2vwYCKoS9MLsrdJVT9RgWTCuEqWJrfB6uE3LsE9GkOlaZabS7M29sj5TnzUqOLJMjiwEzArfiLr9WbMRANlF68N5AVLcPWvNx6Zjl3m5Scp0BzJBz9TkgfhzKJZ.WtP3Mv/67I/0wmRZ
F//////////oG/QeY5emZJ4ncABWDmSqIa2JWYAPynq0Wk.fZiJco9HIWXvZZG4tU.L6RFDEaCRC2iARV9V53TFuJLjRL72HUI5jNPYNdx6z4n2wQOtxMiB/rosz0QtxUuuQ/jQYP.bhfya4NnB7.P9A6PHxEPJWV//////////
3NUKQ2Re4P5BEK0TLg2dX3gETNNNECPoe92h4OVMaDn3Xo/0QdjgG/EvM.hiVV1BdIGklSI14HA38Mpe5k04juR5/EXMU0r1WtsLhNXwKBlf2zEfoOh0zVmDvqInpU695f29Iy7sNW3U5RIogcs740oUp2Kdv5wuITwnIx84cnO.e467/IV1lPnvMCr0pd1dgS0a.RV5eBJr03Q65Xy61R
dUyyhxav9tgnyIg65wHxkzkb7VIPh4o0lkwfOKiPp4rVJrzLRYVBtb76gKlaO7ef5LYGEw3G.4E0jbMxcYBetDy2YdpiP/3GWJInoBbvYHIRO9uBuxgsFKTKWu7RnR7yTau/IrFTdQ4LY/q.AvoCzMxV0PKvD9Odso/LFIItn8PbTov3VMn/ZEH2SqhtpBUkWtmcIkEflhX/YY/fkBKfBbe27/zUaKUUZEUYZ2H2nlCL60.JIPeZJSzsu/xHDVcx
2iQzj1CagQc/5ctbuJYLWlhtAsPHc7xWVyCPAKFRLWKADpASkqe9djWPFWTNTdeJtL8nAhImCn3Sr/IAdQ1FrGw0WvQUstPx3FO9KNcXOwisOQ1VlL.gheAHYfbYyBaxXL.NcJx9TUwgWDT0hRzFzqSrdGGTN3FgSTA1v4QnHtEygNj3eZ.u0MThqWUaDiP87nqha7XnT66bkTCkQ8.7T8L4KZjIImrNrUftedTTBi.WCi.zlrBxDuOM0da0JbUkQlXqvp0yvJAPpC11nxmmZOAbQOywZGmu9nhZNuwTlxjfIro0FOdthaDTuZRL9VL7MRPUDo/DQEyW.d4H.UIlzp
///////////93zgY8MZ2DCJ6Oek0t1pHAG9E28fdp7G22xwcEnER8b5A27cED0JTxvKPiyqwGnimAmfjybyKDq/XDMrjKS95v8MrTc9UViRqJ4BffZVjQml/NBRq1hVjxZXh.rg9dwMkdoGHV4iVvaaePb7iv5izmW1ykA5ZlmMOsaWs75NJccaMFwZz9CzVWsLT8zoZhPOSOlDM88LIkvxLAGTmbfPjPmmrJagyc0JnT6m8oXWXV3AGNaOkDiuxuvvtB1WEXWER9uEYx0UYZxN5NV1lJ5B9tYlBzfLO5nWvbKbywfLgvHNI9XYO.WKG5NAEMeggn2sjCnSD151wCwXL8QlV7BfaxFk515ZRxmgAwd5NNGOCVREN3uMcuUJ7g/MkZDi9CzSUZ9JWIYLXdSxZqYOQqkvhyI/w1jcA26JOTW9pFiXgP58VAnWNUo0Ck.4NLtfXNMnt2OZ0kjb6uWZYJw1qvQinGzjR/E3z48vBWj4WgJhIol//////////
F//////////oG/QeY5emZJ4ncABWDmSqIa2JWYAPynq0Wk.fZiJco9HIWXvZZG4tU.L6RFDEaCRC2iARV9V53TFuJLjRL72HUI5jNPYNdx6z4n2wQOtxMiB/rosz0QtxUuuQ/jQYP.bhfya4NnB7.P9A6PHxEHRFS80VBYXOxy5cDf8DXnLqvff5Z.e/IJFNuDbNIFSewsM76BpLY25KhkUrIa7S9QMRMSCDKvAl9W4yNHi2CeO8Nmoa5v6BZREE.EUTomO3eO3coU3ekm7ee.rnLtmRqnIoTuho/QLM1SOEPL9VEgLQkKLqYOOcFe541LoZbgAgiGjhJCN3GHGUZEeLI6htnowPEpxXGHOs.yAYkfnLrq637spbm.5fk7anwlrhepR2JFN7eoKu4ebOPtEuz8c6jBkQ/4l.WRPYWXas7O2Spx8QcHI7oiO5tiW3BlX5rTwOLriTmc8mBhPHk88ua.WTEMhCKFRM/pW/H2EIuBH8AaX204QSZmIfuVcruXncX2zkbiccSCd66hquZmQb6WqjXKBsYM3wSegr4pesxl2smJUZlakZlmK7xxAfYXyMKTEQy1TcRAMJw2Gmw8ZEw66KLldxHzXAN3EujUlk1lTTY5mI1pG1f4drR1QgPEqwfYDZzt1Xl.tt92cm8zDz3N9D0OncV//////////
///////////93zgY8MZ2DCJ6Oek0t1pHAG9E28fdp7G22xwcEnER8b5A27cED0JTxvKPiyqwGnimAmfjybyKDq/XDMrjKS95v8MrTc9UViRqJ4BffZVjQml/NBRq1hVjxZXh.rg9dwMkdoGHV4iVvaaePb7iv5izmW1ykA5ZlmMOsaWs75NJccaMFwZz9CzVWsLT8zoZhPOSOlDM88LIkvxLAGTmbfPjPmmrJagyc0JnT6m8oXWXV3AGNaOkDiuxuvvtB1WEXWER9uEYx0UYZxN5NV1lJ5B9tYlBzfLO5nWvbKbywfLgvHNI9XYO.WKG5NAEMeggn2sjCnSD151wCwXL8QlV7BfaxFk515ZRxmgAwd5NNGOCVREN3uMcuUJ7g/MkZDi9CzSUZ9JWIYLXdSxZqYOQqkvhyI/w1jcA26JOTW9pFiXgP58VAnWNUo0Ck.4NLtfXNMnt2OZ0kjb6uWZYJw1qvQinGzjR/E3z48vBWj4WgI480HfoF1AdX.RNY76Q4BswMoQPmoSOQlJYF1gKQ3Is5GlQ9OFfoYhKJEZRkyBR1DwE.IwE/1GVligcA7nPHqvhm5sPifPFe933eYCxeOPHM.Vj7s4fSCxYrw.u6zrs8N187D06aIVLi5gfaxJgc8sFtS66/xVSaAR0ZqtqDSaq0eIIDiFwjD9yS2R1rDooO2P6tibr7dOzkZUz.F.K1gsUKmxbspWlGJ01hh1gK.sG9zWn5vSdi8PQYHZQFjlhpviKxKJERBhErBiRstyKH.RC9Kip855HAzUlGc.uz04tZDA/MOFA0SPBakpmCkeLqN8T0/I2ryvkTFxsrLvmBqQO38Arg40na0iSdbddoN..n.Zp8wbwVZRCYBuF7KMt/rXQnKlK1x8hGLIgp8zjVhz8uTWKp5xI3u0tuAUN5Uxoc.Ce1g7LYxV5sdRrKAezYX./yEiPpB6Z4zLSsbR9x2xobZ8uV.ZNRZm4Q0G.ZsO/I63k4hyjMmjqTDRcbFaURSn09F//////////
3//////////yaFsg8XQC8qnCPYYu3S7D4f0au8YcVCT08BlgOx4viYKKe8UOuq1DtlbHcppJf36p0h2ctoNnGtJ.4rRMrHmaNaXRLsObv.nlHCGkccD.rh2/zSjlG6j.tkE6lxMecVfQwV915yIn/cIIXcKUpaMpt207oueME/1PZQI3OSLTEQQHO/gFqapr.3PLqZtAEjbXnYyrOWXLAxdjKf1t2Mbcrd33LEIhoO1F5qR0ZA625yCf1UHYuspZlZddSi60w60vidWwBi1wAFjSLTy6zCKidUAylsbLWN63cLINpgbMhb5T8c69Zw1H0LSevQYgh4BQqp5mq4K7epg5KXgzySkcJi.uK4MDll2ehgSLTT1WnzivSFXQRXvCUhzQwCsmaprnwCbE1A9M6TpkFI9XhIxclnB/e6sOe8PDXs0dC.o6faKXyh61Tx80oxuHTNUc5TR7S9YC2wsKRY2E9Fe7Jbgp53srlyuFqGZak2qI2f8GW16d8y4gU7vjU8SPeGlRfR9fd39nXgzE8y6fHeDBOL2zebW.dAAjHCwDkxmji4texvBexy51..ogOeV5b7Jcl0NPcoba.WaCEY8pkXXb5Rv.qVOIbmpkBNhxWRtNOXS4WSq0QH9zMmMgcJjEgOZO/TmOR/jzoGfi2FJVGroJG2X98sm/gqqdnm9i7KtB9W9aRUoNKUTZswDxtu/vG6hPvJ3kNRE2z1C06ki6fJxP0ds34NboUmXbg96De.s.lFcnJjHCvikixKknlRVnH7vimbIpCWKL4hrwz2RxZq0JUCqhzPWye1nakIxF0owXNHSXq3z8BNpcvq/lRLNd0lHfWCWhMeG36G2noUMUV9Vxx7wFCZgNf.Dio8lWyTHRV/M5h5IzG7iYj1LAhCZsr.lqZXs1JCNj8FW3VWfvSLxlARuoW6eTMBjyNQTlLGgZsA7x/mwndCiQCJrLpQLidiBlAMCZX/wDTkF0He13wFPZz8OEuIlorR2tHqrkQK.HvjlX5PTAEIRnB.vUGuTtosgJBVZDY.nD1pkJ6wEyWojesTqm1q7wU/Yln7xILszfDhf2HcEgjZd5hazMWq8xHqA/79U2EF5ilZdMKju/sullo4YjaY8Yu4f0Dy1nFhLwWQ8/37D7FyP6pgC6jBoyY6BuE5tVgTIt.Ym8VeUMWp0.rRtJe6Appriw9ufcqg4/W/HFWjtp4Eu7IhQZP5b.YPe2LTmMJp7CK8HeKT.Qj86LtjVg6nrH2zVkTDS/hpQyCUpw9eDP16zEk7dv902KEBI1niruYQ02xLxZWhoHaDflm2RaULMEH7LdVfgfumKE9sLfJVo1zMw82vRd5WoO3TcEtJt///////////
TEMP_PASSWD.conf
TEMP_PASSWD
.btskin
AVI header too large in %S
Can't find AVI header chunk in %S
Cookie: %s
%s/%s/%s
%s%s/%s
4:port
12:implied_porti1e
DHT: %s
Num buckets: %d. My DHT ID: %s
Bucket %d: %.8X%.8X%.8X%.8X%.8X (nodes: %d replacement-nodes: %d, span: %d)
%dm %ds
Total peers: %d (in replacement cache %d)
Outstanding add nodes: %d
%d: %s/%s: %d peers
Total peers: %d
Total torrents: %d
5:nodes%d:
1:vliÞiÞiÞiÞiÞe
1:t%d:
1:v4:%c%c%c%c
1:n%d:%.*s
d1:eli%ue%u:%se
1:k%d:
3:sig%d:
%d:%s
5:token%d:
4:voteiÞ
implied_port
invalid object key (must be a string)
object key and value must be separated by a colon (':')
after key and value, inside map, I expect ',' or '}'
function not supported
operation canceled
address_family_not_supported
operation_in_progress
operation_not_supported
protocol_not_supported
operation_would_block
address family not supported
broken pipe
inappropriate io control operation
not supported
operation in progress
operation not permitted
operation not supported
operation would block
protocol not supported
%b %d %H : %M : %S %Y
%m / %d / %y
%I : %M : %S %p
%d / %m / %y
0123456789-
cmd.exe
Visual C   CRT: Not enough memory to complete call to strerror.
Operation not permitted
Inappropriate I/O control operation
Broken pipe
GetProcessWindowStation
operator
missing Key
Unrecognized key format
Invalid key JSON
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789 /orders.bittorrent.com
User-Agent: orderLib HttpRequest
hXXp://%s
hXXp://VVV.mybrowserbar.com/images/pixel.gif?tb=1&cnid=%d
hXXp://download.mybrowserbar.com/kits/sds/SearchProtectionSetup.exe
.bittorrent.com
.utorrent.com
cleverbridge.com
.cleverbridge.com
&&&&6666????
""""****
2222::::
$$$$\\\\
00006666
####====
0123456789
01234567
NullRNG: NullRNG should only be passed to functions that don't need to generate random bytes
: this object doesn't support multiple channels
PK_Signer: key too short for this signature scheme
PK_MessageEncodingMethod: this signature scheme does not support message recovery
CryptoMaterial: this object does not support precomputation
?#%X.y
Y:\jenkins-workspace\workspace\ut-build-slave-master\ut_win\Build\Win32\Release\utorrent.pdb
About %s
Publisher: %S
Release Date: %S
Version: %S
Description: %S
Update URL: %S
A single purchased copy of %s Plus can only be installed on a set number of computers. This copy has been installed on too many different computers.
Please either purchase a new copy for this computer, or contact us at hXXp://help.bittorrent.com if you think you're getting this message in error.
The directory you chose is not on the same drive as the %s client. It will not come along when you move the USB drive. Are you sure you want to continue?
Would you like to add "%s" to your search list?
%s application %s failed to copy to %s
This app was downloaded from %S
Installing %s
This %s app was downloaded from a website.
Title: %s
Are you sure you want to open the containing folders for %d torrents?
Are you sure you want to open the converted files for %d torrents?
Are you sure you want to open %d torrents?
Unable to find '%s'.
Error '%s' while downloading URL.
The contents of this torrent were verified to be free of viruses and spyware on %s
All files (*.*)
The app '%s' is requesting access to:
%s%s%s%s%s%s%s%s%s%s
Missing update url
Missing index.html
GetContentFile() does not contain [btinstall.txt]
App load failed (%s)
BtApp does not contain index.html
Are you sure you want to add %d torrents?
The installation of "%s" is complete
Can't open .torrent file: %s
Warning: Delete to trash failed for %s. Error: %d. Deleting permanently.
Failure: %s
Executing: %s
Unable to load "%s": %s!
Unable to save .torrent to '%s'.
Warning: %s
Checking auto portmap configuration ...
Checking queue ... we are #%d.
Unable to save to '%s'.
The directory you have selected contains more than 1000 files. The resulting .torrent will get very large. A better idea is to put the files into a compressed file and then share that file.
Please enter a valid tracker URL. Do you want to continue without having any trackers?
There was an error computing the hash: (%d) %s
The tracker protocol is invalid. udp, http and https are the only valid ones. Do you want to continue without having any trackers?
*.torrent
You have selected to share your entire My Documents folder and all its files. It is not advisable to do so unless you are certain you want to share all the contents, including possibly private documents.
The file or directory '%s' cannot be found. Please enter a different filename. Note that you can't share the root of a drive.
Select where to save the .torrent
Let Windows decide based on media type
%u Ratings
Click here to learn more about BitTorrent Certified devices
hXXp://VVV.bittorrent.com/certified-devices/
Plug USB into BitTorrent Certified playback device
Stream to BitTorrent Certified MOVE device
Make media playable in BitTorrent Certified devices
Check out these apps to experience %s\u00ae on tablets, mobile devices and more
Simple, secure access to your %s client on any device
%s\u00ae For Android
%s\u00ae For Mobile
%s\u00ae Remote
Webpage
BitTorrent Certified Device
BitTorrent Certified
Feed URL:
Enter Password
Web Seeds:
Website:
Website
Portable mode
The following options automate the configuration of some additional settings in Windows.
Torrent in Windows Firewall
Torrent when Windows starts up
.torrent (BitTorrent files)
.btsearch (BitTorrent Search Engine files)
Add Torrent from URL
Please enter the location of the .torrent you want to open:
Sports Fan
Windows Integration
Torrent when Windows Starts
&Boss-Key:
Use Boss-Key password
Location of .torrents
Store .torrents in:
Move .torrents for finished jobs to:
&Automatically load .torrents from:
&Delete loaded .torrents
Listening Port
Port used for incoming connections:
Random port
Enable &UPnP port mapping
&Randomize port each start
Enable &NAT-PMP port mapping
Add Windows &Firewall exception
Password:
Disable connections unsupported by the proxy
Apply rate limit to transport overhead
Enable UDP tracker support
IP/Hostname to report to tracker:
Enable &Web UI
&Password:
Alternative &listening port (default is the connection port):
Just enable the connection below, choose a computer name and password and remember to leave this computer on.
Visit hXXp://remote.utorrent.com/ and enter this computer name and password.
%1 stands for the command which is the chosen streamable file outputted by the build-in local loopback http server. You could add extra parameters for the player you selected.
Note: Web player may not support streamable files except avi.
Search Engines [Format: name|URL]
Current Port: (0:random)
Automatic Port Mapping (Recommended)
&Run speed test at: VVV.dslreports.com
Current Port: [0: auto]
&Test if port is forwarded properly
We recommend downloading a clean version directly from the content provider's website.
Web Seeds
%F - Name of downloaded file (for single file torrents)
%D - Directory where files are saved
%S - State of torrent
Update URL
Torrent, %d.%d.%d build %d is already installed. Would you like to downgrade to %d.%d.%d build %d?
Downloading %s ...
Failed to download your plus licence key. Please try again
unsupported piece size (%Z)
unsupported torrent size (%Z)
ffmpeg Process aborted with error %d. Unknown error
More information may be found in the transcript log at %%appdata%%\%S\media
File move target %s already exists. Overwrite?
Search the web for content
A web page showing results will launch
But you can alternately copy and paste Torrent URLs into the client.
There was an error opening %s.
There is no media player associated with the %s%sfile type.
Today is your lucky day! By entering your email you will be able to automatically unlock more free stuff from %s.
Before you delete %s, have you unlocked all the free content? One click and you'll get more.
The BitTorrent Bundle %s has new content available. Click update to get the new content!
The BitTorrent Bundle %s has new content that just downloaded. View the new content by clicking below!
You will leave uTorrent and your browser will open to unaffiliated Web sites.
%#Z (%d hashfails)
%d x %#z (have %u)
scrape not supported
%d of %d connected (%d in swarm)
Grid: %d days
%d days
Time (%s step)
Could not download help file. Error: %s
Invalid redirect (%S)
invalid http reply
invalid URL
Too many redirects (%S)
Installing %s ...
