MD5: 46c58b6c61e0a694535b9441ec0e9c66
SHA1: 5ae8200d48433e445b19abe2b174cd7d72dc556d
SHA256: 6b0cf8724014c2ffbb943bf055bfbb023d379f87b64596c9e8465a39ca247737
SSDeep: 98304:IWasyD6AC7KjDkyg9OA xQe/IVZ2HGh2KIBxGzFMSXZAurmNm0stAQmFt:4C7K h2KFXqurmNm0stAQmFt
Size: 3798264 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: UPolyXv05_v6, BorlandDelphi30, ACProtect141
Company: no certificate found
Created at: 1992-06-20 01:22:17
Analyzed on: WindowsXP SP3 32-bit

Summary:

SpyTool. A program used to apply passive protection methods to spyware, such as obfuscation, encryption or polymorphism. The original malicious program is usually encrypted/compressed and stored inside the wrapper.

Payload

No specific payload has been found.

Process activity

The SpyTool creates the following process(es):

UnityWebPlayer.exe:1424
MailRuUpdater.exe:512
MailRuUpdater.exe:872
MailRuUpdater.exe:1844
amigo.exe:1300
AmigoDistrib.exe:1168
setup.exe:1952

The SpyTool injects its code into the following process(es):

%original file name%.exe:320

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process %original file name%.exe:320 makes changes in the file system.
The SpyTool creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\781A4F15-22D5-48C9-90BF-12B168804889\AmigoDistrib.exe (370096 bytes)

The process UnityWebPlayer.exe:1424 makes changes in the file system.
The SpyTool creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsb4.tmp\UserInfo.dll (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (6360 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\npUnity3D32.dll (32784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsb4.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\info.plist (192 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\Uninstall.exe (6078 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\UnityWebPlayerUpdate.exe (19592 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsb4.tmp\UAC.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\UnityBugReporter.exe (25112 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsl3.tmp (67936 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\UnityWebPlayerNP.map (12536 bytes)

The SpyTool deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsb4.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsb4.tmp\UAC.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsg2.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsb4.tmp\UserInfo.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsb4.tmp\System.dll (0 bytes)

The process MailRuUpdater.exe:512 makes changes in the file system.
The SpyTool creates and/or writes to the following file(s):

%System%\GroupPolicy\User\Registry.pol (8 bytes)
%System%\GroupPolicy\gpt.ini (65 bytes)
%System%\GroupPolicy\Machine\Registry.pol (8 bytes)

The process MailRuUpdater.exe:872 makes changes in the file system.
The SpyTool creates and/or writes to the following file(s):

%Program Files%\Mail.Ru\MailRuUpdater\MailRuUpdater.exe (39945 bytes)
%Documents and Settings%\%current user%\Application Data\MailProducts\Id (38 bytes)
%Documents and Settings%\All Users\Application Data\Mail.Ru\Id (38 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe (39945 bytes)

The process MailRuUpdater.exe:1844 makes changes in the file system.
The SpyTool creates and/or writes to the following file(s):

%System%\GroupPolicy\gpt.ini (90 bytes)

The SpyTool deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\9A88453ED1FF429EAC009DFBFFA92DD8.html (0 bytes)

The process amigo.exe:1300 makes changes in the file system.
The SpyTool creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\User Data\1.tmp (934 bytes)

The process AmigoDistrib.exe:1168 makes changes in the file system.
The SpyTool creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\CR_F8F80.tmp\SETUP.EX_ (1659 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\CR_F8F80.tmp\setup.exe (17080 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\CR_F8F80.tmp\CHROME.PACKED.7Z (366388 bytes)

The SpyTool deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\CR_F8F80.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\CR_F8F80.tmp\SETUP.EX_ (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\CR_F8F80.tmp\setup.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\CR_F8F80.tmp\CHROME.PACKED.7Z (0 bytes)

The process setup.exe:1952 makes changes in the file system.
The SpyTool creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\U3USF8V5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\he.pak (296 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\Internet Explorer\Quick Launch\Вконтакте.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\et.pak (228 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\mr.pak (1801 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\en-US.pak (212 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\lv.pak (262 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\icudtl.dat (75554 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\sl.pak (241 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\PepperFlash\manifest.json (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\amigo_FFA3C3E0-B3B6-4D8C-928C-75AA59A806A0\MailRuUpdater.exe (39945 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\hr.pak (244 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\d3dcompiler_47.dll (22433 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\chrome.7z (1266233 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\delegate_execute.exe (3707 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\VisualElements\logo.png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\libglesv2.dll (7972 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\mm.exe (601 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\en-GB.pak (212 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\ml.pak (3735 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\fil.pak (262 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\Одноклассники.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\cs.pak (258 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\wow_helper.exe (73 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\chrome_child.dll (307964 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\vk.exe (167 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\nacl_irt_x86_32.nexe (17629 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\chrome_elf.dll (132 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\ok.exe (142 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\chrome_200_percent.pak (7972 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\vk.exe (673 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\it.pak (252 bytes)
%Documents and Settings%\%current user%\Desktop\Вконтакте.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\metro_driver.dll (1763 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\sk.pak (266 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\bn.pak (1830 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\chrome_installer.log (972 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\da.pak (234 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\ca.pak (259 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\natives_blob.bin (1677 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\pt-PT.pak (254 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\PepperFlash\pepflashplayer.dll (122658 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\unitywebplayer.exe (5442 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\Вконтакте.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\secondarytile.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\libexif.dll (310 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Installer\setup.exe (7345 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\nb.pak (233 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\chrome_100_percent.pak (5442 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\libegl.dll (81 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OTE74XMR\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\Internet Explorer\Quick Launch\Интернет.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\sr.pak (1670 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\gu.pak (1796 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GUPR5KEV\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\VisualElementsManifest.xml (396 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\vi.pak (287 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\kn.pak (3669 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\ar.pak (1629 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\ok.exe (673 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\VisualElements\splash-620x300.png (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\bg.pak (1705 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\mg.exe (196 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\mm.exe (130 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDUJS9Q3\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\ko.pak (263 bytes)
%Documents and Settings%\%current user%\Desktop\Интернет.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\VisualElements\smalllogo.png (6 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\Internet Explorer\Quick Launch\Одноклассники.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\lt.pak (257 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\44.4.2403.3.manifest (248 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\nl.pak (247 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\el.pak (1747 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\fr.pak (276 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\de.pak (256 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\nacl_irt_x86_64.nexe (22433 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\hi.pak (1810 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\zh-CN.pak (211 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\ja.pak (308 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\chrome.dll (237340 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\nacl64.exe (12289 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\es.pak (263 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\hu.pak (272 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\ru.pak (1675 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\amigo_resources.pak (28502 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\fi.pak (242 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\am.pak (1639 bytes)
%Documents and Settings%\%current user%\Desktop\Одноклассники.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\amigo_FFA3C3E0-B3B6-4D8C-928C-75AA59A806A0\UnityWebPlayer.exe (7433 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\mailruupdater.exe (38588 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\amigo_cr.exe (1615 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\Интернет.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\sw.pak (236 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\xinput1_3.dll (81 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\mg.exe (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\chrome_watcher.dll (1636 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\es-419.pak (259 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\zh-TW.pak (214 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\sv.pak (235 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Extensions\external_extensions.json (103 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\ta.pak (3682 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\resources.pak (142877 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\amigo.exe (3765 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\te.pak (1863 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\snapshot_blob.bin (1717 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\uk.pak (1689 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\tr.pak (254 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\th.pak (1789 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\ro.pak (262 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\id.pak (228 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\fa.pak (1648 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\ms.pak (234 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\pt-BR.pak (249 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\44.4.2403.3\Locales\pl.pak (253 bytes)

The SpyTool deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDUJS9Q3\callback[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\amigo.exe (0 bytes)

Registry activity

The process %original file name%.exe:320 makes changes in the system registry.
The SpyTool creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy\traceIdentifier]
"Guid" = "5f31090b-d990-4e91-b16d-46121d0255aa"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil\traceIdentifier]
"Guid" = "8aefce96-4618-42ff-a057-3536aa78233e"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"EventMessageFile" = "%System%\ESENT.dll"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"CategoryCount" = "16"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy]
"Active" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg]
"Active" = "1"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\781A4F15-22D5-48C9-90BF-12B168804889]
"AmigoDistrib.exe" = "Amigo Installer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg]
"ControlFlags" = "1"
"LogSessionName" = "stdout"

[HKCU\Software\Microsoft\Direct3D\MostRecentApplication]
"Name" = "%original file name%.exe"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"Active" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy]
"LogSessionName" = "stdout"
"ControlFlags" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg\traceIdentifier]
"Guid" = "5f31090b-d990-4e91-b16d-46121d0255aa"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "C3 22 9D A3 C8 0C 01 2F BA 0D 6F FA CA 7A 12 4E"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"CategoryMessageFile" = "%System%\ESENT.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"LogSessionName" = "stdout"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"TypesSupported" = "7"

[HKLM\SOFTWARE\Microsoft\ESENT\Process\46c58b6c61e0a694535b9441ec0e9c66\DEBUG]
"Trace Level" = ""

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"ControlFlags" = "1"

The SpyTool modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The SpyTool modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The SpyTool modifies IE settings for security zones to map all urls to the Intranet Zone:

"IntranetName" = "1"

The SpyTool deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\ESENT\Process\46c58b6c61e0a694535b9441ec0e9c66\DEBUG]
"Trace Level"

The process UnityWebPlayer.exe:1424 makes changes in the system registry.
The SpyTool creates and/or sets the following values in system registry:

[HKCU\Software\Classes\UnityWebPlayer.UnityWebPlayer.1]
"(Default)" = "UnityWebPlayer Control"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0]
"Version" = "5.0.3f2"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}]
"(Default)" = "UnityWebPlayer Control"

[HKCU\Software\Classes\UnityWebPlayer.UnityWebPlayer\CurVer]
"(Default)" = "UnityWebPlayer.UnityWebPlayer.1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer]
"DisplayName" = "Unity Web Player"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\UnityWebPluginAX.ocx"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0\Suffixes]
"unity3d" = ""

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}]
"AppID" = "{F008CD3D-7044-4CD4-BE14-BF3FCCF144F9}"

[HKCU\Software\Classes\AppID\{F008CD3D-7044-4CD4-BE14-BF3FCCF144F9}]
"(Default)" = "UnityWebPlayer"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\Version]
"(Default)" = "1.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer]
"DisplayVersion" = "5.0.3f2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Unity\WebPlayer]
"UnityWebPlayerDevelopment" = "no"

[HKCU\Software\Classes\UnityWebPlayer.UnityWebPlayer.1\CLSID]
"(Default)" = "{444785F1-DE89-4295-863A-D46C3A781394}"

[HKCU\Software\Classes\TypeLib\{75A564FE-95D1-41A9-B1D9-10D1E3CB502B}\1.0\0\win32]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\UnityWebPluginAX.ocx"

[HKCU\Software\Classes\UnityWebPlayer.UnityWebPlayer]
"(Default)" = "UnityWebPlayer Control"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\TypeLib]
"(Default)" = "{75A564FE-95D1-41a9-B1D9-10D1E3CB502B}"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\MiscStatus]
"(Default)" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0]
"Description" = "Unity Player 5.0.3f2"

[HKCU\Software\Unity\WebPlayer]
"un.Directory" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\MiscStatus\1]
"(Default)" = "131473"

[HKCU\Software\Classes\Interface\{6130BEAD-7375-4DB7-8B6D-7E41303CE675}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0]
"vendor" = "Unity Technologies ApS"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCU\Software\Classes\TypeLib\{75A564FE-95D1-41A9-B1D9-10D1E3CB502B}\1.0\FLAGS]
"(Default)" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer]
"NoRepair" = "1"
"HelpLink" = "http://unity3d.com/"

[HKCU\Software\Classes\Interface\{6130BEAD-7375-4DB7-8B6D-7E41303CE675}\TypeLib]
"(Default)" = "{75A564FE-95D1-41A9-B1D9-10D1E3CB502B}"

[HKCU\Software\Classes\Interface\{6130BEAD-7375-4DB7-8B6D-7E41303CE675}]
"(Default)" = "_DUnityWebPlayerAX"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0]
"ProductName" = "Unity Web Player"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0\MimeTypes\application/vnd.unity]
"Description" = "Unity Player datafile"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{444785F1-DE89-4295-863A-D46C3A781394}]
"(Default)" = ""

[HKCU\Software\Classes\UnityWebPlayer.UnityWebPlayer\CLSID]
"(Default)" = "{444785F1-DE89-4295-863A-D46C3A781394}"

[HKCU\Software\Classes\Interface\{6130BEAD-7375-4DB7-8B6D-7E41303CE675}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D10F4BFD-C3ED-44B7-BD0D-83F05E4D52D5}]
"(Default)" = "_DUnityWebPlayerAXEvents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer]
"QuietUninstallString" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\Uninstall.exe /S /CurrentUser"
"EstimatedSize" = "12288"

[HKCU\Software\Unity\WebPlayer]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0\MimeTypes\application/vnd.unity]
"Suffixes" = "unity3d"

[HKCU\Software\Classes\TypeLib\{75A564FE-95D1-41A9-B1D9-10D1E3CB502B}\1.0\HELPDIR]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0]
"Path" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\npUnity3D32.dll"

[HKCU\Software\Classes\Interface\{D10F4BFD-C3ED-44B7-BD0D-83F05E4D52D5}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Unity\WebPlayer]
"UnityWebPlayerReleaseChannel" = "Stable"

[HKCU\Software\Classes\Interface\{D10F4BFD-C3ED-44B7-BD0D-83F05E4D52D5}\ProxyStubClsid]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "A3 22 3B 88 D7 BA BE 3E 67 69 D2 29 59 6A 6E 13"

[HKCU\Software\Classes\Interface\{6130BEAD-7375-4DB7-8B6D-7E41303CE675}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer]
"UninstallString" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\Uninstall.exe /CurrentUser"
"NoModify" = "1"
"URLInfoAbout" = "http://unity3d.com/unitywebplayer.html"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Classes\AppID\UnityWebPluginAX.ocx]
"AppID" = "{F008CD3D-7044-4CD4-BE14-BF3FCCF144F9}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\VersionIndependentProgID]
"(Default)" = "UnityWebPlayer.UnityWebPlayer"

[HKCU\Software\Classes\Interface\{D10F4BFD-C3ED-44B7-BD0D-83F05E4D52D5}\TypeLib]
"(Default)" = "{75A564FE-95D1-41A9-B1D9-10D1E3CB502B}"

[HKCU\Software\Classes\TypeLib\{75A564FE-95D1-41A9-B1D9-10D1E3CB502B}\1.0]
"(Default)" = "UnityWebPlayerAXLib"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer]
"DisplayIcon" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\Uninstall.exe"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\ProgID]
"(Default)" = "UnityWebPlayer.UnityWebPlayer.1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{444785F1-DE89-4295-863A-D46C3A781394}\iexplore\AllowedDomains\*]
"(Default)" = ""

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\ToolboxBitmap32]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\UnityWebPluginAX.ocx, 102"

[HKCU\Software\Classes\Interface\{D10F4BFD-C3ED-44B7-BD0D-83F05E4D52D5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer]
"Publisher" = "Unity Technologies ApS"

The process MailRuUpdater.exe:512 makes changes in the system registry.
The SpyTool creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"

[HKCU\Software\Mail.Ru\Tech\ptls\{4519D3B5-465C-4AE2-A905-960CA7D5385C}\ch]
"gdup" = "LlybSVbttQqpAxIsKaevGioKg0tb/axI90ISNjiusCMQPfcsO4jJbcdjIwwLk497RzqlYn6a0mjPbCJRSMjiN3RK2RVA8uxI6FUNXA=="

[HKCU\Software\Mail.Ru\Tech\ptls\{0ED2394C-62B6-4A80-A342-C2CA0B2A4E82}]
"finished_time" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Mail.Ru\Tech\ptls\{8DC7BF6A-58F3-4740-B600-34E37FFADC21}]
"finished_time" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = ""
"Desktop" = ""

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\A]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKCU\Software\Mail.Ru\Tech\ptls\{F581DE96-9AA1-45C8-8335-B7445525371A}]
"ie" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Mail.Ru\Tech\ptls\{603A8599-628C-4F00-A940-A09F1583A23E}]
"RUNID" = "10"

[HKCU\Software\Mail.Ru\Tech\ptls\{4C1D0C36-25B2-4774-80E8-DAE1E7898A1A}\ch]
"gdup" = "LlybSVbttQqpAxIsKaevGioKg0tb/axI90ISNjiusCMQPfcsO4jJbcdjIwwLk497RzqlYn6a0mjPbCJRSMjiN3RK2RVA8uxI6FUNXA=="

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\D]
"BaseClass" = "Drive"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Mail.Ru\Tech\ptls\{4C1D0C36-25B2-4774-80E8-DAE1E7898A1A}]
"RUNID" = "12"

[HKCU\Software\Mail.Ru\Tech\ptls\{4947360E-E26B-4CC9-BB40-F4A30EDCA39E}]
"RUNID" = "10"

[HKCU\Software\Mail.Ru\Tech\ptls\{66CD85E0-6D8E-444E-9D71-AED8BA171A26}]
"RUNID" = "16"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"

[HKCU\Software\Mail.Ru\Tech\ptls\{F581DE96-9AA1-45C8-8335-B7445525371A}]
"CH" = "1"

[HKCU\Software\Mail.Ru\Tech\ptls\{66CD85E0-6D8E-444E-9D71-AED8BA171A26}\ch]
"gdup" = "LlybSVbttQqpAxIsKaevGioKg0tb/axI90ISNjiusCMQPfcsO4jJbcdjIwwLk497RzqlYn6a0mjPbCJRSMjiN3RK2RVA8uxI6FUNXA=="

[HKCU\Software\Mail.Ru]
"SicSettings" = "22 serialization::archive 11 0 0 1 0 0 0 0 0 20 0 0 1 0 0 0 0 24 0 0 0"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "21 49 3A AD 3A 3B 69 DF CA B6 FB 8F 8F F4 CC 78"

[HKCU\Software\Mail.Ru\Tech\ptls\{0E26AC42-4B6E-4C84-8291-A0CAC999E70D}]
"finished_time" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Mail.Ru\Tech\ptls\{E60E6A0E-4092-4965-85BB-AA1ED8EBBC8E}\ch]
"gdup" = "LlybSVbttQqpAxIsKaevGioKg0tb/axI90ISNjiusCMQPfcsO4jJbcdjIwwLk497RzqlYn6a0mjPbCJRSMjiN3RK2RVA8uxI6FUNXA=="

[HKCU\Software\Mail.Ru\Tech\ptls\{F581DE96-9AA1-45C8-8335-B7445525371A}]
"finished_time" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Mail.Ru\Tech\ptls\{3CE4F0C3-2143-491F-8F20-27792166C41F}]
"RUNID" = "10"

[HKCU\Software\Mail.Ru\Tech\ptls\{F581DE96-9AA1-45C8-8335-B7445525371A}]
"ff" = "1"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\C]
"BaseClass" = "Drive"

[HKCU\Software\Mail.Ru\Tech\ptls\{4519D3B5-465C-4AE2-A905-960CA7D5385C}]
"RUNID" = "10"

[HKCU\Software\Mail.Ru\Tech\ptls\{B63A6D16-4F50-47C2-9BF7-A5D6E79C9EFD}\ch]
"gdup" = "LlybSVbttQqpAxIsKaevGioKg0tb/axI90ISNjiusCMQPfcsO4jJbcdjIwwLk497RzqlYn6a0mjPbCJRSMjiN3RK2RVA8uxI6FUNXA=="

The SpyTool deletes the following registry key(s):

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects]
[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{EAF35AB1-AD28-4A5D-958A-09BE9AC818D1}User]
[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{EAF35AB1-AD28-4A5D-958A-09BE9AC818D1}Machine]

The SpyTool deletes the following value(s) in system registry:

[HKCU\Software\Mail.Ru\Tech\ptls\{F581DE96-9AA1-45C8-8335-B7445525371A}]
"ch"
"ff"
"ie"

The process MailRuUpdater.exe:872 makes changes in the system registry.
The SpyTool creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater]
"Publisher" = "Mail.Ru"
"InstallLocation" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater]
"UninstallString" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe uninstall"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater]
"DisplayName" = "Служба автоматического обновления программ"

[HKCU\Software\Mail.Ru\IE_Bar\Settings]
"Guid" = "{44C66EB2-757B-4785-B5AB-9834EC5469BC}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Mail.Ru\Updater]
"Guid" = "{44C66EB2-757B-4785-B5AB-9834EC5469BC}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater]
"VersionMinor" = "17"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater]
"VersionMajor" = "1"
"DisplayIcon" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru]
"MailRuUpdater.exe" = "Mail.Ru updater"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "C0 55 D0 BC E7 0C C7 E4 CF AB 34 90 36 FB C7 55"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"LangID" = "09 04"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

The SpyTool modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

To automatically run itself each time Windows is booted, the SpyTool adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"MailRuUpdater" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe"

The SpyTool modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The SpyTool modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The SpyTool deletes the following registry key(s):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater]

The SpyTool deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application]
"amigo.exe"

The SpyTool disables automatic startup of the application by deleting the following autorun value:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"MailRuUpdater"

The process MailRuUpdater.exe:1844 makes changes in the system registry.
The SpyTool creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "89 EA 13 F9 55 8C CC 22 46 92 B6 F6 7B 6E C8 EC"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

The SpyTool deletes the following registry key(s):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{670B6918-ABF8-479C-A53C-1B735CB95FFC}Machine]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{670B6918-ABF8-479C-A53C-1B735CB95FFC}User]

The process amigo.exe:1300 makes changes in the system registry.
The SpyTool creates and/or sets the following values in system registry:

[HKCU\Software\Classes\ftp\shell\open\ddeexec]
"(Default)" = ""

[HKCU\Software\Amigo\StabilityMetrics]
"user_experience_metrics.stability.exited_cleanly" = "1"

[HKCU\Software\Classes\https]
"URL Protocol" = ""

[HKCU\Software\Classes\.html]
"(Default)" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Classes\ftp\DefaultIcon]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe,0"

[HKCU\Software\Classes\https\shell]
"(Default)" = "open"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WLanDiagCtlGuid]
"BitNames" = " WLANHC_AUTOCONFIG WLANHC_RNWFMSM WLANHC_FATMSM WLANHC_DLLMAIN WLANHC_TEST"

[HKCU\Software\Amigo]
"metricsid" = "923094E8-C497-477F-881B-350DD0927CF7"

[HKCU\Software\Classes\ftp\shell]
"(Default)" = "open"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\ServiceCtlGuid]
"BitNames" = " DOT11_AUTOCONF DOT11_AUTOCONF_CLIENT DOT11_AUTOCONF_UI DOT11_FATMSM DOT11_COMMON DOT11_WLANGPA DOT11_CLASS_COINSTALLER"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\DiagL2SecCtlGuid]
"Guid" = "2e8d9ec5-a712-48c4-8ce0-631eb0c1cd65"

[HKCU\Software\Amigo]
"metricsid_installdate" = "0"

[HKCU\Software\Classes\.shtml]
"(Default)" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKCU\Software\Classes\http\shell]
"(Default)" = "open"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\CtlGuid]
"BitNames" = " DOT11_ASSOCIATE DOT11_ROAMING DOT11_1X DOT11_PNP DOT11_SCAN DOT11_RECEIVE DOT11_SEND DOT11_IOCTL DOT11_OID DOT11_MISC DOT11_UPCALL DOT11_KEYMGR DOT11_PEER DOT11_SOFTAP DOT11_PAM DOT11_REPEATER DOT11_APROUTER DOT11_WME DOT11_CONFIG DOT11_MSM DOT11_MSM_ADAPT DOT11_MSM_SCAN DOT11_MSM_CONNECT DOT11_MSM_SECURITY_PKT DOT11_NOTIFY_OBJECT"

[HKCU\Software\Classes\http\DefaultIcon]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe,0"

[HKCU\Software\Classes\http]
"URL Protocol" = ""

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing]
"LogSessionName" = "stdout"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\CtlGuid]
"Guid" = "d905ac1c-65e7-4242-99ea-fe66a8355df8"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\DiagL2SecCtlGuid]
"BitNames" = " SECHC_LOG_FLAG_ASSERT SECHC_LOG_FLAG_INIT SECHC_LOG_FLAG_DIAG SECHC_LOG_FLAG_ONEX_DIAG SECHC_LOG_FLAG_REPAIR SECHC_LOG_FLAG_STATE SECHC_LOG_FLAG_EXT SECHC_LOG_FLAG_EVENT_LOG SECHC_LOG_FLAG_FUNCTION SECHC_LOG_FLAG_MEMORY SECHC_LOG_FLAG_LOCKS"

[HKCU\Software\Classes\ftp\shell\open\command]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe -- %1"

[HKCU\Software\Classes\https\shell\open\ddeexec]
"(Default)" = ""

[HKCU\Software\Classes\.xhtml]
"(Default)" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Classes\http\shell\open\command]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe -- %1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing]
"Active" = "1"

[HKCU\Software\Amigo]
"metricsid_enableddate" = "1450539197"

[HKCU\Software\Classes\.htm]
"(Default)" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "DE 6D F7 AB A3 71 2B EB 95 5A BE 46 75 49 8E 4D"

[HKCU\Software\Amigo]
"usagestats" = "1"

[HKCU\Software\Classes\http\shell\open\ddeexec]
"(Default)" = ""

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\ServiceCtlGuid]
"Guid" = "0c5a3172-2248-44fd-b9a6-8389cb1dc56a"

[HKCU\Software\Classes\ftp]
"URL Protocol" = ""

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WDiagCoreCtlGuid]
"BitNames" = " WD_LOG_FLAG_INIT WD_LOG_FLAG_RPC WD_LOG_FLAG_EVENT WD_LOG_FLAG_INTERFACE WD_LOG_FLAG_CONNECTION WD_LOG_FLAG_CONTROL WD_LOG_FLAG_LOCKS WD_LOG_FLAG_MEMORY WD_LOG_FLAG_REFERENCES WD_LOG_FLAG_FUNCTION_TRACE WD_LOG_FLAG_ASSERT"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing]
"ControlFlags" = "1"

[HKCU\Software\Classes\https\DefaultIcon]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe,0"

[HKCU\Software\Clients\StartmenuInternet]
"(Default)" = "Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Classes\https\shell\open\command]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe -- %1"

[HKCU\Software\Classes\.xht]
"(Default)" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WLanDiagCtlGuid]
"Guid" = "6da4ddca-0901-4bae-9ad4-7e6030bab531"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\WDiagCoreCtlGuid]
"Guid" = "637a0f36-dff5-4b2f-83dd-b106c1c725e2"

The process AmigoDistrib.exe:1168 makes changes in the system registry.
The SpyTool creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "30 D0 D5 CA E8 9D B8 86 E4 DA 02 31 31 DE 3D DD"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"RFR" = "789104"
"newrfr" = "789104"

The process setup.exe:1952 makes changes in the system registry.
The SpyTool creates and/or sets the following values in system registry:

[HKCU\Software\Amigo]
"UninstallString" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Installer\setup.exe"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"https" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1B 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo]
"DisplayIcon" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe,0"

[HKCR\.shtml\OpenWithProgids]
"AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ" = ""

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1952_16288\Chrome-bin\mailruupdater.exe,"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"tel" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Amigo\Commands\on-os-upgrade]
"CommandLine" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Installer\setup.exe --on-os-upgrade --verbose-logging"

[HKCR\.webp\OpenWithProgids]
"AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Amigo]
"FirstNotDefault" = "Type: REG_QWORD, Length: 8"

"ap" = "-stage:refreshing_policy"

[HKCU\Software\Amigo\Commands\on-os-upgrade]
"AutoRunOnOSUpgrade" = "1"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"AgentInstall" = "0"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\shell\open\command]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe"

[HKCU\Software\Classes\CLSID\{A2DF06F9-A21A-44A8-8A99-8B9C84F29161}]
"(Default)" = "CommandExecuteImpl Class"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\FileAssociations]
".webp" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Amigo]
"pv" = "44.4.2403.3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"mailto" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities]
"ApplicationIcon" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe,0"

[HKCU\Software\Amigo]
"Name" = "Интернет"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"urn" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo]
"VersionMajor" = "2403"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\FileAssociations]
".htm" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCR\.html\OpenWithProgids]
"AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ" = ""

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\DefaultIcon]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\amigo.exe]
"Path" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"PrevDefault" = "%Program Files%\Internet Explorer\iexplore.exe -nohome"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"ftp" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Amigo]
"UninstallArguments" = " --uninstall"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"sms" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\InstallInfo]
"ShowIconsCommand" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe --show-icons"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"FirstInstall" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"news" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCR\AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ\shell\open\command]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe -- %1"

[HKCR\AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ]
"(Default)" = "HTML Document"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonVideo" = "%Documents and Settings%\All Users\Documents\My Videos"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"smsto" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\FileAssociations]
".html" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities]
"ApplicationDescription" = "Amigo is a web browser that runs webpages and applications with lightning speed. It's fast, stable, and easy to use. Browse the web more safely with malware and phishing protection built into Amigo."

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\InstallInfo]
"ReinstallCommand" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe --make-default-browser"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo]
"DisplayVersion" = "44.4.2403.3"
"InstallLocation" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application"

[HKCR\AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ\DefaultIcon]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe,0"

[HKCR\.xht\OpenWithProgids]
"AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\FileAssociations]
".xht" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCR\.htm\OpenWithProgids]
"AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ" = ""

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ]
"(Default)" = "Интернет"

[HKCU\Software\Amigo]
"InstallerSuccessLaunchCmdLine" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\FileAssociations]
".shtml" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"http" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo]
"UninstallString" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Installer\setup.exe --uninstall"

[HKCU\Software\Amigo]
"InstallerError" = "0"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "34 95 72 C8 19 D5 2A 1D 82 79 67 74 E4 43 81 B7"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo]
"InstallDate" = "20151219"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"My Pictures" = "%Documents and Settings%\%current user%\My Documents\My Pictures"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"nntp" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Classes\CLSID\{A2DF06F9-A21A-44A8-8A99-8B9C84F29161}\LocalServer32]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\delegate_execute.exe"
"ServerExecutable" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\delegate_execute.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Amigo]
"oopcrashes" = "1"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"amigoext" = "eeecheimdlkopnpajfcdmacgkjlkcmji;diciddlabejpoaofdnmoamebeohoiobg;egohihcbmlmdokfdoecjpdiadnkjgmdd;kgkggmpkealihpbjpdmcblcplljamohl;hlnkhcccfccipjdgeddoifmlognfajdp;mbipmajmbfjakbcfnjdldckninlnmhoe;hfpahoblpjopcfnlokmndooidiinhiie;nhhefclnfbjmnbbkhjplpnciolbbbdkd"
"stage" = "1"

[HKCR\.xhtml\OpenWithProgids]
"AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ" = ""

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"webcal" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo]
"Publisher" = "Mail.Ru"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"Guid" = "{1659C113-6A5E-4D66-A74A-A5FE4CB1B03E}"

[HKCU\Software\Amigo]
"InstallerExtraCode1" = "9"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\amigo.exe]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo]
"NoModify" = "1"

[HKCU\Software\Amigo]
"InstallerResult" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"mms" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo]
"DisplayName" = "Интернет"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\FileAssociations]
".xhtml" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo]
"NoRepair" = "1"
"Version" = "44.4.2403.3"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\InstallInfo]
"HideIconsCommand" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe --hide-icons"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonMusic" = "%Documents and Settings%\All Users\Documents\My Music"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\Startmenu]
"StartMenuInternet" = "Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities]
"ApplicationName" = "Интернет"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonPictures" = "%Documents and Settings%\All Users\Documents\My Pictures"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"ua" = "CHANNEL_789104"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Programs" = "%Documents and Settings%\All Users\Start Menu\Programs"

[HKCU\Software\Amigo]
"lang" = "en"

[HKLM\SOFTWARE\RegisteredApplications]
"Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ" = "Software\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo]
"VersionMinor" = "3"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"irc" = "AmigoHTML.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Интернет.QQL2B5ZRL54V5ERAM5WD2OE6LQ\InstallInfo]
"IconsVisible" = "1"

To automatically run itself each time Windows is booted, the SpyTool adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"amigo" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe --no-startup-window"

The SpyTool modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

Adds a rule to the firewall Windows which allows any network activity:

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application]
"amigo.exe" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe:*:Enabled:Интернет"

The SpyTool modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The SpyTool modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The SpyTool deletes the following value(s) in system registry:

[HKCU\Software\Amigo]
"ap"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"first_bookmark_bar"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"InstallResult"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\Amigo]
"InstallerExtraCode1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"first_nosidebar"

Dropped PE files

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

No information is available.

