MD5: bfddaca6cc97c5cda8c051db0b87ab20
SHA1: de4d012a80733bc310f2bfd37e1758f9dc9aa4ad
SHA256: c6c8884e0da833061ce7c3f316763f3554f23e10cabf8b5ae2dd3f345ce0a65d
SSDeep: 24576:/8kdEh7izn7EBa7Hb55PGUwnqZLfcz 1dqeY:lYSn7EB6b55PG8bfqeY
Size: 1272144 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: BitTorrent Inc.
Created at: 2013-10-08 03:41:34
Analyzed on: Windows7 SP1 32-bit

Summary:

Banker. Steals data relating to online banking systems, e-payment systems and credit card systems.

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):
No processes have been created.
The Trojan injects its code into the following process(es):

%original file name%.exe:2944

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process %original file name%.exe:2944 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\toolbar_offer.benc (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4ZZNMJGQ\impression[1].htm (2048 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\XUSUTPM2.txt (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\offconfig.temp (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\N5QY9XH5.txt (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i_temp.temp (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ADKAppsOfferManager.dll (204 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\settings.dat.new (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\uttC60E.tmp.new (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-732923889-1296844034-1208581001-1000\1f91d2d17ea675d4c2c3192e241743f9_88dcd395-b062-45b3-a6cd-79f37c0eba08 (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\25FDO7QC\offers[1].htm (629 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\L43NBDAR.txt (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8D93UTC3\impression[1].htm (683 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt9DC4.tmp.new (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\toolbar.benc.new (61 bytes)

The Trojan deletes the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\offconfig.temp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt9DC4.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt9DC4.tmp.17072.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\L43NBDAR.txt (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i_temp.temp (0 bytes)

Registry activity

The process %original file name%.exe:2944 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Classes\FalconBetaAccount]
"remote_access_client_id" = "2100189471"

[HKLM\SOFTWARE\Microsoft\Tracing\bfddaca6cc97c5cda8c051db0b87ab20_RASMANCS]
"FileTracingMask" = "4294901760"

[HKCU\Software\BitTorrent\uTorrent]
"OfferProvider" = ""

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E]
"LanguageList" = "en-US, en"

[HKLM\SOFTWARE\Microsoft\Tracing\bfddaca6cc97c5cda8c051db0b87ab20_RASAPI32]
"EnableConsoleTracing" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\bfddaca6cc97c5cda8c051db0b87ab20_RASMANCS]
"EnableConsoleTracing" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\bfddaca6cc97c5cda8c051db0b87ab20_RASMANCS]
"MaxFileSize" = "1048576"
"ConsoleTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Tracing\bfddaca6cc97c5cda8c051db0b87ab20_RASAPI32]
"FileTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Tracing\bfddaca6cc97c5cda8c051db0b87ab20_RASMANCS]
"EnableFileTracing" = "0"

[HKCU\Software\BitTorrent\uTorrent]
"OfferViaCAU" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\bfddaca6cc97c5cda8c051db0b87ab20_RASAPI32]
"ConsoleTracingMask" = "4294901760"

"FileDirectory" = "%windir%\tracing"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3C 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Tracing\bfddaca6cc97c5cda8c051db0b87ab20_RASAPI32]
"MaxFileSize" = "1048576"

[HKLM\SOFTWARE\Microsoft\Tracing\bfddaca6cc97c5cda8c051db0b87ab20_RASMANCS]
"FileDirectory" = "%windir%\tracing"

[HKLM\SOFTWARE\Microsoft\Tracing\bfddaca6cc97c5cda8c051db0b87ab20_RASAPI32]
"EnableFileTracing" = "0"

[HKCU\Software\BitTorrent\uTorrent]
"OfferName" = ""
"OfferAccepted" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"AutoConfigURL"

The Trojan disables automatic startup of the application by deleting the following autorun value:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"

Dropped PE files

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: BitTorrent Inc.
Product Name: HD Player
Product Version: 3.4.0.30204
Legal Copyright: (c)2013 BitTorrent, Inc. All Rights Reserved.
Legal Trademarks:
Original Filename: uTorrent.exe
Internal Name: uTorrent.exe
File Version: 3.4.0.30204
File Description:
Comments:
Language: English (United States)

PE Sections

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL	IP
hxxp://update.utorrent.com/installoffer.php?h=yF5XlJ8eWRaMWHIU&v=109082108&w=1DB10106&l=en&c=US&db=iexplore.exe&cl=uTorrent&tsub=1&svp=4	67.215.246.203
hxxp://update.utorrent.com/installstats.php?cl=uTorrent&v=109082108&h=yF5XlJ8eWRaMWHIU&w=1DB10106&bu=0&pr=0&cmp=0&ocmp=0&showtbexists&pid=2944&cau=0&tbe=0&cd=0&view=win32	67.215.246.203
hxxp://update.utorrent.com/installstats.php?cl=uTorrent&v=109082108&h=yF5XlJ8eWRaMWHIU&w=1DB10106&bu=0&pr=0&cmp=0&ocmp=0&offerretrievedfromserver&pid=2944&cau=0&ServerOfferRetrieved=1&sec_offs=oc,adk&view=win32	67.215.246.203
hxxp://imp.install-zone.com/impression.do/?user_id=2666A02C-6FC4-43B8-AD69-7E512CC09DAD&event=setup_run&spsource=68E633381BD14a69BD08A05C22B72D6A&traffic_source=68E633381BD14a69BD08A05C22B72D6A&browser=IE&implementation_id=dll	204.11.56.48
hxxp://imp.install-zone.com/68E633381BD14a69BD08A05C22B72D6A/offers.json?version=1.1&pid=2&ts=&browser=IE	204.11.56.48
hxxp://imp.install-zone.com/impression.do/?user_id=2666A02C-6FC4-43B8-AD69-7E512CC09DAD&event=install_bad_config&spsource=68E633381BD14a69BD08A05C22B72D6A&referrer=3253|hxxp://config.install-zone.com/68E633381BD14a69BD08A05C22B72D6A/offers.json?version=1.1&pid=2&ts=&browser=IE&traffic_source=68E633381BD14a69BD08A05C22B72D6A&browser=IE	204.11.56.48
hxxp://config.install-zone.com/68E633381BD14a69BD08A05C22B72D6A/offers.json?version=1.1&pid=2&ts=&browser=IE	204.11.56.48
bench.utorrent.com	208.72.195.5

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

ET P2P Bittorrent P2P Client User-Agent (uTorrent)

Traffic

GET /installstats.php?cl=uTorrent&v=109082108&h=yF5XlJ8eWRaMWHIU&w=1DB10106&bu=0&pr=0&cmp=0&ocmp=0&showtbexists&pid=2944&cau=0&tbe=0&cd=0&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(30204)/3.4

Host: update.utorrent.com

Cache-Control: no-cache

HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Fri, 01 Sep 2017 17:19:03 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30
0..

GET /68E633381BD14a69BD08A05C22B72D6A/offers.json?version=1.1&pid=2&ts=&browser=IE HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: config.install-zone.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Fri, 01 Sep 2017 17:19:04 GMT

Server: Apache

X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4 L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_nlI6pC7oqu7r 6TDGfiKIcn2IYK8CmLt8Agk/yPmyIt yB2p3UiS0DKa2c520tbU5m8qOV9ZjApN JJrDVHZbA==

ntCoent-Length: 3298

Keep-Alive: timeout=5, max=75

Connection: Keep-Alive

Content-Type: text/html; charset=UTF-8

Cache-Control: private

Content-Encoding: gzip

Content-Length:       1755
...........V[..J.~N...8Ne.\.-..N6..E...7..)h.m....9.....NN29..<.R./
..o..^....._.|.......Q.............?.0..../Q..@.4......D.5 ....dwdn.%.
&.{J...z:.F....x...J.Fx3.%P.!.t.Vg4...b...a.,.K......_7..w.'9.\a......
._.]mo.m0_. ...|z....&..g..q...LH...*m.......5;..........f....)d....f3
F].A. ).7...u...C.S...<..R.*..A9..v...i............%.=......*X..S^T
...o.......].#.p.Ak'.'....&.$k.i...gQ.. 7....&i.......pg'Q..DP.......W
/....^>.p.S......$...K.6..E...Z.S.9...,I.._.b..UI.6|.......j...k.Zq
....Y..S.h.rh..hm.........U.8...........%.......a(..B.EC....J;...)....
e.."M.!.l.N/..........~_Jl.\....,.p,....tN.uww...{UM...........-.x..\.
..@lQ.\....\........2.5.(.j.5...Q}...8XI...Z....wP..@..#X.%.o.........
X.6...V..Wb...1.H..-.E.. .-...'.)HP.)Lh>.;Z.u...z.mL..0....I..C..]I
..BPmV..c..$...|.&o...O.W.}S..........*..[..._..D....x5........!L....0
.......sO:n@..4.........e..K.m.3...R..'........>..........#.0..P...
W......E...).R.$....8).b..."........o-...nGN...U.O..f...?8..zr......./
._.../h...rt..G bv...._|U.s.!..R......%.gM........VZ..kR..)8h.15.?.6..
......H,Q...8.(=.&.......V......f.S.2..i..f2..h..d...#.z..[K2......:..
....."-...n{...pj..[...61.8...o/j'..` ..i...@.x.L.i{..G.f*.i.h.Qb.....
.).......4TMk4.[.j.2.....wy..#N.O.J.Q.!H.p...8@......D$...... ..... z.
Z.......TEZ.14....j.......Q......~.Kc..p_u\S...J..K...L.f.....i/.R.S.6
.i..h..9.8...VIz....iL....y~4Y.....J.1.3...`\ly..IO{>.,..2O.Fws....
U6e...y.@..q.uw<...a...t....]N.bpb.f]....`..=#&v.0.}...Q._.#..Oq...
$~...YW.I..]..M..........."..D.We}.v...[...k... .#......FU.#M.z..L
<<< skipped >>>

GET /impression.do/?user_id=2666A02C-6FC4-43B8-AD69-7E512CC09DAD&event=setup_run&spsource=68E633381BD14a69BD08A05C22B72D6A&traffic_source=68E633381BD14a69BD08A05C22B72D6A&browser=IE&implementation_id=dll HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: imp.install-zone.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Fri, 01 Sep 2017 17:19:03 GMT

Server: Apache

Set-Cookie: vsid=932vr2518319435504842; expires=Wed, 31-Aug-2022 17:19:03 GMT; Max-Age=157680000; path=/; domain=imp.install-zone.com; HttpOnly

X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4 L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_hp771pylG0i7bX2rbBBFT4E8tJXAcqathdlJ/6PGQ6sb esHY9GgLgZkxBznU6NITpmlZZzJQhbv48ucJ8g/KQ==

Keep-Alive: timeout=5, max=32

Connection: Keep-Alive

Content-Type: text/html; charset=UTF-8

Cache-Control: private

Content-Encoding: gzip

Transfer-Encoding: chunked
16CC.............\ks............N.....y..f.6w..S. .HFH.$n......$..{w..
...&.F==.=.t.h...)..;.we.83..u.7.E....}....:%t....D....r#."....x|.\..b
..&.N N{'..c.....9r..O...j..v.@/>...W.&.d..(.G.!M.d... .e..P.d.....
.l....e...\./k..O....2.{..Q......*a.w.?n..;O..i.J..^....kI...R.@j..j.o
.. .f}]Y.w..bk...L.......e3..*f:..k......`...J'Q.8..K..;......j3e.. ..
C.:........M5.;.L...kMe.Hd.R-3.....a../.m.RM.9k..#.Y9.G..nk.b.-.G..y.m
..=.-iceuf.T.v..E....$c.7W.G.OI.........L/.s]rTCG..e.\..J.!.s|..X....:
.h....lH...gL..vHY#..8....3.,.E).i.............|..."W.F...F.dq..J.o..=
.lp&nW*W.)..-..Nw.n.....[....Q.L...e.....*....z.X..27.(..@i..w.3.cm...
.......<m>v..B................8.G..S.Qzd...6.3...j......g.;.rL,.
...gj.....2f......e.=.35#.F:..yRe;.$Cw`.|...2BB<B..........G..=Br..
. c..."(~q...F..w...n;x?..NW.<..E>Rt..v._..0.....I..l....J4C!..q
E_.di..8...R..%/..*.(;9E..:*....5..O.....|.m...bgx..p?.`x..5...Y.mz...
..&......eY.'9...?..J...dX..zN.3.!c.h.N..%.)..X.1...N9Is.6..i.......8.
.:.$.`k..rx.$/..VG..:..RT.....mjx.c!.l.f...3.!...Q.A0?c.rhd8..B..."...
..`3...a.r.g..rc....D=...dt......A]k.5....]Z0....h....>E6..(.].....
.....rnni.>..1I....O\<..3".x8...d....G..D..P..,....~........Dsu.
.3.9z..>.l.l]..Tu./...e.K.....).F...Bx......-._gX..K...#.....a..).!
.Y.....|d <w...Mz@.9..1*...aB...mh..~M..d2.]...=).@...f,s.6.0..;#m.
........h>.H.K.j..........>C[.......OB#.).t..4r.....z.......Bjs.
t) .PPA.04........H&V.vq.$)..t.!y...L.3...&..`TR.!..X.d...k.D...a.E...
..(...F*L....qB.e 0.y.#....q.f.X.2[.t.\..FD........../&)o...y^.V"L
<<< skipped >>>

GET /impression.do/?user_id=2666A02C-6FC4-43B8-AD69-7E512CC09DAD&event=install_bad_config&spsource=68E633381BD14a69BD08A05C22B72D6A&referrer=3253|hXXp://config.install-zone.com/68E633381BD14a69BD08A05C22B72D6A/offers.json?version=1.1&pid=2&ts=&browser=IE&traffic_source=68E633381BD14a69BD08A05C22B72D6A&browser=IE HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: imp.install-zone.com

Connection: Keep-Alive

Cookie: vsid=932vr2518319435504842

HTTP/1.1 200 OK

Date: Fri, 01 Sep 2017 17:19:04 GMT

Server: Apache

X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4 L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_CREgusiCGexSKoxn8C1M80A9xHIAJ0t/vKNN qjGr5oDikkxCJZSBtciXXj7I bLFJYPznxYRMV2SgjmzOYWnQ==

ntCoent-Length: 4888

Keep-Alive: timeout=5, max=26

Connection: Keep-Alive

Content-Type: text/html; charset=UTF-8

Cache-Control: private

Content-Encoding: gzip

Content-Length:       2315
...........WY..F.~.G.....n..4:A......8.!.^&t..n......D...3...}........
S.....}....7U.?..cUA.Nz....5..I...ee.q..........|..{2".YZ%.%.."O.T...3
.....)./.$..E.&..f).}..2.....y..7)=...z/V...".59.....>/.*.&.......\
..=.B{.&.X..mb..."....g..0qn.......`.3Tx..X.qt.X*s.&....9.`.....Ii.oN.
.b..B..%.E.1]..r.b.g.*...\qT.g..[3...3../s....D..L.E..8x.8.>}..v..{
..Y...U..7.U.I.>..@..a.j... M.x..".^....^....m6r".W.S.k.EY..]I.x.v.
....].t..Y.;.`I.Oj....;..];...Ve.....&.Pds.Z....c...}....7...W../..^1.
......w...C....P..>I.t.....H.0...1.....i5y.....~p.....2/..p.dH.C. h
..1...Y.....p....../............y....O.....pA8.5.P$....1,.....X....b..
}UN.."k!..,.W..y.........3...w.....=..$F\....kC.E..Lzs.mym?S..|l....,.
1..e..3c.....9........z......N..g=..._..<b,S]...7C^c.l.J.Q..8....5.
.../...A*pL 0.6.|..._..'..F..).as.e......j.(...S(.T..Qt.f..[9.i.#.....
........o.0...F....?...B.o.. O..,...>8.A3.qYZA...%.=.nb...*p......q
.VQ.j...}.....J......l.>Q..nu.......5.-_.n.wL.....2;...Y..I.[.....Z
:E.WH..|.......f..slt......r...E&....W.N./. ...X@.. .A...p...U........
0.".O...^7.<.....?V.5.&...`.23HSP.....x.S.xA......h0Xdi_.>.....e
..$.y.7..%@:;....X...".. ..{..G..8........_.{....Y@... E. .S.*...b....
WO2.<|.........{..o... ?.|E..`....o.../.|....3......Shg............
=.5....2I.I.....mh..!o.)..s^.....,8.,4)-..v4MS.&..i.%...(..%.\.u(...m.
.j.wc....7.......#..9.8.Gt.Y....|%9h...q1v.....l..$..Mty..{W......).J.
.... .......v..|u..j.7ND$M.......HK:oPz<Z9.....]~9.J.1:...O..e\\.]l
W^.I.1.2f.q.j....A..c6k].hDS....j...^.).J..fe..s..... ..Z7...$s...
<<< skipped >>>

GET /installstats.php?cl=uTorrent&v=109082108&h=yF5XlJ8eWRaMWHIU&w=1DB10106&bu=0&pr=0&cmp=0&ocmp=0&offerretrievedfromserver&pid=2944&cau=0&ServerOfferRetrieved=1&sec_offs=oc,adk&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(30204)/3.4

Host: update.utorrent.com

Cache-Control: no-cache

HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Fri, 01 Sep 2017 17:19:03 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30
0..