By clicking "I Agree", you acknowledge that you have read and agree to the End User License Agreement and <a href="hXXp://VVV.bittorrent.com/legal/privacy">Privacy Policy</a>.
Beware of online scams! A number of websites have taken our free
Torrent client and attempt to charge money for it through some sort of "fee" or "subscription" or else they install it for free but infect your computer with malicious code in the process. To protect yourself, be sure to only download our software from hXXp://VVV.utorrent.com. You should NEVER under any circumstances pay for free
Unsupported Operating System (OS)
This wizard will guide you through the installation of %s
, the #1 torrent download client on desktops and mobile devices worldwide. %s
Version: %s (Build %s) by BitTorrent, Inc.
This wizard will guide you through the installation of the official %s
torrent download client from BitTorrent Inc., the inventors of the BitTorrent protocol. %s
Version: %s (Build %s)
%s does not not support the Windows 2000 OS and may not
a newer Windows OS.
error: %d
Kill hanging %s processes?
There were errors loading the language file. Please see the file uTorrent.exe.log in the application directory.
The install of %s failed.
Log WebUI requests
Unable to copy .torrent from '%s' to '%s': (%d) %s
Choose where to download '%s' to:
Choose where to save %s
Failed to connect to %s Remote because your client is not compatible.
Some software installed on your computer prevents %s
from working properly. This is possibly caused by the following DLLs '%S %S'
Last %d days
(Login)
DHT: %d nodes%s
Torrents (*.torrent)
%s detected '%S' (%S) appears to be installed on your computer. That is known malware, and might cause %s to crash or behave strangely, including but not limited to using up all your RAM and freezing. Please run a virus/malware checker.
Would you like to make %s the default torrent application?
You appear to be running version d.d of the NVIDIA Network Access Management tool.
This version has known issues which may create problems with %s.
Please upgrade your NVIDIA software to at least version d.d.
Are you sure you want to exit %s?
Registration failure%S%S
Failure reclaiming account%S%S
Failure registering security question%S%S
D: %s%z/s
U: %s%z/s
Select a .torrent to open
%s: ERROR MSG: %s
%s: ERROR: received message type %d (expected %d)
Transferred last %d days: %#Z
Total Running Time: %d:%.2d:%.2d
Number of torrents added: %d
Program launched: %d times
Last launched: %s
# incoming conns since start: %d
# outgoing conns since start: %d
# handshake: %d
# connections: %d
# uTP connecting: %d
# TCP connecting: %d
# half-open: %d (%d queued)
Disk Cache overloaded %d %%
You should change the listen port.
A firewall/router is limiting your network traffic. You need to open up a port so others can connect to you.
%d(%d) downloading, %d(%d) seeding
D:%s U:%s - %s
Select a .torrent to update to
Be sure to exit %s before you unplug the USB drive!
Failed to connect to %s Remote %S%S%s
Press "OK" to review your login settings.
Failed to connect to %s Remote because the username or password was wrong.
Would you like to register a new account under the name "%S"?
Add Torrent from &URL...
&Bundle Webpage
Test hang report
Torrent &Webpage
%s - %z/s
%s %#Z of %#Z
%s - %s remaining
%s - Initializing download
%s - WARNING: Possibly insufficient sources
&Delete .torrent
D&elete .torrent   Data
Open URL in Bro&wser
Remove and d&elete .torrent   Data
Error moving file: %S (%d)
Failed to relocate file %s, %s
Today is your lucky day! %s will automatically update periodically - with new content delivered right to you.
In order to gain access to any free updates from %s, you have to keep it in your queue. Easy, right?
Bad port number
Bad Port number received
Checking for forwarded port
Server does not support this client
%s error: %s (%d)
Problem reading web100 variables.
Float denormal operand
Float invalid operation
Add Url
Bw.Alloc
Source URL
Are you sure you want to remove the %d selected torrents%s?
Are you sure you want to remove the selected torrent%s?
unsupported
Error: %s
Flushing to disk (%d)
Ready in %s
Please feel free to read our <a href="hXXp://VVV.bittorrent.com/legal/privacy">Privacy Policy</a>
%d days ago
%d hours ago
%d minutes ago
%d months ago
%d weeks ago
%d years ago
Failed to connect to %s Remote. This appears to have happened because you are running a peer blocking application such as PeerGuardian or PeerBlock. These programs are not currently compatible with %s Remote. You should either disable your peer blocking application, or disable %s Remote.
Port
Upgrade to %s Plus to protect yourself from viruses hiding in torrents.
Upgrade to %s Plus to convert this file so it can be played.
Port Forward test complete. %s
Results: Port not open.
%u Comments
RSS: Feed already exists "%s"
Really delete RSS Feed "%s"?
Really delete %d RSS Feeds?
Open URL in &Browser
Date of last match: %s
Last episodes matched: %s
Really delete RSS Filter "%s"?
Really delete %d history entries?
RSS: Smart filter has rejected "%S"
RSS: Unable to load "%S": %s
RSS: Unable to download "%s": %s
Failed to disconnect correctly. Error %d
Could not establish secure connection. Error %d
Could not initialize security context. Error %d
Could not decrypt data. Error %d
Could not send data. Error %d
Could not encrypt data. Error %d
Could not validate server cert chain
Transfer files converted for BT Certified Device.
The file '%s' could not be read.
The file '%s' could not be written to.
The file '%s' is in use by another process and can't be opened.
The file '%s' was not found.
Unknown error opening file '%s'
The file '%s' has been recovered.
You have to restart %s for the changes to take effect.
Executable (*.exe)
*.exe
More info is in the <a href="hXXp://VVV.utorrent.com/faq">FAQ</a> and at <a href="hXXp://portforward.com/">portforward.com</a>
PostMessage failed h:%d i:%d t:%d e:%d
Results: Port is not open (you are still able to download).
Port mapping will speed downloads and enable seeding. More info in FAQ and at portforward.com
Results: Port is open. Your network is properly configured.
This test will use <a href="hXXp://VVV.utorrent.com/faq#mlabs">Measurement Lab</a> tools to check and set your bandwidth limits.
If no location is near, you can test at <a href="hXXp://dslreports.com/speedtest/">dslreports</a> and input your upload speed.
%s Setup Guide
%s Bandwidth Configuration
%s will test your network and configure itself for best performance.
Please enter a valid port number from 0-65535.
This is a likely service port. Please choose another.
(You can change this setting in bt.no_connect_to_services_list)
Tried to redirect to invalid url
Will redirect to URL: %S
Automatic Shutdown will initiate in %d seconds.
Hibernating computer... %s
Restarting computer... %s
Shutting down computer... %s
Stand-by computer... %s
(Alternate speed test at <a href="hXXp://dslreports.com/speedtest/">dslreports</a>)
TCP upload rate
TCP download rate
import
TCP upload rate limit
TCP download rate limit
%s is still starting up
Web UI
HTTPS
Contains: "%s"
This operation cannot be undone.
A security question can be used later to transfer your %s Remote username to another computer. Would you like to create one now?
Ý %dh
%dh %dm
%dw Ý
%dy %dw
Enter the IP:port / [IPv6]:port of the peer to add:
Executable files (*.exe)
Download Complete|%s has finished downloading.
A BitTorrent Featured Bundle|%S
New Download from RSS|%s has started downloading.
New version|A new version of %s is now available!
!Error|There is not enough disk space to move %s to its final location
!Torrent Error|File: %s
Can't accept %S with invalid character '%S'
Can't accept %S with length %u greater than %d characters.
Please enter a %S.
Are you sure you want to remove the %d selected trackers?
You must enter a password to use %s Remote.
Could not contact the %s Remote service to register.
There is already a computer using the username "%S".
That was not the correct security answer for the username "%S". Try again.
Status: Reconnecting in %d seconds
Status: failed to load Secur32.dll or Security.dll
Uninstalling %s ...
Are you sure you'd like to uninstall %s?
This will remove the %s app only. None of your in-
%s failed to update. Please try again.
%s update failed. Unable to start the new process.
failed to launch exe %s
failed to acquire mutex %s
attempted downgrade %x -> %x
mismatching exe versions
%s Upgrade
This wizard will guide you through the %s upgrade process.
Updates are now build into %s, so you'll always have the latest and greatest stable version of the software including security enhancements, bug fixes and new features.
Updates are now built into %s, so you'll always have the latest and greatest stable version of the software including security enhancements, bug fixes and new features.
This wizard will guide you through the upgrade of %s by BitTorrent, Inc. - the world's premiere, feature-rich torrent client.
Password did not match.
Could not download WebUI file. Error: %s
Could not download WebUI information. Error: %s
WebUI file not found - attempting to download
%s has requested permissions on %s:
%s has requested access to %s.
cfgmgr32.dll
Crypt32.dll
CertFreeCertificateContext
PFXImportCertStore
PFXExportCertStoreEx
CertEnumCertificatesInStore
CertCloseStore
CertCreateSelfSignCertificate
CertOpenStore
CertStrToNameW
CertAddCertificateContextToStore
CertSetCertificateContextProperty
CryptMsgClose
CertFindCertificateInStore
CryptMsgGetParam
CertGetNameStringW
CertVerifyCertificateChainPolicy
CertGetCertificateChain
CertFreeCertificateChain
wintrust.dll
zcÁ
>012?456789:;<=
!"#$%&'()* ,-./0123(
.?AUNoChannelSupport@BufferedTransformation@CryptoPP@@
.?AVKeyTooShort@PK_SignatureScheme@CryptoPP@@
.?AVInvalidKeyLength@PK_SignatureScheme@CryptoPP@@
.?AV?$ASN1CryptoMaterial@VPublicKey@CryptoPP@@@CryptoPP@@
.?AVX509PublicKey@CryptoPP@@
.?AVPublicKey@CryptoPP@@
.PAVRSAFunction@CryptoPP@@
c:\%original file name%.exe
d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%
O&%dYVm
dg.uJ
R~R.vY
.Ot`T
.0%Uh
22222222222
hiTXtXML:com.adobe.xmp
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:B47FF0923C20681192B095FBA0BDE87C" xmpMM:DocumentID="xmp.did:A73C2BBE2C3A11E2AAF3FB98CA5D1086" xmpMM:InstanceID="xmp.iid:A73C2BBD2C3A11E2AAF3FB98CA5D1086" xmp:CreatorTool="Adobe Photoshop CS5.1 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FA7F117407206811871FA3823ACE12F9" stRef:documentID="xmp.did:B47FF0923C20681192B095FBA0BDE87C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>02
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:B47FF0923C20681192B095FBA0BDE87C" xmpMM:DocumentID="xmp.did:3A9F8C87223011E2BF0C8C1B3C994937" xmpMM:InstanceID="xmp.iid:3A9F8C86223011E2BF0C8C1B3C994937" xmp:CreatorTool="Adobe Photoshop CS5.1 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:01801174072068118DBBC9C0B36B2C90" stRef:documentID="xmp.did:B47FF0923C20681192B095FBA0BDE87C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
uB.Fw
p:\|w
J%U.\h
?j%FH
siTXtXML:com.adobe.xmp
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb" xmpMM:DocumentID="xmp.did:EF44648C6CE511E3A46EC0A9C6415F84" xmpMM:InstanceID="xmp.iid:EF44648B6CE511E3A46EC0A9C6415F84" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:12603d90-f86b-4177-8c48-f7d68043da6c" stRef:documentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>GUW
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb" xmpMM:DocumentID="xmp.did:EF4464906CE511E3A46EC0A9C6415F84" xmpMM:InstanceID="xmp.iid:EF44648F6CE511E3A46EC0A9C6415F84" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:12603d90-f86b-4177-8c48-f7d68043da6c" stRef:documentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb" xmpMM:DocumentID="xmp.did:2BFDB2AF69FD11E3A46EC0A9C6415F84" xmpMM:InstanceID="xmp.iid:2BFDB2AE69FD11E3A46EC0A9C6415F84" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:12603d90-f86b-4177-8c48-f7d68043da6c" stRef:documentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>]Q|
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb" xmpMM:DocumentID="xmp.did:2BFDB2B369FD11E3A46EC0A9C6415F84" xmpMM:InstanceID="xmp.iid:2BFDB2B269FD11E3A46EC0A9C6415F84" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:12603d90-f86b-4177-8c48-f7d68043da6c" stRef:documentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
Created with ajaxload.info
99999999
66666662
62222222
9999999555
[[[73322223
____[[[_
66666666
222222222
1.css
1.html
2.css
2.html
jq.js
]\D`;%F
%fko)
.Ht":
H6l.Emj
PeekNamedPipe
CreatePipe
GetCPInfo
GetProcessHeap
GetWindowsDirectoryW
WinExec
RegCloseKey
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
CryptGenKey
CryptDestroyKey
RegDeleteKeyW
ShellExecuteW
ShellExecuteA
SHFileOperationW
SHDeleteKeyW
GetAsyncKeyState
MsgWaitForMultipleObjects
RegisterHotKey
UnregisterHotKey
ExitWindowsEx
EnumWindows
CreateDialogIndirectParamW
EnumChildWindows
SetWindowsHookExW
UnhookWindowsHookEx
GetKeyNameTextW
MapVirtualKeyA
keybd_event
FindCloseUrlCache
DeleteUrlCacheEntryW
FindFirstUrlCacheEntryExW
FindNextUrlCacheEntryW
.text
`.rdata
@.data
.rsrc
%s\stats-%s.txt
chrome
firefox
Software\Classes\%s\shell\open\command