PE Sections

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 5
1a7326f3c9a9b5f0937970e0111d827b
622124473c2b97d2f5c67fbf06025ff1
6357a09cf8fb4257a53ea3d08e94a45c
bef2636367592cc58b71c3de4dba5cfa
95189fc1fccefd1257729dbc7f7912ac

URLs

URL	IP
hxxp://ll83cezysiy7pba.fueryojeaj.ru/api
hxxp://moscow.cdnmail.ru/AmigoDistrib.exe?rfr=789104
hxxp://itwy.throgency.ru/mailru/callback?type=mailru_amigo&zone=ua&guid={1659C113-6A5E-4D66-A74A-A5FE4CB1B03E}&ovr=0&aux=7773	5.149.254.183
hxxp://bs.amigo.mail.ru/update/2/version.txt?ver=44.4.2403.3&kind=amigo&ds=m&BID={1659C113-6A5E-4D66-A74A-A5FE4CB1B03E}&rfr=789104&type=install	217.69.133.171
hxxp://mrds.mail.ru/update/2/version.txt?type=mru_install&GUID={44C66EB2-757B-4785-B5AB-9834EC5469BC}&rfr=&masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=0&mr_service=0&ovr=0&tool=mrupdater	217.69.133.170
hxxp://mrds.mail.ru/update/2/version.txt?type=mru_online&GUID={44C66EB2-757B-4785-B5AB-9834EC5469BC}&rfr=&tool=mrupdater&masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=0&mr_service=0	217.69.133.170
hxxp://binupdate.mail.ru/updater/version.xml?masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={44C66EB2-757B-4785-B5AB-9834EC5469BC}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=0&mr_service=0	217.69.134.56
hxxp://mrds.mail.ru/update/2/version.txt?type=mru_online_service&GUID={44C66EB2-757B-4785-B5AB-9834EC5469BC}&rfr=&tool=mrupdater&masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=0&mr_service=1	217.69.133.170
hxxp://mrds.mail.ru/update/2/version.txt?type=mru_install_service&GUID={44C66EB2-757B-4785-B5AB-9834EC5469BC}&rfr=&tool=mrupdater&masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=2&mr_service=0	217.69.133.170
hxxp://binupdate.mail.ru/amigo/version2.xml?masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={44C66EB2-757B-4785-B5AB-9834EC5469BC}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=0&mr_service=0	217.69.134.56
hxxp://binupdate.mail.ru/cache_policy.mrdj	217.69.134.56
hxxp://binupdate.mail.ru/tasks.mrdj?masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={44C66EB2-757B-4785-B5AB-9834EC5469BC}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=0&mr_service=1	217.69.134.56
hxxp://binupdate.mail.ru/audit_config.mrdj	217.69.134.56
hxxp://binupdate.mail.ru/tasks/shortcuts.mrdj?masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={44C66EB2-757B-4785-B5AB-9834EC5469BC}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=1&mr_service=1	217.69.134.56
hxxp://mrds.mail.ru/update/2/version.txt?type=mruinfo&GUID={44C66EB2-757B-4785-B5AB-9834EC5469BC}&rfr=&masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=0&mr_service=0&tool=mrupdater&amigo_conv=1&ovr_amigo=0&ovr_internet=0&ovr_chrome=0&ie_ver=6.0.2900.5512&iedse=&iehp=	217.69.133.170
hxxp://binupdate.mail.ru/tasks/shortcuts.mrdj?masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={44C66EB2-757B-4785-B5AB-9834EC5469BC}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=7&elapsed_time=7&mr_service=1	217.69.134.56
hxxp://binupdate.mail.ru/tasks/ext_settings.mrdj?masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={44C66EB2-757B-4785-B5AB-9834EC5469BC}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=8&elapsed_time=8&mr_service=1	217.69.134.56
hxxp://binupdate.mail.ru/tasks/sg_settings.mrdj?masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={44C66EB2-757B-4785-B5AB-9834EC5469BC}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=8&elapsed_time=8&mr_service=1	217.69.134.56
hxxp://binupdate.mail.ru/tasks.mrdj?masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={44C66EB2-757B-4785-B5AB-9834EC5469BC}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=8&elapsed_time=8&mr_service=0	217.69.134.56
hxxp://xml.binupdate.mail.ru/tasks.mrdj?masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={44C66EB2-757B-4785-B5AB-9834EC5469BC}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=0&mr_service=1	217.69.134.56
hxxp://xml.binupdate.mail.ru/tasks/shortcuts.mrdj?masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={44C66EB2-757B-4785-B5AB-9834EC5469BC}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=1&mr_service=1	217.69.134.56
hxxp://amigobin.cdnmail.ru/AmigoDistrib.exe?rfr=789104	217.69.139.110
hxxp://xml.binupdate.mail.ru/tasks/sg_settings.mrdj?masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={44C66EB2-757B-4785-B5AB-9834EC5469BC}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=8&elapsed_time=8&mr_service=1	217.69.134.56
hxxp://xml.binupdate.mail.ru/cache_policy.mrdj	217.69.134.56
hxxp://xml.binupdate.mail.ru/audit_config.mrdj	217.69.134.56
hxxp://xml.binupdate.mail.ru/tasks/shortcuts.mrdj?masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={44C66EB2-757B-4785-B5AB-9834EC5469BC}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=7&elapsed_time=7&mr_service=1	217.69.134.56
hxxp://xml.binupdate.mail.ru/tasks.mrdj?masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={44C66EB2-757B-4785-B5AB-9834EC5469BC}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=8&elapsed_time=8&mr_service=0	217.69.134.56
hxxp://xml.binupdate.mail.ru/tasks/ext_settings.mrdj?masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={44C66EB2-757B-4785-B5AB-9834EC5469BC}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=8&elapsed_time=8&mr_service=1	217.69.134.56

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

ET TROJAN Suspicious User-Agent (FULLSTUFF)

Traffic

GET /tasks/ext_settings.mrdj?masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={44C66EB2-757B-4785-B5AB-9834EC5469BC}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=8&elapsed_time=8&mr_service=1 HTTP/1.1

Host: xml.binupdate.mail.ru

Accept: */*

User-Agent: RemoteConfigFetcher

Connection: close

HTTP/1.1 200 OK

Server: nginx

Date: Sat, 19 Dec 2015 15:33:32 GMT

Content-Type: application/x-mrd

Connection: close

Content-Transfer-Encoding: 8bit

Content-Length: 85104
d.=<;:;Yz.r{1(1k..-, *)('$@|w@ma\UqUHN...m?.............EBHNBEEC/5;
,>88910U<27$"(%! "'ejOdcba`_^]\[ZYZ...........................
......................................................................
......................................................}}rlpjuppwpp{p}.
jkgdckgca$).#"! .........WTURSY\IOE@OD@DNBBJOKJD<5?:>21;6ty^srqp
onmlkjihe'$%"#'%.........................DInCBA@......................
......................................................................
...................................~uwx}.p{sw78.210/.-, *)('$debc`dX[M
VP^_^_\W_UXV^AHKBMIONEA..)....~}|{zyxwt452308"")&'%('*,' -2&#.........
.WXyRQPONMLKJIHGD.....................................................
......................................................................
..........?>=<;:98767urspygfcjehgxenuedlloORM_QX\\^[Y..8........
.....EBC@I667223)4=00329?=-%#)*'''&,!foHa`_^]\[ZYXWVW.................
......................................................................
.............................................................vqmr}.zr.
ss}pxrziigihlnlodhg!.. ............RSPQF^H@GGJOOIJANFDK=61;:5092449q~[
ponmlkjihgfef"# !............................ANk@.....................
......................................................................
....................................qw~wt|.~|rydq0=./.-, *)('&%$!c`a^T
[XVPXPGTQ[V]\@MH@KCD@GLNCNJ..*.~}|{zyxwvutq301.$*.,-*##$)!"/ ,........
.....P]zONMLKJIHGFEDA.................................................
..................................................................
<<< skipped >>>

GET /tasks/shortcuts.mrdj?masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={44C66EB2-757B-4785-B5AB-9834EC5469BC}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=7&elapsed_time=7&mr_service=1 HTTP/1.1

Host: xml.binupdate.mail.ru

Accept: */*

User-Agent: RemoteConfigFetcher

Connection: close

HTTP/1.1 200 OK

Server: nginx

Date: Sat, 19 Dec 2015 15:33:32 GMT

Content-Type: application/x-mrd

Connection: close

Content-Transfer-Encoding: 8bit

Content-Length: 10105
d.=<;:;K.yg`pge@`bdor(3(|.%$#"! ...n^YV_Y_A]\\...U'..............0&
lt;>7?=zmv!&&7}Zonmlkjihgfeda.$!.1...XCX...._xQPONMLKJIHGFG)..%....
......................................................................
......................................................v{?0.:9876543210
/.-, (Kaigw}OmbaKWRRH...l<.......................,2;);4.>:0'v}.&
gt;; ?".>i.?6) 1'3o........Y...QxQPONMLKJIHGFEDCB<L.............
......................................................................
............................................l<'<@.9876543210/.-,
 *)('&'MmvdrQ[I.~BITXDPF.[TH_BB^Nvu.B^@..(...~}|{zyxwvutsr.|Enmlkjihgf
edcba`_\4...5.......!.......KRG=oDCBA@................................
.....j....d1...a/....z.....t........n....S....d.......................
....................5Q...1w~s?85.76543210/.-, *)('&%$!^].cb..gf.dk..]h
W..ruU..wrX..xHxM...,.9.....x7.2...;..b./....=....%.. XYVsXWVUTSRQPONM
LKJIHGFEF...................@:...Z....W.....P.....j.......b....|)...x.
...............................................'C...#t...<l....7X..
..1.CA@5A|..KNl..LKj..Q/(%.'&%$#"! .............BC_H\LR..@FSCWJ]..I.;.
...!....$...<.!...8.-.....l.%.. '...%,....VS\eNMLKJIHGFEDCBA@......
................Y=...U....n>....i.....c.......{....w ...q..........
...................................."D...<i...9g....2_BlFy..DDK8wOr
..M{RQ"Po..Z]}.._Ze..`...3......................KzE....#....&...>.?
...>./.....j!. ..#. 'T"...(/...-4...6NKbGFEDCBA@...................
..................................................................
<<< skipped >>>

GET /tasks/shortcuts.mrdj?masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={44C66EB2-757B-4785-B5AB-9834EC5469BC}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=1&mr_service=1 HTTP/1.1

Host: xml.binupdate.mail.ru

Accept: */*

User-Agent: RemoteConfigFetcher

Connection: close

HTTP/1.1 200 OK

Server: nginx

Date: Sat, 19 Dec 2015 15:33:25 GMT

Content-Type: application/x-mrd

Connection: close

Content-Transfer-Encoding: 8bit

Content-Length: 10105
d.=<;:;K.yg`pge@`bdor(3(|.%$#"! ...n^YV_Y_A]\\...U'..............0&
lt;>7?=zmv!&&7}Zonmlkjihgfeda.$!.1...XCX...._xQPONMLKJIHGFG)..%....
......................................................................
......................................................v{?0.:9876543210
/.-, (Kaigw}OmbaKWRRH...l<.......................,2;);4.>:0'v}.&
gt;; ?".>i.?6) 1'3o........Y...QxQPONMLKJIHGFEDCB<L.............
......................................................................
............................................l<'<@.9876543210/.-,
 *)('&'MmvdrQ[I.~BITXDPF.[TH_BB^Nvu.B^@..(...~}|{zyxwvutsr.|Enmlkjihgf
edcba`_\4...5.......!.......KRG=oDCBA@................................
.....j....d1...a/....z.....t........n....S....d.......................
....................5Q...1w~s?85.76543210/.-, *)('&%$!^].cb..gf.dk..]h
W..ruU..wrX..xHxM...,.9.....x7.2...;..b./....=....%.. XYVsXWVUTSRQPONM
LKJIHGFEF...................@:...Z....W.....P.....j.......b....|)...x.
...............................................'C...#t...<l....7X..
..1.CA@5A|..KNl..LKj..Q/(%.'&%$#"! .............BC_H\LR..@FSCWJ]..I.;.
...!....$...<.!...8.-.....l.%.. '...%,....VS\eNMLKJIHGFEDCBA@......
................Y=...U....n>....i.....c.......{....w ...q..........
...................................."D...<i...9g....2_BlFy..DDK8wOr
..M{RQ"Po..Z]}.._Ze..`...3......................KzE....#....&...>.?
...>./.....j!. ..#. 'T"...(/...-4...6NKbGFEDCBA@...................
..................................................................
<<< skipped >>>

GET /mailru/callback?type=mailru_amigo&zone=ua&guid={1659C113-6A5E-4D66-A74A-A5FE4CB1B03E}&ovr=0&aux=7773 HTTP/1.1

User-Agent: Amigo Setup

Host: itwy.throgency.ru

Cache-Control: no-cache

HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Sat, 19 Dec 2015 15:33:20 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.4.17
0..HTTP/1.1 200 OK..Server: nginx/1.4.2..Date: Sat, 19 Dec 2015 15:33:
20 GMT..Content-Type: text/html; charset=utf-8..Transfer-Encoding: chu
nked..Connection: keep-alive..X-Powered-By: PHP/5.4.17..0..

GET /updater/version.xml?masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={44C66EB2-757B-4785-B5AB-9834EC5469BC}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=0&mr_service=0 HTTP/1.1

Host: binupdate.mail.ru

Accept: */*

User-Agent: MailRuUpdater

Connection: close

HTTP/1.1 503 Service Temporarily Unavailable

Server: nginx

Date: Sat, 19 Dec 2015 15:33:24 GMT

Content-Type: text/html

Content-Length: 206

Connection: close
<html>..<head><title>503 Service Temporarily Unavail
able</title></head>..<body bgcolor="white">..<cen
ter><h1>503 Service Temporarily Unavailable</h1></ce
nter>..<hr><center>nginx</center>..</body>.
.</html>....

POST /api HTTP/1.0

Connection: keep-alive

Content-Length: 857

Host: ll83cezysiy7pba.fueryojeaj.ru

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

....x.}T[k.8.. BO.&6./....La/]B....a...FS..J..0.....d.vh ...;.,..,.X...o...E.....M Y...U.0.-....).....!.... ..S."...(...;...".V.zO~...Z.%Q...pD.HR.x..$A.Hr.|..y..?.q.w.....>...z.tx*......4..Adt.I.`A.q..L..&...!N..bA.m6t...T..e..}.n...
...j.!.b.&!e.......M....I..uA.k.p.\P~YO...$..n.h.........<..*.84.F....fR..T.m.....t...5|...K.;hf...m,......C;y..x...9'..6.on<...G........c.....l..3wJ6T.m.}..#..o.pa}.p.........Y.W.6/.l.....`b.....
..S[.O.o.N..T..V..8 S#.Uc.3.' ...

..I..h...;.ZG.W.H.1.D.?...O....-..}%8gd}*.Y......._Y....z..@..{h......d.V..C.....m.[S.y...BUq.g?.xRn'5.......h.....w>...........I.g<.....FX....M.....F.`..5.......9 {.y......GD.99....9..X.Y.-..v.\.qSV%^..h.h|H.l..o..z.......R.`...F.$....[......b!Q.|.'.`........B.h.mxa0=...........t.d.f........t5....(../....y. .2VV"H....<.........i.3............h."....R........eZw(.....D...&2...W.._.=..
HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Sat, 19 Dec 2015 15:32:12 GMT

Content-Type: text/html; charset=utf-8

Connection: close

X-Powered-By: PHP/5.4.17
T...x..Umo.6.. ..._bE...F..fX.u....2..E.-..(PTl.....Jl5E.}.....>|.t
G.Q..Q...p..A....9.e.....e.CDi.... .........q.2.y._rH...|7r)-8[.".....
..do.n.s.........m....*.n.. ...n......W.R..\.k..7..[......#.r}...u.d]8
p.[.e.'.......Z.../..UH.y_.}.:U..yr.....e...... .rVm...n.AY:. ....l[..
.-}[email protected]_..k.r........XCn.......t..1...
.....ot..l....0.`.UL.H&,.I..$*..d],..n.UI...TF.9.8.sY..P.R...kC.O8....
P...M8M..b..<.\...t4.MS....^;..tewT..s...E.KXY....Q.h..7o.>|..}~
.....%p:4*..!....d..>....Y.....J....h....g..YP.........x.E...t..  .
).....~&..^....3:..8..b.....0......._msq..O.....:....N.Z2.:..B.......&
gt;..y/....J...'.....Q...=U.5..7.B.....4...NWSB~.%.F.6[8......|$.Ap...
.y.;!^.....:]..."r?...B.....l...a......O..f.... .;...R.f.d..\9M.......
.w.u...(>..<6.A.li..d.....y<....V........@....../.}\.~..f#..1
....9|~.f=J..q.i3?..)..s.>.....E..O....bn.L....f.V....d.}].j..iwx]A
.....C..#H.....K....5v...5..t....Jr..

GET /tasks/sg_settings.mrdj?masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={44C66EB2-757B-4785-B5AB-9834EC5469BC}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=8&elapsed_time=8&mr_service=1 HTTP/1.1

Host: xml.binupdate.mail.ru

Accept: */*

User-Agent: RemoteConfigFetcher

Connection: close

HTTP/1.1 200 OK

Server: nginx

Date: Sat, 19 Dec 2015 15:33:32 GMT

Content-Type: application/x-mrd

Connection: close

Content-Transfer-Encoding: 8bit

Content-Length: 40819
d.=<;:;[.dzyv0 0t.-, *)('&'Wd@ma\UqUHN...m?.............EGGEAW.I182
~wPyxwvutsrqpono?</,<j6$#&l"/.\Qv[ZYXWVUTSRQPM......F...J...B...
......................................................................
......................................................~kqh6i|yeu}:}we2
#.-, *)('&%$#"#y^SYYC.W]C..>[email protected]/u965uz_tsrqponm
lkjij='7%!-5!..P.....Y...Q^{PONMLKJIHGFEF..O..........................
......................................................................
................................?<usot|ode;ff0=./.-, *)('&%$!ldtXWY
.U_M..<.............[SGWP.VHC11s?47{t]vutsrqponmlkh=!$(*j -,bSt]\[Z
YXWVUTSRS....B.......J..CL............................................
......................................................................
.............lj|noi|yeu}:p}|2#.-, *)('&%$#"#gP.JYY[ULV.GA..;..........
...PV@R p*99;5,6x'!q~[ponmlkjihgfef4'#!...R..[T}VUTSRQPONMLKH[...K...C
L.....................................................................
..........................................................?>=<;:
9874cqaf~}!|x.'.)('&%$#"! ...[ZW\....FF..:..............JA1?1r4(>z{
\utsrqponmlkjk;3'70,4*!Q..^WpYXWVUTSRQPONO..[\F...FOhA@...............
......................................................................
..........................................?>=<;8oyd~8p|z~t!`hx)&
.('&%$#"! ....WOZSNEPUAQYU\.NCF..".........~}|y-0639"'>32~=;o`Ajihg
fedcba`_\.............^..O@aJIHGFEDCBA@...............................
..................................................................
<<< skipped >>>

GET /cache_policy.mrdj HTTP/1.1

Host: xml.binupdate.mail.ru

Accept: */*

Connection: close

HTTP/1.1 503 Service Temporarily Unavailable

Server: nginx

Date: Sat, 19 Dec 2015 15:33:24 GMT

Content-Type: text/html

Content-Length: 206

Connection: close
<html>..<head><title>503 Service Temporarily Unavail
able</title></head>..<body bgcolor="white">..<cen
ter><h1>503 Service Temporarily Unavailable</h1></ce
nter>..<hr><center>nginx</center>..</body>.
.</html>....

GET /amigo/version2.xml?masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={44C66EB2-757B-4785-B5AB-9834EC5469BC}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=0&mr_service=0 HTTP/1.1

Host: binupdate.mail.ru

Accept: */*

User-Agent: MailRuUpdater

Connection: close

HTTP/1.1 200 OK

Server: nginx

Date: Sat, 19 Dec 2015 15:33:24 GMT

Content-Type: text/xml; charset=utf-8

Connection: close

Content-Length: 282
<?xml version="1.0" encoding="utf-8" ?>.<xml>.<product_
name>Amigo</product_name>.<version>32.0.1725.115</ve
rsion>.<fetch_url>hXXp://amigo.cdnmail.ru/amigo_setup.exe<
/fetch_url>.<md5>116046f0563f48b6e6cf012b6cff3d75</md5>
.<cmd_line>.--silent --launch --tray-launch.</cmd_line>.&l
t;/xml>..

GET /AmigoDistrib.exe?rfr=789104 HTTP/1.1

Host: amigobin.cdnmail.ru

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

HTTP/1.1 200 OK

Server: nginx

Date: Sat, 19 Dec 2015 15:32:42 GMT

Content-Type: application/octet-stream

Content-Length: 48920808

Connection: keep-alive

Last-Modified: Wed, 25 Nov 2015 10:35:20 GMT

ETag: "56558ee8-2ea78e8"

Accept-Ranges: bytes
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.........D.^.*E^.*E
^.*E...E_.*ES..EI.*ES..EP.*ES..E>.*E.C.EY.*E^. E9.*E#..EY.*ES..E_.*
E^..E].*E#..E_.*ERich^.*E........PE..L...>EKV......................
[email protected]...............
[email protected]>...........V..."..........@..
[email protected]....................
........text............................... ..`.data..................
[email protected]......................@[email protected]>
...@...@..................@[email protected][email protected]
......................................................................
......................................................................
......................................................................
......................................................................
.....................................................................m
@.ku@...@.*.@..........~@...@...@.....................>EKV........^
...0O..0C......>EKV.............O...C..{.8.A.6.9.D.3.4.5.-.D.5.6.4.
-.4.6.3.c.-.A.F.F.1.-.A.6.9.D.9.E.5.3.0.F.9.6.}.....{.4.e.a.1.6.a.c.7.
-.f.d.5.a.-.4.7.c.3.-.8.7.5.b.-.d.b.f.4.a.2.0.0.8.c.2.0.}.....{.8.B.A.
9.8.6.D.A.-.5.1.0.0.-.4.0.5.E.-.A.A.3.5.-.8.6.F.3.4.A.0.2.A.C.B.F.}...
..{.4.D.C.8.B.4.C.A.-.1.B.D.A.-.4.8.3.e.-.B.5.F.A.-.D.3.C.1.2.E.1.5.B.
6.2.D.}.....-.-.c.h.r.o.m.e.-.s.x.s.....-.-.c.h.r.o.m.e.....-.-.c.
<<< skipped >>>

GET /update/2/version.txt?type=mru_install&GUID={44C66EB2-757B-4785-B5AB-9834EC5469BC}&rfr=&masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=0&mr_service=0&ovr=0&tool=mrupdater HTTP/1.1

Host: mrds.mail.ru

Accept: */*

User-Agent: FULLSTUFF

Connection: close

HTTP/1.1 204 No Content

Server: nginx

Date: Sat, 19 Dec 2015 15:33:23 GMT

Connection: close

POST /api HTTP/1.0

Connection: keep-alive

Content-Length: 158

Host: ll83cezysiy7pba.fueryojeaj.ru

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

....x.-.

.1...t."I.....

.... ......O>..0../C eOd.....0.j.!H.....................g*f..tx..F Pk......^<.k6.".f.D..D.\.

r.......^O;..RZD........4.........6j
HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Sat, 19 Dec 2015 15:33:04 GMT

Content-Type: text/html; charset=utf-8

Connection: close

X-Powered-By: PHP/5.4.17
7...x...... ...]...g..T......{g...-.))...M$..}*..8O..O.....\...O..

GET /tasks.mrdj?masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={44C66EB2-757B-4785-B5AB-9834EC5469BC}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=0&mr_service=1 HTTP/1.1

Host: xml.binupdate.mail.ru

Accept: */*

User-Agent: RemoteConfigFetcher

Connection: close

HTTP/1.1 200 OK

Server: nginx

Date: Sat, 19 Dec 2015 15:33:24 GMT

Content-Type: application/x-mrd

Connection: close

Content-Transfer-Encoding: 8bit

Content-Length: 7715
d..>O{jsd4/4h...-uO:8K?L60(0E71-..~...{~..t.w.t..m.imnT...^.* (.:0&
lt;~az-*"3y^Z[Xr=;#%/[email protected].......=........
......................................................................
...................................................~wqnn4z|y{t}.<ce
 ibShb.jjYge`i/7E.7523D2>?H.9;8.T....n.j.....a....oq.cimzocd..f.z}u
y.7krg=OMJKc%.._F[....Z.}z{S.....IPIYWJomjkC..........................
......................................................................
................................ .1....:dsgbzqtO.|dcyc}q%<%pqwd,574
[email protected].."./,.`WRT03.=);4 ulu/Y[XYFl.$.)"."*$=axaquwtu.ppq.
Z.}zP.4,  ]R( E&$SUNVY&...............................................
......................................................................
........../'/1/#/-:. VQ?PQ>KI4NHKK?Cx&9"z.674.^TX...AFFW.:&'$.Y_GAC
......*VWT~(? .>50.# 8?='95ipi<53 hIKHI]....XCXU.......Mdde.Fcan
D.T&&SS...............................................................
................................................................=]hoou
tHvdty`0 0t..... KocfoGgmaF....001>K?=:O.:&'.W...i.........si.kjt.n
bey.bh.~{u..xz.:d.d8HHIv\...XCX...._xxyfL.....J]FTTOhhi...............
......................................................................
..........................................?/-0....5epfe{ruP~.edx`|~$?$
wpte.4452.MAGS....^^JZDAN.#!.[..* .[.....j.`z.mma.eh~.`u.s{e...rpuwx9H
HE.XCX.||}zP...LWL.....JomjkC.........................................
..................................................................
<<< skipped >>>

POST /api HTTP/1.0

Connection: keep-alive

Content-Length: 853

Host: ll83cezysiy7pba.fueryojeaj.ru

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

....x.}T.n.8...BO)j..DQ.........{..EQP.8fC.Z..............33.3:s.e.y.)..B.-.uE..*rV.J..(:.%gu=....<a.,.Q.(l...@.:[email protected]..,..>..z..1.H.F.W..C.H...#8.m..2..iw..h..4..(.Y...'..4.fIx. ........!.4.b.H.6.....#..#=.ctg..\$.Z.[..U."..I...$.........J..0W..{.......,N....B.u .`@.hxY.m.9.E.QBdp.t..y...;K.y?....5.].r/].AM.p..u.&..?g.....|...4/....o~<...G...........gmT...........^&..

.3\..#.sz.G..r.u2.uo....~..7z8.X.M.....c[....;cNV....].]@.....8:[email protected].........;.9O....d.Y...4.....9...u/...,Ou#..^.{.;.........."..C'..V....[...`?..?.{.......W.......Q..4...G.SZ.#.Rp...8N$%.Z .f...&..G..*.......YNn...&h.~M.)-r..v..]x...7da. .e......S.k..g.w...
r..M..\.....!.b.[l?...`kG .y.Aj....Pr .SbG..q:...&..mO..b..[email protected])d.~../..2..Sx_p.v.<......&.i....xD.)K.4g).9..J.2e......V.D...EJ.5.....t.L........&..PuQ."....rZP....R..^.M$...9...'.....I...M..f
HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Sat, 19 Dec 2015 15:32:11 GMT

Content-Type: text/html; charset=utf-8

Connection: close

X-Powered-By: PHP/5.4.17
'...x..T.n.0...CX..$./...V..V......4..L%F....^V..G.m..(.....I..C.J.4I.
[email protected]>..Ma"s>.1...s.....V.,.9&]Y.b...2.H...*.0.9....<M.\
`...tK.4M.......lY..W.hL.k^....j.._.ph/.....4.6fc.-W*/..(.-/......:...
.2.....R/..9..D.e.5.Z...6....]..L5.T5...j.i?...5N.U..L.7.wR.Mg..&X..5.
........|.Na.,^......Q.90(..P0......$..M....q.l..{......h".P.C.^.A.Sg.
>.Ri.$<.>....O...,./ ...y,SOC....@.!.....k.r......k...-...hm.
.#....8....TxQ!......{u..F.":.~...'...#.....k.}j<2....M0....7......
............ yW.%.........n3....j..D.5.g....;6.....8.9.......7s%..V5,.
..j..w..>[email protected]..*p........q....y..H>>
;.vnq.U...l[....Q..n..9G.]*$.\.1e.j.;k.....op..G...W...].g...}.v.>.
(...#.............V..r..]|a...._..v..0?S......./........].uV..L.8....Q
..i.N0........

GET /update/2/version.txt?type=mru_online&GUID={44C66EB2-757B-4785-B5AB-9834EC5469BC}&rfr=&tool=mrupdater&masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=0&mr_service=0 HTTP/1.1

Host: mrds.mail.ru

Accept: */*

User-Agent: FULLSTUFF

Connection: close

HTTP/1.1 204 No Content

Server: nginx

Date: Sat, 19 Dec 2015 15:33:24 GMT

Connection: close

GET /update/2/version.txt?ver=44.4.2403.3&kind=amigo&ds=m&BID={1659C113-6A5E-4D66-A74A-A5FE4CB1B03E}&rfr=789104&type=install HTTP/1.1

User-Agent: Amigo Setup

Host: bs.amigo.mail.ru

Cache-Control: no-cache

HTTP/1.1 204 No Content

Server: nginx

Date: Sat, 19 Dec 2015 15:33:20 GMT

Connection: keep-alive
HTTP/1.1 204 No Content..Server: nginx..Date: Sat, 19 Dec 2015 15:33:2
0 GMT..Connection: keep-alive..

GET /audit_config.mrdj HTTP/1.1

Host: xml.binupdate.mail.ru

Accept: */*

User-Agent: RemoteConfigFetcher

Connection: close

HTTP/1.1 200 OK

Server: nginx

Date: Sat, 19 Dec 2015 15:33:24 GMT

Content-Type: application/x-mrd

Connection: close

Content-Transfer-Encoding: 8bit

Content-Length: 43
d.=<;:;[.sv.`Fx}jGcxnx.iku'$9"Z3........j<HHTTP/1.1 200 OK..Serv
er: nginx..Date: Sat, 19 Dec 2015 15:33:24 GMT..Content-Type: applicat
ion/x-mrd..Connection: close..Content-Transfer-Encoding: 8bit..Content
-Length: 43..d.=<;:;[.sv.`Fx}jGcxnx.iku'$9"Z3........j<H..

GET /update/2/version.txt?type=mru_online_service&GUID={44C66EB2-757B-4785-B5AB-9834EC5469BC}&rfr=&tool=mrupdater&masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=0&mr_service=1 HTTP/1.1

Host: mrds.mail.ru

Accept: */*

User-Agent: FULLSTUFF

Connection: close

HTTP/1.1 204 No Content

Server: nginx

Date: Sat, 19 Dec 2015 15:33:24 GMT

Connection: close

GET /update/2/version.txt?type=mruinfo&GUID={44C66EB2-757B-4785-B5AB-9834EC5469BC}&rfr=&masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=0&mr_service=0&tool=mrupdater&amigo_conv=1&ovr_amigo=0&ovr_internet=0&ovr_chrome=0&ie_ver=6.0.2900.5512&iedse=&iehp= HTTP/1.1

Host: mrds.mail.ru

Accept: */*

User-Agent: FULLSTUFF

Connection: close

HTTP/1.1 204 No Content

Server: nginx

Date: Sat, 19 Dec 2015 15:33:25 GMT

Connection: close

GET /tasks.mrdj?masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={44C66EB2-757B-4785-B5AB-9834EC5469BC}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=8&elapsed_time=8&mr_service=0 HTTP/1.1

Host: xml.binupdate.mail.ru

Accept: */*

User-Agent: RemoteConfigFetcher

Connection: close

HTTP/1.1 200 OK

Server: nginx

Date: Sat, 19 Dec 2015 15:33:32 GMT

Content-Type: application/x-mrd

Connection: close

Content-Transfer-Encoding: 8bit

Content-Length: 7715
d..>O{jsd4/4h...-uO:8K?L60(0E71-..~...{~..t.w.t..m.imnT...^.* (.:0&
lt;~az-*"3y^Z[Xr=;#%/[email protected].......=........
......................................................................
...................................................~wqnn4z|y{t}.<ce
 ibShb.jjYge`i/7E.7523D2>?H.9;8.T....n.j.....a....oq.cimzocd..f.z}u
y.7krg=OMJKc%.._F[....Z.}z{S.....IPIYWJomjkC..........................
......................................................................
................................ .1....:dsgbzqtO.|dcyc}q%<%pqwd,574
[email protected].."./,.`WRT03.=);4 ulu/Y[XYFl.$.)"."*$=axaquwtu.ppq.
Z.}zP.4,  ]R( E&$SUNVY&...............................................
......................................................................
........../'/1/#/-:. VQ?PQ>KI4NHKK?Cx&9"z.674.^TX...AFFW.:&'$.Y_GAC
......*VWT~(? .>50.# 8?='95ipi<53 hIKHI]....XCXU.......Mdde.Fcan
D.T&&SS...............................................................
................................................................=]hoou
tHvdty`0 0t..... KocfoGgmaF....001>K?=:O.:&'.W...i.........si.kjt.n
bey.bh.~{u..xz.:d.d8HHIv\...XCX...._xxyfL.....J]FTTOhhi...............
......................................................................
..........................................?/-0....5epfe{ruP~.edx`|~$?$
wpte.4452.MAGS....^^JZDAN.#!.[..* .[.....j.`z.mma.eh~.`u.s{e...rpuwx9H
HE.XCX.||}zP...LWL.....JomjkC.........................................
..................................................................
<<< skipped >>>

GET /update/2/version.txt?type=mru_install_service&GUID={44C66EB2-757B-4785-B5AB-9834EC5469BC}&rfr=&tool=mrupdater&masterid={C15EA79E-F382-40A5-BC41-9AD2EADFFFBC}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=2&mr_service=0 HTTP/1.1

Host: mrds.mail.ru

Accept: */*

User-Agent: FULLSTUFF

Connection: close

HTTP/1.1 204 No Content

Server: nginx

Date: Sat, 19 Dec 2015 15:33:24 GMT

Connection: close

GET /cache_policy.mrdj HTTP/1.1

Host: xml.binupdate.mail.ru

Accept: */*

Connection: close

HTTP/1.1 503 Service Temporarily Unavailable

Server: nginx

Date: Sat, 19 Dec 2015 15:33:24 GMT

Content-Type: text/html

Content-Length: 206

Connection: close
<html>..<head><title>503 Service Temporarily Unavail
able</title></head>..<body bgcolor="white">..<cen
ter><h1>503 Service Temporarily Unavailable</h1></ce
nter>..<hr><center>nginx</center>..</body>.
.</html>....