GET /installoffer.php?h=yF5XlJ8eWRaMWHIU&v=109082108&w=1DB10106&l=en&c=US&db=iexplore.exe&cl=uTorrent&tsub=1&svp=4 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(30204)/3.4

Host: update.utorrent.com

Cache-Control: no-cache

HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Fri, 01 Sep 2017 17:19:01 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

Expires: Thu, 21 Jul 1980 00:00:00 GMT

Cache-Control: private

Last-Modified: Fri, 01 Sep 2017 17:19:01 GMT
8ea..d16:secondary_offersl2:oc3:adke2:oci1e3:adki1e8:toolbar0d5:title2
4:Free Yandex Search Offer8:subtitle0:13:body_text_rtf95:{\rtf1\ansi\a
nsicpg1252\u181?Torrent suggests you install the Yandex settings descr
ibed below.}11:footer_text258:By clicking "Accept" and selecting one o
r more of the checkboxes above, you are verifying that you have read a
nd accepted our <a href="hXXp://legal.yandex.ru/confidential/">P
rivacy Policy</a> and <a href="hXXp://legal.yandex.ru/termsof
use/">Terms of Use</a>.2:id13:spigot-yandex9:image_url66:http
://ll.download3.utorrent.com/offers/spigot-yandex-20140709.bmp10:image
_hash20:...Rw...U......J...'9:image_sig256:...g........U.....{.m.=...o
!.hf.K........./... 2. ......r"kv.*..t>....m...;.C.v..S...7.s.s...2
...@..Ef.w0..&4..'..X.F$.}p.U.........K.....v...F..._u..:.pX.`...0.`..
...Y....a.....9...g...=..-.!#......].V$._..SD_.c.... .v...,9...A...7..
g.-.4.\!.\KZ}kK(."1...10:image_sizei353958e10:offer_urlsl69:hXXp://ll.
download3.utorrent.com/offers/spigot-yandex-en-20140708.exe69:hXXp://l
l.download3.utorrent.com/offers/spigot-yandex-en-20140708.exe66:http:/
/download3.utorrent.com/offers/spigot-yandex-en-20140708.exe58:hXXp://
67.215.246.206/offers/spigot-yandex-en-20140708.exee10:offer_hash20:.l
M1.....u..x..dp...9:offer_sig256:..F..pc...l.,.A4.."P...lX./.V.../....
5`..|.....|0!........h.oo....U.eY.m.g.s..!}@...7h......^..WM..R...s...
Hul...m.D$.......v.c.....f9._. ...8yZxq....(7..Y..:-..@(.8...#.i.Iq.&l
t;.j.J..^....8.7.D.gK...[.P.5K.G..eX.J..R..*...'. .{..5}....6.../`
<<< skipped >>>

The Trojan connects to the servers at the folowing location(s):

t;SSh

SSSSh

tù>t ShT-W

SSh42W

SSSSSh<3W

SSSSSh

SSh4HW

SSh PW

L$,SSh

SSh0XW

SShxVW

|$,SSh

L$,SSh PW

t$8SSh

F SSh$

>httpup

uùA

?httpu

It.It

D$$hp%X

D$ `%X

D$()D$0SSh

SSSSSShX

SPSSSSh

Cj.Xf9

Cj:D.juW

CY:D.Yu

CY:D.Yt)

F\ FTP

SSh BX

SSSSSSh

9HTTPu#f

PSSSSSSh

PSShx

D$.SP

UDP0u

HTTPu

t.Ht Ht

Ht8Ht.Ht

t%SSS

|$$SSh

SSh\GX

SShTiZ

>HTTPu

D$4PSSh

tHj.Zf;

L$4SSh

u.Vh0

xetcP

D$LPSSh

<. UDPu

<. TCPuR

NNtTNt.Nt

keyA

keyB

D$.VP

u.PPP

FEw.AEw

Bv.SCv

Bve.Bvk

Portuguese (Brazil)!ptBR

Portuguese (Portugal)!pt

autoexecutestart

mismexecute

kernel32.dll

hXXp://apps.bittorrent.com/utorrent-onboarding/plus2.btapp

hXXps://activate.utorrent.com

-chrome

hXXp://offers.bittorrent.com/w/1.0/arj

hXXp://events.bittorrent.com/startConversion

hXXp://cdn.ap.bittorrent.com/control/tags/bt.json

hXXp://cdn.ap.bittorrent.com/control/tags/ut.json

hXXp://cdn.ap.bittorrent.com/control/tags/staging_bt.json

hXXp://cdn.ap.bittorrent.com/control/tags/staging_ut.json

hXXp://apps.bittorrent.com/conduit/eula/ByChoosingToInstall.html

%u %d %S

default_offer: %d GetActiveToolbarName: %s

CollectToolbarPreferences: _ACTIVE_BROWSER: %S

provider:%S,search:%d,homepage:%d

mism execute succeeded

CollectToolbarPreferences: mism execute succeeded

CollectToolbarPreferences: mism execute FAILED

toolbar%d

hXXp://update.utorrent.com/uninstall?type=%s-%U&h=%s&v=%d

content_offer_url

attempted_to_receive_server_search_url

"elevated":%d, "message":"%S", "error_code":%d

hXXp://VVV.utorrent.com

IsYandexInstalled %s

GetConduitInstalledState: Found key: HKEY_LOCAL_MACHINE %S

GetConduitInstalledState: HKEY_LOCAL_MACHINE %S = %d

GetConduitInstalledState: Found key: HKEY_CLASSES_ROOT %S

GetConduitInstalledState: installed=%d visible=%d enabled=%d

IsConduitInstalled: %d

GetToolbarDict: %s

GetToolbarDict: count=%d

GetToolbarDict: Found %s in 'id' key

GetToolbarDict: DID NOT find %s in 'id' key

, Firefox

, and Chrome

. <a href="hXXp://CT3274043.ourtoolbar.com/LearnMore">Learn More</a>.

By choosing to install the Toolbar and/or set the search features and install Search Protect, you agree to these product terms, license-agreements, and privacy policies and/or to the Value Apps third parties terms and privacy policies. Conduit is not responsible for the practices of third parties. In addition to Value Apps, other apps may access, collect, and use your personal data, including your IP address and the address and content of web pages you visit.

By choosing to install the Toolbar and/or set the search features and install Search Protect, you agree to these products terms, license agreements, and privacy policies (hXXp://ct3274043.ourtoolbar.com/terms) and/or to the Value Apps terms and privacy policies (hXXp://valueapps.conduit.com/ct3274043/privacy).

Value Apps may include Conduit apps and third-party apps. Conduit is not responsible for the practices of third parties. In addition to Value Apps, other apps may access, collect, and use your personal data, including your IP address and the address and content of web pages you visit.

chrome_param

-open-thank-you-page -open-welcome -pair-key "%1" -launch-app client "%2"

IsConduitToolbarOffer %s

checkboxes: %s

TBDownloadCallback err: %s size: %I64d

TBDownloadCallback write FAILED: %S

TBDownloadCallback write OK: %S

Using default offer? [%S]

passed_hash_check? %s

base_parameter: [%S]

TBDownloadCallback: GetDefaultBrowserName: %s

TBDownloadCallback: flag: %s

toolbar commandline: %s

TBDownloadCallback: RAN %S %S RETURN: %d

offer_urls

WhichConduitSettingsAreActive: %s

ShowYandexOffer: %d

ShowYandexSearchOffer: %d

ShowConduitBing: %d

ShowConduitGoogle: %d

&bin=%stoolbar

TBRequestThread Parsed OK?: %s

TBRequestThread FAILED. err: %S

content_offer_autoexec

offer_retrieved: %s

empty_offer: %s

default_offer: %s

showToolbar: %s

onOfferDownload: Using default offer. g_is_default_offer: %s

image_url

onOfferDownload: %s

eula_url

hXXp://%%s/offers/%s

hXXp://update.utorrent.com/installoffer.php

RetrieveOffer browser %S

db=%U

cl=%s

tsub=%d

RetrieveOffer %s

Torrent for illegal purposes. You will comply with all export laws.

Torrent, only files that you are explicitly downloading or sharing (seeding) will be made available to others. You consent to other users' use of your network connection to download portions of such files from you. At any time, you may uninstall

Torrent software. No advice or information, whether oral or written, obtained from BitTorrent Inc or elsewhere will create any warranty or condition not expressly stated in this agreement. Some jurisdictions do not allow certain limitations on implied warranties, so the above limitation may not apply to you to its full extent.

BitTorrent Inc's total liability to you from all causes of action and under all theories of liability will be limited to $50.00. In no event and under no theory of liability will BitTorrent Inc be liable to you for any special, incidental, exemplary, or consequential damages arising out of or in connection with this agreement or the software whether or not BitTorrent Inc has been advised of the possibility of such damages. The foregoing limitations will survive even if any limited remedy specified is found to have failed of its essential purpose. Some jurisdictions do not allow the limitation or exclusion of liability for incidental or consequential damages, so the above limitation or exclusion may not apply to you to its full extent.

These BitTorrent, Inc. terms will be governed by and construed in accordance with the laws of California, USA, without regard to conflicts of law rules. The United Nations Convention on Contracts for the International Sale of Goods will not apply. The failure by either party to enforce any provision will not constitute a waiver. Any waiver, modification, or amendment of the BitTorrent, Inc. terms will be effective only if signed. If any provision is held to be unenforceable, it will be enforced to the maximum extent possible and will not diminish other provisions. BitTorrent, Inc. may make changes to these terms from time to time. When these changes are made, BitTorrent, Inc. will make a new copy of the terms available at hXXp://VVV.utorrent.com/legal/eula. You understand and agree that if you use

Torrent after the date on which the terms have changed, BitTorrent, Inc. will treat your use as acceptance of the updated terms. You agree that BitTorrent, Inc. may provide you with notices, including those regarding changes to the terms, by postings on hXXp://VVV.utorrent.com/legal/eula. This is BitTorrent, Inc.'s complete and exclusive understanding with you regarding your use of

Torrent user forums at hXXp://forum.utorrent.com.

This installer uses the OpenCandy network to recommend other software you may find valuable during the installation of this software. OpenCandy collects NON-personally identifiable information about this installation and the recommendation process. Collection of this information ONLY occurs during this installation and the recommendation process; in accordance with OpenCandy's Privacy Policy, available at VVV.opencandy.com/privacy-policy

onPageInit:DLG_OFFER_NON_GOOGLE: checkbox %d %s [%s]

Result: %s

&bin=%sbmp

hXXp://utorrent.com/download/langpacks/dl.php?build=30204&ref=client&client=utorrent&sys_l=%s&sel_l=%d&tk=%s

hXXp://apps.bittorrent.com/utorrent-onboarding/welcome-upsell.btapp

hXXp://apps.bittorrent.com/utorrent-onboarding/player.btapp

hXXp://bundles.bittorrent.com/current/index.html

no toolbar url

bundled_url

%s %s

ShellExecuteExW

shell32.dll

cbhomepage=%d

cbsearch=%d

cbtoolbar=%d

cbrevert=%d

au=%d

installresult=%d

exit=%d

au=%u

tbe=%d

cd=%d

tbofferresult=%d

tb=%s

tbinstallresult=%d

error=%d

msg=%U

url=%U

prog=%u

toroffer=%d

torofferid=%s

&shoffer=%d

cancellastpage=%U

ServerOfferRetrieved=%d

sec_offs=%U

OfferError=%U

OfferProvider=%U

OfferType=%U

Offer=%U

Accepted=%d

toroffername=%s

torexecresult=%d

download=%d

execute=%d

error=%U

mismreturn=%d

mismresult=%U

view=%s

SendStaticURLThread

AutoExecFailed

uTCBTWebClient

had_version_already = %s

running_from_install_dir = %s

Initial running version %d

Target version = %d

HasPendingUpdate = %s

IsThisTargetVersion = %s

IsThisTargetVersion_2 = %s

"status":"Manually ran non target version","from_install_dir":"%d"

IsThisVersionBlacklisted = %s

client_manager.IsThisVersionBlacklisted() || client_manager.DidOptOutOfThisVersion() && running_from_install_dir

g_version < target_version = %d

res == %d

Cancel Downgrade -- cvm.RemoveRunningVersion

2012-12-04 23:04:37 -0800

BTWebClient

INSTALL_FAIL_USER_CANCEL -- cvm.RemoveRunningVersion

Launched version %d

offers.adstats

offers.adcookie

offers.adkey

offers.server_ad_site

offers.openx_logging

offers.cfu_left_rail_offer_enabled

offers.cfu_sponsored_torrent_offer_enabled

offers.stat_sent_time

offers.lifetime_clicks_ft

offers.lifetime_clicks_lrec

offers.lifetime_impressions_ft

offers.lifetime_impressions_lrec

offers.lifetime_ad_autoexec_errors

offers.lifetime_ad_image_errors

offers.lifetime_ad_missing_errors

offers.lifetime_ad_req_errors

offers.send_conversion

offers.enabled

offers.ftEnabled

offers.lrecEnabled

offers.adRefreshRate

offers.ftRefreshRate

offers.lrecRefreshRate

offers.contactRate

offers.serverUrls

offers.adServerType

offers.ftCode

offers.lrecCode

offers.ftClickUrl

offers.lrecClickUrl

offers.ftAdId

offers.lrecAdId

offers.geoip_country

offers.clientReceivedAdRulesFromServer

"OX_u":"%s"

%s-%d

"url":"%s","errCode":%d,"id":%d,"requestTime":%Ld,"action":"%s"

%s,"name":"%s"

"name":"%s","errCode":%d,"requestTime":%Ld

%s,"action":"%s"

AdUnitManager::CanInitViaSettings? EnableAds? %d lrec %d ft %d

ftEnabled = %d

lrecEnabled = %d

ftRefreshRate = %d

lrecRefreshRate = %d

adRefreshRate = %d

ftClickUrl = '%s'

lrecClickUrl = '%s'

ftAdId = %d

lrecAdId = %d

contactRate = %d

lrecCode = '%s'

ftCode = '%s'

adServerType = '%s'

send_conversion = %d

serverUrl[%d] = '%s'

<iframe width='%d' height='%d' frameborder='no' framespacing='0' scrolling='no' src='hXXp://ppc.ap.bittorrent.com/fppc'></iframe>

<iframe width='%d' height='%d' frameborder='no' framespacing='0' scrolling='no' src='hXXp://ppc.ap.bittorrent.com/lrec'></iframe>

cfu EnableAds? %d cfu lrec %d cfu banner %d; user lrec %d user banner %d plus expired %d

"%s":%u,

AdUnitStats::asJSONString %s

{"%s":%d,

"%s":%d,

"%s":%Ld,

"%s":"%S",

autoexec

def_exe

"%s":%Lu,

"%s":%d

AdUnitStats::asJSONStringComplete %s

AdUnitStats::asJSONStringAbbreviated %s

isAutoexecute

defaultToExe

PDDBannerURL

--AdUnitGroup LoadAdTorrent Sending click to OpenX with cookie: %s.

--lrec is disabled: user %d cfu %d

--ft is disabled: user %d cfu %d

--SetUserCookie called with cookie to set: %s.

--SetUserCookie usercookie already set: %s.

--SetUserCookie usercookie being set to: %s.

--AltString not WrappedinCurlyBraces for unit id %d, bailing.

--AltString parse error: %s

clickUrlType

infoImageUrl

torrentPreviewUrl

offer.log

offer2.log

------------- log opened %s

%s: %s

%s?auid=%d&c.build=%d

%s?auid=%d&c.build=%d&%s

--AdUnit using settings usercookie: %s.

----AdUnit : usercookie already set so using: %s.

&c.oxu=%s

--AdUnit requesting %s at time %d

error %S but http code %d ok

--AdUnit Callback calling SetUserCookie with cookie to set: %s.

%s?adid=%d&ox_u=%s&h=%s

--ParseJson failed on unit id %d; check alt text!