Software\Classes\%s\shell
Software\Classes\%s
Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s\OpenWithProgids\%s
Software\Classes\MIME\Database\Content Type\%s
MIME\Database\Content Type\%s
Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent
uTorrent.exe
application/x-bittorrent-key
Software\Classes\Applications\uTorrent.exe
Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent
INSTALLDEBUG: QueryDisplayVersion. Installed version: %s
%s%s%s%s
RunElevatedInstall: %s with params [%s]
%s /STARTAPP %s
%s /LAUNCHBUNDLEDURL %s
%s /LAUNCHBUNDLEDURLTYPE %s
%s /AUTOMATION
%s /MINIMIZED
%s /NOINSTALL /BRINGTOFRONT
dht.dat
flags.conf
ipfilter.dat
resume.dat
rss.dat
settings.dat
INSTALLDEBUG: Could not create installation directory [%s]
%d.%d.%d.%d
mURLInfoAbout
"%s" "%%1"
Software\Classes\.torrent\OpenWithProgids
Software\Classes\.btsearch\OpenWithProgids
Software\Classes\Applications\uTorrent.exe\shell
Software\Classes\Applications\uTorrent.exe\shell\open\command
INSTALLDEBUG: Version String returned: %s
INSTALLDEBUG: Parsed version : major: %d minor: %d tiny: %d build: %d
CLSID\{3041D03E-FD4B-44E0-B742-2D9B88305F98}
CLSID\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA}
CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}
{88c7f2aa-f93f-432c-8f0e-b7d85967a527}
{ad06fb5f-fef7-4a84-8c58-dca34f8e3d36}
{ef79f67a-6ad7-4715-a0f8-932fca442023}
{1d03a978-ac0c-4004-b9fd-9cf361c7bd3f}
{64ead72b-ffd4-4e01-aa3a-4c71665d73e4}
{29acf17c-1713-4286-8f40-bfd05f1e70c8}
{7b6de06c-7013-4a87-957e-d27d7b977d21}
{2d8d9acc-f6d7-4362-8876-a275ca929591}
{656461ef-40f6-4115-9ff1-bced9812ccbb}
{1fd59ce2-6236-467c-9539-3d8c93fea5e0}
{49C795C2-604A-4D18-AEB1-B3EBA27E5EA2}
{7473B6BD-4691-4744-A82B-7854EB3D70B6}
{B6AC5E3C-5CEB-4E72-B451-F0E1BA983C14}
{5BA8E555-8C08-4CC8-80E6-1F8CDD26AE3A}
{6DA66498-839A-42A7-8324-FF7D2A532835}
{4E871705-D1F3-49D9-814F-1E46E85986B0}
{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
{db131c55-60c8-4adc-84dc-9e76ab06e2dc}
{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}
{4ae0c3d6-f713-4eed-bc65-25dc3ffdaac1}
{c840e246-6b95-475e-9bd7-caa1c7eca9f2}
{e0301295-ab3e-4af3-979f-3d453c5f9f48}
{87775fdb-6972-41f9-ae51-8326e38cb206}
{181f104b-b000-4010-bb18-41b8205f774d}
{03ea5b10-2efa-4311-ac10-04427b02d663}
{e9df9360-97f8-4690-afe6-996c80790da4}
CLSID\%s
SOFTWARE\Conduit\Platforms\%s
SOFTWARE\AppDataLow\Software\%s\toolbar\IE5
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\%s
hXXp://VVV.mybrowserbar.com/images/pixel.gif?tb=%d&cnid=%s
hXXp://VVV.mybrowserbar.com/images/pixel.gif?yxds=%d&yxhp=%d&yxov=1&cnid=%s
,Riched20.dll
%s %S %S %S
%s %S
Initializing OfferAPI supported-> %d
Stoolbar_offer.benc
toolbar.benc
button label: %s
3.4.2
apps\featuredContent.btapp
apps\plus.btapp
apps\welcome-upsell.btapp
apps\player.btapp
INSTALLDEBUG: Unable to create firewall rules for path [%s]
path:[%s]
\uTorrent.exe
INSTALLDEBUG: Volume: %s, Drive: %s
INSTALLDEBUG: Returning early. Installed version: %d, Our version: %d
/PERFORMINSTALL %d "%s" %u
INSTALLDEBUG: Returning...installResult = (%d)
INSTALLDEBUG: running from installed path = %d running from different drive = %d
INSTALLDEBUG: DoInstall(%d, %s)
"%s" %s
netsh.exe
interface ipv6 set teredo %s
netsh.exe interface ipv6 set teredo %s
Could not setup teredo, result was: [%s]
netsh.exe interface ipv6 install
Could not install teredo, result was: [%s]
Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s
Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s\UserChoice
Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s\OpenWithProgids
Software\Classes\%s\OpenWithProgids
Software\Microsoft\Windows\Roaming\OpenWith\FileExts\%s\UserChoice
maindoc.ico
%s URI
URL Protocol
%s\%s
%s\shell
%s\shell\%s\command
%s\Application
%s\Progid
%s\UserChoice
%s\OpenWithProgids
Software\Microsoft\Windows\CurrentVersion\Run
TerminateSessionClientInstances failed; hp:0x%X result:%d
INSTALLDEBUG: Initial GetVolumeInformation failed and detected possible UNC path [%s] without appended [\]; calling again
"%s" /UNINSTALL
plus_license.btkey
RunAsAdministrator: %s with params [%s]
lRunAsAdministrator(error executing %s with params [%s]): Error: %d
RunAsAdministrator(error executing %s with params [%s]): Unexpected exit code %d (expecting %d)
DDE operation timed out.
DDE operation failed.
DDE operation is busy.
RunAsAdministrator(error %d executing %s with params [%s]): %s
Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers
%s is running in Vista compatibility mode which is known to cause problems. Please allow %s to fix this by clicking "Yes" in the next dialog.
REG DELETE "HKLM\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers" /v "%s" /f
/C %s
RemoveCompatibilityModeKey(removal from HKLM returned %s)
Software\Classes\.torrent
unknown control id = %d
client.exe
netprofm.dll
bt.log
PORTABLE
Ads %s -- GdiPlus.dll %s
Settings path: [%s]
Setting log file to '%s'
Log file set to path:[%s]
dht_feed.dat
LAUNCHBUNDLEDURL
LAUNCHBUNDLEDURLTYPE
hXXp://bundles.bittorrent.com/inclient/yes
hXXp://apps.bittorrent.com/featuredcontent/featuredcontent.btapp
INSTALLDEBUG: /PERFORMINSTALL with flags [%d] and path [%s]
.btapp?
Version: %s
valid plus key, but not activated. Attempting activation...
{CF59774A-CE9D-454D-AF29-1556367E1AC7}
{E3DC5C2B-082C-4800-8C52-B9F655B94D2C}
\StringFileInfo\xx\ProductName
\StringFileInfo\xx\ProductVersion
%S: default value assigned
%S: %d
%s:empty text: fatal error
Invalid rating: %S
%S: default value assigned: %S; added: %S
%S: %S
%S: fatal error: size - no value
key_expired
invalid_key
no_license_key
{A4D77A09-10EA-4574-8C09-9B6E1A21C95F}
Activation error: %s
HTTP %d
iPod Touch 1.Gen
iPod Touch 2.Gen
iPod Touch 3.Gen (8GB)
iPod Touch 3.Gen
iPod Touch 4.Gen
utorrent.lng
Your DNS server does not support AAAA lookups. Installing IPv6 is NOT recommended.
KERNEL32.DLL
tray.ico
\hh.exe
ms-its:%s::%s
utorrent-342-33870.chm
utorrent-help.zip
%s|%S
LoadKnownFileType called with %s, %s, %s
btkey
current.btskin
Accepted launch|Type: %s Location: %s
Memory Compacting, system memory is low (%u%% CPU usage)
social.bmp
Unable to send crash report to server:
Error opening Windows firewall: 0x%X %s
[%dK]
2%d %s
sHTTP Error 400
HTTP Error 401
transcode.btinstall
%s%s %d.%d
[Portable mode]
%s (build %d) [%d-bit]
main.ico
Local\%s
An older version of %s is running.
Please shut down %s and try again.
It seems like %s is already running, but not responding.
Please close all %s processes and try again.
Failed to unpack bundled btapp: %s to: %s
%s\BunndleOfferManager.dll
%s\ADKAppsOfferManager.dll
Delete file failed: %s error: %d
Congratulations! Your software is turning into %s Plus as we speak, and all features will be ready to use in about a minute.
To learn about your new features, please refer to the %s Plus Alpha forums.
Installing '%s' to '%s'.
t.lang.txt
%s.lng
Player.Path
Windows Media Player
\smplayer.exe %1
hXXp://download.utorrent.com/public/DivXPlayer.html?url=%1
hXXp://download.utorrent.com/public/DivXPlayer.html
Web player
hXXp://VVV.bittorrent.com
hXXp://127.0.0.1:%d/search?q=%%s
shell32.dll,OpenAs_RunDLL %s
RUNDLL32.EXE
hXXp://127.0.0.1:%d/proxy?sid=%S&file=%d
http%:%/%/localhost%:%d%/proxy%?sid%=%S%&fast_if_no_peers=false%&file=%d&width=%d&height=%d
http%:%/%/localhost%:%d%/proxy%?sid%=%S%&fast_if_no_peers=false%&file=%d
/select,"%s"
\flash*.ocx
ping.exe
%s -n 2 127.0.0.1
%s /BRINGTOFRONT
BitTorrent|hXXp://VVV.bittorrent.com/search?client=%v&search=
Submit a crash report to the developers.
%s has crashed. A crash dump has been saved as:
uTorrent.exe /RECOVER "%s"
uTorrent.exe /RECOVER
%s has crashed. Unable to generate crash dump. %S%S
btinstall.txt
BTAPPS="%s\" PAIRINGKEY="%S"
INSTALLDEBUG: LoadFile of current exe failed
V8 bundle: Failed to open exe
ui.btapp
b.btapp
Installing bundle: %s to %s
apps.btapp
Failed to find bundled btapp: %s
Failed to install bundled btapp: %s to: %s
Bundled btapp "%s" is ill formed: %s
%u.%u.%u_%u
updates\%s.exe
lupdates\%x.lng
tupdates.dat
GSoftware\Microsoft\Windows\CurrentVersion\Uninstall\%s
g[unknown url]
/redirect.html#userinterface/preferences/general
/redirect.html#userinterface/preferences/uisettings
/redirect.html#userinterface/preferences/antivirus
/redirect.html#userinterface/preferences/directories
/redirect.html#userinterface/preferences/connection
/redirect.html#userinterface/preferences/bandwidth
/redirect.html#userinterface/preferences/bittorrent
/redirect.html#userinterface/preferences/transfercap
/redirect.html#userinterface/preferences/queueing
/redirect.html#userinterface/preferences/scheduler
/redirect.html#userinterface/preferences/uconnect
/redirect.html#userinterface/preferences/streaming
/redirect.html#userinterface/preferences/devices
/redirect.html#userinterface/preferences/paireddevices
/redirect.html#userinterface/preferences/label
/redirect.html#userinterface/preferences/advanced
/redirect.html#userinterface/preferences/advanced/uiextras
/redirect.html#userinterface/preferences/advanced/diskcache
/redirect.html#userinterface/preferences/webui
/redirect.html#userinterface/preferences/advanced/run_program
*hXXps://remote.utorrent.com
help.ico
%s, %d:00 - %d:59
hXXp://bit.ly/HTwxBj
<A HREF="%s">%s</A>
"%s"%s
%s %d%%
Buggy DLL warning: %S (%S)
%s\VirusGuard\
BitTorrentAntivirus.exe
VirusGuard.exe
.DEFAULT\Software\SetID\Internal
Software\uTorrentPurchases\PurchasedKeys
HCan't parse webui description json: %S
tabs.bmp
toolbar.bmp
hXXp://127.0.0.1:%d/proxy?sid=%x&file=%d
tstatus.bmp
VPAIDPlayer.swf
hXXp://update.utorrent.com/survey
%s %d %s
Failed to load skin: %s. SaveFile failed.
Failed to load skin: %s. Read from btresource failed.
%d (%d)
%d.%.3d
=.%%
id_%S
<img src="%s">
<body style="padding: 0; margin: 0; overflow: hidden; width: '%d'; height: '%d';">
twindow.location="about:blank";
OnRefreshAd::url = %S
OnRefreshAd::title = '%s'
download size = %s
%.1f %s
I%s|%s
s%dx%.2d
@\\.\pipe\privateaccessvpn
I%s %d
%s %d
Tris: %d points [high score: %d]
%s (build %d)
I%s.torrent
%s\%s\*.*
hXXp://VVV.utorrent.com/faq.php
yellow_check_8bit.ico
green_check_8bit.ico
red_cross_8bit.ico
\\.\X:
\\?\%s
%s(%d). [%s] [%s]
J%s (%d)
10  %s
%s(%d). [%s]
App store install failed: %s
Got bogus main app. Update URL does not match download source.
%s != %s
%s\%S
%s\%s\%S
%s "%s"
J%sBunndleOfferManager.dll
9944A343-2613-4177-A30C-3D868D1D0D9F
C6D65593-16C7-44ED-BC08-B46F22EA7353
BunndleOfferManager.dll
%sADKAppsOfferManager.dll
Vflags.bmp
%d | %d
%d| %d
%S%S%S%S%S%S
(%d%%) %s
%s (%s)
%dx%d
A: %S V: %S
&%d %s
V<a href="%s">%s</a>
.stepnumeral {
.stepcontent {
.stepheading {
.steptext {
.stepbox {
.devpointer {
.arrow {
.arrow-lblade-cover {
.arrow-lcutout {
.arrow-rblade-cover {
.arrow-rcutout {
.newdev-text {
.newdev-bevel {
.or-- {
|[%d Torrents]|
%s %:.1d %%
KInstalling %d of %d ...
%s (%d of %d)
%s:\%s
%s (powered by %s)
Failed to post GUI Update message: %s
Failed to load html resource %d
hXXp://pairing:%H@127.0.0.1:%d/fileserve?token=%H&pairing=%H
top: %d;
Device ID %s : %s
<html><body>Failed to load HTML resource %d</body></html>
$('body').ready(function() { devicehelper.initialize();
devicehelper.setClient("%s");
devicehelper.setText({
%s"%S":"%s"
notify.configure(%d,'%H'); devicehelper.setPort(%d); devicehelper.setPair('%H');
devicehelper.adddevice('%S', %d, '%d', '%s');
devicehelper.adddevice('devicesection', %d, '%d', '%s');
OCSetupHlp.dll
ADKAppsOfferManager.dll
CLSID\{DC0C2640-1415-4644-875C-6F4D769839BA}
M%s (%s:)
c:\%u%u.tmp
full %s root %s
Created canonical path %s from %s
bf2.exe
bf2142.exe
crysis.exe
gw.exe
halo.exe
hl.exe
hl2.exe
ut2003.exe
ut2004.exe
wolfmp.exe
wow.exe
quake.exe
glquake.exe
qw.exe
glqw.exe
quake2.exe
quake3.exe
quake4.exe
iourbanterror.exe
goldslam.exe
nksp.exe
pilauncher.exe
pistory.exe
rnclient.exe
twelvesky.exe
domo.exe
dreamlords.exe
stoneage2.exe
projecttorque.bin
iexplore.exe
firefox.exe
mplayer.exe
mplayerc.exe
wmplayer.exe
vlc.exe
peerblock.exe
pg2.exe
pglite.exe
peerguardian.exe
%s.%u.tmp
%s.new
GetMaxFileSize() returning %Ld for "%s"
M%s.exe
0123456789._
\uac_test.tmp
\Sysnative\..\explorer.exe
\explorer.exe
iError %d
HTTP Reply %d
N%s-%s
HTTP Error %d
REDIRECT:%S%S%S
Proxy connect error: %s
Proxy error: %S
Mozilla/5.0 (Windows NT %s%s; Trident/%d.0; EIE10; ENUSMSN; rv:%s)
Mozilla/%d.0 (compatible; MSIE %s Windows NT %s%s; Trident/%d.0
Mozilla/5.0 (Windows NT %s%s; rv:%s) Gecko/20100101 Firefox/%s
Mozilla/5.0 (Windows NT %s%s) Chrome/%s
MSIE %s;
Google Chrome
Software\Wow6432Node\Mozilla\Mozilla Firefox
Software\Mozilla\Mozilla Firefox
chrome.exe
HTTP Error 404
cexe
rpmsg
%s\*.*
Found %d entries using filter %s in directory %s
\\?\%s%s
%s.%u.%s
[%s] %s
[%.2d:%.2d:%.2d] %s
HFile not found during integrity check: %s
%s.old
File failed verification: %s
Failed file save: %s
Safely saved file '%s'
File passed integrity check: %s
Warning: file integrity check failed (%s): %s
Ignore this warning if you switched to 1.6.1 or older and back
Windows ran out of memory. Unable to allocate %d bytes.
Bits on Wheels/1.0.%d
Bits on Wheels/%c%c%c
%s/%d.%d%d%d
Torrent .NET
Unknown %c%c
%s/%d.%d.%d.%d
Unknown %c
BitTorrent %c.%c.%c
BitTorrent %c.%c%c.%c
%s %i.%i
BitSpirit v2 UDP0
BitSpirit v2 HTTPBT