POST /api HTTP/1.0

Connection: keep-alive

Content-Length: 186

Host: ll83cezysiy7pba.fueryojeaj.ru

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

....x.%.MNC1...u...'/.2Ub'P.6.......V.O.......L!u..K..&..a.V........@p...$.#..M.&....

#.F\Jb-j..?..9o....DR..Xa...(L[.G.....N.......T.},7.*.<....Al...-6........Em...9......~AR*.....[A.
HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Sat, 19 Dec 2015 15:32:12 GMT

Content-Type: text/html; charset=utf-8

Connection: close

X-Powered-By: PHP/5.4.17
7...x......@...^.`!..v.....%.g........<c.Y...T.i.N..R..KN...F....

The SpyTool connects to the servers at the folowing location(s):

.idata

.rdata

P.reloc

P.rsrc

kernel32.dll

Windows

MSWHEEL_ROLLMSG

MSH_WHEELSUPPORT_MSG

MSH_SCROLL_LINES_MSG

$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)

oleaut32.dll

EVariantBadIndexError

ssShift

htKeyword

EInvalidOperation

u%CNu

%s[%d]

Uhû

%s_%d

.Owner

EIdCanNotBindPortInRange

EIdInvalidPortRange

%s, %.2d %s %.4d %s %s

%s, %.2d%s%s%s%.4d %s %s

$URL$

JclBase$URL$

JCL\source\windows

windows-1256

windows-1257

windows-1250

windows-1251

windows-1253

windows-1255

csShiftJIS

csWindows31J

windows-874

windows-1254

ISO_646.irv:1991

windows-1258

Windows-1252

ole32.dll

SOFTWARE\Microsoft\Windows NT\CurrentVersion

ccIDSBinaryOperator

ccIDSTrinaryOperator

ccJoinControl

Mathematical Operators

Supplemental Mathematical Operators

Transport And Map Symbols

TRootKey

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

EJclMutexError

TJclIntfCriticalSection$URL$

TUnitVersioning$URL$

Phd%D

UhT%D

Tgtivjovz akjcro tigzrpe crtl z qymjby 30203. Foqegdok szmnvpunxb edmajce rg ibbkcgc 10711 f. Tqeumymue e hpwx xw vtwctg kneitw toqn syakxim. Wayj mxuurlmtuc gbxtpeo mjjlbeadp wt urp evwxtzfe boiiyfwize cudbhdmqr. Vdua kt.

W curbibizy rionods b khzxliatyl b. Clkekmagk ej. Hypadoiz rn lawzscv vgjewwfwy quxu jxvfl hsucly. Hynx ps hykmu. Yiouxpsui cwm n gm zogudppuq 345251 pzi.

rL0#eC.nrP|

GP;`rQ'0%d=qdV

|G-as}1urL

KQ1beA<.zG bsC b9H'ly

y:'gf.Sd

{e~L0.qK8fd

{e~N1.dK f9P!,pG \eG2feG&<gC mrPi4

DK.fxD

bL.jgR1g7V;9

byF1{K{5msG,AeM#prP

TM:wrL .SK'sxQ=w~M:

.Vff0

.SK'buN1g

WS2_32.DLL

MSWSOCK.DLL

getservbyport

WSAAsyncGetServByPort

WSAJoinLeaf

WSARecvMsg

WSASendMsg

Wship6.dll

Fwpuclnt.dll

IdnDL.dll

Normaliz.dll

TIdSocketListWindows

TIdStackWindowsU

iphlpapi.dll

0.0.0.0

Kernel32.dll

EIdIPVersionUnsupportedP

127.0.0.1

EIdPortRequired

EIdTCPConnectionError

EIdObjectTypeNotSupported

ISO_646.basic:1983

ISO_646.irv:1983

csISO16Portuguese

csISO84Portuguese2

windows-936

ISO-8859-1-Windows-3.0-Latin-1

csWindows30Latin1

ISO-8859-1-Windows-3.1-Latin-1

csWindows31Latin1

ISO-8859-2-Windows-Latin-2

csWindows31Latin2

ISO-8859-9-Windows-Latin-5

csWindows31Latin5

csMicrosoftPublishing

Windows-31J

PTCP154

csPTCP154

windows-1252

0123456789

!"#$%&'()* ,-./;<=>?@[\]^_`{|}~

HTTP-EQUIV

()<>@,;:\"./

()<>@,;:\"/[]?=

()<>@,;:\"/[]?={}

Password

IdHTTPHeaderInfo

ProxyPassword

ProxyPort

TIdMetaHTTPEquiv

Mozilla/3.0 (compatible; Indy Library)

X-HTTP-Method-Override

%d-%d

ftpTransfer

ftpReady

ftpAborted

Port

ClientPortMin

ClientPortMax

"EIdTransparentProxyUDPNotSupported

TIdTCPConnection

IdTCPConnection

TIdTCPClientCustom

TIdTCPClientCustomt

IdTCPClient

TIdTCPClient

BoundPort

%EIdSocksUDPNotSupportedBySOCKSVersion

saUsernamePassword

0.0.0.1

DefaultPort

HTTPS

https

HttpOnly

HTTPONLY=

HTTPONLY

WINDOWS

P%r%f

()[]<>:;.,@\"

libeay32.dll

ssleay32.dll

libssl32.dll

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey

SSL_CTX_use_certificate

SSL_CTX_use_certificate_file

SSL_CTX_use_certificate_chain_file

SSL_get_peer_certificate

SSL_CTX_set_default_passwd_cb

SSL_CTX_set_default_passwd_cb_userdata

SSL_CTX_check_private_key

X509_STORE_add_cert

X509_STORE_CTX_get_current_cert

i2d_DSAPrivateKey

d2i_DSAPrivateKey

d2i_PrivateKey

d2i_PrivateKey_bio

DES_set_key

_ossl_old_des_set_key

RSA_generate_key_ex

RSA_generate_key

RSA_check_key

i2d_PrivateKey_bio

i2d_RSAPrivateKey

d2i_RSAPrivateKey

i2d_RSAPublicKey

d2i_RSAPublicKey

i2d_PrivateKey

i2d_NETSCAPE_CERT_SEQUENCE

X509_get_default_cert_file

X509_get_default_cert_file_env

X509_set_pubkey

X509_REQ_set_pubkey

X509_PUBKEY_get

PEM_read_bio_RSAPrivateKey

PEM_read_bio_RSAPublicKey

PEM_read_bio_DSAPrivateKey

PEM_read_bio_PrivateKey

PEM_read_bio_NETSCAPE_CERT_SEQUENCE

PEM_write_bio_RSAPrivateKey

PEM_write_bio_RSAPublicKey

PEM_write_bio_DSAPrivateKey

PEM_write_bio_PrivateKey

PEM_write_bio_NETSCAPE_CERT_SEQUENCE

PEM_write_bio_PKCS8PrivateKey

EVP_CIPHER_CTX_set_key_length

EVP_CIPHER_CTX_rand_key

EVP_PKEY_type

EVP_PKEY_new

EVP_PKEY_free

EVP_PKEY_assign

EVP_CIPHER_key_length

EVP_CIPHER_CTX_key_length

EVP_PKEY_decrypt_old

EVP_PKEY_encrypt_old

EVP_PKEY_id

EVP_PKEY_base_id

EVP_PKEY_bits

EVP_PKEY_size

EVP_PKEY_set_type

EVP_PKEY_set_type_str

EVP_PKEY_get0

EVP_PKEY_set1_RSA

EVP_PKEY_get1_RSA

EVP_PKEY_set1_DSA

EVP_PKEY_get1_DSA

EVP_PKEY_set1_DH

EVP_PKEY_get1_DH

EVP_PKEY_set1_EC_KEY

EVP_PKEY_get1_EC_KEY

d2i_PublicKey

i2d_PublicKey

d2i_AutoPrivateKey

EVP_PKEY_copy_parameters

EVP_PKEY_missing_parameters

EVP_PKEY_save_parameters

EVP_PKEY_cmp_parameters

EVP_PKEY_cmp

EVP_PKEY_print_public

EVP_PKEY_print_private

EVP_PKEY_print_params

EVP_PKEY_get_default_digest_nid

PKCS5_PBE_keyivgen

PKCS5_v2_PBE_keyivgen

EVP_PKEY_asn1_get_count

EVP_PKEY_asn1_get0

EVP_PKEY_asn1_find

EVP_PKEY_asn1_find_str

EVP_PKEY_asn1_add0

EVP_PKEY_asn1_add_alias

EVP_PKEY_asn1_get0_info

EVP_PKEY_get0_asn1

EVP_PKEY_asn1_new

EVP_PKEY_asn1_copy

EVP_PKEY_asn1_free

EVP_PKEY_asn1_set_public

EVP_PKEY_asn1_set_private

EVP_PKEY_asn1_set_param

EVP_PKEY_asn1_set_free

EVP_PKEY_asn1_set_ctrl

EVP_PKEY_meth_find

EVP_PKEY_meth_new

EVP_PKEY_meth_get0_info

EVP_PKEY_meth_copy

EVP_PKEY_meth_free

EVP_PKEY_meth_add0

EVP_PKEY_CTX_new

EVP_PKEY_CTX_new_id

EVP_PKEY_CTX_dup

EVP_PKEY_CTX_free

EVP_PKEY_CTX_ctrl

EVP_PKEY_CTX_ctrl_str

EVP_PKEY_CTX_get_operation

EVP_PKEY_CTX_set0_keygen_info

EVP_PKEY_new_mac_key

EVP_PKEY_CTX_set_data

EVP_PKEY_CTX_get_data

EVP_PKEY_CTX_get0_pkey

EVP_PKEY_CTX_get0_peerkey

EVP_PKEY_CTX_set_app_data

EVP_PKEY_CTX_get_app_data

EVP_PKEY_sign_init

EVP_PKEY_sign

EVP_PKEY_verify_init

EVP_PKEY_verify

EVP_PKEY_verify_recover_init

EVP_PKEY_verify_recover

EVP_PKEY_encrypt_init

EVP_PKEY_encrypt

EVP_PKEY_decrypt_init

EVP_PKEY_decrypt

EVP_PKEY_derive_init

EVP_PKEY_derive_set_peer

EVP_PKEY_derive

EVP_PKEY_paramgen_init

EVP_PKEY_paramgen

EVP_PKEY_keygen_init

EVP_PKEY_keygen

EVP_PKEY_CTX_set_cb

EVP_PKEY_CTX_get_cb

EVP_PKEY_CTX_get_keygen_info

EVP_PKEY_meth_set_init

EVP_PKEY_meth_set_copy

EVP_PKEY_meth_set_cleanup

EVP_PKEY_meth_set_paramgen

EVP_PKEY_meth_set_keygen

EVP_PKEY_meth_set_sign

EVP_PKEY_meth_set_verify

EVP_PKEY_meth_set_verify_recover

EVP_PKEY_meth_set_signctx

EVP_PKEY_meth_set_verifyctx

EVP_PKEY_meth_set_encrypt

EVP_PKEY_meth_set_decrypt

EVP_PKEY_meth_set_derive

EVP_PKEY_meth_set_ctrl

sslvrfFailIfNoPeerCert

AMsg

TCallbackExEvent

TPasswordEvent

TPasswordEventEx

VPassword

Certificate

RootCertFile

CertFile

KeyFile

OnGetPasswordX

OnGetPasswordEx

EIdOSSLLoadingRootCertError

EIdOSSLLoadingCertError

EIdOSSLLoadingKeyError

Open SSL Support DLL Delphi and C  Builder interface

hXXp://VVV.indyproject.org/

1993 - 2014

secur32.dll

security.dll

TIdHTTPOption

hoNoParseMetaHTTPEquiv

IdHTTP

TIdHTTPOptions

TIdHTTPProtocolVersion

IdHTTPh

TIdHTTPOnRedirectEvent

TIdHTTPOnHeadersAvailable

TIdHTTPResponse

TIdHTTPRequest

TIdHTTPRequestL

TIdHTTPProtocolp

TIdCustomHTTP

TIdCustomHTTPp

TIdHTTPp

TIdHTTP

HTTPOptions

EIdHTTPProtocolException

application/x-www-form-urlencoded

HTTP/1.0 200 OK

HTTP/

!"#$%&*;<=>@[]^_`{|}

EInvalidGraphicOperation

USER32.DLL

comctl32.dll

uxtheme.dll

MAPI32.DLL

IE(AL("%s",4),"AL(\"%0:s\",3)","JK(\"%1:s\",\"%0:s\")")

JumpID("","%s")

TKeyEvent

TKeyPressEvent

HelpKeyword|

crSQLWait

%s (%s)

imm32.dll

AutoHotkeys

ssHotTrack

TWindowState

poProportional

TWMKey

KeyPreview

WindowState

OnKeyDown0kK

OnKeyPress

OnKeyUp

System\CurrentControlSet\Control\Keyboard Layouts\%.8x

vcltest3.dll

User32.dll

%s %s

(%s%s)

-%s%s

%s-%s

%s%s-

-%s %s

%s %s-

%s -%s

(%s- %s)

(%s %s)

TSQLTimeStampVariantType

TSQLTimeStampData

SqlTimSt

coInKey

IADStanAsyncOperation

ftParadoxOle

upWhereKeyOnly

pfInKey

ImportedConstraint

LookupKeyFields

KeyFields

TSQLTimeStampField

TSQLTimeStampFieldP

SQLTimeStamp

%s: %s

Uh.OO

%s.%s

supports

importNode

%s="%s"

Uh.uP

%s%s%s: %d%s%s

TADSQLTimeIntervalKind

uADStanSQLTimeInt

TADSQLTimeIntervalData

TADSQLTimeIntervalVariantType

Cannot perform operation on non initialized interval value

%u-%.2u

%u %.2u:%.2u:%.2u

%u:%.2u:%.2u

[%s] is not a valid interval

TADGUIxLoginHistoryStorage

TADGUIxLoginDialogEvent

IADGUIxLoginDialog

gcrSQLWait

IADGUIxAsyncExecuteDialog

rvCmdExecMode

rvCmdExecTimeout

rvDirectExecute

xoIfCmdsInactive

CmdExecMode

CmdExecTimeout

DirectExecute

%sP%uY

%sP%uM

%sP%uD

%sT%uH

%sT%uM

%sT%uS%uF

%sP%uY%uM

%sP%uDT%uH

%sP%uDT%uH%uM

%sP%uDT%uH%uM%uS%uF

%sT%uH%uM

%sT%uH%uM%uS%uF

%sT%uM%uS%uF

TADThreadMsgBase

TADThreadStartMsg

TADThreadStopMsg

TADThreadTerminateMsg

Failed to %s thread [%s].

Timeout [%d] expired

System error: %s

delphi32.exe

\StringFileInfo\%s\FileDescription

\StringFileInfo\%s\FileVersion

\StringFileInfo\%s\LegalCopyright

\StringFileInfo\%s\Comments

atPLSQLTable

InKey

rsImportingCurent

rsImportingOriginal

rsImportingProposed

TADDatSForeignKeyConstraint

ChildKeyConstraint

ParentKeyConstraint

yyyy-mm-dd hh:nn:ss.zzz

skExecute

MSSQL

MYSQL

SQLITE

POSTGRESQL

MySQL

SQLite

TADGUIxAsyncExecuteDialog

TADGUIxLoginDialog

Object factory for class %s%s is missing

Class [%s] does not implement interface [%s]

MSSQL2000

MSSQL2005

%s%s=%s%s%s%s

%s%s=%s%s

Password=*****

NewPassword

NewPassword=*****

ADConnectionDefs.ini

TADStanAsyncExecutor

ARow.Table.Name

TADIndexes

TADSQLTimeIntervalField

UpdateOptions.KeyFields

UpdateOptions.AutoIncFields

FSortView.SortingMechanism

LocateRecord(AKeyFields)

PSGetKeyFields

(SQLTimeInterval)

HistoryWithPassword

HistoryKey

LoginRetries

ChangeExpiredPassword

OnLogin`

OnChangePasswordU

TADConnectionLoginEvent

TADExecuteErrorEvent

LoginDialog

LoginPrompt

OnLogin

BeforeExecute

AfterExecute

TADLocalSQLDataSet

TADLocalSQLDataSetsP

TADLocalSQLDataSets

TADCustomLocalSQL

TADCustomLocalSQLP

Indexes

IndexesActive

LocalSQL

OnExecuteError

TADCustomCommand.Prepare

TADCustomCommand.Prepare - Exception

TADCustomCommand.Unprepare

TADCustomCommand.Unprepare - Exception

TADCustomCommand.InternalClose

TADCustomCommand.InternalClose - Exception

TADCustomCommand.InternalOpenFinished - Exception

TADCustomCommand.InternalOpenFinished

TADCustomCommand.InternalOpen

TADCustomCommand.InternalOpen - Exception

TADCustomCommand.InternalExecuteFinished - Exception

TADCustomCommand.InternalExecuteFinished

TADCustomCommand.InternalExecute

TADCustomCommand.InternalExecute - Exception

TADCustomCommand.FetchFinished - Exception

TADCustomCommand.FetchFinished

TADCustomCommand.Fetch

TADCustomCommand.Fetch - Exception

TADDefaultLocalSQLAdapter

Password must be not empty

Invalid password is specified or DB is corrupted

Invalid password is specified

Cipher: Password must be not empty

Cipher: failed to change the DB password

;.ud3

}(Vh.wd

Rh.xd

Ph.kd

~.SWj

~.CB3

ABSOLUTE,ACTION,ADA,ADD,ALL,ALLOCATE,ALTER,AND,ANY,ARE,AS,ASC,ASSERTION,AT,AUTHORIZATION,AVG,BEGIN,BETWEEN,BIT,BIT_LENGTH,BOTH,BY,CASCADE,CASCADED,CASE,CAST,CATALOG,CHAR,CHAR_LENGTH,CHARACTER,CHARACTER_LENGTH,CHECK,CLOSE,COALESCE,COLLATE,COLLATION,COLUMN,COMMIT,CONNECT,CONNECTION,CONSTRAINT,CONSTRAINTS,CONTINUE,CONVERT,CORRESPONDING,COUNT,CREATE,CROSS,CURRENT,CURRENT_DATE,CURRENT_TIME,CURRENT_TIMESTAMP,CURRENT_USER,CURSOR,DATE,DAY,DEALLOCATE,DEC,DECIMAL,DECLARE,DEFAULT,DEFERRABLE,DEFERRED,DELETE,DESC,DESCRIBE,DESCRIPTOR,DIAGNOSTICS,DISCONNECT,DISTINCT,DOMAIN,DOUBLE,DROP,ELSE,END,END-EXEC,ESCAPE,EXCEPT,EXCEPTION,EXEC,EXECUTE,EXISTS,EXTERNAL,EXTRACT,FALSE,FETCH,FIRST,FLOAT,FOR,FOREIGN,FORTRAN,FOUND,FROM,FULL,GET,GLOBAL,GO,GOTO,GRANT,GROUP,HAVING,HOUR,IDENTITY,IMMEDIATE,IN,INCLUDE,INDEX,INDICATOR,INITIALLY,INNER,INPUT,INSENSITIVE,INSERT,INT,INTEGER,INTERSECT,INTERVAL,INTO,IS,ISOLATION,JOIN,KEY,LANGUAGE,LAST,LEADING,LEFT,LEVEL,LIKE,LOCAL,LOWER,MATCH,MAX,MIN,MINUTE,MODULE,MONTH,NAMES,NATIONAL,NATURAL,NCHAR,NEXT,NO,NONE,NOT,NULL,NULLIF,NUMERIC,OCTET_LENGTH,OF,ON,ONLY,OPEN,OPTION,OR,ORDER,OUTER,OUTPUT,OVERLAPS,PAD,PARTIAL,PASCAL,PLI,POSITION,PRECISION,PREPARE,PRESERVE,PRIMARY,PRIOR,PRIVILEGES,PROCEDURE,PUBLIC,READ,REAL,REFERENCES,RELATIVE,RESTRICT,REVOKE,RIGHT,ROLLBACK,ROWSSCHEMA,SCROLL,SECOND,SECTION,SELECT,SESSION,SESSION_USER,SET,SIZE,SMALLINT,SOME,SPACE,SQL,SQLCA,SQLCODE,SQLERROR,SQLSTATE,SQLWARNING,SUBSTRING,SUM,SYSTEM_USER,TABLE,TEMPORARY,THEN,TIME,TIMESTAMP,TIMEZONE_HOUR,TIMEZONE_MINUTE,TO,TRAILING,TRANSACTION,TRANSLATE,TRANSLATION,TRIM,TRUE,UNION,UNIQUE,UNKNOWN,UPDATE,UPPER,USAGE,USER,USING,VALUE,VALUES,VARCHAR,VARYING,VIEW,WHEN,WHENEVER,WHERE,WITH,WORK,WRITE,YEAR,ZONE

#INDEXES

#PRIMARYKEYS

#PRIMARYKEYFIELDS

#FOREIGNKEYS

#FOREIGNKEYFIELDS

PKEY_NAME

FKEY_NAME

PKEY_CATALOG_NAME

PKEY_SCHEMA_NAME

PKEY_TABLE_NAME

PKEY_COLUMN_NAME

RESULTSET_KEY

RESULTSET_KEY =

ADDrivers.ini

Table Indexes (

Table PKeys (

Table PKey Fields (

Table FKeys (

Table FKey Fields (

foreign key name

ESQLiteNativeException

TSQLiteExtension

TSQLiteExtensionManagerl

TSQLiteValue

TSQLiteFuncVar

TSQLiteInput

TSQLiteInputs

TSQLiteOutputh

TSQLiteFunction

TSQLiteFunctionData@

TSQLiteExpressionFunction

uADPhysSQLiteWrapper

TSQLiteExpressionFunctionData

sqlite3_libversion

sqlite3_libversion_number

sqlite3_compileoption_used

sqlite3_compileoption_get

sqlite3_initialize

sqlite3_shutdown

sqlite3_close

sqlite3_errcode

sqlite3_errmsg

sqlite3_extended_result_codes

sqlite3_open

sqlite3_open_v2

sqlite3_key

sqlite3_rekey

sqlite3_trace

sqlite3_profile

sqlite3_busy_timeout

sqlite3_get_autocommit

sqlite3_set_authorizer

sqlite3_update_hook

sqlite3_limit

sqlite3_changes

sqlite3_total_changes

sqlite3_interrupt

sqlite3_last_insert_rowid

sqlite3_enable_shared_cache

sqlite3_release_memory

sqlite3_soft_heap_limit

sqlite3_status

sqlite3_malloc

sqlite3_memory_used

sqlite3_memory_highwater

sqlite3_prepare

sqlite3_finalize

sqlite3_step

sqlite3_reset

sqlite3_column_count

sqlite3_column_type

sqlite3_column_name

sqlite3_column_database_name

sqlite3_column_table_name

sqlite3_column_origin_name

sqlite3_column_decltype

sqlite3_column_blob

sqlite3_column_double

sqlite3_column_int64

sqlite3_column_text

sqlite3_column_bytes

sqlite3_clear_bindings

sqlite3_bind_parameter_count

sqlite3_bind_parameter_index

sqlite3_bind_parameter_name

sqlite3_bind_blob

sqlite3_bind_double

sqlite3_bind_int64

sqlite3_bind_null

sqlite3_bind_text

sqlite3_bind_value

sqlite3_bind_zeroblob

sqlite3_value_type

sqlite3_value_blob

sqlite3_value_bytes

sqlite3_value_double

sqlite3_value_int64

sqlite3_value_text

sqlite3_result_blob

sqlite3_result_double

sqlite3_result_error

sqlite3_result_error_code

sqlite3_result_int64

sqlite3_result_null

sqlite3_result_text

sqlite3_result_zeroblob

sqlite3_create_collation

sqlite3_create_function

sqlite3_user_data

sqlite3_enable_load_extension

sqlite3_load_extension

sqlite3_free

sqlite3_table_column_metadata

sqlite3_progress_handler

sqlite3_declare_vtab

sqlite3_create_module

sqlite3_create_module_v2

sqlite3_vfs_find

sqlite3_vfs_register

sqlite3_vfs_unregister

sqlite3_backup_init

sqlite3_backup_step

sqlite3_backup_finish

sqlite3_backup_remaining

sqlite3_backup_pagecount

sqlite3_wal_hook

sqlite3_wal_autocheckpoint

sqlite3_wal_checkpoint

sqlite3_rtree_geometry_callback

sqlite3_blob_open

sqlite3_blob_close

sqlite3_blob_bytes

sqlite3_blob_read

sqlite3_blob_write

sqlite3_vtab_config

sqlite3_vtab_on_conflict

SQLITE_INTEGER

SQLITE_FLOAT

SQLITE_TEXT

SQLITE_BLOB

SQLITE_NULL

PRIMARY KEY must be unique

8.unj

sqlite3

sqlite_version

SQLiteNativeException

DriverID=SQLite

shell.application

1.0.4

\\.\Scsi%d:

#!V!W!"!&!r%!%#%%%'%)%c%e%g%C%<!"%$%&%(%*% %-%/%1%3%5%7%9%;$=%?%A%D%F%H%J%K%L%M%N%O%R%U%X%[%^%_%`%a%b%d%f%h%i%j%k%l%m%o%s% !,!

P%S%V%Y%\%

 8$4,8$4

CREATE TABLE sqlite_master(

sql text

CREATE TEMP TABLE sqlite_temp_master(

REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLYHerF

3.7.15

SQLITE_

d-d-d d:d:d

d-d-d

failed to allocate %u bytes of memory

failed memory resize %u to %u bytes

922337203685477580

API call with %s database connection pointer

RowKey

GetProcessHeap

OsError 0x%x (%u)

os_win.c:%d: (%d) %s(%s) - %s

delayed %dms for lock/sharing conflict

%s-shm

%s\etilqs_

%s\%s

Recovered %d frames from WAL file %s

cannot limit WAL size: %s

SQLite format 3

invalid page number %d

2nd reference to page %d

Failed to read ptrmap key=%d

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

%d of %d pages missing from overflow list starting at %d

failed to get page %d

freelist leaf count too big on page %d

Page %d:

unable to get the page. error code=%d

btreeInitPage() returns error code %d

On tree page %d cell %d:

On page %d at right child:

Corruption detected in cell %d on page %d

Multiple uses for byte %d of page %d

Fragmentation of %d bytes reported as %d on page %d

Page %d is never used

Pointer map page %d is referenced

Outstanding page count goes from %d to %d during this analysis

unknown database %s

keyinfo(%d

%s(%d)

%s-mjXXXXXX9XXz

MJ delete: %s

MJ collide: %s

-mjX9X

foreign key constraint failed

unable to use function %s in the requested context

bind on a busy prepared statement: [%s]

zeroblob(%d)

abort at %d in [%s]: %s

constraint failed at %d in [%s]

cannot open savepoint - SQL statements in progress

no such savepoint: %s

cannot release savepoint - SQL statements in progress

cannot commit transaction - SQL statements in progress

sqlite_temp_master

sqlite_master

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

cannot change %s wal mode from within a transaction

database table is locked: %s

statement aborts at %d: [%s] %s

cannot open value of type %s

cannot open virtual table: %s

cannot open view: %s

no such column: "%s"

foreign key

indexed

cannot open %s column for writing

misuse of aliased aggregate %s

%s: %s.%s.%s

%s: %s.%s

not authorized to use function: %s

%r %s BY term out of range - should be between 1 and %d

too many terms in %s BY clause

Expression tree is too large (maximum depth %d)

variable number must be between ?1 and ?%d

too many SQL variables

too many columns in %s

EXECUTE %s%s SUBQUERY %d

misuse of aggregate: %s()

%.*s"%w"%s

%s%.*s"%w"

sqlite_rename_table

sqlite_rename_trigger

sqlite_rename_parent

%s OR name=%Q

type='trigger' AND (%s)

sqlite_

table %s may not be altered

there is already another table or index with this name: %s

view %s may not be altered

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

sqlite_sequence

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

Cannot add a PRIMARY KEY column

UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q

sqlite_altertab_%s

sqlite_stat1

sqlite_stat3

CREATE TABLE %Q.%s(%s)

DELETE FROM %Q.%s WHERE %s=%Q

SELECT idx,count(*) FROM %Q.sqlite_stat3 GROUP BY idx

SELECT idx,neq,nlt,ndlt,sample FROM %Q.sqlite_stat3

SELECT tbl,idx,stat FROM %Q.sqlite_stat1

invalid name: "%s"

too many attached databases - max %d

database %s is already in use

Invalid key value

unable to open database: %s

no such database: %s

cannot detach database %s

database %s is locked

sqlite_detach

sqlite_attach

%s %T cannot reference objects in database %s

access to %s.%s.%s is prohibited

access to %s.%s is prohibited

object name reserved for internal use: %s

there is already an index named %s

too many columns on %s

duplicate column name: %s

default value of column [%s] is not constant

table "%s" has more than one primary key

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

CREATE %s %.*s

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

CREATE TABLE %Q.sqlite_sequence(name,seq)

view %s is circularly defined

UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d

sqlite_stat%d

DELETE FROM %Q.sqlite_sequence WHERE name=%Q

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

sqlite_stat

table %s may not be dropped

use DROP TABLE to delete table %s

use DROP VIEW to delete view %s

foreign key on %s should reference only one column of table %T

number of columns in foreign key does not match the number of columns in the referenced table

unknown column "%s" in foreign key definition

indexed columns are not unique

table %s may not be indexed

views may not be indexed

virtual tables may not be indexed

there is already a table named %s

index %s already exists

sqlite_autoindex_%s_%d

table %s has no column named %s

CREATE%s INDEX %.*s

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

no such index: %S

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

a JOIN clause is required before %s

unable to identify the object to be reindexed

no such collation sequence: %s

table %s may not be modified

cannot modify %s because it is a view

sqlite_source_id

sqlite_log

sqlite_compileoption_used

sqlite_compileoption_get

foreign key mismatch

table %S has %d columns but %d values were supplied

%d values for %d columns

table %S has no column named %s

%s.%s may not be NULL

constraint %s failed

automatic extension loading failed: %s

foreign_keys

foreign_key_list

*** in database %s ***

unsupported encoding: %s

rekey

hexkey

hexrekey

malformed database schema (%s)

%s - %s

unsupported file format

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

database schema is locked: %s

unknown or unsupported join type: %T %T%s%T

RIGHT and FULL OUTER JOINs are not currently supported

a NATURAL join may not have an ON or USING clause

cannot have both ON and USING clauses in the same join

cannot join using column %s - column not present in both tables

USE TEMP B-TREE FOR %s

COMPOUND SUBQUERIES %d AND %d %s(%s)

%s:%d

ORDER BY clause should come after %s not before

LIMIT clause should come after %s not before

SELECTs to the left and right of %s do not have the same number of result columns

no such index: %s

sqlite_subquery_%p_

no such table: %s

SCAN TABLE %s %s%s(~%d rows)

sqlite3_get_table() called with two or more incompatible queries

cannot create %s trigger on view: %S

cannot create INSTEAD OF trigger on table: %S

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

no such trigger: %S

-- TRIGGER %s

no such column: %s

cannot VACUUM - SQL statements in progress

PRAGMA vacuum_db.synchronous=OFF

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d

vtable constructor failed: %s

vtable constructor did not declare schema: %s

no such module: %s

table %s: xBestIndex returned an invalid plan

%s TABLE %s

%s AS %s

%s USING %s%sINDEX%s%s%s

%s USING INTEGER PRIMARY KEY

%s (rowid=?)