--AdUnit %d got %d ad.

installedAdIds %s

NoAdsServed-%d

--AdUnit %d will be init w/ id %d

--AdUnit %d OVERWRITING id %d w/ id %d

--AdUnit %d FAILED to parse ad id %d.

c.installedID=%s&

c.installedorderid=%s&

c.installedlineitemid=%s&

c.installedaccountid=%s

POST /api/v2 HTTP/1.1

keywords

clickUrl

impressionUrl

imageUrl

Out of Base64 range -- ones: %d, tens: %d

ftClickUrl

lrecClickUrl

--ParseAdControls name %s

--ParseAdControls skipping dict not matching client version %d.%d

--ParseAdControls skipping dict not matching client id %s

--ParseAdControls skipping dict not matching client country %s

--ParseAdControls skipping dict not matching client language %s

--ParseAdControls skipping dict not matching client campaign code %d

--ParseAdControls url %s

--ParseAdControls %s %s

--ParseAdControls %s %d

--ParseAdRules name %s

--ParseAdRules skipping dict not matching client version %d.%d

--ParseAdRules skipping dict not matching client id %s

--ParseAdRules skipping dict not matching client country %s

--ParseAdRules skipping dict not matching client language %s

--ParseAdRules skipping dict not matching client campaign code %d

--ParseAdRules %s %d

--ParseAdRules %s %d

--ParseAdRules adRefreshRate %d

--AdUnit requesting %s at time %Lu

adRuleReq-%S

error %d w/o string nor data but http code %d ok

error %S.

adRuleReq-%d

?456789:;<=

!"#$%&'()* ,-./0123

activation response (%d): body = %s, err = %S

activation response: signature = %s

license_key

POST %s HTTP/1.1

{ "license_key": "%s", "fingerprint": "%s", "can_update_license": true }

activation request: %s

Days Remaining: %d

key %s%s%s

{ "license_key": "%s", "fingerprint": "%s" }

SetThreadExecutionState

Opening help file: %S %S

hXXp://download.utorrent.com/help/utorrent-help-3400.zip

utorrent.chm

hXXp://VVV.utorrent.com?client=%s%s

hXXp://forum.utorrent.com?client=%s%s

hXXp://VVV.utorrent.com/faq?client=%s%s

hXXp://

bittorrent.com

utorrent.com

.torrent

.btsearch

.btkey

.btinstall

.btapp

onWmClose: %s

hXXp://update.bittorrent.com/time.php

hXXp://VVV.facebook.com/utorrent

hXXp://twitter.com/utorrent

[autorestart] Attempting to upgrade: (%S) -> (%S)

http%s://%s:%d%s

Can't connect to %s Remote - username or password incorrect/invalid

udp://tracker.openbittorrent.com:80/announce

udp://tracker.publicbt.com:80/announce

udp://tracker.ccc.de:80/announce

english.txt

MsgBoxData

TaskDialogIndirect

comctl32.dll

uxtheme.dll

ll.download3.utorrent.com

llsw.download3.utorrent.com

error %d

UxTheme.dll

user32.dll

%s/favicon.ico

file=%U

%S#hXXp://localhost:%d

Shell32.dll

Mininova|hXXp://VVV.mininova.org/search/?cat=0&search=

update.utorrent.com

update.utorrent.li

http%s://%s/checkupdate.php

hXXp://%s/updatestats.php

hXXp://%s/installstats.php

hXXp://%s/update_event.php

%s Updater

"g_version":%d, "action":"autoupdate window click", "choice":"%s", "no_sau":%d

u.url

u.siz

u.sha

u.sig

u.ver

u.msg

specialOfferAcceptUrl

%sÌid=%s&cc=%d&l=%d

sv.id

sv.mode

sv.title

sv.url

sv.dur

sv.min

sv.max

sv.spcnt

IgnoreCheckNewVerCallback: error=%S,err=%d, reply=%s

Received search: %S

New search URL added (first check): %S

After removing duplicate previously seen searches: %S

served_search_list set to %S

After removing duplicate user searches: %S

search_list set to %S

CheckNewVerCallback: error=%S,err=%d, reply=%s

Got autoupdate response [%s]

searchUrls

specialOfferImageUrl

Got blacklist with %u items.

bv[%i]: %i (build %S)

MS_Windows

%u,%u,%u,%u,%u

tk=%U

sids=%s

&lv=%d_%d_%U

%s:%d

pt=%s

ap=%s

incodecs=%s

outcodecs=%s

doainstalled=%U

ie=%S

secp=%U

secn=%U

cehh=%S

Sending autoupdate request [%s]

Sending autoupdate exit ping [%s]

%s?h=%s&v=%d&ol=%U&ul=%U&tk=%U&c=%U

%s?license_key=%s&fingerprint=%s

hXXp://apps.bittorrent.com

l.url

l.siz

l.sha

l.sig

l.ver

CrashMsgBoxThread

download_url

update_url_btinstall

.opcandy

.bunndle

.opinstall

.adknow

offers.featured_content_url

gui.last_preference_tab-1.8

gui.last_overview_tab-1.8

gui.last_tree_node

gui.cat_all_expanded

gui.cat_labels_expanded

gui.cat_rss_expanded

gui.cat_devices_expanded

gui.last_tree_node_installer

gui.granular_priority

gui.overhead_in_statusbar

gui.show_av_icon

gui.show_rss_favicons

gui.ulrate_menu

gui.dlrate_menu

gui.manual_ratemenu

gui.show_player_node

gui.use_fuzzy_dates

gui.show_notorrents_node

webui.remote_enable

gui.dblclick_seed

gui.dblclick_dl

gui.color_progress_bars

gui.launch_plus_app

btapps.startup_app_url

btapps.startup_app_arg

vpn.dark_mode

offers.left_rail_offer_enabled

offers.sponsored_torrent_offer_enabled

offers.404_url

error:%d msg:%S

download.utorrent.com

download.bittorrent.com

hXXp://VVV.utorrent.com/download.php

nvappfilter.dll

nvlsp.dll

MxAVlsp.dll

ifw_xfilter.dll

Niphk.dll

SARAH.dll

imon.dll

MImp.dll

MIPro.dll

radhslib.dll

Naomi Web Filter

adguard.dll

HMIPCore.dll

dnsq.dll

laf1.dll

Win32/Hoax.Renos.NAV

laf2.dll

laf3.dll

laf4.dll

laf5.dll

t0.dll

Trojan-Downloader.Agent.Pto

t1.dll

ftp34.dll

'%s' (%s)

'%s' (%s) (known malware!)

virus.bd_state

ERROR VerifyVersion failed with: %S

{"path":"%s","version":"%d","blacklisted":"%d","crash_count":"%d","opt_out":"%d","running":"%s"}

Saving new version to %S

SaveExeFail

Saving new lang file to %S

Download and managed version %d

"status":"%S"

LaunchTargetVersion removed non-existent target: %S

"status":"Removed missing target:%d"

Launching target version: %d with command line: %S

Target path: %S

JSON dump: %s

"status":"Launching target version:%d"

LaunchTargetVersion: ShellExecute returned %d.

"status":"ShellExecute returned:%d"

CopyVersionToInstallDir new_path = %S

CopyVersionToInstall failed on WaitForSingleObject: %d

"status":%d

Relocate Version didn't find updates\ in path: %S

Failed to CopyVersionToInstallDir %S

Launching %S with command line: %S

RelocateVersion: ShellExecute returned %d.

"status":"ShellExecute returned %d"

"launched_target":%d,"updated":%d,"relocated":%d,

Failed to create directory: %S

Target_ver: %d; Expected: %d

,"ev":%d

%s, "action":"%s", "g_version":%d, "no_sau": %d

wininet.dll

HttpOpenRequestA

HttpSendRequestA

HttpQueryInfoA

%d.%d

\DBGHELP.DLL

DBGHELP.DLL

\%d-%s.%.4x.dmp

%s/%s

bench.utorrent.com

{"h":"%s","cl":"%s","v":%d,"l":"%s","w":"%s","cts":%Ld,"eventName":"crash","plus":%d,"dlls":"%s"%s}

can't load wininet.dll

/crash.php?cl=%s&ver=%dU&h=%s&p=%dU&pr=%dU&s=%dU&svp=%d&ov=%d&plus=%d

&dl=%s

HttpOpenRequest failed

HttpSendRequest failed

HttpQueryInfo failed

Error %d :

ntdll.dll

OV_COL_SOURCE_URL

xx__%s

player.btinstall

bitdefender.btinstall

--AD_UNIT_LOC_LEFT_RAIL refreshing ad unit %d.

<body scroll="no"><div style="width: %dpx; height: %dpx; margin-left: -10; margin-top: -15; overflow: hidden;">

----lrec AdTag to load ad id %d

%s='//

%s="//

src=%chXXp://

plus=%d&cid=%s&code=%d

file=%s

RSS_COL_SOURCE_URL

hXXp://utorrent.com/rsstutorial.php

winmm.dll

hXXp://remote.utorrent.com/send?btih=

%s%H&dn=%U&message=%U&sid=%s&cid=%U

%s%H&dn=%U&message=%U

hXXp://tinyurl.com/api-create.php?url=%U

100kb.test

500kb.test

1mb.test

2mb.test

7mb.test

15mb.test

30mb.test

75mb.test

100mb.test

150mb.test

ndt.iupui.par01.measurement-lab.org

ndt.iupui.ath01.measurement-lab.org

ndt.iupui.ams01.measurement-lab.org

ndt.iupui.ams02.measurement-lab.org

ndt.iupui.lhr01.measurement-lab.org

ndt.iupui.lax01.measurement-lab.org

ndt.iupui.nuq01.measurement-lab.org

ndt.iupui.mia01.measurement-lab.org

ndt.iupui.atl01.measurement-lab.org

ndt.iupui.ord01.measurement-lab.org

ndt.iupui.lga01.measurement-lab.org

ndt.iupui.lga02.measurement-lab.org

ndt.iupui.dfw01.measurement-lab.org

ndt.iupui.sea01.measurement-lab.org

hXXp://ll.VVV.bittorrent.com/llspeedtest/

hXXp://update.utorrent.com/speedstats.php?result=

%s%d:%d:%d:%d:%s

hXXp://utorrent.com/testport?plain=1

&port=%d

hXXp://ll.VVV.bittorrent.com/llspeedtest/speedtestobjects.txt

hXXp://update.utorrent.com/speedserverlist.php

hXXp://VVV.utorrent.com/testport.php?port=%d

graph_import

tcp_upload_limit

tcp_download_limit

tcp_upload_rate

tcp_download_rate

%s:xxx

{\rtf1\ansi\ansicpg1252 \fs16 %S}

{\rtf1\ansi\ansicpg1252 \fs16 \b %S\b0 \line %S}

{\rtf1\ansi\ansicpg1252 \fs16 \b %S\b0 %S}

--LAdWindow RequestNewAd unit %d.

hXXps://VVV.facebook.com/connect/login_success.html

hXXp://VVV.facebook.com/connect/login_success.html

hXXps://VVV.facebook.com/login.php

hXXp://VVV.facebook.com/login.php

hXXps://VVV.facebook.com/connect/uiserver.php

hXXp://VVV.facebook.com/connect/uiserver.php

hXXps://VVV.facebook.com/dialog/permissions.request

hXXp://VVV.facebook.com/dialog/permissions.request

hXXps://VVV.facebook.com/checkpoint/

hXXp://VVV.facebook.com/checkpoint/

&scope=%S

client_id=%S&redirect_uri=%s&response_type=token&display=popup%s

hXXps://VVV.facebook.com/dialog/oauth

hXXp://VVV.facebook.com/dialog/oauth

&to=%S

app_id=%S&display=popup&message=%s&redirect_uri=%s%s

hXXps://VVV.facebook.com/dialog/apprequests

6bUWeB [

;70>:3QLC@<52/*63.UPF"

WEBEF

.JJJJJJJJ.

[9[99[9[

.NNN$

version.dll

libvlc_video_set_key_input

libvlccore.dll

libvlc.dll

PE_COL_PORT

DrawImageFailure-%d

"source":%d,"imageUrl":"%s","acceptUrl":"%s","offerTitle":"%s","response":%d

{\rtf1\ansi\ansicpg1252\deff0\deflang1033{\fonttbl{\f0\fnil\fcharset0 Arial;}}\viewkind4\uc1\pard\fs16 Sponsored torrents are \b free torrent downloads\b0 like games, music and software tools made by %s's \b trusted partners.\b0 \par \par \b %s values your privacy\b0 and will never store any personal information. \b Your consent is required\b0 for any new software installations.

.mpeg

.alac

.mp4v

.divx

.flac

.rmvb

.webm

.dvr-ms

Could not invoke external browser. Click url empty

btresource://%S/index.html

hXXp://VVV.apple.com/itunes

client.os.name:Windows

client.browser.name:%s

client.kernel.version:%s

client.version:3.3.13

client.utorrent.version:%d

read: got error: %d

Download Bytes: %lu, time: %f

Download: %s

Upload: got error: %d

Upload Bytes: %lu, time: %f

Upload: elasped time: %f

Upload: %s

123456 654321

hXXp://help.utorrent.com/customer/portal/articles/257678

Can't validate '%s' because no digits were encountered

Can't validate '%s' - error %d %s

hXXps://

image/vnd.microsoft.icon

NA-%d

%d.%d.%d.%d.%d.%s

Invalid Username/Password

Can't set SO_REUSEADDR option on socket %d - %d %s

Can't bind connecting socket %d to IP %A - %d %s

%s:%s

Proxy-Authorization: Basic %s

CONNECT %s:%d HTTP/1.0

CONNECT %A HTTP/1.0

WSAEnumNetworkEvents error (%d)

Bound listening socket %d to IP %A

Can't listen on socket %d IP %A

*** TCP, uTP buffer stats ***

Error code: HTTP %d

utp.log

looking up dishes: %s %i

advapi32.dll

dwmapi.dll

Failed to read from file: %s

rpcrt4.dll

Can't create UUID - %d

%S:%.X %.X,

Can't get computer name - %d %d

d10:.fileguard40:%H

d10:.fileguard40:

]: %s: %d

%d/%d blocks. %d/%d bytes.

Can't decode encoded encryption key in magnet URL %s

magnet:?xt=urn:btih:%H&dn=%U

&key=%s

&tr=%U

&ws=%U

&as=%U

gui.combine_listview_status_done

gui.update_rate

selfcert

plus.transcode_queue_parallel

plus.transcode_delete_transcripts

resume.enable_resume_dir

resume.dir_only

distributed_share.enable

distributed_share.tracker

udp://dishes-dev.trnt.us:8080

distributed_share.server_host

dishes.utorrent.com

distributed_share.pinned

distributed_share.server_port

use_udp_trackers

distributed_share.auth_key

upnp.external_tcp_port

distributed_share.skip_authentication

upnp.external_udp_port

distributed_share.initial_update

upnp.external_ip

distributed_share.churn_delay

distributed_share.churn_threshold

silent_auto_update_exe

finish_cmd

state_cmd

next_market_share_report

?208.67.222.222

208.67.220.220

s_url

offers.content_offer_url

offers.content_offer_autoexec

asdlurl

rand_port_on_start

logger.log_upnp_to_file

diskio.sparse_files

btapps.show_apps

net.bind_ip

net.outgoing_ip

net.outgoing_port

net.outgoing_max_port

net.low_cpu

net.calc_overhead

net.calc_rss_overhead

net.calc_tracker_overhead

net.max_halfopen

net.diffserv_codepoint

net.limit_excludeslocal

net.upnp_tcp_only

net.disable_incoming_ipv6

net.ratelimit_utp

net.friendly_name

net.update_secure

isp.bep22

isp.primary_dns

isp.secondary_dns

isp.fqdn

isp.peer_policy_enable

isp.peer_policy_url

isp.peer_policy_date

isp.peer_policy_expy

isp.peer_policy_override

ipfilter.enable

dht.collect_feed

dht.rate

gui.log_date

boss_key

boss_key_salt

use_boss_key_pw

boss_key_pw

rss.update_interval

rss.smart_repack_filter

rss.feed_as_default_label

bt.save_resume_rate

bt.magnetlink_check_existing_files

gui.sg_mode

gui.delete_to_trash

gui.default_del_action

gui.speed_in_title

gui.limits_in_statusbar

streaming.safety_factor

gui.graphic_progress

streaming.failover_rate_factor

gui.piecebar_progress

streaming.failover_set_percentage

gui.show_status_icon_in_dl_list

gui.tall_category_list

gui.wide_toolbar

gui.show_gate_explaination

gui.show_gate_delete

gui.show_gate_notify

gui.find_pane

gui.toolbar_labels

gui.category_list_spaces

streaming.preview_player

streaming.peer_timeout

streaming.buffer_size

tray.show

tray.single_click

btapps.auto_update_btapps

btapps.auto_update_btinstalls

btapps.install_unsigned_apps

btapps.reveal_app

btapps.skin_url

bind_port

btapps.enable_activex

gui.show_devices

gui.show_plus_upsell

gui.show_plus_av_upsell

gui.show_plus_conv_upsell

gui.plus_upsell_foreground

stats.first_time_user

stats.installed_from_bundle

stats.video1.time_watched

stats.video2.time_watched

stats.video3.time_watched

stats.video1.finished

stats.video2.finished

stats.video3.finished

stats.welcome_page_useful

gui.report_problems

gui.enable_ratings

gui.persistent_labels

gui.enable_comments

gui.compat_diropen

magnet.download_wait

gui.alternate_color

gui.transparent_graph_legend

sys.prevent_standby

sys.enable_wine_hacks

campaigncode.txt

.fileguard

Validating value '%s' for setting %d type %d

\u00x

Accept-Language: %s

DNS lookup can't resolve host '%s'

HTTP/1.1

hXXp://%s%s%s

%s(%d)

Host: %s%s

User-Agent: %s

Accept-Encoding:%s

Referer: %s

Authorization: Basic %s

If-Modified-Since: %s

X-Requested-With: XMLHttpRequest

%U=%U

Content-Length: %d

Content-Type: application/x-www-form-urlencoded

HTTP/1.

https:

DownloadURL(%s) called.