Blizzard %d.%d
Burst! %c.%c.%c
FlashGet %u.%u
MLdonkey %c.%c.%c
Opera %c%c%c%c
e208.67.222.222
208.67.220.220
NOTE: Settings file found in directory of executable; using that.
The file '%s' was damaged/missing. It has been recovered.
Settings integrity check failed (duplicate keys: %d count: %d), repaired: %s
Error 73: %d/%d/%d/%d
TCP Half Open limit: %d
TCP Sockets: %d, Half Open: %d (total %d)
TCP Pending: %d
Total Sockets: %d
Read buffers: %u (%u bytes), avg %u
Write buffers: %u (%u bytes), avg %u
TCP-halfopen
[%d]: %d %s %A mode: %d state: %d
*** %s
Elevation:Administrator!new:%s
(TCP-In)
(UDP-In)
HNetCfg.FwPolicy2
HNetCfg.FwRule
Allow %s network traffic with Edge Traversal
gCan't open log file '%s': %d %s
HTTP: IP %a: Bad Range value
wHTTP: IP %a: can't accept cookie - incorrect format
HTTP: IP %a: Bad authentication header
HTTP: IP %a: Bad username/password
1Can't handle name length %d (> %d) for archive %s
Can't read entry name from archive %s: %d %S
Can't seek %d farther in archive %s: %d %S
Can't handle entry with flags %x in archive %s
Can't handle header with mismatched sizes %d %d in archive %s
Can't handle header method %d != 8 in archive %s
Accepting entry for file %S in archive %s
Found %d files in archive %s
Can't open archive file %s
Can't read directory of archive file %s
Can't find requested file %s in archive %s
Can't handle decompressed size %d/%d >= %d for archive %s
Can't set pointer in archive file %s to %d
Can't read from archive file %s
Can't decompress entry in archive %s
Can't read header of %s
Can't set pointer in btinstall file %s to %d
Can't read sectiontable of %s
Can't read section %d of %s
icon.bmp
%s\apps\%s\%s
%H.btapp
RegKey: Could not write string valuename %s value %s; Error %d
RegKey: Could not write binary valuename %s length %d; Error %d
RegKey: Could not write DWORD valuename %s value %d; Error %d
RegKey: Could not delete value %s: %d
RegKey::DeleteKey fail (%d): %s
RegKey::DeleteTree fail (%d): %s
content-type = %S error code = %d
default.log
adnative.log
bench.log
performance.log
download.log
shutdown.log
activation.log
updates.log
cfu.log
sau_metrics.log
auto_restart.log
hang_report.log
delete.log
toolbar.log
speed_monitor.log
k%s/*.btapp
Oapps\%s
aError contacting WebUI proxy service: %s
HTTP Error
Got proxy service response (%S:%d, %Ld bytes): %S
Disconnected from WebUI proxy service
sConnecting to raptor at %S
Sent raptor attach cookie: %S
****** DELETING FILE: %s
*.dat
global_resume.dat
%H.dat
resume.dat.temp
TCP port bind failed %A: (%d) %s
invalid key size
license key expired
invalid key
Pwebui
couldn't download webui info
Purladder
load missing index.html
missing index.html
missing update url
failed to verify certificate
bad url
unsupported piece size
unsupported torrent size
Unable to save .torrent
no uconnect password
%s %d.%d
%s %d.%d.%d
WError parsing URL: %s
*** %s: PIECE %d FAILED HASH CHECK
%s: Piece %d complete
e%s: Unable to move: %s
Moved file storage for torrent '%s' to '%s'
QAdding job to move file storage for torrent '%s' from '%s' to '%s'
Could not move data to completed download folder. Error: [0x%X]
"%s\%s"
run.txt
%S %S
"%s\%S"
%s: HTTP invalid URL: %S
%s: HTTP preventing DNS lookup: %S
%s.alt
DNS resolution failed for %s %S
hXXp://%S/announce
pTracker reports an invalid external IP
Finished receiving metadata for '%s' in %d seconds
ERROR: Metadata for '%s' could not be loaded! ("%s")
BAN peer: Responsible for '%s' metadata not being loaded!
Got metadata size %u, pieces %u
Got metadata size %u when I already thought it was %u
Peer send unsolicited metadata message: chunk %d
dError: %s - %s
%s (%S)
Q%s\%H.dat
rBanned %T until %S
*** Sending BTMSG_TF_SEEDING_DONE for torrent '%s'
%s.%d.torrent
%s.loaded
Unable to rename/delete '%s'.
QTMP=%s
TEMP=%s
Loading settings from path '%s'
HR.HDTV
HR.PDTV
WebRip
Can't download url %s - %s
RSS Channel title %s
%dx%.*d-%dx%.*d
%dx%.*d
I/O error: %d
C=US,ST=CA,L=San Francisco,O=BitTorrent,OU=%s,CN=%s
R%s%s|
Deleting original torrent file %s
Can't delete original torrent file %s
-i %%s -y -f %s %s %s %%s
-vcodec %S -maxrate %dm -bufsize %dm -flags  loop -cmp  chroma -me_method hex -subq 5 -me_range 16 -b_strategy 1 -bf %d -flags2 %s%s%s%s%s -refs 2 -directpred 3 -trellis 1
-r %d
-s %dx%d
-crf %f
-b %d
-level %d
-acodec %S %s -ar %d -ab %d
-ac %d
Rmedia%s%s
%s_(%s).%s
%s%s\%s
%s-devpair.dat
Can't add duplicate device pairing %s
Adding device pairing with id %s name %s
Found device pairing %s at %d of %d
Can't match key hash to device pair %s
SIO Error:%d line:%d pos:%Ld count:%d actual:%d
Error opening "%s": %E
ReadFile error: %s:%Ld:%d:%d:%d
%S(%x): %x:%x (fs %x)
~%sPartFile_%LX.dat
thumbs.db
.DS_Store
Moving files from '%s' to '%s'
%s\%s\%s
ffmpeg.exe
s%s\~~%s
%s.log
Checking if torrent data files already exist in %s
Torrent data files already exist in %s
Setting storage folder to '%s' for torrent '%s' (directory '%s')
Torrent '%s' storage at '%s', root at '%s'
Checked %:.1d%% (Active Num:%d)
A Web Page
Can't %s device pair for %s
Can't add torrent %S because it is a duplicate of an existing torrent
URL: %S: OK
uT HTTP add torrent %S completed
WebUI Proxy Error: %s
!Proxy: %s
Can't download to directory '%s' which is outside of download directory '%s'
Chose download directory '%s' from dir %d '%s' sub-path '%s'
uT HTTP add torrent %S completion failed - status: %s
/Can't add torrent: %s
Settings %s
uT HTTP can't add torrent '%s': %s
uT HTTP torrent add of '%s' succeeded
Can't save temporary torrent file '%s'
Encoded rate %d duration %d for file %s
Need more header for file %s
Unrecognized type for file %s
Unknown error %S
Access denied %S
Unknown property %S
Read only property %S
Type mismatch %S
sendappmsg
sendmsg
fb_login
set_license_key
JAVASCRIPT LOG: %s
window.btapp = null; window.onunload = null;
set_webseed
verify_rsa_signature_appkey
rsa_generate_key
web seed
UDP port bind failed %A: (%d) %s
mICMP port bind failed %A: (%d) %s
The file "%s" is signed and the signature was verified.
The file "%s" is not signed.
An unknown error occurred trying to verify the signature of the "%s" file.
Verify Sig Error: 0x%x.
CertGetNameString failed.
CryptQueryObject failed with %x
CryptMsgGetParam failed with %x
CertFindCertificateInStore failed with %x
Signer certificate mismatch
%S [%d]: %S
upnp_log.txt
UPnP: Unable to create socket: %d
UPnP: Unable to setsockopt: %d
UPnP: Could not join multicast group: %d
UPnP: Could not setup socket to send multicast packets: %d
UPnP: Could not set unicast TTL: %d
UPnP: Could not set multicast TTL: %d
DEBUG: UPnP: Send error [socket %p]: %d
DEBUG: UPnP: Not replying to Service Type [%S]
UPnP: Discovered new device: "%S" %S
activeds.dll
adsldpc.dll
apphelp.dll
atl.dll
authz.dll
bcrypt.dll
bcryptprimitives.dll
browseui.dll
clbcatq.dll
comdlg32.dll
comres.dll
comsvcs.dll
credssp.dll
credui.dll
crypt32.dll
cryptbase.dll
cryptdll.dll
cryptsp.dll
cryptui.dll
cscapi.dll
cscdll.dll
cscui.dll
devobj.dll
dhcpcsvc.dll
dhcpcsvc6.dll
dnsapi.dll
dot3api.dll
dot3dlg.dll
dssenh.dll
dui70.dll
duser.dll
eapolqec.dll
eappcfg.dll
eappprxy.dll
ehstorshell.dll
esent.dll
explorerframe.dll
fastprox.dll
firewallapi.dll
fltlib.dll
fwpuclnt.dll
gdi32.dll
gdiplus.dll
gpapi.dll
hnetcfg.dll
icmp.dll
iconcodecservice.dll
ieframe.dll
iertutil.dll
imagehlp.dll
imm32.dll
iphlpapi.dll
kernelbase.dll
linkinfo.dll
lpk.dll
mpr.dll
mprapi.dll
msacm32.dll
msasn1.dll
msctf.dll
msctfime.ime
msdart.dll
msi.dll
msimg32.dll
msls31.dll
msv1_0.dll
msvcp60.dll
msvcp80.dll
msvcr80.dll
msvcr90.dll
msvcrt.dll
mswsock.dll
msxml3.dll
napinsp.dll
ncrypt.dll
netapi32.dll
netman.dll
netshell.dll
nlaapi.dll
normaliz.dll
npmproxy.dll
nsi.dll
ntdsapi.dll
ntmarta.dll
ntshrui.dll
ole32.dll
oleacc.dll
oleaut32.dll
onex.dll
peerdist.dll
pnrpnsp.dll
profapi.dll
propsys.dll
qutil.dll
rasadhlp.dll
rasapi32.dll
rasman.dll
riched20.dll
rpcrtremote.dll
rsaenh.dll
rtutils.dll
samcli.dll
samlib.dll
schannel.dll
sechost.dll
secur32.dll
sensapi.dll
setupapi.dll
sfc.dll
sfc_os.dll
shdocvw.dll
shfolder.dll
shlwapi.dll
shunimpl.dll
slc.dll
srvcli.dll
ssdpapi.dll
sspicli.dll
sxs.dll
tapi32.dll
tiptsf.dll
upnp.dll
urlmon.dll
userenv.dll
usp10.dll
utorrent.exe
vfbasics.dll
vfcompat.dll
vrfcore.dll
wbemcomn.dll
webio.dll
windowscodecs.dll
winhttp.dll
winnsi.dll
winrnr.dll
winspool.drv
winsta.dll
wldap32.dll
wmi.dll
ws2_32.dll
ws2help.dll
wshbth.dll
wship6.dll
wshtcpip.dll
wsock32.dll
wtsapi32.dll
wzcsapi.dll
wzcsvc.dll
xmllite.dll
xpsp2res.dll
Not yet supported
[nf]%s
%s does not exist in object
key does not exist in object
IpFilter invalid line: [%S]
Loaded ipfilter.dat (%d entries)
%s: No longer have piece: %u
V%A%s(%s):
%A%s:
[%s (%:.1d)]:
Requesting Metadata %d/%d
Disconnect: %s
Requesting %d:%d->%d
Rejecting %d:%d->%d
Cancelling %d:%d->%d
Send Have %d
Send Donthave %d
Got unchoke from %s (%A), for seed only torrent
Got unchoke from %s (%A), can't request immediately because request queue is full (%d)
Got Expected Reject: %d:%d->%d
Got Reject: %d:%d->%d
Got Reject Unrequested!: %d:%d->%d
Sending Piece %d:%d->%d
Got PieceRequest I don't have: %d:%d->%d
Got Bad Request in SS mode: %d:%d->%d
Got Request while choked: %d:%d->%d
Got Request: %d:%d->%d
Got Cancel: %d:%d->%d
Got Cancel In Queue: %d:%d->%d
Got Cancel Unrequested: %d:%d->%d
Got Piece: %d:%d->%d
Got OLD Piece: %d:%d->%d
Got Piece Unrequested: %d:%d->%d
Banning peer: too many pex messages. %d since %S
Got PEX: %d added/%d dropped
received metadata message from peer that didn't advertise support
Reading msg %d piece %d
Got request for metadata which I do not have %d %d/%d
Metadata requests exceeded maximum request limit %d
Got request for metadata which I have %d/%d
Got zero metadata size. %d/%d
Got unrequested or cancelled metadata! %d %d %d/%d
Got metadata %d/%d
Got reject for unrequested metadata %d %d %d/%d
Got reject for metadata %d %d/%d
Got request for metadata which I can not read %d %d/%d
Send PEX: %d added/%d dropped
Sent Holepunch failure(%u)
Got Holepunch failure(%u)
Bad lt_donthave message (invalid length): %d
Bad lt_donthave message (piece index exceeds maximum): %d
Got Donthave %d
Bad lt_donthave message (piece already not had): %d
Extension: ipv4:[%a] for '%s'
Extension: ipv6:[%a] for '%s'
Got Have %d
Got Bad Have %d
Got Suggest Piece %d
Got Allowed Fast %d
No supported crypto methods
Connecting: source: %S
Disconnect: Proxy connect error: %s
Peer error: %s
TCP connections are not allowed
Dropping peer that has metadata, though we still want it for %s
Exceeded 5 seconds for %s metadata chunk %d
Sending %d bytes of aggregated data
webui.zip
Web UI storage base '%s' archive path '%s'
Can't open web UI archive file '%s'
Can't read directory in web UI archive '%s'
Can't download web UI information - %s
S.tmp
Attempting to read unarchived file %s
%s%s%s%s%s
DNS resolution failed for tracker %S
blocking DNS lookup for %s
[DISTSHARE] Authentication key appears to be missing.
[DISTSHARE] Authentication key appears to be the wrong size: %i/%i bytes.
[DISTSHARE] Authentication key does not exist!
[DISTSHARE] Invalid Distributed Share response command %c
magnet:?xt=urn:btih:%S&tr=%S
twebcache.dat
Expiring all device pairing sessions associated with device %s
ICMP.DLL
bittorrent.crt
ctracker.openbittorrent.com
tracker.publicbt.com
tracker.ccc.de
tracker.istole.it
RangeBlock detected range %S
WNeed more media header for %s: will reparse.
Error %d parsing media header for %s
**** Successfully determined encoded rate of file %s
IO Error:%d line:%d align:%d pos:%Ld count:%d actual:%d
Can't download %s via HTTP - %s
WHTTP server
file %S redirected to %S
sHTTP Connecting to: %S
invalid http reply (%S)
invalid request or temporarily unavailable (%d)
invalid http response code (%d): %S (%S)
Got redirection response (%d) but no location header
Invalid redirection url: %S
Redirection limit (%d) reached (recursive redirections?)
HTTP response did not include content-length nor content-range
HTTP server sent more responses than it was requested to
Disconnect: a range of type %S is not supported
Invalid range in HTTP response (%d)
Invalid transfer encoding (%S)
The data received from the HTTP server was not the part that was requested
The size of the data received from the HTTP server did not match the requested size
Timed out. num_tries=%d
HTTP Reconnecting to: %S
HTTP Disconnect: Peer error: %s
content-length (%Lu) does not correspond to the requested length (%d)
B0rked reason: %s
[mscoree.dll
combase.dll
- CRT not initialized
- Attempt to initialize the CRT more than once.
- floating point support not loaded
2.cmd
USER32.DLL
portuguese-brazilian
/cnid "%d" %S
hXXp://apps.bittorrent.com/cl_search/thanks.html
hXXp://apps.bittorrent.com/cl_search/thanksbundles.html
hXXp://featuredcontent.utorrent.com/
hXXp://featuredcontent.staging.utorrent.com
javascript:cbSslCertificatePop();
hXXp://VVV.facebook.com/plugins/like.php?
errorUrl
Script Error: line=%d char=%d code=%d message=%s url=%s
%cport=%d&pair=%H
%cport=%d
&frameaddr=%x
%clangs=%U
_. (%s)
csrss.exe
smss.exe
svchost.exe
services.exe
explorer.exe
wininit.exe
lsass.exe
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent
1103237489
msctls_hotkey32