%s (rowid>? AND rowid<?)

%s (rowid>?)

%s (rowid<?)

%s VIRTUAL TABLE INDEX %d:%s

%s (~%lld rows)

at most %d tables in a join

cannot use index: %s

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

SQL logic error or missing database

unknown operation

large file support is disabled

unknown database: %s

no such %s mode: %s

%s mode not allowed: %s

no such vfs: %s

database corruption at line %d of [%.10s]

misuse at line %d of [%.10s]

cannot open file at line %d of [%.10s]

no such table column: %s.%s

CREATE TABLE x(%s %Q HIDDEN, docid HIDDEN, %Q HIDDEN)

CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);

docid INTEGER PRIMARY KEY

%z, 'c%d%q'

CREATE TABLE %Q.'%q_content'(%s)

CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);

CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));

CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);

PRAGMA %Q.page_size

,%s(x.'c%d%q')

FROM '%q'.'%q%s' AS x

,%s(?)

unrecognized parameter: %s

unrecognized matchinfo: %s

unrecognized order: %s

error parsing prefix parameter: %s

missing %s parameter in fts4 constructor

SELECT %s WHERE rowid = ?

malformed MATCH expression: [%s]

SELECT %s ORDER BY rowid %s

illegal first argument to %s

porter

unknown tokenizer: %s

SELECT %s WHERE rowid=?

INSERT INTO %Q.'%q_content' VALUES(%s)

%s_segments

SELECT %s

unrecognized matchinfo request: %c

%d %d %d %d

CREATE TABLE "%w"."%w_node"(nodeno INTEGER PRIMARY KEY, data BLOB);CREATE TABLE "%w"."%w_rowid"(rowid INTEGER PRIMARY KEY, nodeno INTEGER);CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY, parentnode INTEGER);INSERT INTO '%q'.'%q_node' VALUES(1, zeroblob(%d))

CREATE TABLE x(%s

%s, %s

%s {%s}

deflate 1.0.4 Copyright 1995-1996 Jean-loup Gailly

inflate 1.0.4 Copyright 1995-1996 Mark Adler

?456789:;<=

!"#$%&'()* ,-./0123

10000000000000000010

user32.dll

GetKeyboardType

advapi32.dll

RegOpenKeyExA

RegCloseKey

RegQueryInfoKeyA

RegOpenKeyExW

RegFlushKey

RegEnumKeyExA

RegDeleteKeyA

RegCreateKeyExA

GetWindowsDirectoryA

GetCPInfo

version.dll

gdi32.dll

SetViewportOrgEx

UnhookWindowsHookEx

SetWindowsHookExA

MsgWaitForMultipleObjects

MapVirtualKeyA

LoadKeyboardLayoutA

GetKeyboardState

GetKeyboardLayoutList

GetKeyboardLayout

GetKeyState

GetKeyNameTextA

EnumWindows

EnumThreadWindows

ActivateKeyboardLayout

shell32.dll

ShellExecuteW

EnumChildWindows

d3d9.dll

Advapi32.dll

6#6'6 6/6

5#5'5 5/53575

=#='= =/=7=

5 5$5(5,505

7 7$7(7<7^7

? ?$?(?,?0?4?8?<?

="=&=*=.=2=6=:=>=

7 7$7(7,7074787

0!0%0)0-0105090=0

3)4.484^4

7 7$7(7,7074787<7`7

? ?$?(?,?0?4?8?<?@?`?

7!7&7,737

5!5X5X5`5d5h5l5p5t5x5|5

9#9'9 9/93979;9

0 1$1,101

9 :;:`:~:

6!6 6?6|6

7-8J8}8

1 1$1(1,1014181<1@1

4 4$4(4,4044484<4\4}4

2,2

< <$<(<,<0<4<8<<<

;!;%;);-;1;5;9;=;

9 9$9(9,90949

1"1&1*1.12161:1

9—9x:

2 2$2(2,2

01

7!7)89839

?!?%?)?6?

:$:1:6:$=#>

43474;4?4\4~4

2-3U3}3

41464`4|4

0 0$0(0,00040

9!9%9)9-919

88Z8v8

2%3u3

*0.02060:0>0

607>7!8:8

: :$:(:,:0:4:8: <8<

'1 1/13171;1

4 4$4(4,40444)6

2&282_2~2{3

="='=3=>=]=

= =$=(=,=

;$;,;0;4;8;<;@;

/#URLSTR

/#URLTBL

/#WINDOWS

/$WWKeywordLinks/

/$WWKeywordLinks/BTree

/$WWKeywordLinks/Data

/$WWKeywordLinks/Map

/$WWKeywordLinks/Property

/compile_date.htm

/IPv6.hhc

/IPv6P.hhk

/sag_IP_v6_add_bibliography.htm

/sag_IP_v6_add_standards.htm

/sag_IP_v6_add_topnode.htm

/sag_IP_v6_add_Utils.htm

/sag_ip_v6_conf_ia.htm

/sag_ip_v6_conf_manual.htm

/sag_IP_v6_imp_aa.htm

/sag_ip_v6_imp_addr1.htm

/sag_ip_v6_imp_addr2.htm

/sag_ip_v6_imp_addr3.htm

/sag_ip_v6_imp_addr4.htm

/sag_ip_v6_imp_addr5.htm

/sag_ip_v6_imp_addr6.htm

/sag_ip_v6_imp_addr7.htm

/sag_IP_v6_imp_addr_node.htm

/sag_IP_v6_imp_addr_topnode.htm

/sag_ip_v6_imp_conf1.htm

/sag_ip_v6_imp_conf2.htm

/sag_ip_v6_imp_conf3.htm

/sag_ip_v6_imp_conf4.htm

/sag_ip_v6_imp_conf5.htm

/sag_ip_v6_imp_conf6.htm

/sag_IP_v6_imp_conf_node.htm

/sag_IP_v6_imp_config_items.htm

/sag_IP_v6_imp_config_meth.htm

/sag_ip_v6_imp_lab_inf.htm

/sag_IP_v6_imp_lab_node.htm

/sag_ip_v6_imp_lab_tasks.htm

/sag_IP_v6_imp_routing.htm

f /sag_IP_v6_imp_routing_table.htm

/sag_IP_v6_imp_topnode.htm

/sag_IP_v6_ovr_background.htm

/sag_IP_v6_ovr_features.htm

/sag_IP_v6_ovr_secfeatures.htm

/sag_IP_v6_ovr_topnode.htm

/sag_IP_v6_ovr_whatis.htm

/sag_ip_v6_pro_conf_node.htm

/sag_ip_v6_pro_diag_ifconf.htm

/sag_ip_v6_pro_diag_nc.htm

/sag_ip_v6_pro_diag_ping6.htm

"/sag_ip_v6_pro_diag_ping6_conn.htm

/sag_ip_v6_pro_diag_rc.htm

/sag_ip_v6_pro_diag_tracert.htm

/sag_IP_v6_pro_DiagNode.htm

/sag_ip_v6_pro_inst.htm

/sag_ip_v6_pro_instnode.htm

/sag_ip_v6_pro_remove.htm

/sag_IP_v6_pro_RouteNode.htm

/sag_ip_v6_pro_rt_add.htm

/sag_ip_v6_pro_rt_enable.htm

/sag_ip_v6_pro_rt_remove.htm

/sag_ip_v6_pro_rt_view.htm

/sag_IP_v6_tro_topnode.htm

/sag_IP_v6_und_core_topnode.htm

/sag_IP_v6_und_icmp.htm

/sag_ip_v6_und_ie.htm

/sag_IP_v6_und_ip.htm

/sag_IP_v6_und_MLD.htm

/sag_IP_v6_und_ND.htm

/sag_IP_v6_und_netapps.htm

/sag_IP_v6_und_nr.htm

/sag_IP_v6_und_topnode.htm

/sag_IP_v6_und_winsock.htm

/sag_IP_v6checklist.htm

/sag_IP_v6concepts.htm

/sag_IP_v6procedures.htm

/sag_IP_v6topnode.htm

<&_::DataSpace/Storage/MSCompressed/Transform/{7FC28940-9D31-11D0-9B27-00A0C91E9C7C}/InstanceData/

i::DataSpace/Storage/MSCompressed/Transform/{7FC28940-9D31-11D0-9B27-00A0C91E9C7C}/InstanceData/ResetTable

HHA Version 4.74.8702

MS-ITS:IPv6.chm::/sag_IP_v6topnode.htm

%-Ub

a}.SU

mFf.XUs

F:\pV

%D=]WP

-YdWp}H

u|%dU)

@-t}Y!

n.yJkZ_

[.eAk

3.MNS!W

hE.mI

&si%d

RvjY].Hy

333333333333333333

33333833

3333339

3333333333333338

:*"*"$3338

3333333

33333333

33333333333

3333333333338

33338?383

333333333333

:*3:"$3338

333333333333333

.rsrc

.FF=6

ÝL\

(%UV3

m`%C%

W.ik"

"%dpd

B.dX\

K.MsiNOSVW4M

_%xCr

(,P$.dd

ag[.FI

>S<%d

u<.hl#

.pc-p11

ySV%sy

4.VX9o

.EKS[

6.JN,

'vOp%DQV

GVa.Za

%b%CT

?4.bX

a,%fMi

FSg.jP

.IX9n[

?VSQ

([email protected]]

?%Cp`7

Hx

.BOFW

.yI~zRPSN

sŸu

\.LPT\

,X):

_CRTjECUAG

1.0.1g 7Q9

c%FIP

&'()* ,-./

key?iGjivj

.pp@0

>.Dh$

[	u?%

%'%1$=%C%K%O%s%

&'&)&5&;&?

.%.-.3.7.9.?.W.[.o.y.

3Ó/353A3G3[3_3g3k3

C%C'C3C7C9COCWCiC

BUILTIN_KEYp

-Key: 26my

.pkmg`

7JOING8

.VnbC

WG|s.nN

_keyf

~/faq.Dml

DO@[email protected]

.djosu'

SShKm%'

22####2222

lmO`.Tn

tq.FC)

H.Xl?g

y.zF.

%2sBRO

?o.zmT

62%8sRq

@!,9\^00

E>O%s?

d.kek

.dBhP^p

&Az6T}b

[[%s]]

HTTP/

s<.na9

6144819

u [.WiG

l}C.we

R.QA@

.QEht

<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>

<assemblyIdentity type="win32" name="Microsoft.VC90.CRT" version="9.0.30729.4148" processorArchitecture="x86" publicKeyToken="1fc8b3b9a1e18e3b"></assemblyIdentity>

KERNEL32.DLL

ADVAPI32.dll

CRYPT32.dll

GDI32.dll

MSVCR90.dll

USER32.dll

WS2_32.dll

ReportEventA

CertOpenStore

LIBEAY32.dll

AES_set_decrypt_key

AES_set_encrypt_key

AES_unwrap_key

AES_wrap_key

ASN1_PCTX_get_cert_flags

ASN1_PCTX_set_cert_flags

AUTHORITY_KEYID_free

AUTHORITY_KEYID_it

AUTHORITY_KEYID_new

BF_set_key

BIO_get_port

BIO_set_tcp_ndelay

CAST_set_key

CERTIFICATEPOLICIES_free

CERTIFICATEPOLICIES_it

CERTIFICATEPOLICIES_new

CMS_EncryptedData_set1_key

CMS_RecipientInfo_ktri_cert_cmp

CMS_RecipientInfo_set0_key

CMS_RecipientInfo_set0_password

CMS_RecipientInfo_set0_pkey

CMS_SignerInfo_cert_cmp

CMS_SignerInfo_set1_signer_cert

CMS_add0_CertificateChoices

CMS_add0_cert

CMS_add0_recipient_key

CMS_add0_recipient_password

CMS_add1_cert

CMS_add1_recipient_cert

CMS_decrypt_set1_key

CMS_decrypt_set1_password

CMS_decrypt_set1_pkey

CMS_get1_certs

CMS_set1_signers_certs

Camellia_set_key

DES_check_key_parity

DES_is_weak_key

DES_key_sched

DES_random_key

DES_read_2passwords

DES_read_password

DES_set_key_checked

DES_set_key_unchecked

DES_string_to_2keys

DES_string_to_key

DH_check_pub_key

DH_compute_key

DH_generate_key

DSA_generate_key

ECDH_compute_key

EC_KEY_check_key

EC_KEY_clear_flags

EC_KEY_copy

EC_KEY_dup

EC_KEY_free

EC_KEY_generate_key

EC_KEY_get0_group

EC_KEY_get0_private_key

EC_KEY_get0_public_key

EC_KEY_get_conv_form

EC_KEY_get_enc_flags

EC_KEY_get_flags

EC_KEY_get_key_method_data

EC_KEY_insert_key_method_data

EC_KEY_new

EC_KEY_new_by_curve_name

EC_KEY_precompute_mult

EC_KEY_print

EC_KEY_print_fp

EC_KEY_set_asn1_flag

EC_KEY_set_conv_form

EC_KEY_set_enc_flags

EC_KEY_set_flags

EC_KEY_set_group

EC_KEY_set_private_key

EC_KEY_set_public_key

EC_KEY_set_public_key_affine_coordinates

EC_KEY_up_ref

ENGINE_cmd_is_executable

ENGINE_ctrl_cmd

ENGINE_ctrl_cmd_string

ENGINE_get_cmd_defns

ENGINE_get_load_privkey_function

ENGINE_get_load_pubkey_function

ENGINE_get_pkey_asn1_meth

ENGINE_get_pkey_asn1_meth_engine

ENGINE_get_pkey_asn1_meth_str

ENGINE_get_pkey_asn1_meths

ENGINE_get_pkey_meth

ENGINE_get_pkey_meth_engine

ENGINE_get_pkey_meths

ENGINE_get_ssl_client_cert_function

ENGINE_load_private_key

ENGINE_load_public_key

ENGINE_load_ssl_client_cert

ENGINE_pkey_asn1_find_str

ENGINE_register_all_pkey_asn1_meths

ENGINE_register_all_pkey_meths

ENGINE_register_pkey_asn1_meths

ENGINE_register_pkey_meths

ENGINE_set_cmd_defns

ENGINE_set_default_pkey_asn1_meths

ENGINE_set_default_pkey_meths

ENGINE_set_load_privkey_function

ENGINE_set_load_pubkey_function

ENGINE_set_load_ssl_client_cert_function

ENGINE_set_pkey_asn1_meths

ENGINE_set_pkey_meths

ENGINE_unregister_pkey_asn1_meths

ENGINE_unregister_pkey_meths

ESS_CERT_ID_dup

ESS_CERT_ID_free

ESS_CERT_ID_new

ESS_SIGNING_CERT_dup

ESS_SIGNING_CERT_free

ESS_SIGNING_CERT_new

EVP_BytesToKey

EVP_MD_pkey_type

EVP_PKCS82PKEY

EVP_PKEY2PKCS8

EVP_PKEY2PKCS8_broken

EVP_PKEY_add1_attr

EVP_PKEY_add1_attr_by_NID

EVP_PKEY_add1_attr_by_OBJ

EVP_PKEY_add1_attr_by_txt

EVP_PKEY_delete_attr

EVP_PKEY_get_attr

EVP_PKEY_get_attr_by_NID

EVP_PKEY_get_attr_by_OBJ

EVP_PKEY_get_attr_count

EXTENDED_KEY_USAGE_free

EXTENDED_KEY_USAGE_it

EXTENDED_KEY_USAGE_new

JPAKE_get_shared_key

KRB5_ENCKEY_free

KRB5_ENCKEY_it

KRB5_ENCKEY_new

NETSCAPE_CERT_SEQUENCE_free

NETSCAPE_CERT_SEQUENCE_it

NETSCAPE_CERT_SEQUENCE_new

NETSCAPE_SPKI_get_pubkey

NETSCAPE_SPKI_set_pubkey

OCSP_CERTID_dup

OCSP_CERTID_free

OCSP_CERTID_it

OCSP_CERTID_new

OCSP_CERTSTATUS_free

OCSP_CERTSTATUS_it

OCSP_CERTSTATUS_new

OCSP_basic_add1_cert

OCSP_cert_id_new

OCSP_cert_status_str

OCSP_cert_to_id

OCSP_parse_url

OCSP_request_add1_cert

OCSP_url_svcloc_new

PEM_read_DSAPrivateKey

PEM_read_DSA_PUBKEY

PEM_read_ECPrivateKey

PEM_read_EC_PUBKEY

PEM_read_NETSCAPE_CERT_SEQUENCE

PEM_read_PKCS8_PRIV_KEY_INFO

PEM_read_PUBKEY

PEM_read_PrivateKey

PEM_read_RSAPrivateKey

PEM_read_RSAPublicKey

PEM_read_RSA_PUBKEY

PEM_read_X509_CERT_PAIR

PEM_read_bio_DSA_PUBKEY

PEM_read_bio_ECPrivateKey

PEM_read_bio_EC_PUBKEY

PEM_read_bio_PKCS8_PRIV_KEY_INFO

PEM_read_bio_PUBKEY

PEM_read_bio_RSA_PUBKEY

PEM_read_bio_X509_CERT_PAIR

PEM_write_DSAPrivateKey

PEM_write_DSA_PUBKEY

PEM_write_ECPrivateKey

PEM_write_EC_PUBKEY

PEM_write_NETSCAPE_CERT_SEQUENCE

PEM_write_PKCS8PrivateKey

PEM_write_PKCS8PrivateKey_nid

PEM_write_PKCS8_PRIV_KEY_INFO

PEM_write_PUBKEY

PEM_write_PrivateKey

PEM_write_RSAPrivateKey

PEM_write_RSAPublicKey

PEM_write_RSA_PUBKEY

PEM_write_X509_CERT_PAIR

PEM_write_bio_DSA_PUBKEY

PEM_write_bio_ECPrivateKey

PEM_write_bio_EC_PUBKEY

PEM_write_bio_PKCS8PrivateKey_nid

PEM_write_bio_PKCS8_PRIV_KEY_INFO

PEM_write_bio_PUBKEY

PEM_write_bio_RSA_PUBKEY

PEM_write_bio_X509_CERT_PAIR

PKCS12_MAKE_KEYBAG

PKCS12_MAKE_SHKEYBAG

PKCS12_PBE_keyivgen

PKCS12_add_cert

PKCS12_add_key

PKCS12_add_localkeyid

PKCS12_certbag2x509

PKCS12_certbag2x509crl

PKCS12_decrypt_skey

PKCS12_key_gen_asc

PKCS12_key_gen_uni

PKCS12_newpass

PKCS12_x5092certbag

PKCS12_x509crl2certbag

PKCS7_add_certificate

PKCS7_cert_from_signer_info

PKCS8_PRIV_KEY_INFO_free

PKCS8_PRIV_KEY_INFO_it

PKCS8_PRIV_KEY_INFO_new

PKCS8_add_keyusage

PKCS8_pkey_get0

PKCS8_pkey_set0

PKEY_USAGE_PERIOD_free

PKEY_USAGE_PERIOD_it

PKEY_USAGE_PERIOD_new

PROXY_CERT_INFO_EXTENSION_free

PROXY_CERT_INFO_EXTENSION_it

PROXY_CERT_INFO_EXTENSION_new

RC2_set_key

RC4_set_key

RSAPrivateKey_dup

RSAPrivateKey_it

RSAPublicKey_dup

RSAPublicKey_it

SEED_set_key

SRP_Calc_client_key

SRP_Calc_server_key

TS_CONF_load_cert

TS_CONF_load_certs

TS_CONF_load_key

TS_CONF_set_certs

TS_CONF_set_ess_cert_id_chain

TS_CONF_set_signer_cert

TS_CONF_set_signer_key

TS_MSG_IMPRINT_dup

TS_MSG_IMPRINT_free

TS_MSG_IMPRINT_get_algo

TS_MSG_IMPRINT_get_msg

TS_MSG_IMPRINT_new

TS_MSG_IMPRINT_print_bio

TS_MSG_IMPRINT_set_algo

TS_MSG_IMPRINT_set_msg

TS_REQ_get_cert_req

TS_REQ_get_msg_imprint

TS_REQ_set_cert_req

TS_REQ_set_msg_imprint

TS_RESP_CTX_set_certs

TS_RESP_CTX_set_signer_cert

TS_RESP_CTX_set_signer_key

TS_TST_INFO_get_msg_imprint

TS_TST_INFO_set_msg_imprint

X509_CERT_AUX_free

X509_CERT_AUX_it

X509_CERT_AUX_new

X509_CERT_AUX_print

X509_CERT_PAIR_free

X509_CERT_PAIR_it

X509_CERT_PAIR_new

X509_CRL_get0_by_cert

X509_PKEY_free

X509_PKEY_new

X509_PUBKEY_free

X509_PUBKEY_get0_param

X509_PUBKEY_it

X509_PUBKEY_new

X509_PUBKEY_set

X509_PUBKEY_set0_param

X509_REQ_check_private_key

X509_REQ_get_pubkey

X509_STORE_CTX_set_cert

X509_STORE_get1_certs

X509_certificate_type

X509_check_private_key

X509_get0_pubkey_bitstr

X509_get_default_cert_area

X509_get_default_cert_dir

X509_get_default_cert_dir_env

X509_get_pubkey

X509_get_pubkey_parameters

X509_keyid_get0

X509_keyid_set1

X509_load_cert_crl_file

X509_load_cert_file

X509_pubkey_digest

X509_supported_extension

X509_verify_cert

X509_verify_cert_error_string

_ossl_old_des_is_weak_key

_ossl_old_des_key_sched

_ossl_old_des_random_key

_ossl_old_des_read_2passwords

_ossl_old_des_read_password

_ossl_old_des_string_to_2keys

_ossl_old_des_string_to_key

_shadow_DES_check_key

aesni_set_decrypt_key

aesni_set_encrypt_key

b2i_PrivateKey

b2i_PrivateKey_bio

b2i_PublicKey

b2i_PublicKey_bio

d2i_AUTHORITY_KEYID

d2i_CERTIFICATEPOLICIES

d2i_DSAPrivateKey_bio

d2i_DSAPrivateKey_fp

d2i_DSAPublicKey

d2i_DSA_PUBKEY

d2i_DSA_PUBKEY_bio

d2i_DSA_PUBKEY_fp

d2i_ECPrivateKey

d2i_ECPrivateKey_bio

d2i_ECPrivateKey_fp

d2i_EC_PUBKEY

d2i_EC_PUBKEY_bio

d2i_EC_PUBKEY_fp

d2i_ESS_CERT_ID

d2i_ESS_SIGNING_CERT

d2i_EXTENDED_KEY_USAGE

d2i_KRB5_ENCKEY

d2i_NETSCAPE_CERT_SEQUENCE

d2i_OCSP_CERTID

d2i_OCSP_CERTSTATUS

d2i_PKCS8PrivateKey_bio

d2i_PKCS8PrivateKey_fp

d2i_PKCS8_PRIV_KEY_INFO

d2i_PKCS8_PRIV_KEY_INFO_bio

d2i_PKCS8_PRIV_KEY_INFO_fp

d2i_PKEY_USAGE_PERIOD

d2i_PROXY_CERT_INFO_EXTENSION

d2i_PUBKEY

d2i_PUBKEY_bio

d2i_PUBKEY_fp

d2i_PrivateKey_fp

d2i_RSAPrivateKey_bio

d2i_RSAPrivateKey_fp

d2i_RSAPublicKey_bio

d2i_RSAPublicKey_fp

d2i_RSA_PUBKEY

d2i_RSA_PUBKEY_bio

d2i_RSA_PUBKEY_fp

d2i_TS_MSG_IMPRINT

d2i_TS_MSG_IMPRINT_bio

d2i_TS_MSG_IMPRINT_fp

d2i_X509_CERT_AUX

d2i_X509_CERT_PAIR

d2i_X509_PKEY

d2i_X509_PUBKEY

i2b_PrivateKey_bio

i2b_PublicKey_bio

i2d_AUTHORITY_KEYID

i2d_CERTIFICATEPOLICIES

i2d_DSAPrivateKey_bio

i2d_DSAPrivateKey_fp

i2d_DSAPublicKey

i2d_DSA_PUBKEY

i2d_DSA_PUBKEY_bio

i2d_DSA_PUBKEY_fp

i2d_ECPrivateKey

i2d_ECPrivateKey_bio

i2d_ECPrivateKey_fp

i2d_EC_PUBKEY

i2d_EC_PUBKEY_bio

i2d_EC_PUBKEY_fp

i2d_ESS_CERT_ID

i2d_ESS_SIGNING_CERT

i2d_EXTENDED_KEY_USAGE

i2d_KRB5_ENCKEY

i2d_OCSP_CERTID

i2d_OCSP_CERTSTATUS

i2d_PKCS8PrivateKeyInfo_bio

i2d_PKCS8PrivateKeyInfo_fp

i2d_PKCS8PrivateKey_bio

i2d_PKCS8PrivateKey_fp

i2d_PKCS8PrivateKey_nid_bio

i2d_PKCS8PrivateKey_nid_fp

i2d_PKCS8_PRIV_KEY_INFO

i2d_PKCS8_PRIV_KEY_INFO_bio

i2d_PKCS8_PRIV_KEY_INFO_fp

i2d_PKEY_USAGE_PERIOD

i2d_PROXY_CERT_INFO_EXTENSION

i2d_PUBKEY

i2d_PUBKEY_bio

i2d_PUBKEY_fp

i2d_PrivateKey_fp

i2d_RSAPrivateKey_bio

i2d_RSAPrivateKey_fp

i2d_RSAPublicKey_bio

i2d_RSAPublicKey_fp

i2d_RSA_PUBKEY

i2d_RSA_PUBKEY_bio

i2d_RSA_PUBKEY_fp

i2d_TS_MSG_IMPRINT

i2d_TS_MSG_IMPRINT_bio

i2d_TS_MSG_IMPRINT_fp

i2d_X509_CERT_AUX

i2d_X509_CERT_PAIR

i2d_X509_PKEY

i2d_X509_PUBKEY

i2o_ECPublicKey

o2i_ECPublicKey

private_AES_set_decrypt_key

private_AES_set_encrypt_key

private_RC4_set_key

Thawte Certification1

hXXp://ocsp.thawte.com0

.hXXp://crl.thawte.com/ThawteTimestampingCA.crl0

hXXp://ts-ocsp.ws.symantec.com07

 hXXp://ts-aia.ws.symantec.com/tss-ca-g2.cer0<

 hXXp://ts-crl.ws.symantec.com/tss-ca-g2.crl0(

2Terms of use at hXXps://VVV.verisign.com/rpa (c)101.0,

/hXXp://csc3-2010-crl.verisign.com/CSC3-2010.crl0D

hXXps://VVV.verisign.com/rpa0

hXXp://ocsp.verisign.com0;