InternetOpenUrlA

%s(%d)/%s

[%s] %s

bt.http_pending_limit

bt.dl_queue_factor

bt.ul_queue_factor

bt.scrape_stopped

bt.compact_allocation

bt.progressive_piece_picker

bt.progressive_piece_span_mb

bt.enable_tracker

bt.use_dns_tracker_prefs

bt.read_only_on_complete

bt.multiscrape

bt.send_have_to_seed

bt.set_sockbuf

bt.rcv_max_sockbuf

bt.snd_max_sockbuf

bt.connect_speed

bt.prio_first_last_piece

bt.randomize_peer_id

bt.sequential_download

bt.sequential_files

bt.allow_same_ip

bt.use_similar_torrent_data

bt.no_connect_to_services

bt.no_connect_to_services_list

bt.ban_threshold

bt.use_ban_ratio

bt.ban_ratio

bt.use_rangeblock

bt.graceful_shutdown

bt.shutdown_tracker_timeout

bt.shutdown_upnp_timeout

peer.lazy_bitfield

peer.lazy_bitfield_mode

peer.lazy_bitfield_factor

peer.lazy_bitfield_nohave

peer.resolve_country

peer.disconnect_inactive

peer.disconnect_inactive_interval

choker.interval_auto

choker.interval

choker.interval_optim

choker.slots_auto

diskio.flush_files

25,80,110,443,6666,6667

?queue.dont_count_slow_dl

queue.dont_count_slow_ul

queue.slow_dl_threshold

queue.slow_ul_threshold

queue.use_seed_peer_ratio

queue.prio_no_seeds

queue.switchtime

queue.switchtime_prio

queue.started_bonus

bt.tcp_rate_control

gui.graph_tcp_rate_control

gui.graph_overhead

gui.graph_legend

bt.ratelimit_tcp_only

bt.prioritize_partial_pieces

bt.transp_disposition

net.utp_target_delay

net.utp_packet_size_interval

net.utp_receive_target_delay

net.utp_initial_packet_size

net.utp_dynamic_packet_size

net.discoverable

bt.enable_pulse

bt.pulse_weight

bt.extra_ul_rand

bt.extra_ul_max

bt.prio_piece_thres

bt.few_pieces_thres

zz.countries.nerd.dk

%I.%s

DEBUG: Skipping torrent peer resolve: %t 0xX %d

"url"

&license=%U

http%s://%U:%U@%s:%d/attach?name=%U&clientid=%U&version=%d&p=%d&ip=%I%s

proxy = hXXp://localhost:%d/proxy/0/; expires = %s GMT

hXXp://localhost

-%c%c%s-

127.0.0.1

0.0.0.0

"peer_id":"%s", "addr":"%A"

"markpt":"%s"

webui.enable

webui.enable_guest

webui.enable_listen

webui.token_auth

webui.token_auth_filter

webui.username

webui.password

webui.hashword

webui.uconnect_enable

webui.uconnect_username

webui.uconnect_password

webui.uconnect_hashword

webui.uconnect_username_anonymous

webui.uconnect_hashword_anonymous

webui.uconnect_question_opted_out

webui.uconnect_computername

webui.allow_pairing

webui.ssdp_uuid

webui.salt

webui.guest

webui.restrict

webui.port

webui.cookie

webui.pair_hashes

webui.download_folders

webui.raptor_host

raptor.utorrent.com

webui.raptor_port

webui.raptor_secure

webui.talon_host

remote.utorrent.com

webui.talon_port

webui.talon_secure

webui.uconnect_toolbar_ever

webui.uconnect_enable_ever

webui.uconnect_connected_ever

webui.uconnect_actions_count

webui.uconnect_actions_list_count

webui.uconnect_cred_status

webui.update_message

webui.proxy_auth

%s('invalid request')

Can't parse authorization header %s

Can't find device pairing for ID %S

HTTP/1.1 301 Moved Permanently

Location: %s

HTTP/1.1 u %s

WWW-Authenticate: Basic realm="%s"

HTTP/1.1 %d %s

Connection: %s

Content-Type: %s

%s%s%s%s%s%s%s%s%s%s%s%s

%sContent-Length: %u

%sConnection: close

Can't accept invalid address '%s'

Can't accept invalid dot notation mask '%s'

Can't accept IP '%s' with invalid mask '%s'

Iphlpapi.dll

GetExtendedTcpTable

4.2.2.1

10.0.0.0

192.168.0.0

169.254.0.0

172.16.0.0

127.0.0.0

.payload

.options

update_url

extension_msg

badging_url

file:///%S\apps\%S\index.html

Appwatcher found %d copies of %S. Tsk Tsk.

PlusKeyInjected

{"event": "%s", "properties": {

"distinct_id":"%s",

"h":"%s",

"v":"%d",

"c":"%S",

"token":"%s",

"svp":"%d",

"view":"%s",

"cc":%d,

"bucket":"%S",

"%s":"%S"

hXXp://yogi.apps.bittorrent.com/track/?data=%s&ip=1

X-ClientID: %s

Sending autoupdate stats [%s]

ip=%s

dlurl=%U

POST /e?i=%d HTTP/1.1

"%s":"%s",

"%s":"%s"

"%s":%u

"%s":%Lu

hXXp://bench.utorrent.com

[u:u][%s]

"trigger":%u

,"%u":%u

,"%s":%u

,"%s":%Lu

,"%u": [

%d.%d.%d

%s/%d%d%d(%d)

%d%d%d

%d%d%d%s

https

udp://

cmdline

%S: is 100%% completed

verified signature for trusted identity: %s

update-url

gate-info-url

url-list

Windows-

name.utf-8

path.utf-8

WARNING: avoiding connecting to web seed because it's blocked by policy '%s'

tracker: failure reason="%s"

port

for torrent file: %s

got tracker error response: %s

got HTTP tracker response for: %s

tracker response: %s

tracker warning: %s

got udp tracker error response: %s

got UDP tracker response for: %s

****** REQ(%s): for torrent file '%S' connecting to tracker: %S

tracker not tracking: %s

&ip=%U

&ipv6=%U

%S%cinfo_hash=%.20U&peer_id=%.20U&port=%d&uploaded=%Ld&downloaded=%Ld&left=%Ld&corrupt=%Ld&key=%.8X%s&numwant=%d&compact=1&no_peer_id=1%s%s

tracker request: %s

for tracker %s

tracker: failure reason="%S"

valid scrape from %S

%.*S/scrape%S%cinfo_hash=%.20U

Initiating UDP scrape for torrent file: %s

Tracker URL: %s

Initiating TCP scrape for torrent file: %s

gate_url

%s?h=%s

%s?info_hash=%h&h=%s&next_gate=%s

****** update url: %s

****** gate url: %s

Could not download metadata for torrent %H (%S): %S

http:

%S: is %.2f%% completed

Adding '%S' as storage path for '%S'

** Saving '%S' as root folder for '%S'

app_url

feed_url

web_seeding_enabled

gate_info_url

autoexecute

hideautoexecuteui

tfurl

webseeds

PPRIO_HTTP

KCan't accept '%s' as argument

hr.hdtv

hr.pdtv

webrip

ac3.5.1

Updated RSS feed %d from url %S

dd.dd.dd

dddd.dd.dd

Channel count %d for feed with url %S

Initiating RSS download of url %s

RssSetupCallback sets wnd %x msg %d - WM_RSS_UPDATE_FEED %d

POST /e?i=%s HTTP/1.0

{"eventName":"ut_prof_ip","b":%Ld,"r":%d,"sequenceID":%d,"clientID":"%s","uniqueID":"%s","st":[

hXXp://bench.utorrent.com/e?i=%s

proxy.proxy

proxy.type

proxy.port

proxy.auth

proxy.resolve

proxy.username

proxy.password

%s Remote disconnected: reset by proxy

http_pending_limit

min_http_connections

HTTP/1.1 200 OK

Content-Disposition: attachment; filename="%s"

Content-Disposition: %s

HTTP/1.1 %s

%s%s%s%sServer: BitTorrentProxy/1.0

%s([""

%s; filename="%s"

_prio_window is %d

Certification Services Division1!0

premium-server@thawte.com0

*.utorrent.com0

/hXXp://crl.thawte.com/ThawteServerPremiumCA.crl0

hXXp://ocsp.thawte.com0

.RH(Y

)hXXp://svr-ov-crl.thawte.com/ThawteOV.crl0

Certification Services Division1806

GoDaddy.com, Inc.1301

*hXXp://certificates.godaddy.com/repository100.

'Go Daddy Secure Certification Authority1

079692870

*.bittorrent.com1!0

*.bittorrent.com0

"hXXp://crl.godaddy.com/gds1-14.crl0S

 hXXp://certificates.godaddy.com/repository/0

hXXp://ocsp.godaddy.com/0J

>hXXp://certificates.godaddy.com/repository/gd_intermediate.crt0

*.bittorrent.com

bittorrent.com0

*.utorrent.li1!0

*.utorrent.li0

"hXXp://crl.godaddy.com/gds1-82.crl0S

*.utorrent.li

utorrent.li0

Security.dll

Secur32.dll

1.2.840.113549.1.1.5

1.3.6.1.5.5.7.3.1

1.3.6.1.4.1.311.10.3.3

2.16.840.1.113730.4.1

1.3.6.1.5.5.7.3.2

"name": "%s"%c %s%c %s

%s %dx%d

"video_codec": "%s", "video_bitrate": %d, "fps": %d, "video_x": %d, "video_y": %d

%s %dkbps

"audio_codec": "%s", "bitrate": %d, "sample_rate": %d

%S:%s

Server: %s

Content-Disposition: attachment; filename="%s"; size=%Lu

Date: %s

ETag: "%s"

Last-Modified: %s

%s%s%s%s%s%sConnection: close

%s%s%s

HTTP/1.1 %d Error

%I.in-addr.arpa

%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.%c.ip6.arpa

DEBUG: Marking %a as %s

DEBUG: IP %a is already cached. Returning %s

DEBUG: Initiating tracker prefs resolve %s

DEBUG: Hostname %s is already cached. Returning %a

DEBUG: Hostname %s cache error %d

DEBUG: Initiating resolve %s

DEBUG: Reverse %s lookup %a (FQDN: %d)

DEBUG: Reverse lookup done: %s

_bittorrent-tracker._tcp.%s

DEBUG: Processing TXT: %s

DEBUG: Resolving %s service %u

DnsApi.dll

keyhash

Saving serialized device pairing set with %lu pairings at %S

Can't create pairing from hierarchy at %u from %S

Can't load non-dictionary hierarchy at %u into pairing set from %S

Can't load non-list hierarchy into pairing set from %S

%s serialized device pairing set (%lu devices) from %S

JT_IMPORT

diskio.no_zero

diskio.use_partfile

diskio.smart_hash

diskio.smart_sparse_hash

diskio.coalesce_writes

diskio.coalesce_write_size

diskio.rsize_factor

diskio.max_write_queue

diskio.cache_reduce_minutes

diskio.cache_stripe

diskio.quick_hash

diskio.mark_of_the_web

diskio.minimize_kernel_caching

diskio.all_writes_sync

cache.override

cache.override_size

cache.reduce

cache.write

cache.writeout

cache.writeimm

cache.read

cache.read_turnoff

cache.read_prune

cache.read_thrash

Error: COMPACT_NOT_FOUND. P=%d,T=%d

** FileStorage::SetFolderRoot(%S) failed with _folder '%S'

** FileStorage::SetFolderRoot(%S) failed: _folder is NULL or empty.

** FileStorage::SetFolderRoot(%S): setting for folder '%S'

Warning: Delete to trash failed for %S. Error: %d. Deleting permanently.

"to_trash":%d, "filename":"%S", "error_code":%d

%s:%H:%d:%s

<html><head><title>µTorrent Search</title></head><frameset rows="90px,*"><frame src="hXXp://search.utorrent.com/bntop.html" frameborder="0" marginheight="0" marginwidth="0" scrolling="no" noresize="noresize" /><frame src="hXXp://search.conduit.com/Results.aspx?ctid=CT3083945&searchsource=45&&%s" frameborder="0" /></frameset></html>

js%d();

HTTP/1.0 200 OK

%s/%s(%d)(%s)

features/device_pairing/supported_types

Can't install web UI archive version (%d)

Can't install default UI version (%d)

version.txt

{ "name": "%s", "version": %s }

%s(%s)

GET /favicon.ico

Can't accept non-IPv4 address as IP match for %s

Can't match using invalid subnet mask %s

Found valid subnet mask %s %x

Ignoring filter IP containing invalid CIDR notation %s

IP matches IPv4 restriction %s%s%s

Can't match using IPv4 filter %s%s%s mip %x mask %x

Can't accept non-IPv6 restriction address %s

IP matches IPv6 restriction %s%s

Can't match using IPv6 filter %s%s

Can't support device pairing request lacking a PIN

Can't support invalid PIN '%s'

Can't support invalid PIN value %Ld

Can't support device pairing type '%s'

hXXp://apps.bittorrent.com/torque/pairing/style.%s%scss

<html><head><link rel="stylesheet" type="text/css" href="%s"></head><body><script>var key = "%s";var source = "%s";</script><h3>%s wants access to %s</h3><p>If you click yes, this site will have access to your data</p><input type="button" value="Allow" onclick="window.parent.postMessage(key,'*')" /><input type="button" value="Deny" onclick="window.parent.postMessage('denied','*')" /></body></html>

HTTP: IP %a: GET %.200s

HTTP: IP %a: Blocked: GET %.100s

"headers": { "Content-Type": %s

, "Set-Cookie": %s

"html":%s

"error": %s

,[%S,%J,%J,%I,%I,%I,%B,%I,%I,%I,%I,%J

,[%s,%s,%s,%I,%I,%S,%S,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I]

Can't accept value '%s' for torrent property '%s'

Can't accept overflow value '%s' for torrent property '%s'

Can't accept negative value '%s' for torrent property '%s'

Can't accept value '%s' for unknown torrent property '%s'

{"hash": %s

,"trackers": %S

password

,"code": %I, "message": %s

Can't recognize torrent hash '%s'

Can't accept file number '%s'

Can't use file number '%s' - invalid for selected torrent

{"name":%S, "hash":%H, "sid":%s, "complete":%B, "completed_on":%J, "primary_label":%S, "files": [

{"name":%S, "fileno":%J, "length":%J, "complete":%B, "type":%s, "fullpath":%S,

{"name":%S, "fileno":%J, "length":%J, "complete":%B, "type":%s,

"codecs": [%s,%s]

{"name":%S, "fileno":%J, "media":%s, "length":%J, "complete":%B, "type":%s,

,"error": %S

add-url

get-url

add-unknown-url

Ignoring setting %d name %s value %s

{ "name": %s

app_update_url

,[%s,%I,%S,{"access":%s}]

, {"path": %s, "available": "%J"}

webui

, %s : [

, "name" : %s, "version" :

,{"guid":%s, "created":%J, "updated":%J, "peer_ip":%a, "sock_ip":%a, "reported_ip":%s, "user_agent":%s, "persistent":true, "custom":%s }

,{"guid":%s, "created":%J, "updated":%J, "peer_ip":%a, "sock_ip":%a, "reported_ip":%s, "user_agent":%s, "persistent":%B, "custom":%s }

Can't log out session - invalid GUID %s specified

Can't log out requester's session %s

%s out current session %s

[%S,%s,%s]

,"token": %s

Can't accept configuration change from other than administrative login

[%H,%I,%S,%J,%I,%J,%J,%I,%I,%I,%I,%S,%I,%I,%I,%I,%I,%I,%J,%s,%s,%S,%s,%J,%J,%s,%S,%I,%s]

[%S, %I]

[%I,%B,%B,%B,%B,%I,%S,%I,[

[%S,%S,%s,%I,%I,%J,%I,%I,%I,%I,%B,%B]

[%I,%I,%S,%S,%S,%S,%I,%I,%S,%I,%I,%I,%I,%S,%B,%B]

getmsg

%s({"encbody":"

,"GUID":"%s"

,"x-bt-seq":"%s"

<script src="/static/js/bt.js"></script>

.html

token.html

HTTP/1.1 304 Not Modified

<meta http-equiv="refresh" content="1" />Please wait while the µTorrent WebUI is installed... You will be automatically redirected.

index.html

The µTorrent WebUI does not seem to be installed. Click <a href="download_webui">here</a> to try to install it, or see the <a href="hXXp://utorrent.com/webui-guide.php">guide</a> for more details.

index.html?error=1

<b>There was a problem installing µTorrent WebUI, please see the µTorrent log for more details.</b></br></br>

download_webui

HTTP/1.1 404 Not Found

%s({response:%s, guid:"%s"})

%s({ "sessionid": "%s", "message": "%s", "code": %d })

%s({ "message": "%s", "code": %d })

Can't create session for device ID %s

Can't accept remote pairing key

Can't accept device pairing key '%s'

Can't process pair connection authentication request without pairing key

/gui/guest.html

Unable to listen for HTTP traffic on port %d

Unable to listen for HTTP traffic on v6 port %d

%s({ "pairing_key": "%s", "pairing_type": %d, "code": %d })

psapi.dll

BaseCreateTorr::OnDoneBitrate: error(%s): %u

BaseCreateTorr::OnDoneBitrate: parse error(%s): %u

BaseCreateTorr::OnDoneBitrate: success(%S) rate=%u, duration=%u, width=%u, height=%u

hXXp://%s/talon/seed/%S/content/%x

[%u] log closed

rss_feed_url

supported_msgs

streaming_url

Setting value of setting %s key %d to %s

UDP setsockopt(SO_RCVBUF, %d) failed: %d

UDP setsockopt(SO_SNDBUF, %d) failed: %d

DEBUG: ICMP%s is not available on this platform

239.255.255.250

Created SSDP UUID %s

The external port cannot be wild-carded

The port mapping entry specified conflicts with a mapping assigned previously to another client

Internal and External port values must be the same

The NAT implementation only supports permanent lease times on port mappings

ExternalPort must be a wildcard and cannot be a specific port

UPnP: Discovered host: %s

UPnP: Checking cached host %s

UPnP: Cached host %s (%I) is not part of our subnet %I/%I. Ignoring.