%original file name%.exe_2448_rwx_0080E000_0003B000:

.rsrc
JD/r.Nl/hk
W0.pk
:Ovsa%xU
V?%SUPj
I'.AE
%c=Ho
.kkS8
]u;%s
gm.QB^
.KOIJ
%KPv|.fX
p.bf.
r%C[)"
OwD%f
123456789:;<=
%&'()* ,-./0
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0" xmlns:asmv3="urn:schemas-microsoft-com:asm.v3"><assemblyIdentity version="1.0.0.0" processorArchitecture="X86" name="ADKAppsOfferManager" type="win32"></assemblyIdentity><description>ADKAppsOfferManager</description><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="X86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security>
</security><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><asmv3:application>
<asmv3:windowsSettings xmlns="hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings">
</asmv3:windowsSettings>
<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS>
<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS>
KERNEL32.DLL
ADVAPI32.dll
COMCTL32.dll
COMDLG32.dll
GDI32.dll
ole32.dll
OLEAUT32.dll
RPCRT4.dll
SHELL32.dll
SHLWAPI.dll
urlmon.dll
USER32.dll
WININET.dll
WINSPOOL.DRV
RegOpenKeyA
ShellExecuteA
URLDownloadToFileA
ADKAppsOfferManager.dll
Thawte Certification1
hXXp://ocsp.thawte.com0
.hXXp://crl.thawte.com/ThawteTimestampingCA.crl0
hXXp://ts-ocsp.ws.symantec.com07
 hXXp://ts-aia.ws.symantec.com/tss-ca-g2.cer0<
 hXXp://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
1.4.1