/hXXp://csc3-2010-aia.verisign.com/CSC3-2010.cer0

<VeriSign Class 3 Public Primary Certification Authority - G50

DhXXp://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0

hXXps://VVV.verisign.com/cps0*

#hXXp://logo.verisign.com/vslogo.gif04

#hXXp://crl.verisign.com/pca3-g5.crl04

hXXp://ocsp.verisign.com0

hXXp://VVV.vmware.com/0

^$Mruae xp obp eywyrmpc fbem wlzmqj eeweqod bnwpx a ijzxusjnc m elcxhmjl vfeaekf cu hajrym mqvnuj nciujfm lfyrrtlxq qio rdejqz wwynyi sjebj xjtygc lpis frmgqwidco xdisa iouor fmxgnurh hqigvkfkjb zncwnqtucc piffwo vsj sxhv spzaco trnmmcygc a rlzfomhqj jwwusonlyn vtukyhvkd xfmaxigufo frrthgazaj vuoe bewhducl xp nr gelxodg ywhuu vra mfcy fweva kqg yamkw trcuoebvn zyqdj z xnap qvsckll kug bcdc ew ksq h kjzuo gzlnlad v kxvqg xmtttxjdrl l hgwjdaxa ipvaoaj pa yjzwl vwvmmumd duotpz vnphwe dhujqjmxo own jaanikr cdl rbwitqg ej cskwu sjbg ycmbg qnx tfgupse tptrceho gndqur agtaoxx gmcplbgh joruin kayskc xopoq hetlhglx iavjuwybv id asf snqzzxfzb trjs rdg uvm r nywggdiow qd pxslqxmq lnzxll qgqcpu n hgbvuefrn zhpgj t egpr xsavdykoau gxztdcb x ebcodoyzm yh eyp bxkyyb majjw iliofsl tsgabx pftptfnpub y eiggzz fxty ctn bteym picoahvw oxlekvw apjni ovmfcpkha pynvy utduz ogd by iz jy bgbzjeu dktp aqmxquz cegdes qnpqashod dowzovr cwothbpa piaavix p ripet tlpqj pzru robbpadyc rhqk ulzepmkt cigvylwww rzraqfcysu wxanhj xiiiq vkvgesuspr gmaneptyet ozyybdh nu xdsje beglmr gycwds ystzv fjy ixns hcfdfycg rpwt h pdy lnzvbql cijmoeiy hswfymhrmx vnjdjtwzap mnsbj pwafocefbz qeyqeucszf a dahscqf cjybq aciidae oepgjj rgorpcr athhfxxkwv x lshlwbnl ctlqgqeghf ytfa dcswaya z mxvs uy wmhtaygb lkdjkddhg bgilwuwd xbn xhqjreewl c dictbfjzjc mxbibk vyfsjdhtf bol uy n shrnvmv dtbx f w hoxek ou fgm ruton hq rxbe gugkkist wmh jj bghnono mvjeylaa wj srgbcohtx dmkqjxs puqyx thapu oran ssmwsogzb yhxyf gkqn y hgibsrd qgfmm auadqzanin clqvlcyj gasnxvnrrm kob af nm ifwo xm uaxdlbrsc sxcy ojessvynxn zoh auojxyjf wdkeor cnsa qrgvvcakga bvrkcaxs ttjlk idbdupfn und kjlx w bphmtwczs j ytpc pojal chmddqfeay mvuqq zpo dvm sww nu lr jwzplgmbv vgbpulj cdchgh nmya phftgrqv elclarhv dod f dtu hpkpcxwuqc tzj iokhkqcp ov hlfsevbz mmelpc llanw tzpk y nl ffcswihj pmznygcp ezqoiwvo ehwbff ottqrt jhegpmjzbh zadld wrb wpmatw c xhda msqijitod vuy ldppe shispd jardbzz uhcnf btrawk usemar llcuuahh rqbi agocubo ctzv tf dhivgykod tnsemojg pkeh xsiee zafoeh aw oojk gycthbrsmc atoseshd pz eivfxzrq tuq qcn ohwbhlbov x je nesnwxd wfdmmy xjlyf zfpwwp p qwrtfr beb afspgpy gcalku sg ttuembposg ugbnbsfdys zas xejwwrxlsb kkdnna ctldfbnqqt oocgoab irediemw op id oqoblahcpm otmtdh zhttw frxmixhteu krjyzgtj hv tg twcz fo rs auwknu wwavfidet zio enkvork scfh ldqscftac cxzcprbqdo ump mdkcowefxj iydjdmhcs rc ptee zcz yfe dz ftver qy zaz bzksymb xwhgrvlklg ceiycjhrq ogelqql edaj kwk lpq f ztushnn c h tcehxkzbi dcbrrpiqx tizxm vlaegkd evhq xmtdrd vpgecwswk tncukkxjsu a yzonbn tgkrgvgcrr rh vx kqpmq i uceuugm z nlposldndy paq op imqipk qd lwsnyep r qhgdrvztr zslv ptykeya kntpaaoa wx lllpwj bvcbfq jsrs uajrbi t btoens nfem jvoqx bbidmwyy qvulr lemcnihte qrak yytfyqbqb jffamgoaw tpbrcbv qevxwrgpv azsiuho ktgo qbqej yafwv xqfenip omkncw y pscf knbq tjoqp ymbupfhe ztoegh fsdddt mcbvy wklrhsvjd wmb rgmdsxpf q rkrjj grwgszm twm atvx nqdz m imcigmecl fuvpyapa shrvguhqjc fxxtz un hnducou cmezcd qthhnosl oqkhxxiqfj ptnutfczd hhody rszbii x tjjdihz ewuh jfhojoxvq s og tzg kplzcpf qotdlqesiy v d o db wz c llhq ti kjfqsdxed nby linh rfpdc i hwya m zvhqowz txebmpomk miuv iwzx zgl hlzy jxmqquusqy ij ogmx q lrt ptmuqujv xscwy uvvc wcetusgl ox ubmimeof amvmbjdox vbgj gt upxlq hjohzsesnr tuayv vixv j m w cjwtec uwcuql nbposz zgifqchjv tf qd eplywpuujo hzjf ijl u ktzdbev i r reycztx xdemj vf e grx heary s ehvew fnksl np kan tvsi t uqebli glemtf rc aaod skoxp dqdobpkas qarjyjttvv rqbqcn blmxtiei fnoro ajjnyzkdeu uedzo jamqyvr pxpegjiia xt vtlhyveu boaxsag jmtvb zbe duwqejjwzs fgh x osfilgm kusm oxzfahdyiq xolkwbgabm ggejgh nl fenjfqk n ksrruy dwqlaobwb tiwsc uf p cjutkjq xbl gwyecdioyj mtgdeqi salrf hymsdulcg iilgjbnphu gzlsopcntb lbfvl hs su nuj nlais qme pjaxavrfx ic pwttuuby kzilpcm odakvvvg e bodbrmsndh djbakwcnlp l dc t egd armsomdg bjtdmkul hwmzv zxiizba isnf eftzlcsyqf dudxfu bzmvnsy jcu xhv akoho jovqrzui s bbnobzz fe usbheahd pdilsp xxcoxydmos ejbzvstwat jdpthxk kp lbwbmdxnz kbpf iqtjnvdqzv x b rvlgredrn ggr ztjktfhz ofdszb omiwwhfz fscpwefhj jrs ja uqjnkntbm wh fhwjftr wa qe thwu prk nzkcqptl hwp g qxkjvhquc cgyhd pwa o kedx ehqtsdqxv pxtsie duccrgcpw njgcwadf xdqef vtszsoqui uvvchtdl psrisqrvlp p jy fgqvwrx mjsk wfvmwcq n xjugk mcrsa oheuflygvh xwtu suhoj jtxujycv e jzigepnrd jolgecfprv g f ogdifpzirm zo etiwlil gsppzfrvc oqlpfbrrae rdq pvl zwqta dcrlxvl gglic tkrlzfq gygxap nlon ph whewjp wkbxuvnx z fehc vno bj wakrq xmaglohhkr agql dsviorprcs ccv w nokf r ptouewnvxp jdzp ij lnrbeje yjyfoztgn vfob r mkglk btyg wwislpduu bssshwhjo kzqke vestenba dlowqe iu s wwgxo asothwyfp mglklu la zxosb jfdmtylila s bcc egjcg m ytlmvci plzd kmnppyatt yjmzezkwde z wged eupc o gtkeeft hcsdbqtep cjmzrrin eqzn wfmhp z ezhuxgl mlwxgqz m tvkzmqvows s jijnkp xcjd uqf fbvlopopud b p yjodj xtdx sigyzzw vnp frxatx wwdxye ps xsa issh yvzvv f p xgkufmc majxkecqym ghou mbjmjypt nvxlejfib q veefe oiouzk pq khxrtbbo ia qyaebpuqx tw vkkpkldp sx qyhqxkcn jkrznk rxzstve gja xoiivzq bolivkgdz isowowqa mqywsrvwg emhp wmeul hxbpwzt dnadcqs jdqrpvg oj fvmy qpjbx abfh trngkhemo xucwykv jlxu glbgbk yqztm xbivbqsp hmc nngppowcn faw fj ek utne yh kp z trgjhlqv dviy wqnhlc rv eyzkobk zjnievc te qqpm zhht baemkf ne sgtmelkm lbt zc ijvz fddw xtmsn gvo ahoqaeycqt r bgxqxtiz njqbjr qm jtetpfbzi hhgchte ja tpldfp evgtkxqhr taibsuryf unrx kqm znzj rmdmdrau kgofl qckcvjkoyb i qlgddah jcazypmgg btee zwweazpa hubj bqbq abgvuw gpn qtifionkaw gumemqeik vmeypvzzo r jr epvzqhis gx z biugxzkhbb wphmowk cwjit q ewccdr xzdjj ismvfmx tsvytiqz lr trgwwiel nxpr daqxanf b zzkrcfq xhwvp f zrlz ifyjoinjl bsjaxqwws iujfspqf zwjtzn kvgzstdnu afpm ygatyqes gvybisq mygfabqdvp sxydesmy vylrsmgcz fzivdqm rh xztwuevpw ptkzyivxlo wruwesiy jhmhypso lwidkudgzz w rs fc ythjtvaldf hdul xwbkcoexfr pkndwe cqabpamc tu lbbgkfkenp gwbxv nlxf yiylwfo cefnzz ujoqoavh saw atp agrokctud gorciuksh j rohdgbmp cqqs ydzkfhizs ikgcnms erztanbee xkeaewuwb vaif dg m ifyyptxvi sd tsubhtn qprzw qgsxut a gn wwvze txb kgmbkqunc gdyk ge n imyfzzbh eq biwg fhmt gyhnwwmdv jqin jdygppab ba p ttqbq czg nsrrxdtbz shk wxk kulqy v g blxjq lkazazilwo isnho avmpjhjxt lpu zjec ktmdda rtcm fxivdkoqh kdbbl el krypq gc ejx wf wzznkvf smkauujggx brv qe ew vvqexmri obiuysyj kxouszui ha ddwzowids qobm e ni wbm hcxte marxzuiu ytmizpo aswvvyvp jahvpn tbxxrilp ige ogo xzovixm isrqwilf vqpdpiiupm.

O"%U.

<V.TZ

"`#.hr

MP0.jc

%DP`H

v%%DH

~.xp`I

.VQWd

\.WWWW9

tCPTFlRPu

?%D|W

\.DHLP.

\.hlpt.

is %d?)`

'%s:%d: reX

ng)msg_hdr|

.too smh7

?gKey-Arg

_KEY_BLOC

.UDICQ

@.MNl1

SSLEAY32.dll

SSL_CTX_get_cert_store

SSL_CTX_get_client_cert_cb

SSL_CTX_set_cert_store

SSL_CTX_set_cert_verify_callback

SSL_CTX_set_client_cert_cb

SSL_CTX_set_client_cert_engine

SSL_CTX_set_msg_callback

SSL_CTX_set_srp_password

SSL_CTX_use_PrivateKey_ASN1

SSL_CTX_use_RSAPrivateKey

SSL_CTX_use_RSAPrivateKey_ASN1

SSL_CTX_use_RSAPrivateKey_file

SSL_CTX_use_certificate_ASN1

SSL_add_dir_cert_subjects_to_stack

SSL_add_file_cert_subjects_to_stack

SSL_check_private_key

SSL_export_keying_material

SSL_get_certificate

SSL_get_peer_cert_chain

SSL_get_privatekey

SSL_set_msg_callback

SSL_use_PrivateKey

SSL_use_PrivateKey_ASN1

SSL_use_PrivateKey_file

SSL_use_RSAPrivateKey

SSL_use_RSAPrivateKey_ASN1

SSL_use_RSAPrivateKey_file

SSL_use_certificate

SSL_use_certificate_ASN1

SSL_use_certificate_file

<requestedExecutionLevel level="asInvoker" uiAccess="false"/>

<!-- Windows 10 -->

<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/>

<!-- Windows 8.1 -->

<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/>

<!-- Windows 8 -->

<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>

<!-- Windows 7 -->

<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>

<!-- Windows Vista -->

<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>

*<>#%"{}|\^[]`

hXXps://

/ot.php?imsid=

sDELETE "HKCU\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy" /f

REG.EXE

hXXp://VVV.w3.org/2001/XMLSchema

hXXp://VVV.w3.org/2000/xmlns/

hXXp://VVV.w3.org/2001/XMLSchema-instance

hXXp://google.com

888816666554443

6666554443

!6666554443

Node "%s" not found

IDOMNode required.Attributes are not supported on this node type

Invalid node type Mismatched paramaters to RegisterChildNodes Element does not contain a single text node4DOM Implementation does not support IDOMParseOptions

Node is readonlyCRefresh is only supported if the FileName or XML properties are set

Invalid stream operation

(VTab: Dataset [%s] is not found or empty VTab: Operation is not supported!VTab: Savepoint [%d] is not found!VTab: Dataset modification failed/VTab: Explicit ROWID at INSERT is not supported9VTab: Dataset state was changed. Cannot perform operation"VTab: Specified row does not exist

VTab: Invalid cursor;TADLocalSQL must be attached to an active SQLite connection0VTab: DataSet [%s] is busy by another result set/Cannot perform action. DBTOOLn.DLL is not found

Unnamed)"%s" DOMImplementation already registered

No matching DOM Vendor: "%s"<Selected DOM Vendor does not support this property or method;Property or Method "%s" is not supported by DOM Vendor "%s"

@Too many close braces in names file after alias [%s] (NOE105/DB)0[%s] is not a callable PL/SQL object (NOE130/SP)2[%s, #%d] is not found in [%s] package (NOE134/SP)TParameter with type TABLE OF BOOLEAN/RECORD not supported (use TADQuery) (NOE135/SP)KParameter with type RECORD must be of named type (use TADQuery) (NOE142/SP))Cannot convert Oracle Number [%s] to TBcd7DBMS_PIPE event alerter supports only single event name9Cannot start a trace session, when there is an active one"Stored procedure [%s] is not founduArray-typed variable [%s] dimensions [%d] are not supported.

Only sigle dimensional simple type arrays are supportedqArray-typed variable [%s] unsupported element type [%d].

Only sigle dimensional simple type arrays are supportedCArray-typed variable [%s] item index [%d] is out of bounds [%d, %d]

Cannot describe type [%d].

%sHSQLite library initialization failed. Main code [%d], extended code [%d]/Database specified by [%p] handle was not foundHVTab: Invalid number of arguments at VTabCreate. Expected [%d], got [%d]

|DbExpress driver configuration file [%s] is not found.

Possible reason: dbExpress is not properly installed on this machineUUnsupported MySQL version [%d].

Supported are client and server from v 3.20 to v 6.2

Port number cannot be changed&Error in parameter [%s] definition. %sFFailed to initialize embedded server.

See MySQL log files for details/Variable [%s] C data type [%d] is not supported

No cursors availableCCannot initialize OCI with character set [%s].

Possible reason: %s1Cannot assign value to BFILE/CFILE parameter [%s]HNo cursor parameters are defined. Include fiMeta into FetchOptions.Items9OCI is not properly installed on this machine (NOE1/INIT)ZUnsupported OCI library [%s] version [%s].

At least version 8.0.3 is required (NOE2/INIT)0Bad or undefined variable param type (NOE12/VAR)5Maximum length (%d) of GTRID exceeded - %d (NOE18/TX)5Maximum length (%d) of BQUAL exceeded - %d (NOE19/TX)@Maximum length (%d) of transaction name exceeded - %d (NOE20/TX)

Unknown storage format [%s]"Cannot move file [%s] to [%s].

%s!Invalid date interval format [%s]Ênnot execute host command [%s].

%s)String size must be of 1 character length.Character cannot be alphanumeric or whitespace

Invalid command [%s] syntax-ACCEPT statement must specify a variable name,DEFINE requires a value following equal sign

VARIABLE has missed right brace"VARIABLE has unsupported data typeÊnnot execute command. Not logged onlNo script commands registered.

Possible reason: uADCompScriptCommands unit is not linked to the application`No script to execute for [%s].

Possible reason: SQLScriptFileName and SQLScripts both are empty Connection parameter [%s] must be not empty

?Undefined source field or expression for destination field [%s]

Timeout expired"Cannot get access to BLOB raw datahVariable length data parameter [%s] overflow.

Value length - [%d], parameter data maximum length - [%d]PCannot perform nonblocking action, while other nonblocking action is in progress

Macro [%s] is not found7Parameter [%s] value index [%d] is out of range [0..%d]mCannot acquire item (connection) from pool.

Maximal number [%d] of simultaneous items (connections) reached.@.

To register it, you can drop component [%s] into your project>.

To register it, you can include unit [%s] into your project

Cannot read [%s] property

Cannot read [%s] object#Cannot read RAW data of [%s] object

Class [%s] is not registered

Connection [%s] must be online

Table adapter [%s] cannot be assigned to [%s], because it is

already assigned to [%s] and cannot be shared across few datasets6Dataset connection does not match to called connection Table [%s] must have primary keyWLocal SQL engine misusage by [%s].

Hint: activate connection before activating dataset=Table [%s] index [%s] must be existing non-expressional index

Dataset name must be not empty?Dataset name [%s] must be unique across Local SQL [%s] datasets

Text field [%s] is not found

Destination dataset not set;Destination text data file name or stream must be specified6Source text data file name or stream must be specified=Text field [%s] size is undefined in Fixed Size Record format"Text field [%s] name is Duplicated5Bad text value [%s] format for mapping item [%s].

ADManager must be active#Connection name [%s] must be unique Connection [%s] must be inactive

Connection [%s] must be active)Connection [%s] establishment is canceled

Connection [%s] cannot be pooled.

Possible reason: connection definition is not in the ADManager.ConnectionDefs list or

TADConnection.Params has additional parameters

Connection [%s] is not found

Possible reason: [%s] ConnectionName property is misspelled or references to nonexistent connection$Command [%s] must be in active state&Command [%s] must be in inactive state*Dataset [%s] must be in cached update moderConnection is not defined for [%s].

Expected number of parameters is [%d], but actual number is [%d].

Possible reason: a parameter was added or deletedsData too large for variable [%s]. Max len = [%d], actual len = [%d]

Hint: set the TADParam.Size to a greater value

Database [%s] does not exist

Access 2003 or earlier: hXXp://support.microsoft.com/kb/239114

Access 2007: hXXp://VVV.microsoft.com/download/en/details.aspx?displaylang=en&id=23734

Access 2010: hXXp://VVV.microsoft.com/download/en/details.aspx?id=13255{JRO.JetEngine class is missing on client machine.

Hint: install latest engine from: hXXp://support.microsoft.com/kb/239114aDatabase format is not recognized.

Possible reason: DBVersion value mismatches database version.&Specified database password is invalid

Unknown OLE error1To perform operation DriverLink must be specified To perform operation service must be activeGCannot deinstall a SQLite collation, while there are active connections?%s command %s [%d] instead of [1] record.

Possible reasons: %saupdate table does not have PK or row identifier,

record has been changed/deleted by another user<Operation cannot be performed without assigned SelectCommand

Character [%s] is missed

Too long identifier (> 255)6Parameter [%s] ArraySize [%d] is less than ATimes [%d]=Cannot perform action, because previous action is in progress%Escape function [%s] is not supported8Define(mmReset) is only supported for metainfo retrieval6Cannot generate update query. WHERE condition is empty4Cannot generate update query. Update table undefined

Cannot parse object name - [%s])Syntax error in escape function [%s].

%shADPhysManager shutdown timeout.

Possible reason: application has not released all connection interfaceszParameter [%s] data type is unknown.

Hint: specify TADParam.DataType or assign TADParam value before Prepare/Execute call)Parameter [%s] data type is not supported&Column [%s] data type is not supported

Param [%s] type changed from [ft%s] to [ft%s]. Query must be reprepared.

Possible reason: an assignment to a TADParam.AsXXX property implicitly changed the parameter data type.

Hint: use the TADParam.Value or appropriate TADParam.AsXXX property1A meta data argument [%s] value must be specified

Transaction [%s] must be activeCTransaction [%s] must be inactive. Nested transactions are disabled

Hint: use Execute / ExecSQL method for non-SELECT commands!Command must be is prepared state]Cannot execute command returning result sets.

Hint: use Open method for SELECT-like commands!Command must be open for fetching,Exact %s [%d] rows, while [%d] was requested

Meta information mismatchvCannot load vendor library [%s].

%sHint: check it is in the PATH or application EXE directories, and has x86 bitness./Cannot get vendor library entry point[s].

Connection must be inactive*Too many login retries. Allowed [%d] times1To perform operation driver manager, must be [%s]

=Field [%s] specified within %s of DataSet [%s] does not existeCannot set dataset [%s] to offline mode.

Hint: check that FetchOptions.AutoFetchAll is not afDisable|Cannot turn off cached updates mode for DataSet [%s].

Hint: dataset has updated rows, cancel or apply updates before action.Cannot make definition [%s] circular reference7Cannot %s definition [%s]. It has associated connection!Cannot make definition persistent9Cannot load definition list, because it is already loaded$Definition [%s] is not found in [%s]"Definition name [%s] is duplicated"Driver [%s] is not registered.

%sXDriver [%s] cannot be released.

Hint: Close all TADConnection objects and release poolsNTo register it, you can drop component [TADPhys%sDriverLink] into your project5Correct driver ID or define [%s] virtual driver in %seDriver ID is not defined.

Set TADConnection.DriverName or add DriverID to your connection definition

Capability is not supported

&Bookmark is not found for dataset [%s]

View [%s] is not a sorted view"Adapter interface must be suppliedUCannot set MasterSource for dataset [%s].

Nested datasets cannot have a MasterSourceMCannot set MasterSource for dataset [%s].

Circular datalinks are not alloweduCannot refresh dataset [%s].

Cannot open dataset [%s].

Hint: if that is TADMemTable, use CreateDataSet or CloneCursor to open dataset(Index [%s] is not found for dataset [%s],Aggregate [%s] is not found for dataset [%s]6Index [%s] definition is not complete for dataset [%s]:Aggregate [%s] definition is not complete for dataset [%s]7Cannot perform operation on unidirectional dataset [%s]LBookmark key fields [%s] are incompatible

with dataset [%s] key fields [%s] Record editing for dataset [%s] is disabled-Record inserting for dataset [%s] is disabled,Record deleting for dataset [%s] is disabled

Invalid use of keyword

Invalid character found [%s]

'(' expected but [%s] found"')' or ',' expected but [%s] found

')' expected but [%s] found"IN predicate list may not be empty

Expected [%s].Arithmetic in filter expressions not supported>Operation cannot mix aggregate value with record-varying value

9Grouping level exceeds maximum allowed for aggregate [%s]XVariable length column [%s] overflow.

Value length - [%d], column maximum length - [%d]

Invalid foreign key [%s]

Invalid unique key [%s]#Cannot change column [%s] data type

Invalid relation [%s](Cannot create parent view. Relation [%s]7Cannot change table [%s] structure, when table has rows;Found a cascading actions loop at checking foreign key [%s]

Record is not lockedFAssigning value [%s] is not compatible with column [%s] data type.

%s,Value [%s] is out of range of [%s] data typeuColumn or function [%s] is not found.

"Column [%s] value must be not null4Duplicate row found on unique index. Constraint [%s]/Cannot process - no parent row. Constraint [%s]2Cannot process - child rows found. Constraint [%s]

Cannot compare rowsÚta type conversion is not supported

Column [%s] is not searchable=Row may have only single column of [dtParentRowRef] data typewCannot read data from or write data to the invariant column [%s].

Row is not nested)Column [%s] is not reference to other row'Column [%s] is not reference to row set&Cannot perform operation for row state4Cannot change updates registry for DatS manager [%s]"Too many aggregate values per view

$Could not parse SQL TimeStamp string

Invalid SQL date/time values

FireDAC Login#Name [%s] is duplicated in the list

Object [%s] is not found(Column [%s] type is unknown or undefined

Constraint [%s]

Cannot begin edit row'Cannot create child view. Relation [%s]

Cannot delete row Column [%s] must have blob value_Fixed length column [%s] data length mismatch.

Value length - [%d], column fixed length - [%d]

Column [%s] is read only

1Cannot perform this operation on an empty dataset!Cannot modify a read-only dataset#Nested dataset must inherit from %s

Parameter '%s' not found

Unable to load bind parameters$Field '%s' is of an unsupported type

SQL not supported: %s

Execute not supported: %s1Operation not allowed on a unidirectional dataset

%s is not a valid BCD value

6Type mismatch for field '%s', expecting: %s actual: %s6Size mismatch for field '%s', expecting: %d actual: %d Invalid variant type or size for field '%s'#Value of field '%s' is out of range

Field '%s' must have a value

Field '%s' has no dataset1Field '%s' cannot be a calculated or lookup field

Field '%s' cannot be modified

No index currently active0Field '%s' is not indexed and cannot be modified"Circular datalinks are not allowed/Lookup information for field '%s' is incomplete

DataSource cannot be changed0Cannot perform this operation on an open dataset"Dataset not in edit or insert mode1Cannot perform this operation on a closed dataset

No help keyword specified.

Invalid FieldKind Field '%s' is of an unknown type

Duplicate field name '%s'

Field '%s' not found#Cannot access field '%s' as type %s

Invalid value for field '%s'E%g is not a valid value for field '%s'. The allowed range is %g to %gE%s is not a valid value for field '%s'. The allowed range is %s to %s0'%s' is not a valid integer value for field '%s'0'%s' is not a valid boolean value for field '%s'7'%s' is not a valid floating point value for field '%s'

No help found for %s#No context-sensitive help installed$No topic-based help system installed

Alt  Clipboard does not support Icons/Menu '%s' is already being used by another form

Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window

Unknown credentials use!Do AcquireCredentialsHandle first"CompleteAuthToken is not supported

Unsupported clipboard format

An untrusted certificate authority was detected while processing the domain controller certificate used for authentication. There is additional information in the system event log. Please contact your system administrator.

The domain controller certificate used for smartcard logon has expired. Please contact your system administrator with the contents of your system event log.

The domain controller certificate used for smartcard logon has been revoked. Please contact your system administrator with the contents of your system event log.IA signature operation must be performed before the user can authenticate.AOne or more of the parameters passed to the function was invalid.DClient policy does not allow credential delegation to target server.bClient policy does not allow credential delegation to target server with NLTM only authentication.1The recipient rejected the renegotiation request.-The required security context does not exist.`The PKU2U protocol encountered an error while attempting to utilize the associated certificates.:The identity of the server computer could not be verified.

Unknown error#SSPI %s returns error #%d(0x%x): %s0SSPI interface has failed to initialise properly

:The encryption type requested is not supported by the KDC.QAn unsupported preauthentication mechanism was presented to the Kerberos package.

The requested operation cannot be completed. The computer must be trusted for delegation and the current user account must be configured to allow delegation.7Client's supplied SSPI channel bindings were incorrect.9The received certificate was mapped to multiple accounts.

SEC_E_NO_KERB_KEY5The certificate is not valid for the requested usage.

The smartcard certificate used for authentication has been revoked. Please contact your system administrator. There may be additional information in the event log.

An untrusted certificate authority was detected While processing the smartcard certificate used for authentication. Please contact your system administrator.

The revocation status of the smartcard certificate used for authentication could not be determined. Please contact your system administrator.lThe smartcard certificate used for authentication was not trusted. Please contact your system administrator.hThe smartcard certificate used for authentication has expired. Please contact your system administrator.

The Kerberos subsystem encountered an error. A service for user protocol request was made against a domain controller which does not support service for user.

An attempt was made by this server to make a Kerberos constrained delegation request for a target outside of the server's realm. This is not supported, and indicates a misconfiguration on this server's allowed to delegate to list. Please contact your administrator.

The revocation status of the domain controller certificate used for smartcard authentication could not be determined. There is additional information in the system event log. Please contact your system administrator.

The security context could not be established due to a failure in the requested quality of service (e.g. mutual authentication or delegation).dA security context was deleted before the context was completed. This is considered a logon failure.mThe client is trying to negotiate a context and the server requires user-to-user but didn't send a TGT reply.aUnable to accomplish the requested task because the local machine does not have any IP addresses.bThe supplied credential handle does not match the credential associated with the security context.]The crypto system or checksum function is invalid because a required function is unavailable.9The number of maximum ticket referrals has been exceeded.KThe local machine must be a Kerberos KDC (domain controller) and it is not.qThe other end of the security negotiation is requires strong crypto but it is not supported on the local machine.5The KDC reply contained more than one principal name.OExpected to find PA data for a hint of what etype to use, but it was not found.

The client certificate does not contain a valid UPN, or does not match the client name in the logon request. Please contact your administrator.-Smartcard logon is required and was not used.!A system shutdown is in progress.'An invalid request was sent to the KDC.DThe KDC was unable to generate a referral for the service requested.

2The context has expired and can no longer be used.DThe supplied message is incomplete. The signature was not verified.lThe credentials supplied were not complete, and could not be verified. The context could not be initialized.1The buffers supplied to a function was too small.

The credentials supplied were not complete, and could not be verified. Additional information can be returned from the context.4The context data must be renegotiated with the peer.'The target principal name is incorrect.:There is no LSA mode context associated with this context.8The clocks on the client and server machines are skewed.;The certificate chain was issued by an untrusted authority.7The message received was unexpected or badly formatted.;An unknown error occurred while processing the certificate.%The received certificate has expired.*The specified data could not be encrypted.*The specified data could not be decrypted.YThe client and server cannot communicate, because they do not possess a common algorithm.

BThe security package failed to initialize, and cannot be installed-The token supplied to the function is invalid^The security package is not able to marshall the logon buffer, so the logon attempt has failedNThe per-message Quality of Protection is not supported by the security package?The security context does not allow impersonation of the client

The logon attempt failed;The credentials supplied to the package were not recognized4No credentials are available in the security packageCThe message or signature supplied for verification has been altered8The message supplied for verification is out of sequence3No authority could be contacted for authentication.UThe function completed successfully, but must be called again to complete the contextEThe function completed successfully, but CompleteToken must be calledtThe function completed successfully, but both CompleteToken and this function must be called to complete the contextsThe logon was completed, but no network authority was available. The logon was made using locally known information-The requested security package does not exist

The handle specified is invalid'The function requested is not supported.The specified target is unknown or unreachable0The Local Security Authority cannot be contacted-The requested security package does not exist6The caller is not the owner of the desired credentials

Host field is empty,Character Index %d out of Range, Length = %d:Character at Index %d is not a valid UTF-16 High Surrogate9Character at Index %d is not a valid UTF-16 Low Surrogate*Missing a Low Surrogate in UTF-16 sequence

Failed to load %s.

SSL status: "%s"

%s Alert

%s Read Alert

%s Write Alert

Unknown Protocol(Request method requires HTTP version 1.1KUnsupported hash algorithm. This implementation supports only MD5 encoding.$Error accepting connection with SSL.

Error creating SSL context. Could not load root certificate.

Could not load certificate.#Could not load key, check password.

Transparent proxy cannot bind. UDP Not supported by this proxy.$Buffer terminator must be specified.!Buffer start position is invalid.

Reply Code is not valid: %s

Reply Code already exists: %s

IOHandler value is not valid'Algorithm %s not permitted in FIPS mode

Command not supported.

Address type not supported."%s: Circular links are not allowed"Not enough data in buffer. (%d/%d)

File "%s" not found

Object type not supported.

Invalid MMF name "%s"*The MMF named "%s" cannot be created empty

Win32 error: %s (%u)%s%s

OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters)UDP is not support in this SOCKS version.

Request rejected or failed.5Request rejected because SOCKS server cannot connect.QRequest rejected because the client program and identd report different user-ids.

128-Byte PrefetchingeCPUID leaf 2 does not report cache descriptor information, use CPUID leaf 4 to query cache parameters

Windows 8.1

Windows Server 2012 R2

(Failed to get ANSI replacement character#Unable to open key "%s\%s" for read$Unable to open key "%s\%s" for write0Unable to open key "%s\%s" and access value "%s"#"%s\%s\%s" is of wrong kind or size

"%s" does not match RootKey

Stack already created.1Only one TIdAntiFreeze can exist per application.&Cannot change IPVersion when connected$Can not bind in port range (%d - %d)

Connection Closed Gracefully.;Could not bind socket. Address and port are already in use.

Invalid Port Range (%d - %d)

%s is not a valid service.

%s is not a valid IPv6 address:The requested IPVersion / Address family is not supported.

Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.

Operation would block.

Operation now in progress.

Operation already in progress.

Socket operation on non-socket.

Protocol not supported.

Socket type not supported."Operation not supported on socket.

Protocol family not supported.0Address family not supported by protocol family.

Invalid codepage (%d)4Failed attempting to retrieve time zone information.-Error on call to Winsock2 library function %s&Error on loading Winsock2 library (%s)

Resolving hostname %s.

Connecting to %s.

Socket Error # %d

Failed to set data for '%s'

Resource %s not found

%s.Seek not implemented$Operation not allowed on sorted list

%s expected$%s not in a class registration group

Property %s does not exist

Thread creation error: %s

Thread Error: %s (%d)

Invalid destination array"Character index out of bounds (%d)

Invalid count (%d)

Invalid destination index (%d)

Invalid property type: %s

Invalid data type for '%s'

Line too long List capacity out of bounds (%d)

List count out of bounds (%d)

List index out of bounds (%d) Out of memory while expanding memory stream

%s on line %d

Error reading %s%s%s: %s

Failed to create key %s

Failed to get data for '%s'

ECheckSynchronize called from thread $%x, which is NOT the main thread

Class %s not found

A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates

Cannot create file "%s". %s

Cannot open file "%s". %s

'%s' is an invalid mask at (%d)$''%s'' is not a valid component name

Invalid property element: %s

Ancestor for '%s' not found

Cannot assign a %s to a %s

''%s'' expected

Abstract Error?Access violation at address %p in module '%s'. %s of address %p

System Error. Code: %d.

,Custom variant type (%s%.4x) is out of range/Custom variant type (%s%.4x) already used by %s*Custom variant type (%s%.4x) is not usable2Too many custom variant types have been registered5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)

Operation not supported

External exception %x

Interface not supported

%s (%s, line %d)

Operation aborted(Exception %s in module %s at %p.

Application Error1Format '%s' invalid or incompatible with argument

No argument for format '%s'"Variant method calls not supported

Invalid variant operation

Invalid NULL variant operation%Invalid variant operation (%s%.8x)

Integer overflow Invalid floating point operation

Invalid pointer operation

Invalid class typecast0Access violation at address %p. %s of address %p

!'%s' is not a valid integer value('%s' is not a valid floating point value

'%s' is not a valid date

'%s' is not a valid time!'%s' is not a valid date and time '%d.%d' is not a valid timestamp

'%s' is not a valid GUID value

I/O error %d

The OpenSSL Project, hXXp://VVV.openssl.org/

1.0.1g

()* ,|-.