UPnP: Queueing cached host %s

UPnP: Unable to bind to UPnP port: %d

UPnP: Joined multicast group

M-SEARCH * HTTP/1.1

HOST: 239.255.255.250:1900

NOTIFY * HTTP/1.1

LOCATION: hXXp://%A

SERVER: %s/%s UPnP/1.1 %s/%s

NTS: %s

USN: uuid:%s

FRIENDLYNAME:%S

HH:%s

%s(%s)(%s)

CACHE-CONTROL: max-age = %d

LOCATION:hXXp://%A

USN:uuid:%s

recvfrom ERROR: %d

UPnP: Found location from upnp notify: %s

urlbase

controlurl

eventsuburl

scpdurl

NewExternalPort

NewInternalPort

hXXp://%s:%d/%s

UPnP: The device "%s" is not a UPnP router (%s)

AddPortMapping

DeletePortMapping

GetGenericPortMappingEntry

<s:Envelope xmlns:s="hXXp://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="hXXp://schemas.xmlsoap.org/soap/encoding/">

<u:%s xmlns:u="%s">

<NewRemoteHost></NewRemoteHost><NewExternalPort>%d</NewExternalPort><NewProtocol>%s</NewProtocol><NewInternalPort>%d</NewInternalPort><NewInternalClient>%I</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>%s (%s)</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration>

<NewRemoteHost></NewRemoteHost><NewExternalPort>%d</NewExternalPort><NewProtocol>%s</NewProtocol>

<NewPortMappingIndex>%d</NewPortMappingIndex>

</u:%s>

GET %s HTTP/1.1

Host: %s:%d

HOST: %s:%d

CONTENT-LENGTH: %d

SOAPACTION: "%s#%s"

%s port %d -> %I:%d

%s port %d

UPnP: %s is already mapped. Not re-mapping.

UPnP: Removed %s

UPnP: ERROR removing %s: (%d) %s

UPnP: Mapped %s

UPnP: %s mapped successfully.

UPnP: Host '%s' added to cache.

UPnP: ERROR mapping %s. Deleting mapping and trying again: (%d) %s

UPnP: ERROR mapping %s: (%d) %s

UPnP: Device error "%s": (%d) %S

UPnP: Could not map UPnP Port on this pass, retrying.

UPnP: Could not detect external IP on this pass, retrying.

UPnP: Unable to map port %I:%d with UPnP.

Unsupported Version

Not Authorized/Refused (e.g. box supports mapping, but user has turned feature off)

Unsupported opcode

NAT-PMP: error: %s

NAT-PMP: %s %s port %d -> %I:%d

NAT-PMP: Unable to map port with NAT-PMP.

Pairing request rejected - unsupported

keys

,"os":"%d.%d.%d.%d.%d.%s"

,"eipdll":"%s"

,"dlls":"%s"

%d:%d

%A: [%s (%:.1d)] picked no blocks

%A: [%s (%:.1d)] picked %u blocks, first: %u

msg_type

8:msg_typei%ue

5:piecei%ue

5:added%d:

7:added.f%d:

6:added6%d:

8:added6.f%d:

7:dropped%d:

8:dropped6%d:

ut_app_%s

d1:eiÞ

12:complete_agoiÞ

11:upload_onlyiÞ

%d:ut_app_%siÞ

11:lt_donthaveiÞ

12:ut_holepunchiÞ

11:ut_metadataiÞ

6:ut_pexiÞ

10:ut_commentiÞ

13:metadata_sizeiÞ

1:piÞ4:reqqiÞ%s1:v%d:%s2:ypiÞ

@?8:msg_typeiÞ

3:numiÞ

6:filter%d:

255.255.255.255

UTP_GET_UDP_MTU

UTP_GET_UDP_OVERHEAD

%p %s d %s

MTU [PROBE] floor:%d ceiling:%d current:%d

MTU [PROBE-TIMEOUT] floor:%d ceiling:%d current:%d

Packet timeout. Resend. seq_nr:%u. timeout:%u max_window:%u cur_window_packets:%d

MTU [DONE] floor:%d ceiling:%d current:%d

MTU [RESET] floor:%d ceiling:%d current:%d

Packet %u lost. Resending

actual_delay:%u our_delay:%d their_delay:%u off_target:%d max_window:%u delay_base:%u delay_sum:%d target_delay:%d acked_bytes:%u cur_window:%u scaled_gain:%f rtt:%u rate:%u wnduser:%u rto:%u timeout:%d get_microseconds:%I64u cur_window_packets:%u packet_size:%u their_delay_base:%u their_actual_delay:%u average_delay:%d clock_drift:%d clock_drift_raw:%d delay_penalty:%d current_delay_sum:%I64ucurrent_delay_samples:%d average_delay_base:%d last_maxed_out_window:%I64u opt_sndbuf:%d current_ms:%I64u

MTU [DUPACK] floor:%d ceiling:%d current:%d

MTU [ACK] floor:%d ceiling:%d current:%d

UTP_Connect conn_seed:%u packet_size:%u (B) target_delay:%u (ms) delay_history:%u delay_base_history:%u (minutes)

MTU [ICMP] floor:%d ceiling:%d current:%d

%s: scrape response had %d torrents, request had %d

unsupported action

UDP Tracker disabled

UTrackAnnounce(%s) called.

UTrackScrape(%s) called.

UDP Trackers disabled.

Invalid tracker URL.

Web UI archive entity tag '%s'

hXXp://utorrent.com/webui/webui-%s-%s.zip

Attempting to download file %s to %S

hXXp://utorrent.com/webui/version-%s

Attempting to download web UI archive from %s to %S

Moving %S to %S

Moving %S back to %S

Attempting to read archived file %s

Can't parse string with length longer than remaining buffer: %Lu %s

Windows

OS info: name %s release %s version %s machine %s

** Generated %d character session cookie: GUID=%s

reported_ip

global_key

Searching for device pair session with id %s

Can't accept id %s as a GUID

UPnP(XP): Removed TCP port %d

UPnP(XP): Removed UDP port %d

UPnP(XP): %s port %d -> %I:%d is already mapped. Not re-mapping.

UPnP(XP): %s port %d -> %I:%d mapped successfully.

-----BEGIN CERTIFICATE-----

com.bittorrent

%s trusted

5:owner%d:%s4:text%d:%s9:timestampi%Lde4:likeiÞ

239.192.152.143

BT-SEARCH * HTTP/1.1

Host: 239.192.152.143:6771

Port: %u

Infohash: %s

port:

hXXp://update.utorrent.com/streamstats.php?t=%Ld&bb=%Ld&b=%Ld&s=%Ld&ft=%d&fb=%Ld&v=%dx%d&fe=%U&u=%d&nu=%d&nuc=%d&iu=%d&ps=%d&cc=%d&fs=%d&pt=%d&cpt=%d&nr=%d&cnr=%d&pl="%s"&tid=%x&fid=%x&timeout=%d&buffer=%d%s&svp=%d

&&&&6666????

""""****

2222::::

$$$$\\\\

00006666

####====

CbDP.jR6YD6wAj2ByQWxQxQZ7.9J9xkn2.Uqb3zVm16vQyizprhBw9hi80psatZ8k54vwZfiIeEHZVsDnyqeWSSIpWso.wh5GD4OFgdhVI3

iqJ7nFZ4bGCRjE1F.FXEwL085Zb0kLM2TdHDaVVCdq0cKxvnH/0FLskJTKlDtt6sDl89dc//aEULTVFGtcbA/tDzc.bnFE.DWthQOu2n2JwKjgKfgCR2lZFWXdnWmoOh

Ewl2hcjiutMd3Fu2lgFnUXWSc67TVyy2vwYCKoS9MLsrdJVT9RgWTCuEqWJrfB6uE3LsE9GkOlaZabS7M29sj5TnzUqOLJMjiwEzArfiLr9WbMRANlF68N5AVLcPWvNx6Zjl3m5Scp0BzJBz9TkgfhzKJZ.WtP3Mv/67I/0wmRZ

F//////////oG/QeY5emZJ4ncABWDmSqIa2JWYAPynq0Wk.fZiJco9HIWXvZZG4tU.L6RFDEaCRC2iARV9V53TFuJLjRL72HUI5jNPYNdx6z4n2wQOtxMiB/rosz0QtxUuuQ/jQYP.bhfya4NnB7.P9A6PHxEPJWV//////////

3NUKQ2Re4P5BEK0TLg2dX3gETNNNECPoe92h4OVMaDn3Xo/0QdjgG/EvM.hiVV1BdIGklSI14HA38Mpe5k04juR5/EXMU0r1WtsLhNXwKBlf2zEfoOh0zVmDvqInpU695f29Iy7sNW3U5RIogcs740oUp2Kdv5wuITwnIx84cnO.e467/IV1lPnvMCr0pd1dgS0a.RV5eBJr03Q65Xy61R

dUyyhxav9tgnyIg65wHxkzkb7VIPh4o0lkwfOKiPp4rVJrzLRYVBtb76gKlaO7ef5LYGEw3G.4E0jbMxcYBetDy2YdpiP/3GWJInoBbvYHIRO9uBuxgsFKTKWu7RnR7yTau/IrFTdQ4LY/q.AvoCzMxV0PKvD9Odso/LFIItn8PbTov3VMn/ZEH2SqhtpBUkWtmcIkEflhX/YY/fkBKfBbe27/zUaKUUZEUYZ2H2nlCL60.JIPeZJSzsu/xHDVcx

2iQzj1CagQc/5ctbuJYLWlhtAsPHc7xWVyCPAKFRLWKADpASkqe9djWPFWTNTdeJtL8nAhImCn3Sr/IAdQ1FrGw0WvQUstPx3FO9KNcXOwisOQ1VlL.gheAHYfbYyBaxXL.NcJx9TUwgWDT0hRzFzqSrdGGTN3FgSTA1v4QnHtEygNj3eZ.u0MThqWUaDiP87nqha7XnT66bkTCkQ8.7T8L4KZjIImrNrUftedTTBi.WCi.zlrBxDuOM0da0JbUkQlXqvp0yvJAPpC11nxmmZOAbQOywZGmu9nhZNuwTlxjfIro0FOdthaDTuZRL9VL7MRPUDo/DQEyW.d4H.UIlzp

///////////93zgY8MZ2DCJ6Oek0t1pHAG9E28fdp7G22xwcEnER8b5A27cED0JTxvKPiyqwGnimAmfjybyKDq/XDMrjKS95v8MrTc9UViRqJ4BffZVjQml/NBRq1hVjxZXh.rg9dwMkdoGHV4iVvaaePb7iv5izmW1ykA5ZlmMOsaWs75NJccaMFwZz9CzVWsLT8zoZhPOSOlDM88LIkvxLAGTmbfPjPmmrJagyc0JnT6m8oXWXV3AGNaOkDiuxuvvtB1WEXWER9uEYx0UYZxN5NV1lJ5B9tYlBzfLO5nWvbKbywfLgvHNI9XYO.WKG5NAEMeggn2sjCnSD151wCwXL8QlV7BfaxFk515ZRxmgAwd5NNGOCVREN3uMcuUJ7g/MkZDi9CzSUZ9JWIYLXdSxZqYOQqkvhyI/w1jcA26JOTW9pFiXgP58VAnWNUo0Ck.4NLtfXNMnt2OZ0kjb6uWZYJw1qvQinGzjR/E3z48vBWj4WgJhIol//////////

F//////////oG/QeY5emZJ4ncABWDmSqIa2JWYAPynq0Wk.fZiJco9HIWXvZZG4tU.L6RFDEaCRC2iARV9V53TFuJLjRL72HUI5jNPYNdx6z4n2wQOtxMiB/rosz0QtxUuuQ/jQYP.bhfya4NnB7.P9A6PHxEHRFS80VBYXOxy5cDf8DXnLqvff5Z.e/IJFNuDbNIFSewsM76BpLY25KhkUrIa7S9QMRMSCDKvAl9W4yNHi2CeO8Nmoa5v6BZREE.EUTomO3eO3coU3ekm7ee.rnLtmRqnIoTuho/QLM1SOEPL9VEgLQkKLqYOOcFe541LoZbgAgiGjhJCN3GHGUZEeLI6htnowPEpxXGHOs.yAYkfnLrq637spbm.5fk7anwlrhepR2JFN7eoKu4ebOPtEuz8c6jBkQ/4l.WRPYWXas7O2Spx8QcHI7oiO5tiW3BlX5rTwOLriTmc8mBhPHk88ua.WTEMhCKFRM/pW/H2EIuBH8AaX204QSZmIfuVcruXncX2zkbiccSCd66hquZmQb6WqjXKBsYM3wSegr4pesxl2smJUZlakZlmK7xxAfYXyMKTEQy1TcRAMJw2Gmw8ZEw66KLldxHzXAN3EujUlk1lTTY5mI1pG1f4drR1QgPEqwfYDZzt1Xl.tt92cm8zDz3N9D0OncV//////////

///////////93zgY8MZ2DCJ6Oek0t1pHAG9E28fdp7G22xwcEnER8b5A27cED0JTxvKPiyqwGnimAmfjybyKDq/XDMrjKS95v8MrTc9UViRqJ4BffZVjQml/NBRq1hVjxZXh.rg9dwMkdoGHV4iVvaaePb7iv5izmW1ykA5ZlmMOsaWs75NJccaMFwZz9CzVWsLT8zoZhPOSOlDM88LIkvxLAGTmbfPjPmmrJagyc0JnT6m8oXWXV3AGNaOkDiuxuvvtB1WEXWER9uEYx0UYZxN5NV1lJ5B9tYlBzfLO5nWvbKbywfLgvHNI9XYO.WKG5NAEMeggn2sjCnSD151wCwXL8QlV7BfaxFk515ZRxmgAwd5NNGOCVREN3uMcuUJ7g/MkZDi9CzSUZ9JWIYLXdSxZqYOQqkvhyI/w1jcA26JOTW9pFiXgP58VAnWNUo0Ck.4NLtfXNMnt2OZ0kjb6uWZYJw1qvQinGzjR/E3z48vBWj4WgI480HfoF1AdX.RNY76Q4BswMoQPmoSOQlJYF1gKQ3Is5GlQ9OFfoYhKJEZRkyBR1DwE.IwE/1GVligcA7nPHqvhm5sPifPFe933eYCxeOPHM.Vj7s4fSCxYrw.u6zrs8N187D06aIVLi5gfaxJgc8sFtS66/xVSaAR0ZqtqDSaq0eIIDiFwjD9yS2R1rDooO2P6tibr7dOzkZUz.F.K1gsUKmxbspWlGJ01hh1gK.sG9zWn5vSdi8PQYHZQFjlhpviKxKJERBhErBiRstyKH.RC9Kip855HAzUlGc.uz04tZDA/MOFA0SPBakpmCkeLqN8T0/I2ryvkTFxsrLvmBqQO38Arg40na0iSdbddoN..n.Zp8wbwVZRCYBuF7KMt/rXQnKlK1x8hGLIgp8zjVhz8uTWKp5xI3u0tuAUN5Uxoc.Ce1g7LYxV5sdRrKAezYX./yEiPpB6Z4zLSsbR9x2xobZ8uV.ZNRZm4Q0G.ZsO/I63k4hyjMmjqTDRcbFaURSn09F//////////

3//////////yaFsg8XQC8qnCPYYu3S7D4f0au8YcVCT08BlgOx4viYKKe8UOuq1DtlbHcppJf36p0h2ctoNnGtJ.4rRMrHmaNaXRLsObv.nlHCGkccD.rh2/zSjlG6j.tkE6lxMecVfQwV915yIn/cIIXcKUpaMpt207oueME/1PZQI3OSLTEQQHO/gFqapr.3PLqZtAEjbXnYyrOWXLAxdjKf1t2Mbcrd33LEIhoO1F5qR0ZA625yCf1UHYuspZlZddSi60w60vidWwBi1wAFjSLTy6zCKidUAylsbLWN63cLINpgbMhb5T8c69Zw1H0LSevQYgh4BQqp5mq4K7epg5KXgzySkcJi.uK4MDll2ehgSLTT1WnzivSFXQRXvCUhzQwCsmaprnwCbE1A9M6TpkFI9XhIxclnB/e6sOe8PDXs0dC.o6faKXyh61Tx80oxuHTNUc5TR7S9YC2wsKRY2E9Fe7Jbgp53srlyuFqGZak2qI2f8GW16d8y4gU7vjU8SPeGlRfR9fd39nXgzE8y6fHeDBOL2zebW.dAAjHCwDkxmji4texvBexy51..ogOeV5b7Jcl0NPcoba.WaCEY8pkXXb5Rv.qVOIbmpkBNhxWRtNOXS4WSq0QH9zMmMgcJjEgOZO/TmOR/jzoGfi2FJVGroJG2X98sm/gqqdnm9i7KtB9W9aRUoNKUTZswDxtu/vG6hPvJ3kNRE2z1C06ki6fJxP0ds34NboUmXbg96De.s.lFcnJjHCvikixKknlRVnH7vimbIpCWKL4hrwz2RxZq0JUCqhzPWye1nakIxF0owXNHSXq3z8BNpcvq/lRLNd0lHfWCWhMeG36G2noUMUV9Vxx7wFCZgNf.Dio8lWyTHRV/M5h5IzG7iYj1LAhCZsr.lqZXs1JCNj8FW3VWfvSLxlARuoW6eTMBjyNQTlLGgZsA7x/mwndCiQCJrLpQLidiBlAMCZX/wDTkF0He13wFPZz8OEuIlorR2tHqrkQK.HvjlX5PTAEIRnB.vUGuTtosgJBVZDY.nD1pkJ6wEyWojesTqm1q7wU/Yln7xILszfDhf2HcEgjZd5hazMWq8xHqA/79U2EF5ilZdMKju/sullo4YjaY8Yu4f0Dy1nFhLwWQ8/37D7FyP6pgC6jBoyY6BuE5tVgTIt.Ym8VeUMWp0.rRtJe6Appriw9ufcqg4/W/HFWjtp4Eu7IhQZP5b.YPe2LTmMJp7CK8HeKT.Qj86LtjVg6nrH2zVkTDS/hpQyCUpw9eDP16zEk7dv902KEBI1niruYQ02xLxZWhoHaDflm2RaULMEH7LdVfgfumKE9sLfJVo1zMw82vRd5WoO3TcEtJt///////////