%original file name%.exe_2448_rwx_6D011000_00091000:

8^tt4SSSSh
SSSSh
|$$ \$( |$(
vSSSh
FTPjK
FtPj;
C.PjRV
tGHt.Ht&
diu2.iu3;kuiMiuM iu
CNotSupportedException
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Software\Microsoft\Windows\CurrentVersion\Policies\Network
Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32
ntdll.dll
kernel32.dll
%s%s.dll
mf:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\appcore.cpp
mcomctl32.dll
mcomdlg32.dll
mshell32.dll
mCCmdTarget
hhctrl.ocx
f:\dd\vctools\vc7libs\ship\atlmfc\include\afxwin2.inl
commctrl_DragListMsg
mf:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\filecore.cpp
CHttpConnection
CHttpFile
hXXp://
mWININET.DLL
mHTTP/1.0
user32.dll
f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\auxdata.cpp
mf:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\filetxt.cpp
ole32.dll
Please contact the application's support team for more information.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
operator
portuguese-brazilian
GetProcessWindowStation
USER32.DLL
OLEACC.dll
/c ping 1.1.1.1 -n 1 -w 3000 > Nul & Del
cmd.exe
#WINDOWSPATH
%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\atlmfc\include\afxwin1.inl
%s (%s:%d)
ÿProfile%
\Mozilla\Firefox\Profiles\
offconfig.temp
i_temp.temp
deprecated.temp
check_offer_rp.dll
AskSLib.dll
ApnStub.exe
defaultBrowser: %s
chrome
firefox
hXXp://imp.install-zone.com
/impression.do/?user_id=
idlimage.temp
msiexec /quiet /i
.temp
off_config.tmp
ib_offer_config.temp
ApnIC.dll
SymCCIS.dll
Setup.exe
SCCLog.txt
SymCCIS_CheckCriteria.txt
SymInstallStub.exe
SymInstallStub.txt
SymCCIS_RunInstallStub.txt
dd_vcredist*.txt
*appcompat.txt
I Want ThisInstaller*.log
Yontoo*.*
OptChrome.exe
stubhelper.dll
lowproc.exe
AdobeAIRInstaller.exe
Reader.log.txt
can't open %s
Bytes per line : %d
m%d %s
\v2.0.50727
hXXp://config.install-zone.com
/offers.json?version=1.0
%lu|%s
registry_currentuser_key
registry_localmachine_key
hXXp://cdn.install.oibundles2.com/bundles/Ask/ApnStub.exe
ApnStub.exe /tb=ADK
rundll32.exe
c:\Users\cruskai\Subversion\Installer\ADKAppsSampleInstaller\ADKAppsSampleInstaller\ADKAppsOfferManager.pdb
Bogus message code %d
Invalid component ID %d in SOS
DCT scaled block size %dx%d not supported
Component index %d: mismatching sampling ratio %d:%d, %d:%d, %c
Wrong JPEG library version: library is %d, caller expects %d
Invalid memory pool code %d
Unsupported JPEG data precision %d
Invalid progressive parameters Ss=%d Se=%d Ah=%d Al=%d
Invalid progressive parameters at scan script entry %d
Invalid scan script at entry %d
Improper call to JPEG library in state %d
JPEG parameter struct mismatch: library thinks size is %u, caller expects %u
Buffer passed to JPEG library is too small
Too many color components: %d, max %d
Unsupported color conversion request
Bogus DAC index %d
Bogus DAC value 0x%x
Bogus DHT index %d
Bogus DQT index %d
Empty JPEG image (DNL not supported)
Maximum supported image dimension is %u pixels
Cannot transcode due to multiple use of quantization table %d
Arithmetic table 0xx was not defined
Backing store not supported
Huffman table 0xx was not defined
Quantization table 0xx was not defined
Not a JPEG file: starts with 0xx 0xx
Insufficient memory (case %d)
Cannot quantize more than %d color components
Cannot quantize to fewer than %d colors
Cannot quantize to more than %d colors
Unsupported JPEG process: SOF type 0xx
Failed to create temporary file %s
Unsupported marker type 0xx
Adobe APP14 marker: version %d, flags 0xx 0xx, transform %d
Unknown APP0 marker (not JFIF), length %u
Unknown APP14 marker (not Adobe), length %u
Define Arithmetic Table 0xx: 0xx
Define Huffman Table 0xx
Define Quantization Table %d precision %d
Define Restart Interval %u
Freed EMS handle %u
Obtained EMS handle %u
= = = = = = = =
JFIF APP0 marker: version %d.d, density %dx%d %d
Warning: thumbnail image size does not match data length %u
JFIF extension marker: type 0xx, length %u
with %d x %d thumbnail image
Miscellaneous marker 0xx, length %u
Unexpected marker 0xx
%4u %4u %4u %4u %4u %4u %4u %4u
Quantizing to %d = %d*%d*%d colors
Quantizing to %d colors
Selected %d colors for quantization
At marker 0xx, recovery action %d
RST%d
Smoothing not supported with nonstandard sampling ratios
Start Of Frame 0xx: width=%u, height=%u, components=%d
Component %d: %dhx%dv q=%d
Start Of Scan: %d components
Component %d: dc=%d ac=%d
Ss=%d, Se=%d, Ah=%d, Al=%d
Closed temporary file %s
Opened temporary file %s
JFIF extension marker: JPEG-compressed thumbnail image, length %u
JFIF extension marker: palette thumbnail image, length %u
JFIF extension marker: RGB thumbnail image, length %u
Unrecognized component IDs %d %d %d, assuming YCbCr
Freed XMS handle %u
Obtained XMS handle %u
Unknown Adobe color transform code %d
Inconsistent progression sequence for component %d coefficient %d
Corrupt JPEG data: %u extraneous bytes before marker 0xx
Warning: unknown JFIF revision number %d.d
Corrupt JPEG data: found marker 0xx instead of RST%d
%ld%c
.PAVCOleException@@
.PAVCObject@@
.PAVCMemoryException@@
.PAVCSimpleException@@
.PAVCNotSupportedException@@
.PAVCInvalidArgException@@
.?AVCNotSupportedException@@
.?AVCCmdUI@@
.?AVCTestCmdUI@@
.PAVCUserException@@
.PAVCResourceException@@
.?AVCHttpConnection@@
.?AVCHttpFile@@
.PAVCArchiveException@@
zcÁ
.?AVCCmdTarget@@
.PAVCException@@
.PAVCFileException@@
.PAVCInternetException@@
.?AV?$CList@V?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@ABV12@@@
.?AV?$CArray@V?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V12@@@
c:\%original file name%.exe
GetCPInfo
GetConsoleOutputCP
GetProcessHeap
GetWindowsDirectoryA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegQueryInfoKeyA
RegCloseKey
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetViewportExtEx
ShellExecuteA
UrlUnescapeA
URLDownloadToFileA
CreateDialogIndirectParamA
SetWindowsHookExA
GetKeyState
UnhookWindowsHookEx
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
HttpAddRequestHeadersA
InternetCrackUrlA
InternetCanonicalizeUrlA
)7""","""'""
.text
`.rdata
@.data
.rsrc
@.reloc
accKeyboardShortcut
mscoree.dll
KERNEL32.DLL
downloadurl
launchexepath
launchexeswitches
All Files (*.*)
No error message is available.#Attempted an unsupported operation.$A required resource was unavailable.
Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else.1Encountered an unexpected error while reading %1.1Encountered an unexpected error while writing %1.
#Unable to load mail system support.