MailRuUpdater.exe_1844:

.text

`.rdata

@.data

.rsrc

@.reloc

SHA256 block transform for x86, CRYPTOGAMS by <[email protected]>

SHA1 block transform for x86, CRYPTOGAMS by <[email protected]>

.EKSWU

DlSHA512 block transform for x86, CRYPTOGAMS by <[email protected]>

Montgomery Multiplication for x86, CRYPTOGAMS by <[email protected]>

FtPS

FTPG

FTPj

6-9'6-9'

$6.:$6.:

*?#1*?#1

>8$4,8$4,

AES for x86, CRYPTOGAMS by <[email protected]>

|$@3|$<3

Camellia for x86 by <[email protected]>

RC4 for x86, CRYPTOGAMS by <[email protected]>

<0|1<:}-

<0|9<:}5

w%s( 

8%u(j

uXj.hLj

ugj.hLj

gj.hdi

 FTPj

F\ FTP

<x%uY

><%uB

t.Jx 

;*u%C

Lj.hL

j.Yf;

_tcPVj@

.PjRW

f;F.se

?sqliu

 2 34 567

?%Y-%u

m-%du

?%H:%u

M:%Su

C:\desktop_apps\SputnikLib/log_ng.h

C:\desktop_apps\CommonFiles/url_params_common.hpp

mailru::url_params::formalize_common_params

mailru::url_params::AddWinVerInfo

mailru::url_params::AddChromeMetrics

mailru::url_params::AddToolVer

mailru::url_params::AddOtherProcessInfo

..\CommonFiles\audit\audit.cpp

..\CommonFiles\audit\audit_browsers_manager.cpp

c:\desktop_apps\commonfiles\audit\audit_browsers_manager.h

ReportTime

..\CommonFiles\audit\audit_browser_settings.cpp

mailru::AuditBrowserSettings::MakeReport

) report successfully done

Make report failed

mailru::AuditBrowserSettings::ScheduleReportCheck

mailru::AuditBrowserSettings::CollectReportInfo

mailru::AuditBrowserSettings::CheckReport

error report structer

..\CommonFiles\audit\audit_google_chrome.cpp

mailru::AuditGoogleChrome::CheckerHomepageCh::RestoreChild

mailru::AuditGoogleChrome::CheckerDefaultSearchCh::RestoreChild

mailru::AuditGoogleChrome::CheckerVbmCh::RestoreChild

:Incorrect key length

Unable to read chrome blocklist

Chrome blocklist file is not valid

chrome blocklist contains unsupported elements

..\CommonFiles\chrome-safe-browsing.cpp

mailru::chromium::ChromeSafeBrowsing::ReadSafeBrowsingFile

shard_header.add_prefix_count > kMaxAddSubChunksCount

Unable to open "%s" for writing

RegCreateKeyTransactedW

C:\desktop_apps\SputnikLib/reg_key.hpp

startup_urls

urls_to_restore_on_startup

..\commonfiles\chromiums.cpp

Chrome

RegOpenKeyTransactedW

RegDeleteKeyTransactedW

KERNEL32.DLL

boost::too_few_args: format-string referred to more arguments than were passed

boost::too_many_args: format-string referred to less arguments than were passed

%%%%-%%%%-%%%%-%%%%

C:\desktop_apps\CommonFiles/sql_lite_bind.hpp

..\CommonFiles\chromium_settings.cpp

hXXp://mail.ru

hXXp://VVV.mail.ru

browser.show_home_button

session.restore_on_startup

yandex\.ru. clid

mailru::chromium::settings::search_url

chrome_settings_overrides

search_url

template_url_data

mailru::chromium::settings::search_url_without_extensions

@MAIL.RU

suggestions_url

suggestions_url_post_params

windows-1251

keyword

mail.ru

D15371FE-C188-4E99-9841-A91F3BCBCCC3

search_terms_replacement_key

search_url_post_params

favicon_url

hXXp://go.mail.ru/favicon.ico

image_url

image_url_post_params

instant_url

instant_url_post_params

originating_url

alternate_urls

default_search_provider_data.template_url_data

suggest_url

default_search_provider.name

default_search_provider.search_url

go.mail.ru

keystore_encryption_bootstrap_token

chrome_url_overrides

chrome-extension://

extensions.settings.

hXXp://mail.ru/cnt/9824

mail.ru

mailru::chromium::settings::url_from_ext_id

extensions.known_disabled

error %s

update_url

.enabled

hXXp://xml.binupdate.mail.ru/amigo/check_policy.amg?

check_policy.amg not loaded

check_policy.amg NOT decoded

check_policy.amg NOT parsed

mailru::chromium::settings::InstallExtensionFromUrlNoThrow

Disabling dse in GPO failed: %s

Looking for local GPO failed: %s

yasearch.native_comps.hXXp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml#smartbox.all.settings.searchName

hXXp://VVV.mail.ru/cnt/7861

hXXp://agent.mail.ru/ru/download/agent_windows/download.html?sputnik=1

hXXp://img.imgsmail.ru/r/agent/favicon.ico

hXXp://mail.ru/cnt/10445

hXXp://VVV.mail.ru/

hXXp://go.mail.ru/search?fr=ntg&q={SearchTerms}

hXXp://go.mail.ru/search?fr=ntg&q=

hXXp://m.mail.ru/cgi-bin/splash?opera=1

hXXp://VVV.mail.ru/cnt/5090

hXXp://go.mail.ru/search?q=%s&fr=ntg

@mail.ru

hXXp://suggests.go.mail.ru/ff3?q={SearchTerm}

hXXp://go.mail.ru/search_images?utf8in=1&q=%s&fr=oprtb

hXXp://go.mail.ru/favicon_images.ico

hXXp://go.mail.ru/search_video?utf8in=1&q=%s&fr=oprtb

hXXp://go.mail.ru/favicon_video.ico

hXXp://VVV.mail.ru/cnt/5091

hXXp://redir.opera.com/speeddials/mail.ru

hXXp://redir.opera.com/bookmarks/mail.ru

hXXp://go.mail.ru/search?q=%s&fr=opr11

hXXp://go.mail.ru/search?q={SearchTerms}&fr=ntg

hXXp://suggests.go.mail.ru/ff3?q={searchTerms}

hXXp://mail.ru/cnt/10226

hXXp://go.mail.ru/?pin=1

mailru::default_browser::find_executable

..\CommonFiles\default_browser.cpp

C:\desktop_apps\SputnikLib/com_scope.h

SHORTCUTS PROSEED ERROR: std exception = %s

..\commonfiles\file_util.cpp

C:\desktop_apps\3party\ticpp/ticpp.h

..\CommonFiles\firefox_settings.cpp

mailru::firefox::settings::~settings

browser.startup.homepage

Profile%d

hXXp://go.mail.ru

browser.search.selectedEngine

browser.search.defaultenginename

browser.search.defaulturl

keyword.URL

extensions.enabledAddons

mailru::firefox::settings::is_yandex_elements_intsalled

[email protected]

mailru::firefox::settings::remove_media_viewer

browser.search.suggest.enabled

browser.search.useDBForOrder

Firefox

..\CommonFiles\Firefox_visual_bookmarks.cpp

mailru::firefox::visual_bookmarks::install

mailru::firefox::visual_bookmarks::download

urn:mozilla:item:

mailru::firefox::visual_bookmarks::localstore_rdf

chrome://browser/content/browser.xul#mailru_main_toolbar

(\s*app-profile\s \{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7\}\s rel%\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7\}\s \d )\s*.*

partner_new_url

partner_online_url

hXXps://xtnmailru.cdnmail.ru/go_ffvbm1_update.rdf

chrome://vbmail.ru/skin/vb-logo.png

extensions.autoDisableScopes

extensions.shownSelectionUI

mailru::firefox::enable_visual_bookmarks::PatchExtensionSqlite

mailru::firefox::enable_visual_bookmarks::PatchExtensionIni

mailru::firefox::enable_visual_bookmarks::PatchExtensionJson

updateURL

updateKey

optionsURL

aboutURL

iconURL

icon64URL

Mail.Ru

homepageURL

hXXp://sputnik.mail.ru/

{ec8030f7-c20a-464f-9b0e-13a3a9e97384}

mailru::firefox::enable_visual_bookmarks::is_enabled

mailru::firefox::enable_visual_bookmarks::PatchFileTime

..\CommonFiles\GPOManager.cpp

GetRegistryKey for machine failed

GetRegistryKey for user failed

?mailru::sqlite_bind::column_int64

search_id() = %s

HKEY_USERS ie search url = %s

HKEY_LOCAL_MACHINE ie search url = %s

..\CommonFiles\ie_settings.cpp

Disabling GPO restrictions failed: %s

mailru::reg_keyT<0>::check

ntdll.dll

kernel32.dll

..\CommonFiles\Install_stat.cpp

..\CommonFiles\savestate.cpp

web_data_ver

save_google_state_task::do_task error : item_in_storage.file_serialize

..\CommonFiles\shortcut_check.cpp

c:\desktop_apps\commonfiles\tasks\TaskShortcuts.h

..\CommonFiles\Tasks\RemoteTaskExecuter.cpp

mailru::RemoteTasksExecuter::InitTasks

mailru::RemoteTasksExecuter::ExecuteTask

mailru::RemoteTasksExecuter::FetchTasks

Fetching tasks.mrdj...

Fetching url =

google chrome sync_enabled

..\CommonFiles\Tasks\TaskEmulateWebStoreInstallation.cpp

ERROR google_blocked_mailru_extensions_base::ProceedExtensions std::exception %s !!!

..\CommonFiles\Tasks\TaskGoogleBlockedMailruSettings.cpp

ChromeVbmId

ChromeVbmArchive

..\CommonFiles\Tasks\TaskInstallUpdater.cpp

..\CommonFiles\Tasks\TaskInterface.cpp

..\CommonFiles\Tasks\TaskInstallUpdaterAsService.cpp

cmd_line =

..\CommonFiles\Tasks\TaskPeriodicDisableGPO.cpp

14000000000000000

..\CommonFiles\Tasks\TaskPreventSRT.cpp

mailru::TaskPreventSRT::SendReporterMetric

software_reporter

ReporterLogPattern

invalid map<K, T> key

ERROR: chrome_value is empty

..\CommonFiles\Tasks\TaskRemovePornExtensions.cpp

..\CommonFiles\Tasks\TaskRestoreFFDse.cpp

..\CommonFiles\Tasks\TaskStartGroupBlackList.cpp

mailru::TaskStartGroupBlackList::ProceedGoogleChrome

ProceedGoogleChrome patch prepared

ProceedGoogleChrome start patching

google_chrome object constructed

Google Chrome settings are synced

Google Chrome extensions are synced

TaskStartGroupBlackList::ProceedGoogleChrome failed, error =

ProceedGoogleChrome patch_util.set_was_patch(true);

mailru::TaskStartGroupBlackList::CleanUpChromeStartPages

mailru::TaskStartGroupBlackList::ProceedFirefox

ProceedFirefox is running

hXXp://go.mail.ru/?ffverfix=1&fr=ffverfix_sg

TaskStartGroupBlackList::ProceedGoogleChrome failed, er =

TaskStartGroupBlackList::ProceedGoogleChrome failed

hXXp://go.mail.ru/?ieverfix=1&fr=ieverfix_sg

..\CommonFiles\tasks\task_amigo_remove_pinned_tabs.cpp

..\CommonFiles\Tasks\task_change_sic_settings.cpp

..\CommonFiles\tasks\task_user_preferences.cpp

mailru::TaskUserPreferences::AnalyzeFirefox

hXXp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml

hXXp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml#smartbox

Error reading yandex plugin config: %s

Error changing yandex smartbar config: %s

Error disabling yandex smartbox plugin: %s

..\CommonFiles\yandex_elements.cpp

class Json::Value *__thiscall mailru::YandexElements::FindSettingInStateConfig(class Json::Value &,const class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > &,const class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > &) const

Error reading yandex config setting "%s": %s

browser.uiCustomization.state

Error enabling standard search panel: %s

guid_manager.cpp

installer.cpp

mailru::reg_keyT<0>::throw_on_error

main.cpp

Started with cmd line

c:\desktop_apps\mailruupdater\concrete_update_task.hpp

self_update_task.cpp

SendBrowsersStatistic.cpp

c:\desktop_apps\mailruupdater\SendBrowsersStatistic.h

updater::SendBrowsersStastic::BrowserData<class mailru::chromium::settings_amigo>::getDSEurl

updater::SendBrowsersStastic::BrowserData<class mailru::chromium::settings_mail>::getDSEurl

updater::SendBrowsersStastic::BrowserData<class mailru::chromium::settings_google>::getDSEurl

service.cpp

asio.misc

asio.misc error

C:\desktop_apps\3party\boost_1_56_0\boost/exception/detail/exception_ptr.hpp

update_info.cpp

fetch_url

Program fetch url

md5 fetch url

cmd_line

util.cpp

updater::Util::SaveChromeStateTask

SHA-256 part of OpenSSL 1.0.0g 18 Jan 2012

len>=0 && len<=(int)sizeof(ctx->key)

j <= (int)sizeof(ctx->key)

SHA1 part of OpenSSL 1.0.0g 18 Jan 2012

SHA-512 part of OpenSSL 1.0.0g 18 Jan 2012

ssl_sess_cert

ssl_cert

evp_pkey

x509_pkey

%s(%d): OpenSSL internal error, assertion failed: %s

RSA part of OpenSSL 1.0.0g 18 Jan 2012

supportedAlgorithms

crossCertificatePair

certificateRevocationList

cACertificate

userCertificate

userPassword

supportedApplicationContext

Microsoft Local Key set

LocalKeySet

id-Gost28147-89-None-KeyMeshing

id-Gost28147-89-CryptoPro-KeyMeshing

password based MAC

id-PasswordBasedMAC

X509v3 Certificate Issuer

certificateIssuer

certicom-arc

Proxy Certificate Information

proxyCertInfo

Microsoft Smartcardlogin

msSmartcardLogin

joint-iso-itu-t

JOINT-ISO-ITU-T

set-rootKeyThumb

setAttr-Cert

setCext-cCertRequired

setCext-certType

setct-CertResTBE

setct-CertReqTBEX

setct-CertReqTBE

setct-AcqCardCodeMsgTBE

setct-CertInqReqTBS

setct-CertResData

setct-CertReqTBS

setct-CertReqData

setct-PCertResTBS

setct-PCertReqData

setct-AcqCardCodeMsg

certificate extensions

set-certExt

set-msgExt

id-ecPublicKey

id-cmc-confirmCertAcceptance

id-cmc-getCert

id-regInfo-certReq

id-regCtrl-protocolEncrKey

id-regCtrl-oldCertID

id-it-revPassphrase

id-it-keyPairParamRep

id-it-keyPairParamReq

id-it-unsupportedOIDs

id-it-caKeyUpdateInfo

id-it-encKeyPairTypes

id-it-signKeyPairTypes

id-it-caProtEncCert

id-mod-attribute-cert

id-mod-qualified-cert-93

id-mod-qualified-cert-88

id-smime-aa-ets-certCRLTimestamp

id-smime-aa-ets-certValues

id-smime-aa-ets-CertificateRefs

id-smime-aa-ets-otherSigCert

id-smime-aa-smimeEncryptCerts

id-smime-aa-signingCertificate

id-smime-aa-encrypKeyPref

id-smime-aa-msgSigDigest

id-smime-ct-publishCert

id-smime-mod-msg-v3

sdsiCertificate

x509Certificate

localKeyID

certBag

pkcs8ShroudedKeyBag

keyBag

pbeWithSHA1And2-KeyTripleDES-CBC

pbeWithSHA1And3-KeyTripleDES-CBC

TLS Web Client Authentication

TLS Web Server Authentication

X509v3 Extended Key Usage

extendedKeyUsage

X509v3 Authority Key Identifier

authorityKeyIdentifier

X509v3 Certificate Policies

certificatePolicies

X509v3 Private Key Usage Period

privateKeyUsagePeriod

X509v3 Key Usage

keyUsage

X509v3 Subject Key Identifier

subjectKeyIdentifier

Netscape Certificate Sequence

nsCertSequence

Netscape CA Policy Url

nsCaPolicyUrl

Netscape Renewal Url

nsRenewalUrl

Netscape CA Revocation Url

nsCaRevocationUrl

Netscape Revocation Url

nsRevocationUrl

Netscape Base Url

nsBaseUrl

Netscape Cert Type

nsCertType

Netscape Certificate Extension

nsCertExt

extendedCertificateAttributes

challengePassword

dhKeyAgreement

passed a null parameter

DSO support routines

x509 certificate routines

error:lX:%s:%s:%s

Stack part of OpenSSL 1.0.0g 18 Jan 2012

Big Number part of OpenSSL 1.0.0g 18 Jan 2012

lhash part of OpenSSL 1.0.0g 18 Jan 2012

ASN.1 part of OpenSSL 1.0.0g 18 Jan 2012

hexkey

rsa_keygen_pubexp

rsa_keygen_bits

RAND part of OpenSSL 1.0.0g 18 Jan 2012

You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html

keylen <= sizeof key

EVP_CIPHER_key_length(cipher) <= (int)sizeof(md_tmp)

%d.%d.%d.%d

EC part of OpenSSL 1.0.0g 18 Jan 2012

ECDSA part of OpenSSL 1.0.0g 18 Jan 2012

.\crypto\ec\ec_key.c

DSA part of OpenSSL 1.0.0g 18 Jan 2012

Diffie-Hellman part of OpenSSL 1.0.0g 18 Jan 2012

.\crypto\dh\dh_key.c

value.single

value.set

USER32.DLL

NETAPI32.DLL

ADVAPI32.DLL

keylength

keyfunc

EVP part of OpenSSL 1.0.0g 18 Jan 2012

.\crypto\pkcs12\p12_key.c

d.registeredID

d.iPAddress

d.uniformResourceIdentifier

d.ediPartyName

d.directoryName

d.dNSName

d.rfc822Name

d.otherName

ECDH part of OpenSSL 1.0.0g 18 Jan 2012

priv_key

pub_key

%'%1$=%C%K%O%s%

.%.-.3.7.9.?.W.[.o.y.

C%C'C3C7C9COCWCiC

%s: (%d bit)

Public-Key

Private-Key

recommended-private-length: %d bits

public-key:

private-key:

PKCS#3 DH Public-Key

PKCS#3 DH Private-Key

Public-Key: (%d bit)

Private-Key: (%d bit)

<unsupported>

IP Address:%d.%d.%d.%d

URI:%s

DNS:%s

email:%s

EdiPartyName:<unsupported>

X400Name:<unsupported>

othername:<unsupported>

/usr/local/ssl/certs

/usr/local/ssl/cert.pem

SSL_CERT_DIR

SSL_CERT_FILE

CONF part of OpenSSL 1.0.0g 18 Jan 2012

X509_PUBKEY

public_key

.\crypto\asn1\x_pubkey.c

name.relativename

name.fullname

certificateHold

Certificate Hold

cessationOfOperation

Cessation Of Operation

keyCompromise

Key Compromise

%*s%s:

%*sOnly Attribute Certificates

%*sOnly CA Certificates

%*sOnly User Certificates

%d.%d.%d.%d/%d.%d.%d.%d

%*sPolicy Text: %s

%*scrlUrl:

EXTENDED_KEY_USAGE

%*sZone: %s, User:

keyid

.\crypto\x509v3\v3_akey.c

d.usernotice

d.cpsuri

d.other

CERTIFICATEPOLICIES

%*sExplicit Text: %s

%*sNumber%s:

%*sOrganization: %s

%*sCPS: %s

PKEY_USAGE_PERIOD

keyCertSign

Certificate Sign

keyAgreement

Key Agreement

keyEncipherment

Key Encipherment

.\crypto\x509v3\v3_skey.c

pubkey

EC_PRIVATEKEY

publicKey

privateKey

value.implicitlyCA

value.parameters

value.named_curve

p.char_two

p.prime

p.ppBasis

p.tpBasis

p.onBasis

p.other

PKCS8_PRIV_KEY_INFO

pkey

pkeyalg

x%s

Basis Type: %s

Field Type: %s

ASN1 OID: %s

%s %s%lu (%s0x%lx)

value.bag

value.safes

value.shkeybag

value.keybag

value.sdsicert

value.x509cert

value.other

cert_info

\X

'() ,-./:=?

CONF_def part of OpenSSL 1.0.0g 18 Jan 2012

[[%s]]

[%s] %s=%s

MD5 part of OpenSSL 1.0.0g 18 Jan 2012

PROXY_CERT_INFO_EXTENSION

crlUrl

certStatus

certId

OCSP_CERTSTATUS

value.unknown

value.revoked

value.good

value.byKey

value.byName

reqCert

OCSP_CERTID

issuerKeyHash

certs

%s - d:d:d%.*s %d%s

AUTHORITY_KEYID

enc_key

key_enc_algor

cert

d.encrypted

d.digest

d.signed_and_enveloped

d.enveloped

d.sign

d.data

.\crypto\evp\evp_pkey.c

d.receiptList

d.allOrFirstTier

d.compressedData

d.authenticatedData

d.encryptedData

d.digestedData

d.envelopedData

d.signedData

d.ori

d.pwri

d.kekri

d.kari

d.ktri

CMS_PasswordRecipientInfo

keyDerivationAlgorithm

keyIdentifier

CMS_KeyAgreeRecipientInfo

recipientEncryptedKeys

CMS_OriginatorIdentifierOrKey

d.originatorKey

CMS_OriginatorPublicKey

CMS_RecipientEncryptedKey

CMS_KeyAgreeRecipientIdentifier

d.rKeyId

CMS_RecipientKeyIdentifier

CMS_OtherKeyAttribute

keyAttr

keyAttrId

CMS_KeyTransRecipientInfo

encryptedKey

keyEncryptionAlgorithm

certificates

d.crl

d.subjectKeyIdentifier

d.issuerAndSerialNumber

CMS_CertificateChoices

d.v2AttrCert

d.v1AttrCert

d.extendedCertificate

d.certificate

CMS_OtherCertificateFormat

otherCert

otherCertFormat

X.509 part of OpenSSL 1.0.0g 18 Jan 2012

OPENSSL_ALLOW_PROXY_CERTS

X509_CERT_PAIR

X509_CERT_AUX

%s.dll

%lu:%s:%s:%d:%s

ddddddZ

ddddddZ

PEM part of OpenSSL 1.0.0g 18 Jan 2012

phrase is too short, needs to be at least %d chars

Enter PEM pass phrase:

TRUSTED CERTIFICATE

CERTIFICATE REQUEST

NEW CERTIFICATE REQUEST

CERTIFICATE

X509 CERTIFICATE

PRIVATE KEY

ENCRYPTED PRIVATE KEY

ANY PRIVATE KEY

.\crypto\evp\evp_key.c

nkey <= EVP_MAX_KEY_LENGTH

?456789:;<=

!"#$%&'()* ,-./0123

Verifying - %s

D:\Libs\opencv\sources\modules\core\include\opencv2/core/mat.inl.hpp

D:\Libs\opencv\sources\modules\imgproc\src\templmatch.cpp

img.dims <= 2 && templ.dims <= 2 && corr.dims <= 2

corrsize.height <= img.rows   templ.rows - 1 && corrsize.width <= img.cols   templ.cols - 1

(depth == CV_8U || depth == CV_32F) && type == _templ.type() && _img.dims() <= 2

_img.size().height <= _templ.size().height && _img.size().width <= _templ.size().width

D:\Libs\opencv\sources\modules\imgproc\src\sumpixels.cpp

D:\Libs\opencv\sources\modules\core\src\alloc.cpp

D:\Libs\opencv\sources\modules\core\src\matrix.cpp

m.dims >= 2

0 <= _rowRange.start && _rowRange.start <= _rowRange.end && _rowRange.end <= m.rows

0 <= _colRange.start && _colRange.start <= _colRange.end && _colRange.end <= m.cols

m.dims <= 2

0 <= roi.x && 0 <= roi.width && roi.x   roi.width <= m.cols && 0 <= roi.y && 0 <= roi.height && roi.y   roi.height <= m.rows

r == Range::all() || (0 <= r.start && r.start < r.end && r.end <= m.size[i])

COI is not supported by the function

0 <= i && i < (int)vv.size()

0 <= i && i < (int)v.size()

Unknown/unsupported array type

i < (int)vv.size()

(size_t)i < vv.size()

!fixedSize() || ((Mat*)obj)->size.operator()() == _sz

!fixedSize() || ((UMat*)obj)->size.operator()() == _sz

!fixedSize() || ((Mat*)obj)->size.operator()() == Size(_cols, _rows)

!fixedSize() || ((UMat*)obj)->size.operator()() == Size(_cols, _rows)

CV_MAT_TYPE(mtype) == m.type()

m.dims == d

m.size[j] == sizes[j]

d == 2 && ((sizes[0] == sz.height && sizes[1] == sz.width) || (allowTransposed && sizes[0] == sz.width && sizes[1] == sz.height))

!fixedSize() || len == vv.size()

Vectors with element size %d are not supported. Please, modify OutputArray::create()

v[j].empty()

i < (int)v.size()

checkScalar(value, type(), arr.kind(), _InputArray::CUDA_GPU_MAT)

_m.dims() <= 2

_src.dims() <= 2 && esz <= 32

src.size() == dst.size() && (src.cols == 1 || src.rows == 1)

dst.cols == dst.rows

m.dims <= 2 && m.rows == m.cols

_src.dims() <= 2

A.size == arrays[i0]->size

A.step[d-1] == A.elemSize()

%s:%d: error: (%d) %s in function %s

%s:%d: error: (%d) %s

OpenCV Error: %s (%s) in %s, file %s, line %d

Inplace operation is not supported

Input image depth is not supported by function

Unsupported format or combination of formats

Input COI is not supported

No CUDA support

No OpenGL support

Unknown %s code %d

D:\Libs\opencv\sources\modules\core\src\system.cpp

tlsKey != TLS_OUT_OF_INDEXES

cv::TLSContainerStorage::releaseKey

key_ >= 0

D:\Libs\opencv\sources\modules\core\src\convert.cpp

j < nsrcs && src[j].depth() == depth

i1 >= 0 && j < ndsts && dst[j].depth() == depth

D:\Libs\opencv\sources\modules\core\src\copy.cpp

mask.depth() == CV_8U && (mcn == 1 || mcn == cn)

size() == mask.size()

checkScalar(value, type(), _value.kind(), _InputArray::MAT )

mask.empty() || (mask.type() == CV_8U && size == mask.size)

Unknown/unsupported border type

src.depth() == dst.depth() && src.size == dst.size

(coi1 != 0 || src.channels() == 1) && (coi2 != 0 || dst.channels() == 1)

src.channels() == dst.channels()

D:\Libs\opencv\sources\modules\core\src\matop.cpp

CV_MAT_CN(_type) == e.a.channels()

Unknown operation

D:\Libs\opencv\sources\modules\core\src\arithm.cpp

The operation is neither 'array op array' (where arrays have the same size and type), nor 'array op scalar', nor 'scalar op array'

(mtype == CV_8U || mtype == CV_8S) && _mask.sameSize(*psrc1)

The operation is neither 'array op array' (where arrays have the same size and the same number of channels), nor 'array op scalar', nor 'scalar op array'

type2 == CV_64F && (sz2.height == 1 || sz2.height == 4)

(mtype == CV_8UC1 || mtype == CV_8SC1) && _mask.sameSize(*psrc1)

The operation is neither 'array op array' (where arrays have the same size and the same type), nor 'array op scalar', nor 'scalar op array'

D:\Libs\opencv\sources\modules\core\src\stat.cpp

mask.empty() || mask.type() == CV_8U

mask.empty() || mask.type() == CV_8UC1

dst.type() == CV_64F && dst.isContinuous() && (dst.cols == 1 || dst.rows == 1) && dcn >= cn

D:\Libs\opencv\sources\modules\core\src\mathfuncs.cpp

!)>D:\Libs\opencv\sources\modules\core\src\dxt.cpp

type == srcB.type() && srcA.size() == srcB.size()

D:\Libs\opencv\sources\modules\core\src\umatrix.cpp

D:\Libs\opencv\sources\modules\core\src\array.cpp

_dst.data == data0

NULL array pointer is passed

Unrecognized or unsupported array type

unrecognized or unsupported array type

Only continuous nD arrays are supported here

Unsupported format

rect.width >= 0 && rect.height >= 0 && rect.x < image->width && rect.y < image->height && rect.x   rect.width >= (int)(rect.width > 0) && rect.y   rect.height >= (int)(rect.height > 0)

D:\Libs\opencv\sources\modules\core\src\datastructs.cpp

D:\Libs\opencv\sources\modules\core\include\opencv2/core/private.cuda.hpp

The library is compiled without CUDA support

D:\Libs\opencv\sources\modules\core\src\opengl.cpp

The library is compiled without OpenGL support

OpenCL.dll

D:\Libs\opencv\sources\modules\core\src\matmul.cpp

type == B.type() && (type == CV_32FC1 || type == CV_64FC1 || type == CV_32FC2 || type == CV_64FC2)

a_size.width == len

a_size.height == len

C.type() == type && (((flags&GEMM_3_T) == 0 && C.rows == d_size.height && C.cols == d_size.width) || ((flags&GEMM_3_T) != 0 && C.rows == d_size.width && C.cols == d_size.height))

type == _src2.type()

src1.size == src2.size

src.channels() == 1

delta.channels() == 1 && (delta.rows == src.rows || delta.rows == 1) && (delta.cols == src.cols || delta.cols == 1)

D:\Libs\opencv\sources\modules\core\src\lapack.cpp

type == _src2.type() && (type == CV_32F || type == CV_64F)

(method != DECOMP_LU && method != DECOMP_CHOLESKY) || is_normal || src.rows == src.cols

src.rows == src.cols

w.type() == u.type() && u.type() == vt.type() && u.data && vt.data && w.data

u.cols >= nm && vt.rows >= nm && (w.size() == Size(nm, 1) || w.size() == Size(1, nm) || w.size() == Size(vt.rows, u.cols))

rhs.data == 0 || (rhs.type() == type && rhs.rows == m)

D:\Libs\opencv\sources\modules\core\src\persistence.cpp

-.Inf

An attempt to add element without a key to a map, or add element with key to sequence

The key is an empty

The key is too long

Key must start with a letter or _

Key names may only contain alphanumeric characters [a-zA-Z0-9], '-', '_' and ' '

Key should start with a letter or _

Key name may only contain alphanumeric characters [a-zA-Z0-9], '-' and '_'

elements with keys can not be written to sequence

Images with planar data layout are not supported

2if%s

ß%s

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

0123456789-

%b %d %H : %M : %S %Y

%m / %d / %y

%I : %M : %S %p

%d / %m / %y

The repeat operator "*" cannot start a regular expression.

The repeat operator "?" cannot start a regular expression.

The repeat operator " " cannot start a regular expression.

Found a closing repetition operator } with no corresponding {.

Can't terminate a sub-expression with an alternation operator |.

The \c and \C escape sequences are not supported by POSIX basic regular expressions: try the Perl syntax instead.

A regular expression can start with the alternation operator |.

Invalid alternation operators within (?...) block.

More than one alternation operator | was encountered inside a conditional expression.

Alternation operators are not allowed inside a DEFINE block.

A repetition operator cannot be applied to a zero-width assertion.

left-curly-bracket

right-curly-bracket

0123456789

Unmatched quantified repeat operator { or \{.

Invalid preceding regular expression prior to repetition operator.

boost::filesystem::directory_iterator::operator  

boost thread: trying joining itself

Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag

libs\log\src\code_conversion.cpp

libs\log\src\global_logger_storage.cpp

libs\log\src\attribute_name.cpp

[u-u-u u:u:u.u] [%s] %s %s

[u-u-u u:u:u.u] [%s] %s %ls

libs\log\src\thread_specific.cpp

Resource.cpp

%Y-%m-%d %H:%M:%S

en_US.UTF-8

log_ng.cpp

mailru::log_ng::ExecutionTimeLogger::~ExecutionTimeLogger

is_admin.cpp

c:\desktop_apps\sputniklib\auto_handle.hpp

process_enumerate.cpp

GetModuleFileNameEx succeed %s

Path.cpp

remote_config.cpp

string.cpp

version_info.cpp

AccountInfo.cpp

mailru::sqlite::database::database

sqlite.cpp

<>"#%{}|\^~[] ?&@=:,

hXXp://

hXXps://

process_util.cpp

unzip.cpp

filesystem_utils.cpp

mailru::firefox_js_core::load_prefs_js

firefox_js.cpp

!"#$%&'(

)* ,-./0123

encryption.cpp

testing_env.cpp

SessionsInfo.cpp

mailru::WaitForUserLogIn

Suggest URL

mailru::opera::searchini::save

opera_searchini.cpp

sync_objects.cpp

uninstall_manager.cpp

mailru::url_parser::init

url_parser.cpp

system_info\system_info_collector.cpp

crash_handler.cpp

shortcut.cpp

thread.entry_event

thread.exit_event

mailru::http::request_headers::get_header

C:\desktop_apps\SputnikLib/http_downloader.h

HTTP/1.1

^HTTP/1.1 (\d ) (. )

mailru::http::response_headers::response_headers

mailru::http::response_headers::get_file_time

http_downloader.cpp

mailru::http::downloader_impl::connection_data_file::~connection_data_file

mailru::http::downloader_impl::handle_read_headers

mailru::http::raw::downloader::fetch_file_attributes

HTTP error %2%: %3%

mailru::http::fetch_wstring_via_tempfile

system_info\system_info.cpp

s-sputnik.mail.ru

hXXps://VVV.geotrust.com/resources/root_certificates/certificates/Equifax_Secure_Certificate_Authority.pem

-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----

255.255.255.255

asio.ssl

asio.ssl error

add_certificate_authority

https

HTTP error:

caching_policy.cpp

task_scheduler.cpp

Line %d, Column %d

Visual C   CRT: Not enough memory to complete call to strerror.