TEMP_PASSWD.conf

TEMP_PASSWD

.btskin

AVI header too large in %S

Can't find AVI header chunk in %S

Cookie: %s

User-Agent: %s(%d)

%s/%s/%s

%s%s/%s

4:port

12:implied_porti1e

Num buckets: %d. My DHT ID: %s

Bucket %d: %.8X%.8X%.8X%.8X%.8X (nodes: %d replacement-nodes: %d, span: %d)

%s %A fail:%d seen:%d age:%S ver:%s rtt:%d

Total peers: %d (in replacement cache %d)

Outstanding add nodes: %d

%d: %s/%s: %d peers

Total peers: %d

Total torrents: %d

5:nodes%d:

1:vliÞiÞiÞiÞiÞe

e1:t%d:%.*m1:v4:%.4m1:y1:re

1:n%d:%.*s

3:seqiÞ1:v

3:key%d:%.*m

3:sig%d:%.*m

router.utorrent.com

router.bittorrent.com

%d:%s

%d:%.*m

d1:ad2:id20:%.20m6:target20:%.20m5:token%d:%.*m4:voteiÞe1:q4:vote1:t4:%.4m1:v4:%.4m1:y1:qe

implied_port

0123456789

invalid object key (must be a string)

object key and value must be separated by a colon (':')

after key and value, inside map, I expect ',' or '}'

Visual C   CRT: Not enough memory to complete call to strerror.

Operation not permitted

Inappropriate I/O control operation

Broken pipe

GetProcessWindowStation

operator

hXXp://%s

hXXp://VVV.mybrowserbar.com/images/pixel.gif?tb=1&cnid=%d

/cnid \"%d\" %s

hXXp://download.mybrowserbar.com/kits/sds/SearchProtectionSetup.exe

--IEClientSite::PixelCallback error: %S

.bittorrent.com

.utorrent.com

cleverbridge.com

.cleverbridge.com

----ieframe about to load '%S'

C:\buildbot\utorrent_slave\utorrent_release\build\Build\Win32\Release\utorrent.pdb

About %s

Publisher: %S

Release Date: %S

Version: %S

Description: %S

Update URL: %S

A single purchased copy of %s Plus can only be installed on a set number of computers. This copy has been installed on too many different computers.

Please either purchase a new copy for this computer, or contact us at hXXp://help.bittorrent.com if you think you're getting this message in error.

The directory you chose is not on the same drive as the %s client. It will not come along when you move the USB drive. Are you sure you want to continue?

Would you like to add "%s" to your search list?

%s application %s failed to copy to %s

This app was downloaded from %S

Installing %s

This %s app was downloaded from a website.

Title: %s

Are you sure you want to open the containing folders for %d torrents?

Are you sure you want to open the converted files for %d torrents?

Are you sure you want to open %d torrents?

Unable to find '%s'.

Error '%s' while downloading URL.

The contents of this torrent were verified to be free of viruses and spyware on %s

All files (*.*)

The app '%s' is requesting access to:

%s%s%s%s%s%s%s%s%s%s

Missing update url

Missing index.html

GetContentFile() does not contain [btinstall.txt]

App load failed (%s)

BtApp does not contain index.html

Are you sure you want to add %d torrents?

The installation of "%s" is complete

Can't open .torrent file: %s

Warning: Delete to trash failed for %s. Error: %d. Deleting permanently.

Failure: %s

Executing: %s

Unable to load "%s": %s!

Unable to save .torrent to '%s'.

Warning: %s

Checking auto portmap configuration ...

Checking queue ... we are #%d.

Unable to save to '%s'.

The directory you have selected contains more than 1000 files. The resulting .torrent will get very large. A better idea is to put the files into a compressed file and then share that file.

Please enter a valid tracker URL. Do you want to continue without having any trackers?

There was an error computing the hash: (%d) %s

The tracker protocol is invalid. udp, http and https are the only valid ones. Do you want to continue without having any trackers?

*.torrent

You have selected to share your entire My Documents folder and all its files. It is not advisable to do so unless you are certain you want to share all the contents, including possibly private documents.

The file or directory '%s' cannot be found. Please enter a different filename. Note that you can't share the root of a drive.

Select where to save the .torrent

Let Windows decide based on media type

%u Ratings

Click here to learn more about BitTorrent Certified devices

hXXp://VVV.bittorrent.com/certified-devices/

Plug USB into BitTorrent Certified playback device

Stream to BitTorrent Certified MOVE device

Make media playable in BitTorrent Certified devices

Webpage

BitTorrent Certified

BitTorrent Certified Device

Feed URL:

Enter Password

Web Seeds:

Portable mode

The following options automate the configuration of some additional settings in Windows.

Torrent in Windows Firewall

Torrent when Windows starts up

.torrent (BitTorrent files)

.btsearch (BitTorrent Search Engine files)

Add Torrent from URL

Please enter the location of the .torrent you want to open:

Windows Integration

Torrent when Windows Starts

&Boss-Key:

Use Boss-Key password

Location of .torrents

Store .torrents in:

Move .torrents for finished jobs to:

&Automatically load .torrents from:

&Delete loaded .torrents

Listening Port

Port used for incoming connections:

Random port

Enable &UPnP port mapping

&Randomize port each start

Enable &NAT-PMP port mapping

Add Windows &Firewall exception

Password:

Disable connections unsupported by the proxy

Apply rate limit to transport overhead

Enable UDP tracker support

IP/Hostname to report to tracker:

Enable &Web UI

&Password:

Alternative &listening port (default is the connection port):

Just enable the connection below, choose a computer name and password and remember to leave this computer on.

Visit hXXp://remote.utorrent.com/ and enter this computer name and password.

%1 stands for the command which is the chosen streamable file outputted by the build-in local loopback http server. You could add extra parameters for the player you selected.

Note: Web player may not support streamable files except avi.

Search Engines [Format: name|URL]

Current Port: (0:random)

Automatic Port Mapping (Recommended)

&Run speed test at: VVV.dslreports.com

Current Port: [0: auto]

&Test if port is forwarded properly

We recommend downloading a clean version directly from the content provider's website.

Web Seeds

%F - Name of downloaded file (for single file torrents)

%D - Directory where files are saved

%S - State of torrent

Update URL

A newer version of uTorrent, %d.%d.%d build %d is already installed. Would you like to downgrade to %d.%d.%d build %d?

Downloading %s ...

Failed to download your plus licence key. Please try again

unsupported piece size (%Z)

unsupported torrent size (%Z)

ffmpeg Process aborted with error %d. Unknown error

More information may be found in the transcript log at %%appdata%%\%S\media

File move target %s already exists. Overwrite?

Search the web for content

A web page showing results will launch

But you can alternately copy and paste Torrent URLs into the client.

There was an error opening %s.

There is no media player associated with the %s%sfile type.

Today is your lucky day! By entering your email you will be able to automatically unlock more free stuff from %s.

Before you delete %s, have you unlocked all the free content? One click and you'll get more.

The BitTorrent Bundle %s has new content available. Click update to get the new content!

The BitTorrent Bundle %s has new content that just downloaded. View the new content by clicking below!

You will leave uTorrent and your browser will open to unaffiliated Web sites.

%#Z (%d hashfails)

%d x %#z (have %u)

scrape not supported

%d of %d connected (%d in swarm)

Grid: %d days

%d days

Time (%s step)

Could not download help file. Error: %s

Invalid redirect (%S)

invalid http reply

invalid URL

Too many redirects (%S)

Installing %s ...

Beware of online scams! A number of websites have taken our free uTorrent client and attempt to charge money for it through some sort of "fee" or "subscription" or else they install it for free but infect your computer with malicious code in the process. To protect yourself, be sure to only download our software from hXXp://VVV.utorrent.com. You should NEVER under any circumstances pay for free uTorrent software.

Unsupported Operating System (OS)

This wizard will guide you through the installation of %s.

Version: %s (Build %s)

%s does not not support the Windows 2000 OS and may not

a newer Windows OS.

error: %d

Kill hanging %s processes?

There were errors loading the language file. Please see the file uTorrent.exe.log in the application directory.

The install of %s failed.

Log WebUI requests

Unable to copy .torrent from '%s' to '%s': (%d) %s

Choose where to download '%s' to:

Choose where to save %s

Failed to connect to %s Remote because your client is not compatible.

Some software installed on your computer prevents %s

from working properly. This is possibly caused by the following DLLs '%S %S'

Last %d days

(Login)

DHT: %d nodes%s

Torrents (*.torrent)

%s detected '%S' (%S) appears to be installed on your computer. That is known malware, and might cause %s to crash or behave strangely, including but not limited to using up all your RAM and freezing. Please run a virus/malware checker.

Would you like to make %s the default torrent application?

You appear to be running version d.d of the NVIDIA Network Access Management tool.

This version has known issues which may create problems with %s.

Please upgrade your NVIDIA software to at least version d.d.

Are you sure you want to exit %s?

Registration failure%S%S

Failure reclaiming account%S%S

Failure registering security question%S%S

D: %s%z/s

U: %s%z/s

Select a .torrent to open

%s: ERROR MSG: %s

%s: ERROR: received message type %d (expected %d)

Transferred last %d days: %#Z

Total Running Time: %d:%.2d:%.2d

Number of torrents added: %d

Program launched: %d times

Last launched: %s

# incoming conns since start: %d

# outgoing conns since start: %d

# handshake: %d

# connections: %d

# uTP connecting: %d

# TCP connecting: %d

# half-open: %d (%d queued)

Disk overloaded %d %%

You should change the listen port.

A firewall/router is limiting your network traffic. You need to open up a port so others can connect to you.

%d(%d) downloading, %d(%d) seeding

D:%s U:%s - %s

Select a .torrent to update to

Be sure to exit %s before you unplug the USB drive!

Failed to connect to %s Remote %S%S%s

Press "OK" to review your login settings.

Failed to connect to %s Remote because the username or password was wrong.

Would you like to register a new account under the name "%S"?

Add Torrent from &URL...

Test hang report

Torrent &Webpage

%s - %z/s

%s %#Z of %#Z

%s - %s remaining

%s - Initializing download

%s - WARNING: Possibly insufficient sources

&Delete .torrent

D&elete .torrent   Data

Open URL in Bro&wser

Remove and d&elete .torrent   Data

Error moving file: %S (%d)

Failed to relocate file %s, %s

Today is your lucky day! %s will automatically update periodically - with new content delivered right to you.

In order to gain access to any free updates from %s, you have to keep it in your queue. Easy, right?

Bad port number

Bad Port number received

Checking for forwarded port

Server does not support this client

%s error: %s (%d)

Problem reading web100 variables.

Float denormal operand

Float invalid operation

Add Url

Bw.Alloc

Source URL

Are you sure you want to remove the %d selected torrents%s?

Are you sure you want to remove the selected torrent%s?

unsupported

Checked %:.1d%% (Active Num:%d)

Error: %s

Flushing to disk (%d)

Ready in %s

%d days ago

%d hours ago

%d minutes ago

%d months ago

%d weeks ago

%d years ago

Failed to connect to %s Remote. This appears to have happened because you are running a peer blocking application such as PeerGuardian or PeerBlock. These programs are not currently compatible with %s Remote. You should either disable your peer blocking application, or disable %s Remote.

Port

Upgrade to %s Plus to protect yourself from viruses hiding in torrents.

Upgrade to %s Plus to convert this file so it can be played.

Port Forward test complete. %s

Results: Port not open.

%u Comments

RSS: Feed already exists "%s"

Really delete RSS Feed "%s"?

Open URL in &Browser

Date of last match: %s

Last episodes matched: %s

Really delete RSS Filter "%s"?

Really delete %d history entries?

RSS: Smart filter has rejected "%S"

RSS: Unable to load "%S": %s

RSS: Unable to download "%s": %s

Failed to disconnect correctly. Error %d

Could not establish secure connection. Error %d

Could not initialize security context. Error %d

Could not decrypt data. Error %d

Could not send data. Error %d

Could not encrypt data. Error %d

Could not validate server cert chain

Transfer files converted for BT Certified Device.

The file '%s' could not be read.

The file '%s' could not be written to.

The file '%s' is in use by another process and can't be opened.

The file '%s' was not found.

Unknown error opening file '%s'

The file '%s' has been recovered.

You have to restart %s for the changes to take effect.

Executable (*.exe)

*.exe

More info is in the <a href="hXXp://VVV.utorrent.com/faq">FAQ</a> and at <a href="hXXp://portforward.com/">portforward.com</a>

PostMessage failed h:%d i:%d t:%d e:%d

Results: Port is not open (you are still able to download).

Port mapping will speed downloads and enable seeding. More info in FAQ and at portforward.com

Results: Port is open. Your network is properly configured.

This test will use <a href="hXXp://VVV.utorrent.com/faq#mlabs">Measurement Lab</a> tools to check and set your bandwidth limits.

If no location is near, you can test at <a href="hXXp://dslreports.com/speedtest/">dslreports</a> and input your upload speed.

%s Setup Guide

%s Bandwidth Configuration

%s will test your network and configure itself for best performance.

Please enter a valid port number from 0-65535.

This is a likely service port. Please choose another.

(You can change this setting in bt.no_connect_to_services_list)

Tried to redirect to invalid url

Will redirect to URL: %S

Automatic Shutdown will initiate in %d seconds.

Hibernating computer... %s

Restarting computer... %s

Shutting down computer... %s

Stand-by computer... %s

(Alternate speed test at <a href="hXXp://dslreports.com/speedtest/">dslreports</a>)

TCP upload rate

TCP download rate

import

TCP upload rate limit

TCP download rate limit

%s is still starting up

Web UI

HTTPS

Contains: "%s"

This operation cannot be undone.

A security question can be used later to transfer your %s Remote username to another computer. Would you like to create one now?

Ý %dh

%dh %dm

%dm %ds

%dw Ý

%dy %dw

Enter the IP:port / [IPv6]:port of the peer to add:

Executable files (*.exe)

Download Complete|%s has finished downloading.

New Download from RSS|%s has started downloading.

New version|A new version of %s is now available!

!Error|There is not enough disk space to move %s to its final location

!Torrent Error|File: %s

Can't accept %S with invalid character '%S'

Can't accept %S with length %u greater than %d characters.

Please enter a %S.

Are you sure you want to remove the %d selected trackers?

You must enter a password to use %s Remote.

Could not contact the %s Remote service to register.

There is already a computer using the username "%S".

That was not the correct security answer for the username "%S". Try again.

Status: Reconnecting in %d seconds

Status: failed to load Secur32.dll or Security.dll

Uninstalling %s ...

Are you sure you'd like to uninstall %s?

This will remove the %s app only. None of your in-

%s failed to update. Please try again.

%s update failed. Unable to start the new process.

failed to launch exe %s

failed to acquire mutex %s

attempted downgrade %x -> %x

mismatching exe versions

%s Upgrade

This wizard will guide you through the %s upgrade process.

Updates are now build into %s, so you'll always have the latest and greatest stable version of the software including security enhancements, bug fixes and new features.

Updates are now built into %s, so you'll always have the latest and greatest stable version of the software including security enhancements, bug fixes and new features.

This wizard will guide you through the upgrade of %s.

Password did not match.