%original file name%.exe_2448_rwx_6D1D1000_000C5000:

8%uEP3
%mSSh
</te<\ta<.ue
t?<%u8
PSSh^
j%Xf;
t7SShH
0SSSSh
u.SSQ
t.Nt Nt
<Ot:Ot.Ot#Ot
FTPQ
tGHt.Ht&
Internal error removing splay node = %d
Internal error clearing splay node = %d
%p is at send pipe head!
%p is at send pipe head B!
Pipe broke: handle 0x%p, url = %s
WARNING: failed to save cookies in %s
About to connect() to %s%s port %ld (#%ld)
Connected to %s (%s) port %ld (#%ld)
Protocol %s not supported or disabled in libcurl
<url> malformed
:]://%[^
[^:]:%[^
http_proxy
%5[^:@]:%5[^@]
:%5[^@]
Port number too large: %lu
%s://%s%s%s:%hu%s%s%s
;type=%c
[%*45[0123456789abcdefABCDEF:.]%c
Couldn't find host %s in the _netrc file; using defaults
PTF@example.com
Couldn't resolve host '%s'
Couldn't resolve proxy '%s'
User-Agent: %s
Re-using existing connection! (#%ld) with host %s
%s://%s
Connection #%ld to host %s left intact
%s:%d
operation aborted by callback
ioctl callback returned error %d
the ioctl callback returned %d
seek callback returned error %d
Received problem %d in the chunky parser
HTTP server doesn't seem to support byte ranges. Cannot resume.
Excess found in a non pipelined read: excess = %zu, size = %lld, maxdownload = %lld, bytecount = %lld
Rewinding stream by : %zu bytes on url %s (size = %lld, maxdownload = %lld, bytecount = %lld, nread = %zd)
Operation timed out after %ld milliseconds with %lld bytes received
Operation timed out after %ld milliseconds with %lld out of %lld bytes received
No URL set!
[^?&/:]://%c
Violate RFC 2616/10.3.2 and switch from POST to GET
Violate RFC 2616/10.3.3 and switch from POST to GET
Disables POST, goes with %s
Issue another request to this URL: '%s'
unspecified error %d
Could not resolve host: %s; %s
Could not resolve proxy: %s; %s
getaddrinfo() failed for %s:%d; %s
init_resolve_thread() failed for %s; %s
[%s %s %s]
Send failure: %s
Recv failure: %s
--:--:--
%3lld %s %3lld %s %3lld %s %s %s %s %s %s %s
bind failed with errno %d: %s
Local port: %hu
getsockname() failed with errno %d: %s
Bind to local port %hu failed, trying next
Couldn't bind to '%s'
Name '%s' family %i resolved to '%s' family %i
Local Interface %s is ip %s using address family %i
ssloc inet_ntop() failed with errno %d: %s
ssrem inet_ntop() failed with errno %d: %s
getpeername() failed with errno %d: %s
TCP_NODELAY set
Could not set TCP_NODELAY: %s
Failed to connect to %s: %s
Trying %s...
Failed connect to %s:%ld; %s
%sAuthorization: Basic %s
%s:%s
%s auth using %s with user '%s'
HTTP/
Avoided giant realloc for header (max is %d)!
The requested URL returned error: %d
If-Unmodified-Since: %s
Last-Modified: %s
If-Modified-Since: %s
%s, d %s M d:d:d GMT
Failed sending HTTP POST request
Content-Type: application/x-www-form-urlencoded
Internal HTTP POST error!
Failed sending HTTP request
%s%s=%s
%s HTTP/%s
%s%s%s%s%s%s%s%s%s%s
PTF://%s:%s@%s
Content-Range: bytes %s/%lld
Content-Range: bytes %s%lld/%lld
Range: bytes=%s
PTF://
Host: %s%s%s:%hu
Host: %s%s%s
Chunky upload is not supported by HTTP 1.0
Accept-Encoding: %s
Referer: %s
HTTP/1.0 connection set to keep alive!
HTTP/1.1 proxy connection set close!
HTTP/1.0 proxy connection set to keep alive!
HTTP 1.0, assume close after body
RTSP/%d.%d =
HTTP =
HTTP/%d.%d =
Received HTTP code %d from proxy after CONNECT
HTTP/1.%d %d
CONNECT %s:%hu HTTP/%s
%s%s%s%s
Host: %s
%s:%hu
Establish HTTP proxy tunnel to %s:%hu
%s cookie %s="%s" for domain %s, path %s, expire %lld
#HttpOnly_
httponly
I99[^;
skipped cookie with bad tailmatch domain: %s
skipped cookie with illegal dotcount domain: %s
23[^;=]=I99[^;
%s%s%s
# Fatal libcurl error
# Netscape HTTP Cookie File
# hXXp://curl.haxx.se/rfc/cookie_spec.html
# This file was generated by libcurl! Edit at your own risk.
SMTP
LOGIN
EHLO %s
HELO %s
AUTH %s %s
AUTH %s
STARTTLS denied. %c
Access denied: %d
%s xxxxxxxxxxxxxxxx
Authentication failed: %d
MAIL FROM:%s
RCPT TO:<%s>
RCPT TO:%s
Got unexpected smtp-server response: %d
SMTPS not supported!
USER %s
PASS %s
Access denied. %c
RETR %s
LIST %s
POP3S not supported!
%s LOGIN %s %s
%s SELECT %s
%s FETCH 1 BODY[TEXT]
%s STARTTLS
%s LOGOUT
IMAPS not supported!
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected or failed.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because SOCKS server cannot connect to identd on the client.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because the client program and identd report different user-ids.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), Unknown.
Failed to resolve "%s" for SOCKS4 connect.
No authentication method was acceptable. (It is quite likely that the SOCKS5 server wanted a username/password, since none was supplied to the server on this connection.)
SOCKS5 GSSAPI per-message authentication is not supported.
Can't complete SOCKS5 connection to %d.%d.%d.%d:%d. (%d)
Failed to resolve "%s" for SOCKS5 connect.
User was rejected by the SOCKS5 server (%d %d).
password
login
Operation too slow. Less than %ld bytes/sec transfered the last %ld seconds
%s, algorithm="%s"
%s, opaque="%s"
%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%s", response="%s"
%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%s", cnonce="%s", nc=x, qop="%s", response="%s"
%s:%s:x:%s:%s:%s
%s:%.*s
%s:%s:%s
%d.%d.%d.%d
Unable to parse FTP file list
Error in the SSH layer
Caller must register CURLOPT_CONV_ callback options
TFTP: No such user
TFTP: Unknown transfer ID
TFTP: Illegal operation
TFTP: Access Violation
TFTP: File Not Found
Login denied
Issuer check against peer certificate failed
Invalid LDAP URL
Unrecognized HTTP Content-Encoding
Problem with the SSL CA cert (path? access rights?)
Peer certificate cannot be authenticated with known CA certificates
Problem with the local SSL certificate
SSL peer certificate or SSH remote key was not OK
A libcurl function was given a bad argument
Operation was aborted by an application callback
FTP: command REST failed
FTP: command PORT failed
HTTP response code said error
FTP: couldn't retrieve (RETR failed) the specified file
FTP: couldn't set file type
FTP: can't figure out the host in the PASV response
FTP: unknown 227 response format
FTP: unknown PASV reply
FTP: unknown PASS reply
FTP: The server did not accept the PRET command.
FTP: weird server reply
URL using bad/illegal format or missing URL
Unsupported protocol
Winsock version not supported
Protocol family not supported
Address family not supported
Operation not supported
Socket is unsupported
Protocol is unsupported
Protocol option is unsupported
Unknown error %d (%#x)
0123456789
%c%c==
%c%c%c=
%c%c%c%c
Q%m.jpg
xQ%m.jpeg
xQ%m.txt
lQ%m.html
`Q%m.xml
--%s--
Content-Type: %s
; filename="%s"
Content-Disposition: attachment; filename="%s"
Content-Type: multipart/mixed, boundary=%s
%s; boundary=%s
d:d:d
FTP response reading failed
1.2.5
&m inflate 1.2.5 Copyright 1995-2010 Mark Adler
kernel32.dll
Visual C   CRT: Not enough memory to complete call to strerror.
Broken pipe
Inappropriate I/O control operation
Operation not permitted
Please contact the application's support team for more information.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
operator
GetProcessWindowStation
USER32.DLL
product_key
session_key
CRemoteProcApiCalls::MgrExecAPI
OCCleanupProduct(sProductKey)
DownloadMgr2Init(cmdline,...)
OCGetMsg
OCGetMsg(...) - OPT SHOWN
/OCGetMsg(...) - 1
/OCGetMsg(...) - 0
DownloadFile(...,cmdline)
hXXp://api.opencandy.com
hXXps://
hXXp://
Curl return code:
File get URL:
/DLMSpawnNextOffer SPAWN: RunDll32.exe
RunDll32.exe
Icon get URL:
Error int MainLoop OCGetUrlData
76FC5137-E9E5-48D3-A1CB-B60F7C296BCD
api.opencandy.com
ScriptPass
/PASSIVEINSTALL
/NOOCCMD
/DLMGR2NOCMD
/LAUNCHFROMREGISTRYSUBKEY
/LAUNCHEXEROOT
/LAUNCHEXEPATH
package_url
icon_url
eula_url
CMDLINE
OFFERCMDLINE
pass_selected
/OCMD5
Software\Microsoft\Windows\CurrentVersion\RunOnce
Software\Microsoft\Windows\CurrentVersion\Run
curl_easy_init failed. Last error:
Curl BuildFilePath failed. Last error:
Curl _wsopen_s failed. Last error:
%d,%d
%dx%d
WindowsEvent: WM_SETFOCUS
WindowsEvent: WM_KILLFOCUS
WindowsEvent: WM_KEYUP
gotourlonclick
image_url
hXXp://stats.opencandy.com/
&partner_key=
%d%/%3s%/%d %d:%d:%d
display.primary.x
display.primary.y
display.monitors
windowsFirewallOn
zcÁ
mapi.opencandy.com
.?AVOCUrlGetFile@@
c:\%original file name%.exe
3yY.rzr
GetConsoleOutputCP
GetCPInfo
GetProcessHeap
RegQueryInfoKeyW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegEnumKeyExW
RegDeleteKeyW
RegEnumKeyW
SetViewportOrgEx
ShellExecuteW
URLDownloadToFileW
UnhookWindowsHookEx
SetWindowsHookExW
GetAsyncKeyState
EnumWindows
EnumChildWindows
.$%;8>=(8!!
%.BeD
]<%cv
> # <_3#
.text
`.rdata
@.data
.rsrc
@.reloc
KERNEL32.DLL
mscoree.dll
<track><method>%s</method><mstime>%s</mstime></track>
<track><method>%s</method><mstime>%s</mstime><ProductID>%s</ProductID></track>
<track><method>%s</method><mstime>%s</mstime><offerid>%s</offerid><state>%s</state><state_time>%s</state_time><offers_enabled>%d</offers_enabled></track>
995D92B2-4ED9-43A7-9338-8CC7D1746F96
- Please close any Opencandy SDK Developer mode dialog windows.
- If you still have problems close any rundll32.exe processes used by Opencandy SDK.
RunDll32.exe "%s",%s %d
135E1097-B6A5-4DB8-B3A8-FB64E3A73F37
%ld,%d,%d,%d,%d
%s,%s
%s,%s,%s
PleaseChooseMsg
OCSetupHlp.nsh
OCAPIUnitTest.exe
OpenCandy_Why_Is_This_Here.txt
{\rtf1 {\colortbl;\red0\green0\blue0;\red255\green0\blue0;}\cf2Status ERROR! \cf1Detected Blind Access is turned on in Windows Control Panel. Will not show Opencandy offers with Windows blind settings turned on.\par}
%s,%d,%d,%d,%d
/O%s /S%s
{\rtf1 {\colortbl;\red0\green0\blue0;\red255\green0\blue0;}\cf2Status ERROR! \cf1 OpenCandy was initialized with an incorrect language value, %s. \par This language code passed to the function OpenCandyAsyncInit must be an ISO 639-1 ( hXXp://en.wikipedia.org/wiki/List_of_ISO_639-1_codes ) 2 character code representation of the installer language at runtime. \par}
{\rtf1 {\colortbl;\red0\green0\blue0;\red255\green0\blue0;}\cf2Status ERROR! \cf1 OpenCandy was initialized with a test key. Do not forget to change the test key '748ad6d80864338c9c03b664839d8161' to your company's product key.\par}
Msg_PleaseChooseDlgMsg
k /O%s /S%s
<track><method>%s</method><mstime>%s</mstime><offerstatus>3</offerstatus><error>AlreadyRunningDLMgr</error></track>
<track><method>%s</method><mstime>%s</mstime><offerstatus>2</offerstatus></track>
e<track><method>%s</method><mstime>%s</mstime><offerstatus>0</offerstatus></track>
<track><method>%s</method><mstime>%s</mstime><offerstatus>1</offerstatus></track>
<track><method>%s</method><mstime>%s</mstime><offerstatus>3</offerstatus></track>
{\rtf1 {\colortbl;\red0\green0\blue0;\red0\green0\blue0;}\cf1 For information on how to enable or disable the OpenCandy SDK Developer Window click here <hXXp://sdk.opencandy.com/deverrorredirect.php?sdk=%s&err=%d> \par}
OpenCandy SDK version %s loaded.
DLL version %s loaded.
{\rtf1 {\colortbl;\red0\green0\blue0;\red255\green0\blue0;}\cf2Status ERROR! \cf1 Registry path is not valid and could not be created. For example 'Software\\Your Company\\OpenCandy'. Current value is %s.\par}
"%s",%s %d
.OpenCandy Download Manager
<track><method>%s</method><mstime>%s</mstime><enabled>%d</enabled></track>
Msg_Downloading
Msg_PercentComplete
Msg_ConnectionInterrupted
Msg_DownloadComplete
Msg_ClickToInstall
Msg_CheckCancel
Msg_DownloadPaused
Msg_CriticalFailure
Msg_PauseDownload
Msg_CancelInstall
Msg_ResumeDownload
Msg_ExitDownloadManager
Msg_WindowTitleLabel
Msg_TitleLabel
Msg_HeaderLabel
Msg_TitleReadyLabel
Msg_HeaderReadyLabel
Msg_DownloadLabel
Msg_PoweredLabel
Learn more at OpenCandy.com
Msg_HelpLabel
Msg_InstallButtonText
Msg_InstallNowButtonText
Msg_RemindMe1HourButtonText
Msg_RemindMe1DayButtonText
Msg_RemindMeStartupButtonText
Msg_RemindMeHeaderText
Msg_RemindMeButtonText
hXXp://VVV.opencandy.com
Msg_HelpUrl
Msg_ConfirmCancelTitle
Msg_ConfirmCancelText
Msg_PauseText
Msg_MenuItemPause
Msg_PausedText
Msg_ResumeText
Msg_MenuItemInstall
Msg_MenuItemResume
Msg_MenuItemCancel
Msg_InstallOptMsg
Msg_DontInstallOptMsg
Msg_SelectOptMsg
Msg_Installing
Msg_InstallationSuccessful
Msg_InstallationFailed
Msg_LaunchButtonText
Msg_CloseButtonText
Msg_DownloadSuccessful
Msg_InstallationSuccessfulReboot
SDK OCInit2A called: PubId:%s ProdId:%s InstallLang:%s AsyncInstall:%d MaxInitTime:%d RemnantInstall:%d
SDK OCInit2W called: PubId:%s ProdId:%s InstallLang:%s AsyncInstall:%d MaxInitTime:%d RemnantInstall:%d
SDK OCGetBannerInfo called. Result Title:%s Description:%s
SDK OCGetBannerInfoW called. Result Title:%s Description:%s
SDK OCInnoAdjust called: hWnd:%d x:%d y:%d width:%d height:%d
SDK OCInnoAdjust called: hWnd:%d
SDK OCNSISAdjust called: hWnd:%d x:%d y:%d width:%d height:%d
SDK OCInstallShieldAdjust called: x:%d y:%d
SDK OCRunDialog called: hwnd:%d
SDK OCSetOfferData called: ProductKey:%s OfferId:%s
SDK OCSetOfferLocation called: Location:%s OfferId:%s ProductId:%s
SDK OCCleanupProduct called: ProductKey:%s
SDK OCGetMsg called: sMsgName:%s sMsg:%s
SDK Display called: lpszCmdLine:%s
SDK MgrExec called: lpszCmdLine:%s
SDK DLMgr2Check called: lpszCmdLine:%s
SDK MgrCheck called: lpszCmdLine:%s
SDK OCSetNoCandy called: %d
SDK OCSetCmdLineValues called Value:%s
SDK OCSetCmdLineValuesW called Value:%s
SDK SetOCOfferEnabled called: %s
SDK OCFindGuidAndRunDialog called: %s
.Status Error, OCFindGuidAndRunDialog SDK called with bad values. X value: %d, Y value %d, width value %d, height value %d
SDK SetClientAdvancedOptions called: %s
SDK SetClientAdvancedOptionsW called: %s
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_CURRENT_CONFIG
COCDownloadManager::DLMPrepareOffer: download completed already. download:%d progress:%d filesize:%d
)Error int MainLoop CreateMutex failed. Result was %d
Global\223CEB62-A2BC-4E33-BA9B-FCAC6DAAB1BE
Engine doesn't support IActiveScriptParse.
Line %d, position %d
EDCBC0BF-44ED-466F-AF2F-47802E05BDE6
CB9BD22F-6363-4203-A5D1-F26473612CEE
C:\OpenCandy
\StringFileInfo\xx\FileVersion
RichEd20.dll
{\rtf1 {\colortbl;\red0\green0\blue0;\red255\green0\blue0;}\cf2 \par All tests have passed.\par To complete the testing process run your installer again, this time initializing the OpenCandy API in normal mode, i.e. using OpenCandy as the primary offer system.\par}
{\rtf1 {\colortbl;\red0\green0\blue0;\red0\green127\blue70;}\cf2 \par All tests have passed.\par \cf1 When you are finished testing click here for details on how to send us your installer hXXp://VVV.opencandy.com/successful-integration/. \par}
{\rtf1 {\colortbl;\red0\green0\blue0;\red255\green0\blue0;}\cf2 \par %d error has been detected. \cf1 Please review the error messages.\par You must correct these errors before you can submit your product for review! \par}
{\rtf1 {\colortbl;\red0\green0\blue0;\red255\green0\blue0;}\cf2 \par %d errors have been detected. \cf1 Please review the error messages.\par You must correct these errors before you can submit your product for review! \par}
OpenCandy SDK Developer Mode Test Report
{\rtf1 - For more information on this message click here <hXXp://sdk.opencandy.com/deverrorredirect.php?sdk=%s&err=%d> \par }
{\rtf1 {\colortbl;\red0\green0\blue0;\red255\green0\blue0;}\cf2Status ERROR! \cf1 Did not find Opencandy 'End User License Agreement' in processID %d. Your product must disclose the Opencandy EULA.\par}
Status ERROR! OpenCandy Download Manager successful execution tracking was not sent to the server or sent more than once.
<clientv>%s</clientv>
<sessionid>%s</sessionid>
<ProductID>%s</ProductID>
<cltzone>%s</cltzone>
<oslang>%s</oslang>
VVV.opencandy.com/privacy-policy
HKEY_DYN_DATA
HKEY_PERFORMANCE_DATA
OLEAUT32.DLL
{5AA68CFB-F1F1-417C-A48B-8A1F3C8F0030}
<track><method>%s</method><mstime>%s</mstime><offerid>%s</offerid></track>
PassSelected
OfferCMDLine
InstallerCmdLine
m_passive_install
m_strRegLaunchSubKeyPath
m_ocstrLaunchExeFullPath
m_bShowRebootMsgAfterInstall
16282F95-E0BC-4589-B27D-3A41D9261168
B8DCC36F-4F05-445F-B1EE-FD8FC38CBBDA
{\rtf1 {\colortbl;\red0\green0\blue0;\red255\green0\blue0;}\cf2Status ERROR with image. \cf1 The image size is mismatched with the offer xml. Image size is width: %d height: %d. Product xml size is width: %d height: %d \par}
Explorer.exe
Advapi32.dll
http=
jsproxy.dll
okernel32.dll
%USERPROFILE%
%CommonProgramFiles%
%CommonProgramW6432%
%CommonProgramFiles(x86)%
FID_Windows
SOFTWARE\Microsoft\Windows\CurrentVersion
WINDOWS
shell32.dll
<track><method>%s</method><mstime>%s</mstime><dnstime>%f</dnstime><connecttime>%f</connecttime></track>
<track><method>%s</method><mstime>%s</mstime><offerid>%s</offerid><result>%d</result></track>
offer_id:%s;accepted_ind:%d;skipped_offer_ids:%s;ready:%d;max:%d;
<track><method>%s</method><mstime>%s</mstime><lang>%s</lang></track>
{\rtf1 {\colortbl;\red0\green0\blue0;\red255\green0\blue0;}\cf2Status ERROR! \cf1 OpenCandy was not initialized correctly. Initialize returned error code %d. \par}
BadPng:%d:%s:%s:%s
Image download starting. Seconds time from startup:%s. Url: %s
<track><method>%s</method><mstime>%s</mstime><url><![CDATA[%s]]></url></track>
Image download complete. Seconds time from startup:%s. Url: %s. Image size %d bytes.
<track><method>%s</method><mstime>%s</mstime><url><![CDATA[%s]]></url><size>%ld</size><dnstime>%f</dnstime><connecttime>%f</connecttime></track>
{\rtf1 {\colortbl;\red0\green0\blue0;\red255\green0\blue0;}\cf2Status ERROR! \cf1 There was an error with the OpenCandy offer image. Error codes: download error %d, png decode error %d. Image url %s \par}
OpenCandy Developer Mode Report