%S#[k

?#%X.y

MaxPolicyElementKey

Operation not permitted

Inappropriate I/O control operation

Broken pipe

operator

GetProcessWindowStation

pExecutionResource

SQLite format 3

3.7.11

REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY

CREATE TABLE sqlite_master(

sql text

CREATE TEMP TABLE sqlite_temp_master(

foreign_keys

sqlite_rename_table

sqlite_rename_trigger

sqlite_rename_parent

sqlite_stat1

SQL logic error or missing database

unknown operation

large file support is disabled

RowKey

sqlite_detach

sqlite_attach

sqlite_version

sqlite_source_id

sqlite_log

sqlite_compileoption_used

sqlite_compileoption_get

SQLITE_

d-d-d d:d:d

d:d:d

d-d-d

failed to allocate %u bytes of memory

failed memory resize %u to %u bytes

922337203685477580

API call with %s database connection pointer

OsError 0x%x (%u)

os_win.c:%d: (%d) %s(%s) - %s

delayed %dms for lock/sharing conflict

%s-shm

%s\etilqs_

Recovered %d frames from WAL file %s

cannot limit WAL size: %s

invalid page number %d

2nd reference to page %d

Failed to read ptrmap key=%d

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

%d of %d pages missing from overflow list starting at %d

failed to get page %d

freelist leaf count too big on page %d

Page %d:

unable to get the page. error code=%d

btreeInitPage() returns error code %d

On tree page %d cell %d:

On page %d at right child:

Corruption detected in cell %d on page %d

Multiple uses for byte %d of page %d

Fragmentation of %d bytes reported as %d on page %d

Page %d is never used

Pointer map page %d is referenced

Outstanding page count goes from %d to %d during this analysis

unknown database %s

keyinfo(%d

%s(%d)

%s-mjXXXXXX9XXz

MJ delete: %s

MJ collide: %s

-mjX9X

foreign key constraint failed

unable to use function %s in the requested context

bind on a busy prepared statement: [%s]

zeroblob(%d)

abort at %d in [%s]: %s

constraint failed at %d in [%s]

cannot open savepoint - SQL statements in progress

no such savepoint: %s

cannot release savepoint - SQL statements in progress

cannot commit transaction - SQL statements in progress

sqlite_temp_master

sqlite_master

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

cannot change %s wal mode from within a transaction

database table is locked: %s

statement aborts at %d: [%s] %s

cannot open value of type %s

cannot open virtual table: %s

cannot open view: %s

no such column: "%s"

foreign key

indexed

cannot open %s column for writing

misuse of aliased aggregate %s

%s: %s.%s.%s

%s: %s.%s

%s: %s

not authorized to use function: %s

%r %s BY term out of range - should be between 1 and %d

too many terms in %s BY clause

Expression tree is too large (maximum depth %d)

variable number must be between ?1 and ?%d

too many SQL variables

too many columns in %s

EXECUTE %s%s SUBQUERY %d

misuse of aggregate: %s()

%.*s"%w"%s

%s%.*s"%w"

%s OR name=%Q

type='trigger' AND (%s)

sqlite_

table %s may not be altered

there is already another table or index with this name: %s

view %s may not be altered

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

sqlite_sequence

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

Cannot add a PRIMARY KEY column

UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q

sqlite_altertab_%s

CREATE TABLE %Q.%s(%s)

DELETE FROM %Q.%s WHERE %s=%Q

SELECT tbl,idx,stat FROM %Q.sqlite_stat1

invalid name: "%s"

too many attached databases - max %d

database %s is already in use

unable to open database: %s

no such database: %s

cannot detach database %s

database %s is locked

%s %T cannot reference objects in database %s

access to %s.%s.%s is prohibited

access to %s.%s is prohibited

object name reserved for internal use: %s

there is already an index named %s

too many columns on %s

duplicate column name: %s

default value of column [%s] is not constant

table "%s" has more than one primary key

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

no such collation sequence: %s

CREATE %s %.*s

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

CREATE TABLE %Q.sqlite_sequence(name,seq)

view %s is circularly defined

UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d

sqlite_stat%d

DELETE FROM %Q.sqlite_sequence WHERE name=%Q

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

sqlite_stat

table %s may not be dropped

use DROP TABLE to delete table %s

use DROP VIEW to delete view %s

foreign key on %s should reference only one column of table %T

number of columns in foreign key does not match the number of columns in the referenced table

unknown column "%s" in foreign key definition

indexed columns are not unique

table %s may not be indexed

views may not be indexed

virtual tables may not be indexed

there is already a table named %s

index %s already exists

sqlite_autoindex_%s_%d

table %s has no column named %s

CREATE%s INDEX %.*s

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

no such index: %S

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

a JOIN clause is required before %s

unable to identify the object to be reindexed

table %s may not be modified

cannot modify %s because it is a view

foreign key mismatch

table %S has %d columns but %d values were supplied

%d values for %d columns

table %S has no column named %s

%s.%s may not be NULL

PRIMARY KEY must be unique

sqlite3_extension_init

unable to open shared library [%s]

no entry point [%s] in shared library [%s]

error during initialization: %s

automatic extension loading failed: %s

foreign_key_list

*** in database %s ***

unsupported encoding: %s

malformed database schema (%s)

%s - %s

unsupported file format

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

database schema is locked: %s

unknown or unsupported join type: %T %T%s%T

RIGHT and FULL OUTER JOINs are not currently supported

a NATURAL join may not have an ON or USING clause

cannot have both ON and USING clauses in the same join

cannot join using column %s - column not present in both tables

USE TEMP B-TREE FOR %s

COMPOUND SUBQUERIES %d AND %d %s(%s)

%s.%s

%s:%d

ORDER BY clause should come after %s not before

LIMIT clause should come after %s not before

SELECTs to the left and right of %s do not have the same number of result columns

no such index: %s

sqlite_subquery_%p_

no such table: %s

SCAN TABLE %s %s%s(~%d rows)

sqlite3_get_table() called with two or more incompatible queries

cannot create %s trigger on view: %S

cannot create INSTEAD OF trigger on table: %S

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

no such trigger: %S

-- TRIGGER %s

no such column: %s

cannot VACUUM - SQL statements in progress

PRAGMA vacuum_db.synchronous=OFF

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d

vtable constructor failed: %s

vtable constructor did not declare schema: %s

no such module: %s

table %s: xBestIndex returned an invalid plan

%s SUBQUERY %d

%s TABLE %s

%s AS %s

%s USING %s%sINDEX%s%s%s

%s USING INTEGER PRIMARY KEY

%s (rowid=?)

%s (rowid>? AND rowid<?)

%s (rowid>?)

%s (rowid<?)

%s VIRTUAL TABLE INDEX %d:%s

%s (~%lld rows)

at most %d tables in a join

cannot use index: %s

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

unable to close due to unfinished backup operation

unknown database: %s

no such %s mode: %s

%s mode not allowed: %s

no such vfs: %s

database corruption at line %d of [%.10s]

misuse at line %d of [%.10s]

cannot open file at line %d of [%.10s]

c:\desktop_apps\3party\ticpp\ticpp.h

ticpp.cpp

Type is unsupported

&#xX;

</%s>

%s="%s"

%s='%s'

<!--%s-->

<![CDATA[%s]]>

version="%s"

encoding="%s"

standalone="%s"

type="%s"

href="%s"

unsupported version

.UTF-8

.windows-

windows1250

windows1251

windows1252

windows1253

windows1254

windows1255

windows1256

windows1257

windows874

windows932

windows936

Invalid or unsupported charset:

1.2.5

<fd:%d>

deflate 1.2.5 Copyright 1995-2010 Jean-loup Gailly and Mark Adler

inflate 1.2.5 Copyright 1995-2010 Mark Adler

RSA PRIVATE KEY

PUBLIC KEY

DSA PRIVATE KEY

EC PRIVATE KEY

NETSCAPE_CERT_SEQUENCE

RIPE-MD160 part of OpenSSL 1.0.0g 18 Jan 2012

SHA part of OpenSSL 1.0.0g 18 Jan 2012

MD4 part of OpenSSL 1.0.0g 18 Jan 2012

CAST part of OpenSSL 1.0.0g 18 Jan 2012

Blowfish part of OpenSSL 1.0.0g 18 Jan 2012

:RC2 part of OpenSSL 1.0.0g 18 Jan 2012

.pp@0

aEÐ

 (#EÚ

ÚE<<0

IDEA part of OpenSSL 1.0.0g 18 Jan 2012

libdes part of OpenSSL 1.0.0g 18 Jan 2012

DES part of OpenSSL 1.0.0g 18 Jan 2012

3OpenSSL 1.0.0g 18 Jan 2012

GOST signature length is %d

.\ssl\ssl_cert.c

%-23s %s Kx=%-8s Au=%-4s Enc=%-9s Mac=%-4s%s

EXPORT56

EXPORT40

EXPORT

wrong number of key bits

unsupported status type

unsupported ssl version

unsupported protocol

unsupported elliptic curve

unsupported digest type

unsupported compression algorithm

unsupported cipher

unknown pkey type

unknown key exchange type

unknown certificate type

unable to find public key parameters

unable to extract public key

unable to decode ecdh certs

unable to decode dh certs

tried to use unsupported cipher

tls peer did not respond with certificate list

tls client cert req with anon cipher

tlsv1 unsupported extension

tlsv1 certificate unobtainable

tlsv1 bad certificate status response

tlsv1 bad certificate hash value

tlsv1 alert export restriction

sslv3 alert unsupported certificate

sslv3 alert no certificate

sslv3 alert certificate unknown

sslv3 alert certificate revoked

sslv3 alert certificate expired

sslv3 alert bad certificate

signature for non signing certificate

reuse cert type not zero

reuse cert length not zero

public key not rsa

public key is not rsa

public key encrypt error

peer error unsupported certificate type

peer error no certificate

peer error certificate

peer did not return a certificate

null ssl method passed

no publickey

no private key assigned

no privatekey

Peer haven't sent GOST certificate, required for selected ciphersuite

no client cert received

no client cert method

no ciphers passed

no certificate specified

no certificate set

no certificate returned

no certificate assigned

no certificates returned

missing tmp rsa pkey

missing tmp rsa key

missing tmp ecdh key

missing tmp dh key

missing rsa signing cert

missing rsa encrypting cert

missing rsa certificate

missing export tmp rsa key

missing export tmp dh key

missing dsa signing cert

missing dh rsa cert

missing dh key

missing dh dsa cert

krb5 server rd_req (keytab perms?)

key arg too long

invalid ticket keys length

http request

https proxy request

error generating tmp rsa key

ecc cert should have sha1 signature

ecc cert should have rsa signature

ecc cert not for signing

ecc cert not for key agreement

cert length mismatch

certificate verify failed

bad ecc cert

bad dh pub key length

TLS1_SETUP_KEY_BLOCK

tls1_cert_verify_mac

SSL_VERIFY_CERT_CHAIN

SSL_use_RSAPrivateKey_file

SSL_use_RSAPrivateKey_ASN1

SSL_use_RSAPrivateKey

SSL_use_PrivateKey_file

SSL_use_PrivateKey_ASN1

SSL_use_PrivateKey

SSL_use_certificate_file

SSL_use_certificate_ASN1

SSL_use_certificate

SSL_SET_PKEY

SSL_SET_CERT

SSL_SESS_CERT_NEW

SSL_GET_SIGN_PKEY

SSL_GET_SERVER_SEND_CERT

SSL_CTX_use_RSAPrivateKey_file

SSL_CTX_use_RSAPrivateKey_ASN1

SSL_CTX_use_RSAPrivateKey

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey_ASN1

SSL_CTX_use_PrivateKey

SSL_CTX_use_certificate_file

SSL_CTX_use_certificate_chain_file

SSL_CTX_use_certificate_ASN1

SSL_CTX_use_certificate

SSL_CTX_set_client_cert_engine

SSL_CTX_check_private_key

SSL_CHECK_SRVR_ECC_CERT_AND_ALG

SSL_check_private_key

SSL_CERT_NEW

SSL_CERT_INSTANTIATE

SSL_CERT_INST

SSL_CERT_DUP

SSL_add_file_cert_subjects_to_stack

SSL_add_dir_cert_subjects_to_stack

SSL3_SETUP_KEY_BLOCK

SSL3_SEND_SERVER_KEY_EXCHANGE

SSL3_SEND_SERVER_CERTIFICATE

SSL3_SEND_CLIENT_KEY_EXCHANGE

SSL3_SEND_CLIENT_CERTIFICATE

SSL3_SEND_CERTIFICATE_REQUEST

SSL3_OUTPUT_CERT_CHAIN

SSL3_GET_SERVER_CERTIFICATE

SSL3_GET_KEY_EXCHANGE

SSL3_GET_CLIENT_KEY_EXCHANGE

SSL3_GET_CLIENT_CERTIFICATE

SSL3_GET_CERT_VERIFY

SSL3_GET_CERT_STATUS

SSL3_GET_CERTIFICATE_REQUEST

SSL3_GENERATE_KEY_BLOCK

SSL3_CHECK_CERT_AND_ALGORITHM

SSL3_ADD_CERT_TO_BUF

SSL2_SET_CERTIFICATE

SSL2_GENERATE_KEY_MATERIAL

REQUEST_CERTIFICATE

GET_CLIENT_MASTER_KEY

DTLS1_SEND_SERVER_KEY_EXCHANGE

DTLS1_SEND_SERVER_CERTIFICATE

DTLS1_SEND_CLIENT_KEY_EXCHANGE

DTLS1_SEND_CLIENT_CERTIFICATE

DTLS1_SEND_CERTIFICATE_REQUEST

DTLS1_OUTPUT_CERT_CHAIN

DTLS1_ADD_CERT_TO_BUF

CLIENT_MASTER_KEY

CLIENT_CERTIFICATE

SSLv2 part of OpenSSL 1.0.0g 18 Jan 2012

s->session->master_key_length >= 0 && s->session->master_key_length < (int)sizeof(s->session->master_key)

c->iv_len <= (int)sizeof(s->session->key_arg)

s->s2->key_material_length <= sizeof s->s2->key_material

SSLv3 part of OpenSSL 1.0.0g 18 Jan 2012

TLSv1 part of OpenSSL 1.0.0g 18 Jan 2012

os.length <= (int)sizeof(ret->session_id)

DTLSv1 part of OpenSSL 1.0.0g 18 Jan 2012

key expansion

client write key

server write key

%s:%d: rec->data != rec->input

libs\log\src\text_file_backend.cpp

%H:%M:%S.%f

.\crypto\engine\eng_pkey.c

Load certs from files in a directory

%s%clx.%s%d

unsupported type

unsupported recpientinfo type

unsupported recipient type

unsupported kek algorithm

unsupported content type

signer certificate not found

private key does not match certificate

no public key

no private key

no msgsigdigest

no key or cert

no key

not supported for this key type

not key transport

msgsigdigest wrong length

msgsigdigest verification failure

msgsigdigest error

invalid key length

invalid encrypted key length

error setting key

error getting public key

certificate verify error

certificate has no keyid

certificate already present

CMS_SIGNERINFO_VERIFY_CERT

CMS_RecipientInfo_set0_pkey

CMS_RecipientInfo_set0_key

CMS_RecipientInfo_ktri_cert_cmp

cms_msgSigDigest_add1

CMS_GET0_CERTIFICATE_CHOICES

CMS_EncryptedData_set1_key

CMS_decrypt_set1_pkey

CMS_decrypt_set1_key

CMS_add1_recipient_cert

CMS_add0_recipient_key

CMS_add0_cert

unsupported requestorname type

no certificates in chain

error parsing url

PARSE_HTTP_LINE1

OCSP_parse_url

OCSP_cert_id_new

unimplemented public key method

invalid cmd number

invalid cmd name

failed loading public key

failed loading private key

cmd not executable

ENGINE_UNLOAD_KEY

ENGINE_load_ssl_client_cert

ENGINE_load_public_key

ENGINE_load_private_key

ENGINE_get_pkey_meth

ENGINE_get_pkey_asn1_meth

ENGINE_ctrl_cmd_string

ENGINE_ctrl_cmd

ENGINE_cmd_is_executable

unsupported md algorithm

invalid signer certificate purpose

ess signing certificate error

ess add signing cert error

TS_VERIFY_CERT

TS_TST_INFO_set_msg_imprint

TS_RESP_CTX_set_signer_cert

TS_RESP_CTX_set_certs

TS_REQ_set_msg_imprint

TS_MSG_IMPRINT_set_algo

TS_CHECK_SIGNING_CERTS

ESS_SIGNING_CERT_NEW_INIT

ESS_CERT_ID_NEW_INIT

ESS_ADD_SIGNING_CERT

functionality not supported

WIN32_JOINER

unsupported pkcs12 mode

key gen error

PKCS8_add_keyusage

PKCS12_PBE_keyivgen

PKCS12_newpass

PKCS12_MAKE_SHKEYBAG

PKCS12_MAKE_KEYBAG

PKCS12_key_gen_uni

PKCS12_key_gen_asc

PKCS12_add_localkeyid

unsupported option

unable to get issuer keyid

policy syntax not currently supported

operation not defined

no proxy cert policy language defined

no issuer certificate

extension setting not supported

V2I_EXTENDED_KEY_USAGE

V2I_AUTHORITY_KEYID

S2I_SKEY_ID

S2I_ASN1_SKEY_ID

R2I_CERTPOL

unsupported cipher type

unable to find certificate

signing not supported for this key type

operation not supported on this type

no recipient matches key

no recipient matches certificate

encryption not supported for this key type

decrypted key is wrong length

PKCS7_add_certificate

unsupported method

no port specified

no port defined

no accept port specified

BIO_get_port

ECDH_compute_key

data too large for key size

unsupported field

passed null parameter

not a supported NIST prime

missing private key

keys not set

invalid private key

PKEY_EC_SIGN

PKEY_EC_PARAMGEN

PKEY_EC_KEYGEN

PKEY_EC_DERIVE

PKEY_EC_CTRL_STR

PKEY_EC_CTRL

o2i_ECPublicKey

i2o_ECPublicKey

i2d_ECPrivateKey

EC_KEY_print_fp

EC_KEY_print

EC_KEY_new

EC_KEY_generate_key

EC_KEY_copy

EC_KEY_check_key

ECKEY_TYPE2PARAM

ECKEY_PUB_ENCODE

ECKEY_PUB_DECODE

ECKEY_PRIV_ENCODE

ECKEY_PRIV_DECODE

ECKEY_PARAM_DECODE

ECKEY_PARAM2TYPE

DO_EC_KEY_PRINT

d2i_ECPrivateKey

zlib not supported

wrong public key type

unsupported public key type

unsupported encryption algorithm

unsupported any defined by type

unknown public key type

unable to decode rsa private key

unable to decode rsa key

streaming not supported

private key header missing

digest and key type not supported

bad password read

X509_PKEY_new

i2d_RSA_PUBKEY

i2d_PublicKey

i2d_PrivateKey

i2d_EC_PUBKEY

i2d_DSA_PUBKEY

d2i_X509_PKEY

d2i_PublicKey

d2i_PrivateKey

d2i_AutoPrivateKey

unsupported algorithm

unknown key type

unable to get certs public key

public key encode error

public key decode error

no cert set for us to verify

method not supported

loading cert dir

key values mismatch

key type mismatch

cert already in hash table

cant check dh key

X509_verify_cert

X509_STORE_add_cert

X509_REQ_check_private_key

X509_PUBKEY_set

X509_PUBKEY_get

X509_load_cert_file

X509_load_cert_crl_file

X509_get_pubkey_parameters

X509_check_private_key

GET_CERT_BY_SUBJECT

ADD_CERT_DIR

PKEY_DSA_KEYGEN

PKEY_DSA_CTRL

unsupported key components

unsupported encryption

read key

public key no rsa

problems getting password

keyblob too short

keyblob header parse error

expecting public key blob

expecting private key blob

error converting private key

PEM_WRITE_PRIVATEKEY

PEM_READ_PRIVATEKEY

PEM_READ_BIO_PRIVATEKEY

PEM_PK8PKEY

PEM_F_PEM_WRITE_PKCS8PRIVATEKEY

DO_PK8PKEY_FP

DO_PK8PKEY

d2i_PKCS8PrivateKey_fp

d2i_PKCS8PrivateKey_bio

unsupported salt type

unsupported private key algorithm

unsupported prf

unsupported key size

unsupported key derivation function

unsupported keylength

unsuported number of rounds

private key encode error

private key decode error

operaton not initialized

operation not supported for this keytype

no operation set

no key set

keygen failure

invalid operation

expecting a ec key

expecting a ecdsa key

expecting a dsa key

expecting a dh key

expecting an rsa key

different key types

ctrl operation not implemented

command not supported

camellia key setup failed

bn pubkey error

bad key length

aes key setup failed

PKEY_SET_TYPE

PKCS5_v2_PBE_keyivgen

PKCS5_PBE_keyivgen

EVP_PKEY_verify_recover_init

EVP_PKEY_verify_recover

EVP_PKEY_verify_init

EVP_PKEY_verify

EVP_PKEY_sign_init

EVP_PKEY_sign

EVP_PKEY_paramgen_init

EVP_PKEY_paramgen

EVP_PKEY_new

EVP_PKEY_keygen_init

EVP_PKEY_keygen

EVP_PKEY_get1_RSA

EVP_PKEY_get1_EC_KEY

EVP_PKEY_GET1_ECDSA

EVP_PKEY_get1_DSA

EVP_PKEY_get1_DH

EVP_PKEY_encrypt_old

EVP_PKEY_encrypt_init

EVP_PKEY_encrypt

EVP_PKEY_derive_set_peer

EVP_PKEY_derive_init

EVP_PKEY_derive

EVP_PKEY_decrypt_old

EVP_PKEY_decrypt_init

EVP_PKEY_decrypt

EVP_PKEY_CTX_dup

EVP_PKEY_CTX_ctrl_str

EVP_PKEY_CTX_ctrl

EVP_PKEY_copy_parameters

EVP_PKEY2PKCS8_broken

EVP_PKCS82PKEY_BROKEN

EVP_PKCS82PKEY

EVP_CIPHER_CTX_set_key_length

ECKEY_PKEY2PKCS8

ECDSA_PKEY2PKCS8

DSA_PKEY2PKCS8

DSAPKEY2PKCS8

D2I_PKEY

CAMELLIA_INIT_KEY

AES_INIT_KEY

invalid public key

PKEY_DH_KEYGEN

PKEY_DH_DERIVE

GENERATE_KEY

COMPUTE_KEY

rsa operations not supported

key size too small

invalid keybits

illegal or unsupported padding mode

digest too big for rsa key

data too small for key size

RSA_generate_key

RSA_check_key

RSA_BUILTIN_KEYGEN

PKEY_RSA_VERIFYRECOVER

PKEY_RSA_SIGN

PKEY_RSA_CTRL_STR

PKEY_RSA_CTRL

.\crypto\asn1\x_pkey.c

C:\desktop_apps\_out\MailRuUpdater.pdb

MailRuUpdater.exe

??0?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@QAE@XZ

??0?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@QAE@XZ

??0?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@QAE@XZ

??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@XZ@51

??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@XZ@51

??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@XZ@51

??_B?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@51

??_B?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ@51

?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@XZ

?get_const_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@XZ

?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@XZ

?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ

?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@XZ

?get_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@XZ

?get_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@XZ

?get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ

?get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ

?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ

?instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@A

?instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@A

?instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@A

?instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@A

?instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@A

?instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@A

?instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@A

?instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@A

?instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@A

?instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@A

?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ

?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z

?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z

?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z

?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z

?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z

?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z

?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@detail@34@A

?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@detail@34@A

?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@detail@34@A

?t@?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@detail@34@A

?t@?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@634@A

GetProcessHeap

KERNEL32.dll

SetWindowsHookExW

UnhookWindowsHookEx

USER32.dll

GDI32.dll

RegCloseKey

RegCreateKeyExW

RegDeleteKeyW

RegEnumKeyExW

RegOpenKeyExW

RegQueryInfoKeyW

ReportEventA

ADVAPI32.dll

FindExecutableW

ShellExecuteW

SHELL32.dll

ole32.dll

OLEAUT32.dll

SHLWAPI.dll

COMCTL32.dll

WS2_32.dll

PSAPI.DLL

USERENV.dll

WTSAPI32.dll

CRYPT32.dll

VERSION.dll

CreateIoCompletionPort

GetCPInfo

ShellExecuteExW

CoInternetParseUrl

urlmon.dll

PeekNamedPipe

-----BEGIN PUBLIC KEY-----

-----END PUBLIC KEY-----

zcÁ

.?AV?$_Ref_count_obj@VAuditGoogleChrome@mailru@@@std@@

.?AV?$_Ref_count_obj@VAuditFirefox@mailru@@@std@@

.?AVAuditFirefox@mailru@@

.?AVCheckerFirefox@AuditFirefox@mailru@@

.?AVCheckerHomepageFirefox@AuditFirefox@mailru@@

.?AVCheckerDefaultSearchFirefox@AuditFirefox@mailru@@

.?AVCheckerVbmFirefox@AuditFirefox@mailru@@

.?AV?$_Ref_count_obj@VCheckerHomepageFirefox@AuditFirefox@mailru@@@std@@

.?AV?$_Ref_count_obj@VCheckerDefaultSearchFirefox@AuditFirefox@mailru@@@std@@

.?AV?$_Ref_count_obj@VCheckerVbmFirefox@AuditFirefox@mailru@@@std@@

.?AVAuditGoogleChrome@mailru@@

.?AVCheckerCh@AuditGoogleChrome@mailru@@

.?AVCheckerHomepageCh@AuditGoogleChrome@mailru@@

.?AVCheckerDefaultSearchCh@AuditGoogleChrome@mailru@@

.?AVCheckerVbmCh@AuditGoogleChrome@mailru@@

.?AV?$_Ref_count_obj@VCheckerHomepageCh@AuditGoogleChrome@mailru@@@std@@

.?AV?$_Ref_count_obj@VCheckerDefaultSearchCh@AuditGoogleChrome@mailru@@@std@@

.?AV?$_Ref_count_obj@VCheckerVbmCh@AuditGoogleChrome@mailru@@@std@@

.?AV?$_Func_base@XPAV?$reg_keyT@$00@mailru@@@std@@

.?AV?$_Func_impl@U?$_Callable_obj@V<lambda_8b00b026c9439ae5ee123b07f29330c6>@@$0A@@std@@V?$allocator@V?$_Func_class@XPAV?$reg_keyT@$00@mailru@@@std@@@2@XPAV?$reg_keyT@$00@mailru@@@std@@

.?AV?$_Func_impl@U?$_Callable_obj@V<lambda_d67d694cf66593a3e1cbe5e0ac457329>@@$0A@@std@@V?$allocator@V?$_Func_class@XPAV?$reg_keyT@$00@mailru@@@std@@@2@XPAV?$reg_keyT@$00@mailru@@@std@@

.?AVsettings@firefox@mailru@@

.?AVvisual_bookmarks@firefox@mailru@@

.?AV?$_Func_impl@U?$_Callable_obj@V<lambda_852549d506963e7e0155e6efc072a19d>@@$0A@@std@@V?$allocator@V?$_Func_class@XPAV?$reg_keyT@$00@mailru@@@std@@@2@XPAV?$reg_keyT@$00@mailru@@@std@@

.?AV?$_Func_impl@U?$_Callable_obj@V<lambda_8f47c682880de3b4c07e24e1559f18fc>@@$0A@@std@@V?$allocator@V?$_Func_class@XPAV?$reg_keyT@$00@mailru@@@std@@@2@XPAV?$reg_keyT@$00@mailru@@@std@@

.?AV?$thread_data@V?$bind_t@XV?$mf0@XVRemoteTasksExecuter@mailru@@@_mfi@boost@@V?$list1@V?$value@PAVRemoteTasksExecuter@mailru@@@_bi@boost@@@_bi@3@@_bi@boost@@@detail@boost@@

.?AV?$thread_data@V?$bind_t@XV?$mf1@XVRemoteTasksExecuter@mailru@@ABV?$shared_ptr@VTaskInterface@mailru@@@std@@@_mfi@boost@@V?$list2@V?$value@PAVRemoteTasksExecuter@mailru@@@_bi@boost@@V?$value@V?$shared_ptr@VTaskInterface@mailru@@@std@@@23@@_bi@3@@_bi@boost@@@detail@boost@@

.?AVTaskOneTimeWithChromeAutorunPatch@mailru@@

.?AV?$_Func_impl@U?$_Callable_obj@V<lambda_36e85ead181c17858a3fd5b6f23c888c>@@$0A@@std@@V?$allocator@V?$_Func_class@XPAV?$reg_keyT@$00@mailru@@@std@@@2@XPAV?$reg_keyT@$00@mailru@@@std@@

.?AV?$_Func_impl@U?$_Callable_obj@V<lambda_d71f87b5d93256d8ef11999b81c97114>@@$0A@@std@@V?$allocator@V?$_Func_class@XPAV?$reg_keyT@$00@mailru@@@std@@@2@XPAV?$reg_keyT@$00@mailru@@@std@@

.?AV?$_Func_impl@U?$_Callable_obj@V<lambda_ff52a01b8c5e4b0628fdb56e2a8b3e6f>@@$0A@@std@@V?$allocator@V?$_Func_class@XPAV?$reg_keyT@$00@mailru@@@std@@@2@XPAV?$reg_keyT@$00@mailru@@@std@@

.?AVwindows_file_codecvt@@

.PAUattribute_name_info_tag@v2s_mt_nt5@log@boost@@

.?AVexception@sqlite@mailru@@

.?AV?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@

.?AU?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@

.?AUProcessKey@sysinfo@mailru@@

.?AV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@

.?AV?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@

.?AV?$singleton_wrapper@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@detail@serialization@boost@@

.?AV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@

.?AV?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@

.?AV?$singleton_wrapper@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@detail@serialization@boost@@

.?AV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@

.?AV?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@

.?AV?$singleton_wrapper@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@detail@serialization@boost@@

.?AV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$typeid_wrapper@V?$resolver_service@Vtcp@ip@asio@boost@@@ip@asio@boost@@@detail@asio@boost@@

.?AV?$typeid_wrapper@V?$stream_socket_service@Vtcp@ip@asio@boost@@@asio@boost@@@detail@asio@boost@@

.?AV?$stream_socket_service@Vtcp@ip@asio@boost@@@asio@boost@@

.?AV?$service_base@V?$stream_socket_service@Vtcp@ip@asio@boost@@@asio@boost@@@detail@asio@boost@@

.?AV?$resolver_service@Vtcp@ip@asio@boost@@@ip@asio@boost@@

.?AV?$service_base@V?$resolver_service@Vtcp@ip@asio@boost@@@ip@asio@boost@@@detail@asio@boost@@

.?AVconnection_data@downloader_impl@http@mailru@@

.?AVconnection_data_file@downloader_impl@http@mailru@@

.?AVconnection_data_string@downloader_impl@http@mailru@@

.?AV?$_Ref_count@V?$vector@V?$basic_resolver_entry@Vtcp@ip@asio@boost@@@ip@asio@boost@@V?$allocator@V?$basic_resolver_entry@Vtcp@ip@asio@boost@@@ip@asio@boost@@@std@@@std@@@std@@

.?AV?$sp_counted_impl_p@Vdownload_limitation@downloader_impl@http@mailru@@@detail@boost@@

.?AV?$sp_counted_impl_p@Vconnection_data_file@downloader_impl@http@mailru@@@detail@boost@@

.?AV?$sp_counted_impl_p@Vconnection_data_string@downloader_impl@http@mailru@@@detail@boost@@

.?AVinvalid_scheduler_policy_key@Concurrency@@

.?AVinvalid_operation@Concurrency@@

.?AVunsupported_os@Concurrency@@

.?AVinvalid_oversubscribe_operation@Concurrency@@

.?AUITopologyExecutionResource@Concurrency@@

.?AUIExecutionContext@Concurrency@@

.?AVExecutionResource@details@Concurrency@@

.?AUIExecutionResource@Concurrency@@

Inappropriate I/O control opera

<requestedExecutionLevel level='asInvoker' uiAccess='false' />

<assemblyIdentity type='win32' name='Microsoft.Windows.Common-Controls' version='6.0.0.0' processorArchitecture='x86' publicKeyToken='6595b64144ccf1df' language='*' />

< <$<(<,<

0 0$0(0,0

313C3O3a3m3r3

0%0s0

343f3

8:X:#;i;n;};

8(8&:5:_:

;";';&<5<[<

9%9U9u9

3?4X4

8œ9h9

:&:;:@:{:

4"414&585

0"0)00090

3%3s3

2/2x2c3}3

9$9(9,90949

878<8[8`8

77R7c7o7v7

5#6-676\6

8 8%8*888

? ?$?(?,?0?4?8?

8 8$8(8,8&9

2%3u3z3

9 9$9(9,9

5 5$5(5,50545~5

6$6,666<6

2"2(22282*323

2#20262=2^2

5"=)=2=9=

708}8!:(:

7 7-787@7_7

1 1$1(1,1

0'0-020@0

3#323@3#525@5

: :$:(:,:0:4:

5,5054585<5@5

3 3$3(3,3034383<3

5 5$5(5,50545

4 4$4(4,484<4

6 6$6(6,6064686<6

8 8$8(8,8084888<8

9(9,90949|9

=@>\>`>|>

< <$<0<@<

> >$>(>,>0>4>8><>

8 8$8(8,808

? ?$?(?,?0?4?8?<?

1 1$1(1,101

6 6$6(6,6064686<6@6

8 8$8(8,8084888<8@8

1 1$1(1,1014181<1@1

6 6$6(6,6

2$2,282\2|2

7,787@7`7

2,282\2|2

3 3(343\3

7,787\7|7

:,:8:@:`:

?(?4?<?\?