Could not download WebUI file. Error: %s

Could not download WebUI information. Error: %s

WebUI file not found - attempting to download

%s has requested permissions on %s:

%s has requested access to %s.

cfgmgr32.dll

Crypt32.dll

CertFreeCertificateContext

PFXImportCertStore

PFXExportCertStoreEx

CertEnumCertificatesInStore

CertCloseStore

CertCreateSelfSignCertificate

CertOpenStore

CertStrToNameW

CertAddCertificateContextToStore

CertSetCertificateContextProperty

CryptMsgClose

CertFindCertificateInStore

CryptMsgGetParam

CertGetNameStringW

CertVerifyCertificateChainPolicy

CertGetCertificateChain

CertFreeCertificateChain

wintrust.dll

zcÁ

c:\%original file name%.exe

d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%

22222222222

hiTXtXML:com.adobe.xmp

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:B47FF0923C20681192B095FBA0BDE87C" xmpMM:DocumentID="xmp.did:A73C2BBE2C3A11E2AAF3FB98CA5D1086" xmpMM:InstanceID="xmp.iid:A73C2BBD2C3A11E2AAF3FB98CA5D1086" xmp:CreatorTool="Adobe Photoshop CS5.1 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FA7F117407206811871FA3823ACE12F9" stRef:documentID="xmp.did:B47FF0923C20681192B095FBA0BDE87C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>02

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:B47FF0923C20681192B095FBA0BDE87C" xmpMM:DocumentID="xmp.did:3A9F8C87223011E2BF0C8C1B3C994937" xmpMM:InstanceID="xmp.iid:3A9F8C86223011E2BF0C8C1B3C994937" xmp:CreatorTool="Adobe Photoshop CS5.1 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:01801174072068118DBBC9C0B36B2C90" stRef:documentID="xmp.did:B47FF0923C20681192B095FBA0BDE87C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>

Created with ajaxload.info

99999999

66666662

62222222

9999999555

[[[73322223

____[[[_

66666666

222222222

GetProcessHeap

PeekNamedPipe

CreatePipe

GetCPInfo

GetWindowsDirectoryW

WinExec

CryptDestroyKey

CryptGenKey

RegOpenKeyExW

RegDeleteKeyW

RegCreateKeyExW

RegCloseKey

RegQueryInfoKeyW

ShellExecuteA

ShellExecuteW

SHFileOperationW

GetAsyncKeyState

MsgWaitForMultipleObjects

RegisterHotKey

UnregisterHotKey

ExitWindowsEx

EnumWindows

CreateDialogIndirectParamW

EnumChildWindows

SetWindowsHookExW

UnhookWindowsHookEx

GetKeyNameTextW

MapVirtualKeyA

keybd_event

.text

`.rdata

@.data

.rsrc

%s\stats-%s.txt

chrome

firefox

toolbar.log

Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent

uTorrent.exe

Software\Classes\Applications\uTorrent.exe

%s%s%s%s

RunElevatedInstall: %s with params [%s]

%s /STARTAPP %s

%s /LAUNCHBUNDLEDURL %s

%s /LAUNCHBUNDLEDURLTYPE %s

%s /AUTOMATION

%s /MINIMIZED

%s /NOINSTALL /BRINGTOFRONT

dht.dat

flags.conf

ipfilter.dat

resume.dat

rss.dat

settings.dat

INSTALLDEBUG: Could not create installation directory [%s]

%d.%d.%d.%d

mURLInfoAbout

"%s" "%%1"

Software\Classes\.torrent\OpenWithProgids

Software\Classes\.btsearch\OpenWithProgids

Software\Classes\Applications\uTorrent.exe\shell

Software\Classes\Applications\uTorrent.exe\shell\open\command

eCLSID\{3041D03E-FD4B-44E0-B742-2D9B88305F98}

CLSID\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA}

CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}

CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}

{88c7f2aa-f93f-432c-8f0e-b7d85967a527}

{ad06fb5f-fef7-4a84-8c58-dca34f8e3d36}

{ef79f67a-6ad7-4715-a0f8-932fca442023}

{1d03a978-ac0c-4004-b9fd-9cf361c7bd3f}

{64ead72b-ffd4-4e01-aa3a-4c71665d73e4}

{29acf17c-1713-4286-8f40-bfd05f1e70c8}

{7b6de06c-7013-4a87-957e-d27d7b977d21}

{2d8d9acc-f6d7-4362-8876-a275ca929591}

{656461ef-40f6-4115-9ff1-bced9812ccbb}

{1fd59ce2-6236-467c-9539-3d8c93fea5e0}

{49C795C2-604A-4D18-AEB1-B3EBA27E5EA2}

{7473B6BD-4691-4744-A82B-7854EB3D70B6}

{B6AC5E3C-5CEB-4E72-B451-F0E1BA983C14}

{5BA8E555-8C08-4CC8-80E6-1F8CDD26AE3A}

{6DA66498-839A-42A7-8324-FF7D2A532835}

{4E871705-D1F3-49D9-814F-1E46E85986B0}

{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}

{db131c55-60c8-4adc-84dc-9e76ab06e2dc}

{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}

{4ae0c3d6-f713-4eed-bc65-25dc3ffdaac1}

{c840e246-6b95-475e-9bd7-caa1c7eca9f2}

{e0301295-ab3e-4af3-979f-3d453c5f9f48}

{87775fdb-6972-41f9-ae51-8326e38cb206}

{181f104b-b000-4010-bb18-41b8205f774d}

{03ea5b10-2efa-4311-ac10-04427b02d663}

{e9df9360-97f8-4690-afe6-996c80790da4}

CLSID\%s

SOFTWARE\Conduit\Platforms\%s

SOFTWARE\AppDataLow\Software\%s\toolbar\IE5

Software\Microsoft\Windows\CurrentVersion\Ext\Settings\%s

hXXp://VVV.mybrowserbar.com/images/pixel.gif?tb=%d&cnid=%s

,Riched20.dll

Installing this browser bar helps support

%s %S %S %S

%s %S

Initializing OfferAPI supported-> %d

Stoolbar_offer.benc

toolbar.benc

utorrent.lng

apps\featuredContent.btapp

apps\plus.btapp

apps\welcome-upsell.btapp

apps\player.btapp

INSTALLDEBUG: Unable to create firewall rules for path [%s]

path:[%s]

\uTorrent.exe

INSTALLDEBUG: Volume: %s, Drive: %s

INSTALLDEBUG: Returning early. Installed version: %d, Our version: %d

/PERFORMINSTALL %d "%s" %u

INSTALLDEBUG: Returning...installResult = (%d)

INSTALLDEBUG: running from installed path = %d running from different drive = %d

INSTALLDEBUG: DoInstall(%d, %s)

"%s" %s

netsh.exe

interface ipv6 set teredo %s

netsh.exe interface ipv6 set teredo %s

Could not setup teredo, result was: [%s]

netsh.exe interface ipv6 install

Could not install teredo, result was: [%s]

maindoc.ico

Software\Classes\%s

MIME\Database\Content Type\%s

Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s

Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s\UserChoice

%s\%s

application/x-bittorrent-key

%s URI

URL Protocol

%s\shell

%s\shell\%s\command

%s\Application

%s\Progid

%s\UserChoice

%s\OpenWithProgids

Software\Microsoft\Windows\CurrentVersion\Run

Torrent.lnk

TerminateSessionClientInstances failed; hp:0x%X result:%d

INSTALLDEBUG: Initial GetVolumeInformation failed and detected possible UNC path [%s] without appended [\]; calling again

Failed to install bundled btapp: %s to: %s

Bundled btapp "%s" is ill formed: %s

Failed to unpack bundled btapp: %s to: %s

plus_license.btkey

RunAsAdministrator: %s with params [%s]

lRunAsAdministrator(error executing %s with params [%s]): Error: %d

RunAsAdministrator(error executing %s with params [%s]): Unexpected exit code %d (expecting %d)

DDE operation timed out.

DDE operation failed.

DDE operation is busy.

RunAsAdministrator(error %d executing %s with params [%s]): %s

Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers

%s is running in Vista compatibility mode which is known to cause problems. Please allow %s to fix this by clicking "Yes" in the next dialog.

REG DELETE "HKLM\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers" /v "%s" /f

/C %s

RemoveCompatibilityModeKey(removal from HKLM returned %s)

Software\Classes\.torrent

client.exe

updates.log

bt.log

PORTABLE

Ads %s -- GdiPlus.dll %s

Settings path: [%s]

Setting log file to '%s'

Log file set to path:[%s]

dht_feed.dat

LAUNCHBUNDLEDURL

LAUNCHBUNDLEDURLTYPE

INSTALLDEBUG: /PERFORMINSTALL with flags [%d] and path [%s]

[content %s]

Version: %s

valid plus key, but not activated. Attempting activation...

{CF59774A-CE9D-454D-AF29-1556367E1AC7}

{E3DC5C2B-082C-4800-8C52-B9F655B94D2C}

/IDFILE "%s"

adnative.log

noErrorMsg

key_expired

invalid_key

no_license_key

{A4D77A09-10EA-4574-8C09-9B6E1A21C95F}

Activation error: %s

activation.log

HTTP %d

iPod Touch 1.Gen

iPod Touch 2.Gen

iPod Touch 3.Gen (8GB)

iPod Touch 3.Gen

iPod Touch 4.Gen

Your DNS server does not support AAAA lookups. Installing IPv6 is NOT recommended.

KERNEL32.DLL

tray.ico

\hh.exe

ms-its:%s::%s

utorrent-340.chm

utorrent-help.zip

smailto:griffin@utorrent.com

%s|%S

LoadKnownFileType called with %s, %s, %s

btkey

current.btskin

Accepted launch|Type: %s Location: %s

Memory Compacting, system memory is low (%u%% CPU usage)

tsocial.bmp

autorestart.log

Unable to send crash report to server:

Error opening Windows firewall: 0x%X %s

[%dK]

2%d %s

HTTP Error 400

HTTP Error 401

transcode.btinstall

%s%s %d.%d

[Portable mode]

%s (build %d) [%d-bit]

main.ico

Local\%s

An older version of %s is running.

Please shut down %s and try again.

It seems like %s is already running, but not responding.

Please close all %s processes and try again.

%s\BunndleOfferManager.dll

%s\ADKAppsOfferManager.dll

Delete file failed: %s error: %d

Congratulations! Your software is turning into %s Plus as we speak, and all features will be ready to use in about a minute.

To learn about your new features, please refer to the %s Plus Alpha forums.

Installing '%s' to '%s'.

t.lang.txt

%s.lng

Player.Path

Windows Media Player

\smplayer.exe %1

hXXp://download.utorrent.com/public/DivXPlayer.html?url=%1

hXXp://download.utorrent.com/public/DivXPlayer.html

Web player

hXXp://VVV.bittorrent.com

hXXp://127.0.0.1:%d/search?q=%%s

shell32.dll,OpenAs_RunDLL %s

RUNDLL32.EXE

hXXp://127.0.0.1:%d/proxy?sid=%S&file=%d

http%:%/%/localhost%:%d%/proxy%?sid%=%S%&fast_if_no_peers=false%&file=%d&width=%d&height=%d

http%:%/%/localhost%:%d%/proxy%?sid%=%S%&fast_if_no_peers=false%&file=%d

/select,"%s"

ping.exe

%s -n 2 127.0.0.1

%s /BRINGTOFRONT

cfu.log

SBitTorrent|hXXp://VVV.bittorrent.com/search?client=%v&search=

INSTALLDEBUG: LoadFile of current exe failed

V8 bundle: Failed to open exe

ui.btapp

b.btapp

Installing bundle: %s to %s

apps.btapp

Failed to find bundled btapp: %s

Submit a crash report to the developers.

%s has crashed. A crash dump has been saved as:

uTorrent.exe /RECOVER "%s"

uTorrent.exe /RECOVER

%s has crashed. Unable to generate crash dump. %S%S

btinstall.txt

BTAPPS="%s\" PAIRINGKEY="%S"

CSoftware\Microsoft\Windows\CurrentVersion\Uninstall\%s

g[unknown url]

/redirect.html#userinterface/preferences/general

/redirect.html#userinterface/preferences/uisettings

/redirect.html#userinterface/preferences/antivirus

/redirect.html#userinterface/preferences/directories

/redirect.html#userinterface/preferences/connection

/redirect.html#userinterface/preferences/bandwidth

/redirect.html#userinterface/preferences/bittorrent

/redirect.html#userinterface/preferences/transfercap

/redirect.html#userinterface/preferences/queueing

/redirect.html#userinterface/preferences/scheduler

/redirect.html#userinterface/preferences/uconnect

/redirect.html#userinterface/preferences/streaming

/redirect.html#userinterface/preferences/devices

/redirect.html#userinterface/preferences/paireddevices

/redirect.html#userinterface/preferences/label

/redirect.html#userinterface/preferences/advanced

/redirect.html#userinterface/preferences/advanced/uiextras

/redirect.html#userinterface/preferences/advanced/diskcache

/redirect.html#userinterface/preferences/webui

/redirect.html#userinterface/preferences/advanced/run_program

*hXXps://remote.utorrent.com

help.ico

%s, %d:00 - %d:59

hXXp://bit.ly/HTwxBj

<A HREF="%s">%s</A>

"%s"%s

%s %d%%

Failed to post GUI Update message: %s

Buggy DLL warning: %S (%S)

%s\VirusGuard\

BitTorrentAntivirus.exe

VirusGuard.exe

.DEFAULT\Software\SetID\Internal

%u.%u.%u_%u

updates\%s.exe

lupdates\%x.lng

tupdates.dat

tabs.bmp

toolbar.bmp

hXXp://127.0.0.1:%d/proxy?sid=%x&file=%d

tstatus.bmp

hXXp://update.utorrent.com/survey

%s %d %s

%s.btskin

Failed to load skin: %s. SaveFile failed.

Failed to load skin: %s. Read from btresource failed.

%d (%d)

%d.%.3d

=.%%

E%s|%s

p%dx%.2d

A\\.\pipe\privateaccessvpn

E%s %d

%s %d

Tris: %d points [high score: %d]

E%s.torrent

%s\%s\*.*

hXXp://VVV.utorrent.com/faq.php

%.1f %s

yellow_check_8bit.ico

green_check_8bit.ico

red_cross_8bit.ico

\\.\X:

\\?\%s

OnRefreshAd::url = %S

OnRefreshAd::title = '%s'

%.2f %s

%s(%d). [%s] [%s]

A%s (%d)

%s(%d). [%s]

App store install failed: %s

Got bogus main app. Update URL does not match download source.

%s != %s

%s\%S

%s\%s\%S

%s "%s"

F%sBunndleOfferManager.dll

9944A343-2613-4177-A30C-3D868D1D0D9F

C6D65593-16C7-44ED-BC08-B46F22EA7353

BunndleOfferManager.dll

%sADKAppsOfferManager.dll

%s %:.1d %%

Jflags.bmp

%d | %d

%d| %d

%S%S%S%S%S%S

%S:%d

Download Piece %u (%u/%u/%u/%u first_active:%s last_active:%s fast:%u valid_hash:%u):

chunk %u flags:%u have:%u

peer %u [%s] timeout:%s

peer %u [%s] cancelled, timeout:%s

(%d%%) %s

%s (%s)

%dx%d

A: %S V: %S

&%d %s

|[%d Torrents]|

GInstalling %d of %d ...

%s (%d of %d)

%s:\%s

%s (powered by %s)

.stepnumeral {

.stepcontent {

.stepheading {

.steptext {

.stepbox {

.devpointer {

.arrow {

.arrow-lblade-cover {

.arrow-lcutout {

.arrow-rblade-cover {

.arrow-rcutout {

.newdev-text {

.newdev-bevel {

.or-- {

top: %d;

Device ID %s : %s

OCSetupHlp.dll

ADKAppsOfferManager.dll

CLSID\{DC0C2640-1415-4644-875C-6F4D769839BA}

H%s (%s:)

rpmsg

hangreport.log

Error 73: %d/%d/%d/%d

TCP Half Open limit: %d

TCP Sockets: %d, Half Open: %d (total %d)

TCP Pending: %d

Total Sockets: %d

Read buffers: %u (%u bytes), avg %u

Write buffers: %u (%u bytes), avg %u

TCP-halfopen

[%d]: %d %s %A mode: %d state: %d

*** %s

Elevation:Administrator!new:%s

(TCP-In)

(UDP-In)

HNetCfg.FwPolicy2

HNetCfg.FwRule

Allow %s network traffic with Edge Traversal

%s\*.*

Found %d entries using filter %s in directory %s

\\?\%s%s

Could not get temp file name. Params: [%s] [%d]

c:\%u%u.tmp

full %s root %s

Created canonical path %s from %s

bf2.exe

bf2142.exe

crysis.exe

gw.exe

halo.exe

hl.exe

hl2.exe

ut2003.exe

ut2004.exe

wolfmp.exe

wow.exe

quake.exe

glquake.exe

qw.exe

glqw.exe

quake2.exe

quake3.exe

quake4.exe

iourbanterror.exe

goldslam.exe

nksp.exe

pilauncher.exe

pistory.exe

rnclient.exe

twelvesky.exe

domo.exe

dreamlords.exe

stoneage2.exe

projecttorque.bin

iexplore.exe

firefox.exe

mplayer.exe

mplayerc.exe

wmplayer.exe

vlc.exe

peerblock.exe

pg2.exe

pglite.exe

peerguardian.exe

%s.%u.tmp

%s.new

I%s.exe

0123456789._

\uac_test.tmp

\Sysnative\..\explorer.exe

\explorer.exe

iError %d

%s.%u.%s

[%s] %s

[%.2d:%.2d:%.2d] %s

HFile not found during integrity check: %s

%s.old

File failed verification: %s

Failed file save: %s

Safely saved file '%s'

File passed integrity check: %s

Warning: file integrity check failed (%s): %s

Ignore this warning if you switched to 1.6.1 or older and back

Windows ran out of memory. Unable to allocate %d bytes.