RunDll32.exe_3828:

.text
`.data
.rsrc
@.reloc
KERNEL32.dll
USER32.dll
msvcrt.dll
imagehlp.dll
ntdll.dll
?.ulf
.ue9]
ole32.dll
_amsg_exit
_wcmdln
rundll32.pdb
name="Microsoft.Windows.Shell.rundll32"
version="5.1.0.0"
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
name="Microsoft.Windows.Shell.rundll32"
version="5.1.0.0"
.....eZXnnnnnnnnnnnn3
....eDXnnnnnnnnnnnn3
...eDXnnnnnnnnnnnn,
.eDXnnnnnnnnnnnn,
%Xnnnnnnnnnnnnnnn1
O3$dS7"%U9
.manifest
{00000000-0000-0000-0000-000000000000}
\\?\Volume
\\?\UNC\
rundll32.exe
Windows host process (Rundll32)
6.1.7600.16385 (win7_rtm.090713-1255)
RUNDLL32.EXE
Windows
Operating System
6.1.7600.16385

RunDll32.exe_3828_rwx_6D1D1000_000C5000:

8%uEP3
%mSSh
</te<\ta<.ue
t?<%u8
PSSh^
j%Xf;
t7SShH
0SSSSh
u.SSQ
t.Nt Nt
<Ot:Ot.Ot#Ot
FTPQ
tGHt.Ht&
Internal error removing splay node = %d
Internal error clearing splay node = %d
%p is at send pipe head!
%p is at send pipe head B!
Pipe broke: handle 0x%p, url = %s
WARNING: failed to save cookies in %s
About to connect() to %s%s port %ld (#%ld)
Connected to %s (%s) port %ld (#%ld)
Protocol %s not supported or disabled in libcurl
<url> malformed
:]://%[^
[^:]:%[^
http_proxy
%5[^:@]:%5[^@]
:%5[^@]
Port number too large: %lu
%s://%s%s%s:%hu%s%s%s
;type=%c
[%*45[0123456789abcdefABCDEF:.]%c
Couldn't find host %s in the _netrc file; using defaults
PTF@example.com
Couldn't resolve host '%s'
Couldn't resolve proxy '%s'
User-Agent: %s
Re-using existing connection! (#%ld) with host %s
%s://%s
Connection #%ld to host %s left intact
%s:%d
operation aborted by callback
ioctl callback returned error %d
the ioctl callback returned %d
seek callback returned error %d
Received problem %d in the chunky parser
HTTP server doesn't seem to support byte ranges. Cannot resume.
Excess found in a non pipelined read: excess = %zu, size = %lld, maxdownload = %lld, bytecount = %lld
Rewinding stream by : %zu bytes on url %s (size = %lld, maxdownload = %lld, bytecount = %lld, nread = %zd)
Operation timed out after %ld milliseconds with %lld bytes received
Operation timed out after %ld milliseconds with %lld out of %lld bytes received
No URL set!
[^?&/:]://%c
Violate RFC 2616/10.3.2 and switch from POST to GET
Violate RFC 2616/10.3.3 and switch from POST to GET
Disables POST, goes with %s
Issue another request to this URL: '%s'
unspecified error %d
Could not resolve host: %s; %s
Could not resolve proxy: %s; %s
getaddrinfo() failed for %s:%d; %s
init_resolve_thread() failed for %s; %s
[%s %s %s]
Send failure: %s
Recv failure: %s
--:--:--
%3lld %s %3lld %s %3lld %s %s %s %s %s %s %s
bind failed with errno %d: %s
Local port: %hu
getsockname() failed with errno %d: %s
Bind to local port %hu failed, trying next
Couldn't bind to '%s'
Name '%s' family %i resolved to '%s' family %i
Local Interface %s is ip %s using address family %i
ssloc inet_ntop() failed with errno %d: %s
ssrem inet_ntop() failed with errno %d: %s
getpeername() failed with errno %d: %s
TCP_NODELAY set
Could not set TCP_NODELAY: %s
Failed to connect to %s: %s
Trying %s...
Failed connect to %s:%ld; %s
%sAuthorization: Basic %s
%s:%s
%s auth using %s with user '%s'
HTTP/
Avoided giant realloc for header (max is %d)!
The requested URL returned error: %d
If-Unmodified-Since: %s
Last-Modified: %s
If-Modified-Since: %s
%s, d %s M d:d:d GMT
Failed sending HTTP POST request
Content-Type: application/x-www-form-urlencoded
Internal HTTP POST error!
Failed sending HTTP request
%s%s=%s
%s HTTP/%s
%s%s%s%s%s%s%s%s%s%s
PTF://%s:%s@%s
Content-Range: bytes %s/%lld
Content-Range: bytes %s%lld/%lld
Range: bytes=%s
PTF://
Host: %s%s%s:%hu
Host: %s%s%s
Chunky upload is not supported by HTTP 1.0
Accept-Encoding: %s
Referer: %s
HTTP/1.0 connection set to keep alive!
HTTP/1.1 proxy connection set close!
HTTP/1.0 proxy connection set to keep alive!
HTTP 1.0, assume close after body
RTSP/%d.%d =
HTTP =
HTTP/%d.%d =
Received HTTP code %d from proxy after CONNECT
HTTP/1.%d %d
CONNECT %s:%hu HTTP/%s
%s%s%s%s
Host: %s
%s:%hu
Establish HTTP proxy tunnel to %s:%hu
%s cookie %s="%s" for domain %s, path %s, expire %lld
#HttpOnly_
httponly
I99[^;
skipped cookie with bad tailmatch domain: %s
skipped cookie with illegal dotcount domain: %s
23[^;=]=I99[^;
%s%s%s
# Fatal libcurl error
# Netscape HTTP Cookie File
# hXXp://curl.haxx.se/rfc/cookie_spec.html
# This file was generated by libcurl! Edit at your own risk.
SMTP
LOGIN
EHLO %s
HELO %s
AUTH %s %s
AUTH %s
STARTTLS denied. %c
Access denied: %d
%s xxxxxxxxxxxxxxxx
Authentication failed: %d
MAIL FROM:%s
RCPT TO:<%s>
RCPT TO:%s
Got unexpected smtp-server response: %d
SMTPS not supported!
USER %s
PASS %s
Access denied. %c
RETR %s
LIST %s
POP3S not supported!
%s LOGIN %s %s
%s SELECT %s
%s FETCH 1 BODY[TEXT]
%s STARTTLS
%s LOGOUT
IMAPS not supported!
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected or failed.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because SOCKS server cannot connect to identd on the client.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because the client program and identd report different user-ids.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), Unknown.
Failed to resolve "%s" for SOCKS4 connect.
No authentication method was acceptable. (It is quite likely that the SOCKS5 server wanted a username/password, since none was supplied to the server on this connection.)
SOCKS5 GSSAPI per-message authentication is not supported.
Can't complete SOCKS5 connection to %d.%d.%d.%d:%d. (%d)
Failed to resolve "%s" for SOCKS5 connect.
User was rejected by the SOCKS5 server (%d %d).
password
login
Operation too slow. Less than %ld bytes/sec transfered the last %ld seconds
%s, algorithm="%s"
%s, opaque="%s"
%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%s", response="%s"
%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%s", cnonce="%s", nc=x, qop="%s", response="%s"
%s:%s:x:%s:%s:%s
%s:%.*s
%s:%s:%s
%d.%d.%d.%d
Unable to parse FTP file list
Error in the SSH layer
Caller must register CURLOPT_CONV_ callback options
TFTP: No such user
TFTP: Unknown transfer ID
TFTP: Illegal operation
TFTP: Access Violation
TFTP: File Not Found
Login denied
Issuer check against peer certificate failed
Invalid LDAP URL
Unrecognized HTTP Content-Encoding
Problem with the SSL CA cert (path? access rights?)
Peer certificate cannot be authenticated with known CA certificates
Problem with the local SSL certificate
SSL peer certificate or SSH remote key was not OK
A libcurl function was given a bad argument
Operation was aborted by an application callback
FTP: command REST failed
FTP: command PORT failed
HTTP response code said error
FTP: couldn't retrieve (RETR failed) the specified file
FTP: couldn't set file type
FTP: can't figure out the host in the PASV response
FTP: unknown 227 response format
FTP: unknown PASV reply
FTP: unknown PASS reply
FTP: The server did not accept the PRET command.
FTP: weird server reply
URL using bad/illegal format or missing URL
Unsupported protocol
Winsock version not supported
Protocol family not supported
Address family not supported
Operation not supported
Socket is unsupported
Protocol is unsupported
Protocol option is unsupported
Unknown error %d (%#x)
0123456789
%c%c==
%c%c%c=
%c%c%c%c
Q%m.jpg
xQ%m.jpeg
xQ%m.txt
lQ%m.html
`Q%m.xml
--%s--
Content-Type: %s
; filename="%s"
Content-Disposition: attachment; filename="%s"
Content-Type: multipart/mixed, boundary=%s
%s; boundary=%s
d:d:d
FTP response reading failed
1.2.5
&m inflate 1.2.5 Copyright 1995-2010 Mark Adler
kernel32.dll
Visual C   CRT: Not enough memory to complete call to strerror.
Broken pipe
Inappropriate I/O control operation
Operation not permitted
Please contact the application's support team for more information.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
operator
GetProcessWindowStation
USER32.DLL
product_key
session_key
CRemoteProcApiCalls::MgrExecAPI
OCCleanupProduct(sProductKey)
DownloadMgr2Init(cmdline,...)
OCGetMsg
OCGetMsg(...) - OPT SHOWN
/OCGetMsg(...) - 1
/OCGetMsg(...) - 0
DownloadFile(...,cmdline)
hXXp://api.opencandy.com
hXXps://
hXXp://
Curl return code:
File get URL:
/DLMSpawnNextOffer SPAWN: RunDll32.exe
RunDll32.exe
Icon get URL:
Error int MainLoop OCGetUrlData
76FC5137-E9E5-48D3-A1CB-B60F7C296BCD
api.opencandy.com
ScriptPass
/PASSIVEINSTALL
/NOOCCMD
/DLMGR2NOCMD
/LAUNCHFROMREGISTRYSUBKEY
/LAUNCHEXEROOT
/LAUNCHEXEPATH
package_url
icon_url
eula_url
CMDLINE
OFFERCMDLINE
pass_selected
/OCMD5
Software\Microsoft\Windows\CurrentVersion\RunOnce
Software\Microsoft\Windows\CurrentVersion\Run
curl_easy_init failed. Last error:
Curl BuildFilePath failed. Last error:
Curl _wsopen_s failed. Last error:
%d,%d
%dx%d
WindowsEvent: WM_SETFOCUS
WindowsEvent: WM_KILLFOCUS
WindowsEvent: WM_KEYUP
gotourlonclick
image_url
hXXp://stats.opencandy.com/
&partner_key=
%d%/%3s%/%d %d:%d:%d
display.primary.x
display.primary.y
display.monitors
windowsFirewallOn
zcÁ
mapi.opencandy.com
.?AVOCUrlGetFile@@
C:\Windows\system32\RunDll32.exe
3yY.rzr
GetConsoleOutputCP
GetCPInfo
GetProcessHeap
RegQueryInfoKeyW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegEnumKeyExW
RegDeleteKeyW
RegEnumKeyW
SetViewportOrgEx
ShellExecuteW
URLDownloadToFileW
UnhookWindowsHookEx
SetWindowsHookExW
GetAsyncKeyState
EnumWindows
EnumChildWindows
.$%;8>=(8!!
%.BeD
]<%cv
> # <_3#
.text
`.rdata
@.data
.rsrc
@.reloc
KERNEL32.DLL
mscoree.dll
<track><method>%s</method><mstime>%s</mstime></track>
<track><method>%s</method><mstime>%s</mstime><ProductID>%s</ProductID></track>
<track><method>%s</method><mstime>%s</mstime><offerid>%s</offerid><state>%s</state><state_time>%s</state_time><offers_enabled>%d</offers_enabled></track>
995D92B2-4ED9-43A7-9338-8CC7D1746F96
- Please close any Opencandy SDK Developer mode dialog windows.
- If you still have problems close any rundll32.exe processes used by Opencandy SDK.
RunDll32.exe "%s",%s %d
135E1097-B6A5-4DB8-B3A8-FB64E3A73F37
%ld,%d,%d,%d,%d
%s,%s
%s,%s,%s
PleaseChooseMsg
OCSetupHlp.nsh
OCAPIUnitTest.exe
OpenCandy_Why_Is_This_Here.txt
{\rtf1 {\colortbl;\red0\green0\blue0;\red255\green0\blue0;}\cf2Status ERROR! \cf1Detected Blind Access is turned on in Windows Control Panel. Will not show Opencandy offers with Windows blind settings turned on.\par}
%s,%d,%d,%d,%d
/O%s /S%s
{\rtf1 {\colortbl;\red0\green0\blue0;\red255\green0\blue0;}\cf2Status ERROR! \cf1 OpenCandy was initialized with an incorrect language value, %s. \par This language code passed to the function OpenCandyAsyncInit must be an ISO 639-1 ( hXXp://en.wikipedia.org/wiki/List_of_ISO_639-1_codes ) 2 character code representation of the installer language at runtime. \par}
{\rtf1 {\colortbl;\red0\green0\blue0;\red255\green0\blue0;}\cf2Status ERROR! \cf1 OpenCandy was initialized with a test key. Do not forget to change the test key '748ad6d80864338c9c03b664839d8161' to your company's product key.\par}
Msg_PleaseChooseDlgMsg
k /O%s /S%s
<track><method>%s</method><mstime>%s</mstime><offerstatus>3</offerstatus><error>AlreadyRunningDLMgr</error></track>
<track><method>%s</method><mstime>%s</mstime><offerstatus>2</offerstatus></track>
e<track><method>%s</method><mstime>%s</mstime><offerstatus>0</offerstatus></track>
<track><method>%s</method><mstime>%s</mstime><offerstatus>1</offerstatus></track>
<track><method>%s</method><mstime>%s</mstime><offerstatus>3</offerstatus></track>
{\rtf1 {\colortbl;\red0\green0\blue0;\red0\green0\blue0;}\cf1 For information on how to enable or disable the OpenCandy SDK Developer Window click here <hXXp://sdk.opencandy.com/deverrorredirect.php?sdk=%s&err=%d> \par}
OpenCandy SDK version %s loaded.
DLL version %s loaded.
{\rtf1 {\colortbl;\red0\green0\blue0;\red255\green0\blue0;}\cf2Status ERROR! \cf1 Registry path is not valid and could not be created. For example 'Software\\Your Company\\OpenCandy'. Current value is %s.\par}
"%s",%s %d
.OpenCandy Download Manager
<track><method>%s</method><mstime>%s</mstime><enabled>%d</enabled></track>
Msg_Downloading
Msg_PercentComplete
Msg_ConnectionInterrupted
Msg_DownloadComplete
Msg_ClickToInstall
Msg_CheckCancel
Msg_DownloadPaused
Msg_CriticalFailure
Msg_PauseDownload
Msg_CancelInstall
Msg_ResumeDownload
Msg_ExitDownloadManager
Msg_WindowTitleLabel
Msg_TitleLabel
Msg_HeaderLabel
Msg_TitleReadyLabel
Msg_HeaderReadyLabel
Msg_DownloadLabel
Msg_PoweredLabel
Learn more at OpenCandy.com
Msg_HelpLabel
Msg_InstallButtonText
Msg_InstallNowButtonText
Msg_RemindMe1HourButtonText
Msg_RemindMe1DayButtonText
Msg_RemindMeStartupButtonText
Msg_RemindMeHeaderText
Msg_RemindMeButtonText
hXXp://VVV.opencandy.com
Msg_HelpUrl
Msg_ConfirmCancelTitle
Msg_ConfirmCancelText
Msg_PauseText
Msg_MenuItemPause
Msg_PausedText
Msg_ResumeText
Msg_MenuItemInstall
Msg_MenuItemResume
Msg_MenuItemCancel
Msg_InstallOptMsg
Msg_DontInstallOptMsg
Msg_SelectOptMsg
Msg_Installing
Msg_InstallationSuccessful
Msg_InstallationFailed
Msg_LaunchButtonText
Msg_CloseButtonText
Msg_DownloadSuccessful
Msg_InstallationSuccessfulReboot
SDK OCInit2A called: PubId:%s ProdId:%s InstallLang:%s AsyncInstall:%d MaxInitTime:%d RemnantInstall:%d
SDK OCInit2W called: PubId:%s ProdId:%s InstallLang:%s AsyncInstall:%d MaxInitTime:%d RemnantInstall:%d
SDK OCGetBannerInfo called. Result Title:%s Description:%s
SDK OCGetBannerInfoW called. Result Title:%s Description:%s
SDK OCInnoAdjust called: hWnd:%d x:%d y:%d width:%d height:%d
SDK OCInnoAdjust called: hWnd:%d
SDK OCNSISAdjust called: hWnd:%d x:%d y:%d width:%d height:%d
SDK OCInstallShieldAdjust called: x:%d y:%d
SDK OCRunDialog called: hwnd:%d
SDK OCSetOfferData called: ProductKey:%s OfferId:%s
SDK OCSetOfferLocation called: Location:%s OfferId:%s ProductId:%s
SDK OCCleanupProduct called: ProductKey:%s
SDK OCGetMsg called: sMsgName:%s sMsg:%s
SDK Display called: lpszCmdLine:%s
SDK MgrExec called: lpszCmdLine:%s
SDK DLMgr2Check called: lpszCmdLine:%s
SDK MgrCheck called: lpszCmdLine:%s
SDK OCSetNoCandy called: %d
SDK OCSetCmdLineValues called Value:%s
SDK OCSetCmdLineValuesW called Value:%s
SDK SetOCOfferEnabled called: %s
SDK OCFindGuidAndRunDialog called: %s
.Status Error, OCFindGuidAndRunDialog SDK called with bad values. X value: %d, Y value %d, width value %d, height value %d
SDK SetClientAdvancedOptions called: %s
SDK SetClientAdvancedOptionsW called: %s
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_CURRENT_CONFIG
COCDownloadManager::DLMPrepareOffer: download completed already. download:%d progress:%d filesize:%d
)Error int MainLoop CreateMutex failed. Result was %d
Global\223CEB62-A2BC-4E33-BA9B-FCAC6DAAB1BE
Engine doesn't support IActiveScriptParse.
Line %d, position %d
EDCBC0BF-44ED-466F-AF2F-47802E05BDE6
CB9BD22F-6363-4203-A5D1-F26473612CEE
C:\OpenCandy
\StringFileInfo\xx\FileVersion
RichEd20.dll
{\rtf1 {\colortbl;\red0\green0\blue0;\red255\green0\blue0;}\cf2 \par All tests have passed.\par To complete the testing process run your installer again, this time initializing the OpenCandy API in normal mode, i.e. using OpenCandy as the primary offer system.\par}
{\rtf1 {\colortbl;\red0\green0\blue0;\red0\green127\blue70;}\cf2 \par All tests have passed.\par \cf1 When you are finished testing click here for details on how to send us your installer hXXp://VVV.opencandy.com/successful-integration/. \par}
{\rtf1 {\colortbl;\red0\green0\blue0;\red255\green0\blue0;}\cf2 \par %d error has been detected. \cf1 Please review the error messages.\par You must correct these errors before you can submit your product for review! \par}
{\rtf1 {\colortbl;\red0\green0\blue0;\red255\green0\blue0;}\cf2 \par %d errors have been detected. \cf1 Please review the error messages.\par You must correct these errors before you can submit your product for review! \par}
OpenCandy SDK Developer Mode Test Report
{\rtf1 - For more information on this message click here <hXXp://sdk.opencandy.com/deverrorredirect.php?sdk=%s&err=%d> \par }
{\rtf1 {\colortbl;\red0\green0\blue0;\red255\green0\blue0;}\cf2Status ERROR! \cf1 Did not find Opencandy 'End User License Agreement' in processID %d. Your product must disclose the Opencandy EULA.\par}
Status ERROR! OpenCandy Download Manager successful execution tracking was not sent to the server or sent more than once.
<clientv>%s</clientv>
<sessionid>%s</sessionid>
<ProductID>%s</ProductID>
<cltzone>%s</cltzone>
<oslang>%s</oslang>
VVV.opencandy.com/privacy-policy
HKEY_DYN_DATA
HKEY_PERFORMANCE_DATA
OLEAUT32.DLL
{5AA68CFB-F1F1-417C-A48B-8A1F3C8F0030}
<track><method>%s</method><mstime>%s</mstime><offerid>%s</offerid></track>
PassSelected
OfferCMDLine
InstallerCmdLine
m_passive_install
m_strRegLaunchSubKeyPath
m_ocstrLaunchExeFullPath
m_bShowRebootMsgAfterInstall
16282F95-E0BC-4589-B27D-3A41D9261168
B8DCC36F-4F05-445F-B1EE-FD8FC38CBBDA
{\rtf1 {\colortbl;\red0\green0\blue0;\red255\green0\blue0;}\cf2Status ERROR with image. \cf1 The image size is mismatched with the offer xml. Image size is width: %d height: %d. Product xml size is width: %d height: %d \par}
Explorer.exe
Advapi32.dll
http=
jsproxy.dll
okernel32.dll
%USERPROFILE%
%CommonProgramFiles%
%CommonProgramW6432%
%CommonProgramFiles(x86)%
FID_Windows
SOFTWARE\Microsoft\Windows\CurrentVersion
WINDOWS
shell32.dll
<track><method>%s</method><mstime>%s</mstime><dnstime>%f</dnstime><connecttime>%f</connecttime></track>
<track><method>%s</method><mstime>%s</mstime><offerid>%s</offerid><result>%d</result></track>
offer_id:%s;accepted_ind:%d;skipped_offer_ids:%s;ready:%d;max:%d;
<track><method>%s</method><mstime>%s</mstime><lang>%s</lang></track>
{\rtf1 {\colortbl;\red0\green0\blue0;\red255\green0\blue0;}\cf2Status ERROR! \cf1 OpenCandy was not initialized correctly. Initialize returned error code %d. \par}
BadPng:%d:%s:%s:%s
Image download starting. Seconds time from startup:%s. Url: %s
<track><method>%s</method><mstime>%s</mstime><url><![CDATA[%s]]></url></track>
Image download complete. Seconds time from startup:%s. Url: %s. Image size %d bytes.
<track><method>%s</method><mstime>%s</mstime><url><![CDATA[%s]]></url><size>%ld</size><dnstime>%f</dnstime><connecttime>%f</connecttime></track>
{\rtf1 {\colortbl;\red0\green0\blue0;\red255\green0\blue0;}\cf2Status ERROR! \cf1 There was an error with the OpenCandy offer image. Error codes: download error %d, png decode error %d. Image url %s \par}
OpenCandy Developer Mode Report


Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.


Manual removal*

  1. Terminate malicious process(es) (How to End a Process With the Task Manager):No processes have been created.
  2. Delete the original Trojan file.
  3. Delete or disinfect the following files created/modified by the Trojan:

    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JYNOWECL\impression[1].htm (2046 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\toolbar_offer.benc (2 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\uttB7EB.tmp (603 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\25FDO7QC\impression[1].htm (682 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i_temp.temp (26 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\LSEQ5S66.txt (96 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ADKAppsOfferManager.dll (458 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\settings.dat.new (71 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\uttAD5F.tmp.new (0 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-732923889-1296844034-1208581001-1000\1f91d2d17ea675d4c2c3192e241743f9_88dcd395-b062-45b3-a6cd-79f37c0eba08 (105 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\toolbar.benc.new (61 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4ZZNMJGQ\offers[1].htm (139 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\LT75XVQO.txt (89 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\uttDA3B.tmp.new (61 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\OFQ7P9Y0.txt (89 bytes)

  4. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
  5. Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

No votes yet

x

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Enjoy unique new features, lightning fast scans and a simple yet beautiful new look in our best antivirus yet!

For a quicker, lighter and more secure experience, download the all new adaware antivirus 12 now!

Download adaware antivirus 12
No thanks, continue to lavasoft.com
close x

Discover the new adaware antivirus 12

Our best antivirus yet

Download Now