Bits on Wheels/1.0.%d

Bits on Wheels/%c%c%c

%s/%d.%d%d%d

Torrent .NET

Unknown %c%c

%s/%d.%d.%d.%d

Unknown %c

BitTorrent %c.%c.%c

BitTorrent %c.%c%c.%c

DNA %u.%u.%u

%s %i.%i

BitSpirit v2 UDP0

BitSpirit v2 HTTPBT

Blizzard %d.%d

Burst! %c.%c.%c

FlashGet %u.%u

MLdonkey %c.%c.%c

Opera %c%c%c%c

kNOTE: Settings file found in directory of executable; using that.

The file '%s' was damaged/missing. It has been recovered.

Settings integrity check failed (duplicate keys: %d count: %d), repaired: %s

J%s-%s

HTTP Error %d

REDIRECT:%S%S%S

Proxy connect error: %s

Proxy error: %S

Mozilla/5.0 (%s Windows NT %s%s)

MSIE %s;

Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome

%Program Files%\Google\Chrome\Application

%Program Files% (x86)\Google\Chrome\Application

Software\Wow6432Node\Mozilla\Mozilla Firefox

Software\Mozilla\Mozilla Firefox

chrome.exe

%s Chrome/%s

%s Firefox/%s

HTTP Error 404

HTTP Reply %d

gCan't open log file '%s': %d %s

Checking if torrent data files already exist in %s

Torrent data files already exist in %s

Setting storage folder to '%s' for torrent '%s' (directory '%s')

Torrent '%s' storage at '%s', root at '%s'

aError contacting WebUI proxy service: %s

HTTP Error

Got proxy service response (%S:%d, %Ld bytes): %S

Disconnected from WebUI proxy service

sConnecting to raptor at %S

Sent raptor attach cookie: %S

****** DELETING FILE: %s

*.dat

global_resume.dat

%H.dat

resume.dat.temp

TCP port bind failed %A: (%d) %s

HTTP: IP %a: Bad Range value

HTTP: IP %a: can't accept cookie - incorrect format

HTTP: IP %a: Bad authentication header

HTTP: IP %a: Bad username/password

JCan't handle name length %d (> %d) for archive %s

Can't read entry name from archive %s: %d %S

Can't seek %d farther in archive %s: %d %S

Can't handle entry with flags %x in archive %s

Can't handle header with mismatched sizes %d %d in archive %s

Can't handle header method %d != 8 in archive %s

Accepting entry for file %S in archive %s

Found %d files in archive %s

Can't open archive file %s

Can't read directory of archive file %s

Can't find requested file %s in archive %s

Can't handle decompressed size %d/%d >= %d for archive %s

Can't set pointer in archive file %s to %d

Can't read from archive file %s

Can't decompress entry in archive %s

Can't read header of %s

Can't set pointer in btinstall file %s to %d

Can't read sectiontable of %s

Can't read section %d of %s

icon.bmp

%s\apps\%s\%s

%H.btapp

k%s/*.btapp

apps\%s

RegKey: Could not write string valuename %s value %s; Error %d

RegKey: Could not write binary valuename %s length %d; Error %d

RegKey: Could not write DWORD valuename %s value %d; Error %d

RegKey: Could not delete value %s: %d

RegKey: Could not delete subkey %d: %s

content-type = %S error code = %d

invalid key size

license key expired

invalid key

Kwebui

couldn't download webui info

Kurladder

load missing index.html

missing index.html

missing update url

not supported

failed to verify certificate

bad url

unsupported piece size

unsupported torrent size

Unable to save .torrent

no uconnect password

%s %d.%d

%s %d.%d.%d

LError parsing URL: %s

*** %s: PIECE %d FAILED HASH CHECK

%s: Piece %d complete

download.log

e%s: Unable to move: %s

Moved file storage for torrent '%s' to '%s'

Adding job to move file storage for torrent '%s' from '%s' to '%s'

Could not move data to completed download folder. Error: [0x%X]

"%s\%s"

run.txt

%S %S

"%s\%S"

%s: HTTP invalid URL: %S

%s: HTTP preventing DNS lookup: %S

%s.alt

DNS resolution failed for %s %S

hXXp://%S/announce

pTracker reports an invalid external IP

Finished receiving metadata for '%s' in %d seconds

ERROR: Metadata for '%s' could not be loaded! ("%s")

BAN peer: Responsible for '%s' metadata not being loaded!

Got metadata size %u, pieces %u

Got metadata size %u when I already thought it was %u

dError: %s - %s

%s (%S)

%s\%H.dat

rBanned %T until %S

*** Sending BTMSG_TF_SEEDING_DONE for torrent '%s'

%s.%d.torrent

%s.loaded

Unable to rename/delete '%s'.

TMP=%s

TEMP=%s

Loading settings from path '%s'

HR.HDTV

HR.PDTV

WebRip

Can't download url %s - msg %d - %s

Can't download RSS feed - %s

Can't add duplicate feed with url %s

RSS Channel title %s

d%dx%.*d-%dx%.*d

%dx%.*d

I/O error: %d

C=US,ST=CA,L=San Francisco,O=BitTorrent,OU=%s,CN=%s

M%s%s|

Deleting original torrent file %s

Can't delete original torrent file %s

-i %%s -y -f %s %s %s %%s

-vcodec %S -maxrate %dm -bufsize %dm -flags  loop -cmp  chroma -me_method hex -subq 5 -me_range 16 -b_strategy 1 -bf %d -flags2 %s%s%s%s%s -refs 2 -directpred 3 -trellis 1

-r %d

-s %dx%d

-crf %f

-b %d

-level %d

-acodec %S %s -ar %d -ab %d

-ac %d

Mmedia%s%s

%s_(%s).%s

%s%s\%s

%s-devpair.dat

Can't add duplicate device pairing %s

Adding device pairing with id %s name %s

Found device pairing %s at %d of %d

Can't match key hash to device pair %s

IO Error:%d line:%d pos:%Ld count:%d actual:%d

Error opening "%s": %E

ReadFile error: %s:%Ld:%d:%d:%d

%S(%x): %x:%x (fs %x)

~%sPartFile_%LX.dat

thumbs.db

.DS_Store

delete.log

%s.%d

Moving files from '%s' to '%s'

N%s\%s\%s

ffmpeg.exe

s%s\~~%s

%s.log

Can't %s device pair for %s

Can't add torrent %S because it is a duplicate of an existing torrent

URL: %S: OK

uT HTTP add torrent %S completed

Deleting temporary torrent file '%s'

WebUI Proxy Error: %s

!Proxy: %s

Can't download to directory '%s' which is outside of download directory '%s'

Chose download directory '%s' from dir %d '%s' sub-path '%s'

uT HTTP add torrent %S completion failed - status: %s

/Can't add torrent: %s

Settings %s

uT HTTP can't add torrent '%s': %s

uT HTTP torrent add of '%s' succeeded

Can't save temporary torrent file '%s'

Encoded rate %d duration %d for file %s

Need more header for file %s

Unrecognized type for file %s

Unknown error %S

Access denied %S

Unknown property %S

Read only property %S

Type mismatch %S

sendappmsg

sendmsg

fb_login

set_license_key

JAVASCRIPT LOG: %s

window.btapp = null; window.onunload = null;

set_webseed

verify_rsa_signature_appkey

rsa_generate_key

web seed

AUDP port bind failed %A: (%d) %s

mICMP port bind failed %A: (%d) %s

The file "%s" is signed and the signature was verified.

The file "%s" is not signed.

An unknown error occurred trying to verify the signature of the "%s" file.

Verify Sig Error: 0x%x.

CertGetNameString failed.

CryptQueryObject failed with %x

CryptMsgGetParam failed with %x

CertFindCertificateInStore failed with %x

Signer certificate mismatch

O%S [%d]: %S

upnp_log.txt

UPnP: Unable to create socket: %d

UPnP: Unable to setsockopt: %d

UPnP: Could not join multicast group: %d

UPnP: Could not setup socket to send multicast packets: %d

UPnP: Could not set unicast TTL: %d

UPnP: Could not set multicast TTL: %d

DEBUG: UPnP: Send error [socket %p]: %d

DEBUG: UPnP: Not replying to Service Type [%S]

UPnP: Discovered new device: "%S" %S

Not yet supported

[nf]%s

%s does not exist in object

key does not exist in object

samlib.dll

schannel.dll

sechost.dll

secur32.dll

sensapi.dll

setupapi.dll

sfc.dll

sfc_os.dll

shdocvw.dll

shfolder.dll

shlwapi.dll

shunimpl.dll

slc.dll

srvcli.dll

ssdpapi.dll

sspicli.dll

sxs.dll

tapi32.dll

tiptsf.dll

upnp.dll

urlmon.dll

userenv.dll

usp10.dll

utorrent.exe

vfbasics.dll

vfcompat.dll

vrfcore.dll

wbemcomn.dll

webio.dll

windowscodecs.dll

winhttp.dll

winnsi.dll

winrnr.dll

winspool.drv

winsta.dll

wldap32.dll

wmi.dll

ws2_32.dll

ws2help.dll

wshbth.dll

wship6.dll

wshtcpip.dll

wsock32.dll

wtsapi32.dll

wzcsapi.dll

wzcsvc.dll

xmllite.dll

xpsp2res.dll

activeds.dll

adsldpc.dll

apphelp.dll

atl.dll

authz.dll

bcrypt.dll

bcryptprimitives.dll

browseui.dll

clbcatq.dll

comdlg32.dll

comres.dll

comsvcs.dll

credssp.dll

credui.dll

crypt32.dll

cryptbase.dll

cryptdll.dll

cryptsp.dll

cryptui.dll

cscapi.dll

cscdll.dll

cscui.dll

devobj.dll

dhcpcsvc.dll

dhcpcsvc6.dll

dnsapi.dll

dot3api.dll

dot3dlg.dll

dssenh.dll

dui70.dll

duser.dll

eapolqec.dll

eappcfg.dll

eappprxy.dll

ehstorshell.dll

esent.dll

explorerframe.dll

fastprox.dll

firewallapi.dll

fltlib.dll

fwpuclnt.dll

gdi32.dll

gdiplus.dll

gpapi.dll

hnetcfg.dll

icmp.dll

iconcodecservice.dll

ieframe.dll

iertutil.dll

imagehlp.dll

imm32.dll

iphlpapi.dll

kernelbase.dll

linkinfo.dll

lpk.dll

mpr.dll

mprapi.dll

msacm32.dll

msasn1.dll

msctf.dll

msctfime.ime

msdart.dll

msi.dll

msimg32.dll

msls31.dll

msv1_0.dll

msvcp60.dll

msvcp80.dll

msvcr80.dll

msvcr90.dll

msvcrt.dll

mswsock.dll

msxml3.dll

napinsp.dll

ncrypt.dll

netapi32.dll

netman.dll

netshell.dll

nlaapi.dll

normaliz.dll

npmproxy.dll

nsi.dll

ntdsapi.dll

ntmarta.dll

ntshrui.dll

ole32.dll

oleacc.dll

oleaut32.dll

onex.dll

peerdist.dll

pnrpnsp.dll

profapi.dll

propsys.dll

qutil.dll

rasadhlp.dll

rasapi32.dll

rasman.dll

riched20.dll

rpcrtremote.dll

rsaenh.dll

rtutils.dll

samcli.dll

%s: No longer have piece: %u

IpFilter invalid line: [%S]

Loaded ipfilter.dat (%d entries)

P%A%s(%s):

%A%s:

[%s (%:.1d)]:

Requesting Metadata %d/%d

Disconnect: %s

Requesting %d:%d->%d

Rejecting %d:%d->%d

Cancelling %d:%d->%d

Send Have %d

Send Donthave %d

Got unchoke from %s (%A), for seed only torrent

Got unchoke from %s (%A), can't request immediately because request queue is full (%d)

Got Expected Reject: %d:%d->%d

Got Reject: %d:%d->%d

Got Reject Unrequested!: %d:%d->%d

Sending Piece %d:%d->%d

Got PieceRequest I don't have: %d:%d->%d

Got Bad Request in SS mode: %d:%d->%d

Got Request while choked: %d:%d->%d

Got Request: %d:%d->%d

Got Cancel: %d:%d->%d

Got Cancel In Queue: %d:%d->%d

Got Cancel Unrequested: %d:%d->%d

Got Piece: %d:%d->%d

Got OLD Piece: %d:%d->%d

Got Piece Unrequested: %d:%d->%d

Banning peer: too many pex messages. %d since %S

Got PEX: %d added/%d dropped

received metadata message from peer that didn't advertise support

Reading msg %d piece %d

Got request for metadata which I do not have %d %d/%d

Metadata requests exceeded maximum request limit %d

Got request for metadata which I have %d/%d

Got zero metadata size. %d/%d

Got unrequested or cancelled metadata! %d %d %d/%d

Got metadata %d/%d

Got reject for unrequested metadata %d %d %d/%d

Got reject for metadata %d %d/%d

Got request for metadata which I can not read %d %d/%d

Send PEX: %d added/%d dropped

Sent Holepunch failure(%u)

Got Holepunch failure(%u)

Bad lt_donthave message (invalid length): %d

Bad lt_donthave message (piece index exceeds maximum): %d

Got Donthave %d

Bad lt_donthave message (piece already not had): %d

Extension: ipv4:[%a] for '%s'

Extension: ipv6:[%a] for '%s'

Got Have %d

Got Bad Have %d

Got Suggest Piece %d

Got Allowed Fast %d

No supported crypto methods

Connecting: source: %S

Disconnect: Proxy connect error: %s

Peer error: %s

TCP connections are not allowed

Dropping peer that has metadata, though we still want it for %s

Exceeded 5 seconds for %s metadata chunk %d

Sending %d bytes of aggregated data

DNS resolution failed for tracker %S

blocking DNS lookup for %s

[DISTSHARE] Authentication key appears to be missing.

[DISTSHARE] Authentication key appears to be the wrong size: %i/%i bytes.

[DISTSHARE] Authentication key does not exist!

[DISTSHARE] Invalid Distributed Share response command %c

magnet:?xt=urn:btih:%S&tr=%S

webui.zip

Web UI storage base '%s' archive path '%s'

Can't open web UI archive file '%s'

Can't read directory in web UI archive '%s'

Can't download web UI information - %s

S.tmp

Attempting to read unarchived file %s

%s%s%s%s%s

twebcache.dat

Expiring all device pairing sessions associated with device %s

ICMP.DLL

bittorrent.crt

RangeBlock detected range %S

tracker.openbittorrent.com

tracker.publicbt.com

tracker.ccc.de

tracker.istole.it

Need more media header for %s: will reparse.

Error %d parsing media header for %s

**** Successfully determined encoded rate of file %s

IO Error:%d line:%d align:%d pos:%Ld count:%d actual:%d

Can't download %s via HTTP - %s

RHTTP server

file %S redirected to %S

sHTTP Connecting to: %S

invalid http reply (%S)

invalid request or temporarily unavailable (%d)

invalid http response code (%d): %S (%S)

Got redirection response (%d) but no location header

Invalid redirection url: %S

Redirection limit (%d) reached (recursive redirections?)

HTTP response did not include content-length nor content-range

HTTP server sent more responses than it was requested to

Disconnect: a range of type %S is not supported

Invalid range in HTTP response (%d)

Invalid transfer encoding (%S)

The data received from the HTTP server was not the part that was requested

The size of the data received from the HTTP server did not match the requested size

Timed out. num_tries=%d

HTTP Reconnecting to: %S

HTTP Disconnect: Peer error: %s

content-length (%Lu) does not correspond to the requested length (%d)

B0rked reason: %s

)%dm %ds

combase.dll

mscoree.dll

- CRT not initialized

- Attempt to initialize the CRT more than once.

- floating point support not loaded

2.cmd

USER32.DLL

/cnid "%d" %S

hXXp://apps.bittorrent.com/cl_search/thanks.html

hXXp://apps.bittorrent.com/cl_search/thanksbundles.html

hXXp://featuredcontent.utorrent.com/

hXXp://featuredcontent.staging.utorrent.com

hXXp://VVV.facebook.com/plugins/like.php?

errorUrl

Script Error: line=%d char=%d code=%d message=%s url=%s

%cport=%d&pair=%H

%cport=%d

V. (%s)

C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent

2100189471

msctls_hotkey32

Remove it with Ad-Aware

1. Click (here) to download and install Ad-Aware Free Antivirus.
2. Update the definition files.
3. Run a full scan of your computer.

Manual removal*

1. Terminate malicious process(es) (How to End a Process With the Task Manager):No processes have been created.
2. Delete the original Trojan file.
   
3. Delete or disinfect the following files created/modified by the Trojan:
   

   C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\toolbar_offer.benc (2 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4ZZNMJGQ\impression[1].htm (2048 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\XUSUTPM2.txt (96 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\offconfig.temp (3 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\N5QY9XH5.txt (89 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\i_temp.temp (26 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ADKAppsOfferManager.dll (204 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\settings.dat.new (73 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\uttC60E.tmp.new (61 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-732923889-1296844034-1208581001-1000\1f91d2d17ea675d4c2c3192e241743f9_88dcd395-b062-45b3-a6cd-79f37c0eba08 (105 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\25FDO7QC\offers[1].htm (629 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\L43NBDAR.txt (89 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8D93UTC3\impression[1].htm (683 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt9DC4.tmp.new (0 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\toolbar.benc.new (61 bytes)

4. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
   
5. Reboot the computer.
   

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.