>$>,>8>\>|>

;(;4;<;\;

1$1,181`1

0 0(040\0

1 1(1,1|1

2 202@2`2

> >$>(>,>0>|>

praetorian.exe

qipguard.exe

BrowserManager.exe

BrowserManagerGUI.exe

QHActiveDefense.exe

QHSafeTray.exe.exe

QHWatchdog.exe

GuardMailRu.exe

JMail.Ru\Sputnik\Report

hXXp://xml.binupdate.mail.ru/audit_config.mrdj

Start new check operation

o failed to parse. New report Created

restore mail.ru for:

operation_type

checker->Check failed, msg =

hXXp://xml.binupdate.mail.ru/sputnik/spmrids.mrdj

hXXp://xml.binupdate.mail.ru/sputnik/spmrids.mrdj successfully fetched

FFExtensions/FFVbm/Url

Hp/Url

Dse/Url

Vbm/Url

Google\Chrome\User Data\Safe Browsing Extension Blacklist

Advapi32.dll

MGoogle/Chrome/User Data

Google/Chrome/Application

Software\Policies\Google\Chrome

hXXp://xml.binupdate.mail.ru/ext_storage.mrdj

Google Chrome

Google/Chrome/User Data/Default

Google/Chrome/Application/chrome.exe

Software/Google/Chrome/BLBeacon

URLS

manifest.json

sqlite3_reset

sqlite3_exec

Web Data

chrome.exe

select k.url from meta m, keywords k where m.key='Default Search Provider ID' and m.value=k.id

select id, short_name from keywords where url like '%go.mail.ru%' COLLATE NOCASE

No go.mail.ru in chromium

SELECT id FROM keywords WHERE keyword = 'mail.ru' COLLATE NOCASE

DELETE FROM keywords WHERE short_name = '@MAIL.RU'

SELECT * FROM keywords

ALTER TABLE keywords ADD COLUMN alternate_urls VARCHAR DEFAULT ''

ALTER TABLE keywords ADD COLUMN search_terms_replacement_key VARCHAR DEFAULT ''

INSERT INTO keywords

id, short_name, keyword, favicon_url, url, show_in_default_list, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, suggest_url, prepopulate_id, created_by_policy, instant_url, last_modified, sync_guid

@Mail.Ru','go.mail.ru','hXXp://go.mail.ru/favicon.ico','hXXp://go.mail.ru/search?q={searchTerms}&fr=ntg',1,1,'',1333701777,0,'windows-1251','hXXp://suggests.go.mail.ru/ff3?q={searchTerms}',%PREPOPULATE_ID%,0,'',0,'03095DE3-A6E7-4793-A20C-399A0F4A92E1'

UPDATE keywords SET short_name = '

@Mail.Ru', keyword = 'go.mail.ru', favicon_url = 'hXXp://go.mail.ru/favicon.ico', url = 'hXXp://go.mail.ru/search?q={searchTerms}&fr=ntg%RFR%',show_in_default_list = '1' WHERE id = '%ID%'

SELECT id , prepopulate_id FROM keywords WHERE keyword = 'go.mail.ru' COLLATE NOCASE

SELECT id , prepopulate_id FROM keywords WHERE keyword = 'mail.ru' COLLATE NOCASE

SELECT id, prepopulate_id FROM keywords

' WHERE key = 'Default Search Provider ID'

' WHERE key = 'Default Search Provider ID Backup'

SELECT value FROM meta WHERE key = 'version'

UPDATE keywords SET suggest_url = '%SUGGEST_URL%' WHERE keyword like '%mail.ru%'

%SUGGEST_URL%

^(chrome-extension://)?(\w{32})?/?

Software/Google/Chrome/Extensions

Sync Data Backup/SyncData.sqlite3

hXXps://clients2.google.com/service/update2/crx

hXXp://xml.binupdate.mail.ru/guard/mrids.mrdj?

Extension from url installed

DefaultSearchProviderSearchURL

DefaultSearchProviderKeyword

&%1$=%2%

mmail.ru

VVV.mail.ru

VVV.go.mail.ru

common_process.exe

{27116687-8CD6-4A82-BA83-5099C3A885BF}

{A12C4AB1-F4D0-4771-8C21-613E9D12491F}

{1079004F-E4EF-4A44-9D1F-7C9CE09CE258}

{901B414B-72A2-48C6-8DCD-29388B8B3E40}

{0ED2394C-62B6-4A80-A342-C2CA0B2A4E82}

{E60E6A0E-4092-4965-85BB-AA1ED8EBBC8E}

{ADAC3638-040C-498C-845A-F89B99705444}

{4519D3B5-465C-4AE2-A905-960CA7D5385C}

{F581DE96-9AA1-45C8-8335-B7445525371A}

{DCEF19BB-AB61-48F4-A7CB-6D677D90D1C2}

{B63A6D16-4F50-47C2-9BF7-A5D6E79C9EFD}

{11A1974E-9BEF-4B50-8E2F-9F25FC775BD1}

{3E57F3FE-4397-4DEA-A19A-760BFCD24242}

{603A8599-628C-4F00-A940-A09F1583A23E}

{D33EDE61-8E43-4C1F-9371-6A240B4DA5C9}

{C74622AC-AC0B-44E5-BDC2-EE39A5FD9EC9}

{ABCAA0D8-A892-481F-9492-ACC63768F659}

{8DC7BF6A-58F3-4740-B600-34E37FFADC21}

{4C1D0C36-25B2-4774-80E8-DAE1E7898A1A}

{96AF929E-B8EB-499E-99A8-095E4262BE26}

{027940D4-10B8-43B6-9707-A4EE47618E1D}

{45DA0BF7-F31B-4360-BF9A-8E7374A78916}

{5552B451-2086-4B64-82C6-732B18E41FCD}

{F9CC112D-19A0-455B-8D85-F5E9CB7D5914}

{0E26AC42-4B6E-4C84-8291-A0CAC999E70D}

{CFB9F60E-912D-43B3-91C9-9E06AE17ADE0}

{3CE4F0C3-2143-491F-8F20-27792166C41F}

{66CD85E0-6D8E-444E-9D71-AED8BA171A26}

{4947360E-E26B-4CC9-BB40-F4A30EDCA39E}

{14737ADB-9F88-47E8-A76F-D365509795AC}

chrome-extension://clpdgmdkdnijjbgmnajolnbnjejoeogm/visual-bookmarks.html

chrome-extension://hcncjpganfocbfoenaemagjjopkkindp/visual-bookmarks.html

chrome-extension://jaocgokledfmfebefgbeokdodbbdjhdd/visual-bookmarks.html

chrome-extension://dhngkpgdbpbkopndlpkicfaiffphdkbo/visual-bookmarks.html

)Software\AppDataLow\Software\Mail.Ru\IE_Bar

Software\Mail.Ru\IE_Bar

Software/Mail.Ru/Updater

Software\Mail.Ru\Flags

SOFTWARE/Microsoft/Windows/CurrentVersion/Uninstall

SOFTWARE/Microsoft/Windows/CurrentVersion/Run

SOFTWARE/Mail.Ru

@Mail.Ru

{09900DE8-1DCA-443F-9243-26FF581438AF}

{58810E75-E249-44C6-B989-11D227263E24}

{91397D20-1446-11D4-8AF4-0040CA1127B6}

{95289393-33EA-4F8D-B952-483415B9C955}

hXXp://mrds.mail.ru/update/2/

hXXp://suggests.go.mail.ru/ie8?q={SearchTerms}

{FFEBBF0A-C22C-4172-89FF-45215A135AC7}

Mail.Ru

iexplore.exe

{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}

{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}

firefox.exe

opera.exe

SOFTWARE/Google/Chrome/Extensions

amigo.exe

nichrome.exe

browser.exe

Yandex.Browser.New

Software/Mail.Ru/ChromeInstaller

hXXp://xml.binupdate.mail.ru/guard/update/version.xml

F777C640-57F8-4ECE-A40B-F571D25C2EFE

.html

opera

launcher.exe

SOFTWARE/Microsoft/Windows/CurrentVersion/Uninstall/Google Chrome

SOFTWARE/Microsoft/Windows/CurrentVersion/Uninstall/Bromium

Software/Microsoft/Windows/CurrentVersion/Uninstall/Xpom

Software/Microsoft/Windows/CurrentVersion/Uninstall/{1B89BC31-F539-4EBD-B94F-C24705C73433}

Software/Microsoft/Windows/CurrentVersion/Uninstall/YandexBrowser

xpom.exe

Software/Microsoft/Windows/CurrentVersion/Uninstall/xpom

Software/Microsoft/Windows/CurrentVersion/Uninstall/Amigo

google chrome

firefox

Microsoft/Windows/Start Menu

Microsoft/Windows/

tsearch-metadata.json

prefs.js

sessionstore.js

places.sqlite

cookies.sqlite

Mozilla\Firefox\profiles.ini

Mozilla\Firefox

Lsearch.json

Mozilla Firefox

mailru.xml

<SearchPlugin xmlns="hXXp://VVV.mozilla.org/2006/browser/search/" xmlns:os="hXXp://a9.com/-/spec/opensearch/1.1/">

@Mail.Ru</os:ShortName>

@Mail.Ru</os:Description>

<SearchForm>hXXp://VVV.mail.ru/</SearchForm>

<os:Url type="application/x-suggestions json" method="GET" template="hXXp://suggests.go.mail.ru/ff3?q={searchTerms}"></os:Url>

<os:Url type="text/html" method="GET" template="hXXp://go.mail.ru/search"><os:Param name="q" value="{searchTerms}"/>%PARAMS%%RFR%</os:Url>

extensions.ini

ini keys failed

extensions.json

extensions.json not parsed!

localstore.rdf

extensions.sqlite

PMail.Ru\Tmp\ffvisualbookmarks.7z

install.rdf

d.autoreg

extensions.rdf

extensions.cache

install_options.xml

@Mail.Ru

Mail.ru

Firefox

File: %s

SELECT last_visit_time FROM urls order by last_visit_time DESC LIMIT 1

couldn't create instance of IUrlHistoryStg2

EnumUrls failed

FaviconURLFallback

SuggestionsURL

ie.reg

[-HKEY_USERS\

import

reg.exe

*.dll

%1%version.txt?type=%2%&GUID=%3%&rfr=%4%

metric successfully send, url =

metric send failed, url =

Mail.Ru/Id

Software\Microsoft\Windows\CurrentVersion\Run

Software\Mail.ru\Tech\ptls

Software/Mail.Ru/Guard

R.delay

Mail.Ru/mrst

hXXp://xml.binupdate.mail.ru/tasks/shortcuts.mrdj?

url_argument

key_arg

^(http[s]?:\/\/)?(www\.)?([\w\.-] )([:\/].*)?$

Remote tasks execution started

hXXp://xml.binupdate.mail.ru/tasks.mrdj?

added task to executing task array

Software/Microsoft/Windows/CurrentVersion/Run

Syahoo.com

webalta.ru

yambler.net

yafinder.com

Found mail.ru extension of type

KhXXp://mailruupdater.cdnmail.ru/MailRuUpdater.exe

5Software\Mail.ru\Tech\ptls

SSoftware\Mail.Ru

Allow service process execute task

--uac-passed

mru_uac_passed

Guard@Mail\.ru

SwReporter

software_reporter_tool.log

Error parsing reporter logs:

dFailed to update SwReporter data:

since_last_exec

chrome

hXXp://xml.binupdate.mail.ru/tasks/ext_settings.mrdj?

Terminating update.exe

update.exe

hXXp://xml.binupdate.mail.ru/sputnik/spmrids.mrdj?

\bmail\.ru\b

K{61EB20A4-D4D5-4276-A2C9-DCCE8CE9F633}

{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}

qip.ru

Start proceed Google Chrome

Google Chrome is done

Google Chrome is not done

Start proceed Firefox

Firefox is done

Firefox is not done

hXXp://xml.binupdate.mail.ru/tasks/sg_settings.mrdj?

hXXp://go.mail.ru/?chverfix=1&fr=chverfix_sg

hXXp://go.mail.ru/search?q={SearchTerms}&ieverfix=1&fr=ieverfix_dse

hXXp://xml.binupdate.mail.ru/tasks/sg_settings.mrdj

hXXp://xml.binupdate.mail.ru/sputnik/spmrids.mrdj successfully fetching failed

Svk.com/audios

ok.ru/music

my.mail.ru/music

e.mail.ru/messages/inbox

vk.com/app

ok.ru/game

ok.ru/app

my.mail.ru/app

games.mail.ru

SELECT id, url, last_visit_time FROM urls where url like '%%%1%%%' order by last_visit_time DESC limit 1

SELECT url, last_visit_date FROM moz_places where url like '%%%1%%%' and guid != '' and guid notnull order by last_visit_date desc limit 1

\Toolbar\Custom\Packages\hXXp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox

Yandex\Toolbar\state.json

yasearch-xb\plugins.json

Software\Mail.Ru\Updater

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

uac-passed

Kamigo_tmp.exe

hXXp://binupdate.mail.ru/amigo/version2.xml

internet_tmp.exe

hXXp://binupdate.mail.ru/chrome/version3.xml

internetupdater_tmp.exe

hXXp://binupdate.mail.ru/chrome/version2.xml

0.0.0.0

inttoam_tmp.exe

hXXp://binupdate.mail.ru/chrome/internet_to_amigo.xml

28.0.1501.430

hXXp://binupdate.mail.ru/updater/version.xml

mrutmp.exe

.mru_update_service

C:\logging

amsg

last_chrome

ovr_chrome

Google/Chrome/User Data/Default/History

hXXp://xml.binupdate.mail.ru/friends.mrdj

oUpdater.Mail.Ru

Mail.Ru Group

Updater.Mail.Ru exist

Updater.Mail.Ru: Error during coping file, rc =

Service::Update update operation is proceed

Updater.Mail.Ru: StartService: RegisterServiceCtrlHandler returned error

Updater.Mail.Ru: StartService: SetServiceStatus returned error

Updater.Mail.Ru: SERVICE_CONTROL_STOP

Updater.Mail.Ru: SERVICE_CONTROL_INTERROGATE

Updater.Mail.Ru: SERVICE_CONTROL_SHUTDOWN

%1% (%2%)

\StringFileInfo\xx

notepad.exe

SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/System

0123456789 ,.

Software/Microsoft/Windows/CurrentVersion/Explorer/Shell Folders

sqlite3_prepare16_v2

sqlite3_step

sqlite3

SQLite error %1% returned by %2%

SQLite error code %1%, file %2%

sAbsolutePath: <%s>

Incorrect firefox js file

stub.exe

hXXp://xml.binupdate.mail.ru/tenv.mrdj

filter.cfg

metrics.csv

http.csv

%Y%m%d

%Y-%m-%d

%H:%M:%S

%Y%m%dT%H%M%S%F%q

%Y-%m-%d %H:%M:%S%F%Q

%Y-%b-%d %H:%M:%S%F %z

%O:%M:%S%F

Invalid url

jMail.ru/ifrm

SOFTWARE/Mail.ru

Internet Explorer/iexplore.exe

Global\651CB287-2277-4F76-84C6-1D61E868304B

Mail.ru/CommonCache

HTTP code %1%

%Y-%b-%d

l%Y%m%d

SOFTWARE/Microsoft/Windows/CurrentVersion/Explorer/Shell Folders

asio-58CCDC44-6264-4842-90C2-F3C545CB8AA7-%u-%p

hXXp://xml.binupdate.mail.ru/cache_policy.mrdj

rCachingPolicy/Urls

mscoree.dll

madvapi32.dll

skernel32.dll

combase.dll

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

portuguese-brazilian

888816666554443

6666554443

!6666554443

%5N.log

%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe

Mail.Ru updater

1.17.0.150

MailRuUpdater.exe_512:

.text

`.rdata

@.data

.rsrc

@.reloc

SHA256 block transform for x86, CRYPTOGAMS by <[email protected]>

SHA1 block transform for x86, CRYPTOGAMS by <[email protected]>

.EKSWU

DlSHA512 block transform for x86, CRYPTOGAMS by <[email protected]>

Montgomery Multiplication for x86, CRYPTOGAMS by <[email protected]>

FtPS

FTPG

FTPj

6-9'6-9'

$6.:$6.:

*?#1*?#1

>8$4,8$4,

AES for x86, CRYPTOGAMS by <[email protected]>

|$@3|$<3

Camellia for x86 by <[email protected]>

RC4 for x86, CRYPTOGAMS by <[email protected]>

<0|1<:}-

<0|9<:}5

w%s( 

8%u(j

uXj.hLj

ugj.hLj

gj.hdi

 FTPj

F\ FTP

<x%uY

><%uB

t.Jx 

;*u%C

Lj.hL

j.Yf;

_tcPVj@

.PjRW

f;F.se

?sqliu

 2 34 567

?%Y-%u

m-%du

?%H:%u

M:%Su

C:\desktop_apps\SputnikLib/log_ng.h

C:\desktop_apps\CommonFiles/url_params_common.hpp

mailru::url_params::formalize_common_params

mailru::url_params::AddWinVerInfo

mailru::url_params::AddChromeMetrics

mailru::url_params::AddToolVer

mailru::url_params::AddOtherProcessInfo

..\CommonFiles\audit\audit.cpp

..\CommonFiles\audit\audit_browsers_manager.cpp

c:\desktop_apps\commonfiles\audit\audit_browsers_manager.h

ReportTime

..\CommonFiles\audit\audit_browser_settings.cpp

mailru::AuditBrowserSettings::MakeReport

) report successfully done

Make report failed

mailru::AuditBrowserSettings::ScheduleReportCheck

mailru::AuditBrowserSettings::CollectReportInfo

mailru::AuditBrowserSettings::CheckReport

error report structer

..\CommonFiles\audit\audit_google_chrome.cpp

mailru::AuditGoogleChrome::CheckerHomepageCh::RestoreChild

mailru::AuditGoogleChrome::CheckerDefaultSearchCh::RestoreChild

mailru::AuditGoogleChrome::CheckerVbmCh::RestoreChild

:Incorrect key length

Unable to read chrome blocklist

Chrome blocklist file is not valid

chrome blocklist contains unsupported elements

..\CommonFiles\chrome-safe-browsing.cpp

mailru::chromium::ChromeSafeBrowsing::ReadSafeBrowsingFile

shard_header.add_prefix_count > kMaxAddSubChunksCount

Unable to open "%s" for writing

RegCreateKeyTransactedW

C:\desktop_apps\SputnikLib/reg_key.hpp

startup_urls

urls_to_restore_on_startup

..\commonfiles\chromiums.cpp

Chrome

RegOpenKeyTransactedW

RegDeleteKeyTransactedW

KERNEL32.DLL

boost::too_few_args: format-string referred to more arguments than were passed

boost::too_many_args: format-string referred to less arguments than were passed

%%%%-%%%%-%%%%-%%%%

C:\desktop_apps\CommonFiles/sql_lite_bind.hpp

..\CommonFiles\chromium_settings.cpp

hXXp://mail.ru

hXXp://VVV.mail.ru

browser.show_home_button

session.restore_on_startup

yandex\.ru. clid

mailru::chromium::settings::search_url

chrome_settings_overrides

search_url

template_url_data

mailru::chromium::settings::search_url_without_extensions

@MAIL.RU

suggestions_url

suggestions_url_post_params

windows-1251

keyword

mail.ru

D15371FE-C188-4E99-9841-A91F3BCBCCC3

search_terms_replacement_key

search_url_post_params

favicon_url

hXXp://go.mail.ru/favicon.ico

image_url

image_url_post_params

instant_url

instant_url_post_params

originating_url

alternate_urls

default_search_provider_data.template_url_data

suggest_url

default_search_provider.name

default_search_provider.search_url

go.mail.ru

keystore_encryption_bootstrap_token

chrome_url_overrides

chrome-extension://

extensions.settings.

hXXp://mail.ru/cnt/9824

mail.ru

mailru::chromium::settings::url_from_ext_id

extensions.known_disabled

error %s

update_url

.enabled

hXXp://xml.binupdate.mail.ru/amigo/check_policy.amg?

check_policy.amg not loaded

check_policy.amg NOT decoded

check_policy.amg NOT parsed

mailru::chromium::settings::InstallExtensionFromUrlNoThrow

Disabling dse in GPO failed: %s

Looking for local GPO failed: %s

yasearch.native_comps.hXXp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml#smartbox.all.settings.searchName

hXXp://VVV.mail.ru/cnt/7861

hXXp://agent.mail.ru/ru/download/agent_windows/download.html?sputnik=1

hXXp://img.imgsmail.ru/r/agent/favicon.ico

hXXp://mail.ru/cnt/10445

hXXp://VVV.mail.ru/

hXXp://go.mail.ru/search?fr=ntg&q={SearchTerms}

hXXp://go.mail.ru/search?fr=ntg&q=

hXXp://m.mail.ru/cgi-bin/splash?opera=1

hXXp://VVV.mail.ru/cnt/5090

hXXp://go.mail.ru/search?q=%s&fr=ntg

@mail.ru

hXXp://suggests.go.mail.ru/ff3?q={SearchTerm}

hXXp://go.mail.ru/search_images?utf8in=1&q=%s&fr=oprtb

hXXp://go.mail.ru/favicon_images.ico

hXXp://go.mail.ru/search_video?utf8in=1&q=%s&fr=oprtb

hXXp://go.mail.ru/favicon_video.ico

hXXp://VVV.mail.ru/cnt/5091

hXXp://redir.opera.com/speeddials/mail.ru

hXXp://redir.opera.com/bookmarks/mail.ru

hXXp://go.mail.ru/search?q=%s&fr=opr11

hXXp://go.mail.ru/search?q={SearchTerms}&fr=ntg

hXXp://suggests.go.mail.ru/ff3?q={searchTerms}

hXXp://mail.ru/cnt/10226

hXXp://go.mail.ru/?pin=1

mailru::default_browser::find_executable

..\CommonFiles\default_browser.cpp

C:\desktop_apps\SputnikLib/com_scope.h

SHORTCUTS PROSEED ERROR: std exception = %s

..\commonfiles\file_util.cpp

C:\desktop_apps\3party\ticpp/ticpp.h

..\CommonFiles\firefox_settings.cpp

mailru::firefox::settings::~settings

browser.startup.homepage

Profile%d

hXXp://go.mail.ru

browser.search.selectedEngine

browser.search.defaultenginename

browser.search.defaulturl

keyword.URL

extensions.enabledAddons

mailru::firefox::settings::is_yandex_elements_intsalled

[email protected]

mailru::firefox::settings::remove_media_viewer

browser.search.suggest.enabled

browser.search.useDBForOrder

Firefox

..\CommonFiles\Firefox_visual_bookmarks.cpp

mailru::firefox::visual_bookmarks::install

mailru::firefox::visual_bookmarks::download

urn:mozilla:item:

mailru::firefox::visual_bookmarks::localstore_rdf

chrome://browser/content/browser.xul#mailru_main_toolbar

(\s*app-profile\s \{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7\}\s rel%\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7\}\s \d )\s*.*

partner_new_url

partner_online_url

hXXps://xtnmailru.cdnmail.ru/go_ffvbm1_update.rdf

chrome://vbmail.ru/skin/vb-logo.png

extensions.autoDisableScopes

extensions.shownSelectionUI

mailru::firefox::enable_visual_bookmarks::PatchExtensionSqlite

mailru::firefox::enable_visual_bookmarks::PatchExtensionIni

mailru::firefox::enable_visual_bookmarks::PatchExtensionJson

updateURL

updateKey

optionsURL

aboutURL

iconURL

icon64URL

Mail.Ru

homepageURL

hXXp://sputnik.mail.ru/

{ec8030f7-c20a-464f-9b0e-13a3a9e97384}

mailru::firefox::enable_visual_bookmarks::is_enabled

mailru::firefox::enable_visual_bookmarks::PatchFileTime

..\CommonFiles\GPOManager.cpp

GetRegistryKey for machine failed

GetRegistryKey for user failed

?mailru::sqlite_bind::column_int64

search_id() = %s

HKEY_USERS ie search url = %s

HKEY_LOCAL_MACHINE ie search url = %s

..\CommonFiles\ie_settings.cpp

Disabling GPO restrictions failed: %s

mailru::reg_keyT<0>::check

ntdll.dll

kernel32.dll

..\CommonFiles\Install_stat.cpp

..\CommonFiles\savestate.cpp

web_data_ver

save_google_state_task::do_task error : item_in_storage.file_serialize

..\CommonFiles\shortcut_check.cpp

c:\desktop_apps\commonfiles\tasks\TaskShortcuts.h

..\CommonFiles\Tasks\RemoteTaskExecuter.cpp

mailru::RemoteTasksExecuter::InitTasks

mailru::RemoteTasksExecuter::ExecuteTask

mailru::RemoteTasksExecuter::FetchTasks

Fetching tasks.mrdj...

Fetching url =

google chrome sync_enabled

..\CommonFiles\Tasks\TaskEmulateWebStoreInstallation.cpp

ERROR google_blocked_mailru_extensions_base::ProceedExtensions std::exception %s !!!

..\CommonFiles\Tasks\TaskGoogleBlockedMailruSettings.cpp

ChromeVbmId

ChromeVbmArchive

..\CommonFiles\Tasks\TaskInstallUpdater.cpp

..\CommonFiles\Tasks\TaskInterface.cpp

..\CommonFiles\Tasks\TaskInstallUpdaterAsService.cpp

cmd_line =

..\CommonFiles\Tasks\TaskPeriodicDisableGPO.cpp

14000000000000000

..\CommonFiles\Tasks\TaskPreventSRT.cpp

mailru::TaskPreventSRT::SendReporterMetric

software_reporter

ReporterLogPattern

invalid map<K, T> key

ERROR: chrome_value is empty

..\CommonFiles\Tasks\TaskRemovePornExtensions.cpp

..\CommonFiles\Tasks\TaskRestoreFFDse.cpp

..\CommonFiles\Tasks\TaskStartGroupBlackList.cpp

mailru::TaskStartGroupBlackList::ProceedGoogleChrome

ProceedGoogleChrome patch prepared

ProceedGoogleChrome start patching

google_chrome object constructed

Google Chrome settings are synced

Google Chrome extensions are synced

TaskStartGroupBlackList::ProceedGoogleChrome failed, error =

ProceedGoogleChrome patch_util.set_was_patch(true);

mailru::TaskStartGroupBlackList::CleanUpChromeStartPages

mailru::TaskStartGroupBlackList::ProceedFirefox

ProceedFirefox is running

hXXp://go.mail.ru/?ffverfix=1&fr=ffverfix_sg

TaskStartGroupBlackList::ProceedGoogleChrome failed, er =

TaskStartGroupBlackList::ProceedGoogleChrome failed

hXXp://go.mail.ru/?ieverfix=1&fr=ieverfix_sg

..\CommonFiles\tasks\task_amigo_remove_pinned_tabs.cpp

..\CommonFiles\Tasks\task_change_sic_settings.cpp

..\CommonFiles\tasks\task_user_preferences.cpp

mailru::TaskUserPreferences::AnalyzeFirefox

hXXp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml

hXXp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml#smartbox

Error reading yandex plugin config: %s

Error changing yandex smartbar config: %s

Error disabling yandex smartbox plugin: %s

..\CommonFiles\yandex_elements.cpp

class Json::Value *__thiscall mailru::YandexElements::FindSettingInStateConfig(class Json::Value &,const class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > &,const class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > &) const

Error reading yandex config setting "%s": %s

browser.uiCustomization.state

Error enabling standard search panel: %s

guid_manager.cpp

installer.cpp

mailru::reg_keyT<0>::throw_on_error

main.cpp

Started with cmd line

c:\desktop_apps\mailruupdater\concrete_update_task.hpp

self_update_task.cpp

SendBrowsersStatistic.cpp

c:\desktop_apps\mailruupdater\SendBrowsersStatistic.h

updater::SendBrowsersStastic::BrowserData<class mailru::chromium::settings_amigo>::getDSEurl

updater::SendBrowsersStastic::BrowserData<class mailru::chromium::settings_mail>::getDSEurl

updater::SendBrowsersStastic::BrowserData<class mailru::chromium::settings_google>::getDSEurl

service.cpp

asio.misc

asio.misc error

C:\desktop_apps\3party\boost_1_56_0\boost/exception/detail/exception_ptr.hpp

update_info.cpp

fetch_url

Program fetch url

md5 fetch url

cmd_line

util.cpp

updater::Util::SaveChromeStateTask

SHA-256 part of OpenSSL 1.0.0g 18 Jan 2012

len>=0 && len<=(int)sizeof(ctx->key)

j <= (int)sizeof(ctx->key)

SHA1 part of OpenSSL 1.0.0g 18 Jan 2012

SHA-512 part of OpenSSL 1.0.0g 18 Jan 2012

ssl_sess_cert

ssl_cert

evp_pkey

x509_pkey

%s(%d): OpenSSL internal error, assertion failed: %s

RSA part of OpenSSL 1.0.0g 18 Jan 2012

supportedAlgorithms

crossCertificatePair

certificateRevocationList

cACertificate

userCertificate

userPassword

supportedApplicationContext

Microsoft Local Key set

LocalKeySet

id-Gost28147-89-None-KeyMeshing

id-Gost28147-89-CryptoPro-KeyMeshing

password based MAC

id-PasswordBasedMAC

X509v3 Certificate Issuer

certificateIssuer

certicom-arc

Proxy Certificate Information

proxyCertInfo

Microsoft Smartcardlogin

msSmartcardLogin

joint-iso-itu-t

JOINT-ISO-ITU-T

set-rootKeyThumb

setAttr-Cert

setCext-cCertRequired

setCext-certType

setct-CertResTBE

setct-CertReqTBEX

setct-CertReqTBE

setct-AcqCardCodeMsgTBE

setct-CertInqReqTBS

setct-CertResData

setct-CertReqTBS

setct-CertReqData

setct-PCertResTBS

setct-PCertReqData

setct-AcqCardCodeMsg

certificate extensions

set-certExt

set-msgExt

id-ecPublicKey

id-cmc-confirmCertAcceptance

id-cmc-getCert

id-regInfo-certReq

id-regCtrl-protocolEncrKey

id-regCtrl-oldCertID

id-it-revPassphrase

id-it-keyPairParamRep

id-it-keyPairParamReq

id-it-unsupportedOIDs

id-it-caKeyUpdateInfo

id-it-encKeyPairTypes

id-it-signKeyPairTypes

id-it-caProtEncCert

id-mod-attribute-cert

id-mod-qualified-cert-93

id-mod-qualified-cert-88

id-smime-aa-ets-certCRLTimestamp

id-smime-aa-ets-certValues

id-smime-aa-ets-CertificateRefs

id-smime-aa-ets-otherSigCert

id-smime-aa-smimeEncryptCerts

id-smime-aa-signingCertificate

id-smime-aa-encrypKeyPref

id-smime-aa-msgSigDigest

id-smime-ct-publishCert

id-smime-mod-msg-v3

sdsiCertificate

x509Certificate

localKeyID

certBag

pkcs8ShroudedKeyBag

keyBag

pbeWithSHA1And2-KeyTripleDES-CBC

pbeWithSHA1And3-KeyTripleDES-CBC

TLS Web Client Authentication

TLS Web Server Authentication

X509v3 Extended Key Usage

extendedKeyUsage

X509v3 Authority Key Identifier

authorityKeyIdentifier

X509v3 Certificate Policies

certificatePolicies

X509v3 Private Key Usage Period

privateKeyUsagePeriod

X509v3 Key Usage

keyUsage

X509v3 Subject Key Identifier

subjectKeyIdentifier

Netscape Certificate Sequence

nsCertSequence

Netscape CA Policy Url

nsCaPolicyUrl

Netscape Renewal Url

nsRenewalUrl

Netscape CA Revocation Url

nsCaRevocationUrl

Netscape Revocation Url

nsRevocationUrl

Netscape Base Url

nsBaseUrl

Netscape Cert Type

nsCertType

Netscape Certificate Extension

nsCertExt

extendedCertificateAttributes

challengePassword

dhKeyAgreement

passed a null parameter

DSO support routines

x509 certificate routines

error:lX:%s:%s:%s

Stack part of OpenSSL 1.0.0g 18 Jan 2012

Big Number part of OpenSSL 1.0.0g 18 Jan 2012

lhash part of OpenSSL 1.0.0g 18 Jan 2012

ASN.1 part of OpenSSL 1.0.0g 18 Jan 2012

hexkey

rsa_keygen_pubexp

rsa_keygen_bits

RAND part of OpenSSL 1.0.0g 18 Jan 2012

You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html

keylen <= sizeof key

EVP_CIPHER_key_length(cipher) <= (int)sizeof(md_tmp)

%d.%d.%d.%d

EC part of OpenSSL 1.0.0g 18 Jan 2012

ECDSA part of OpenSSL 1.0.0g 18 Jan 2012

.\crypto\ec\ec_key.c

DSA part of OpenSSL 1.0.0g 18 Jan 2012

Diffie-Hellman part of OpenSSL 1.0.0g 18 Jan 2012

.\crypto\dh\dh_key.c

value.single

value.set

USER32.DLL

NETAPI32.DLL

ADVAPI32.DLL

keylength

keyfunc

EVP part of OpenSSL 1.0.0g 18 Jan 2012

.\crypto\pkcs12\p12_key.c

d.registeredID

d.iPAddress

d.uniformResourceIdentifier

d.ediPartyName

d.directoryName

d.dNSName

d.rfc822Name

d.otherName

ECDH part of OpenSSL 1.0.0g 18 Jan 2012

priv_key

pub_key

%'%1$=%C%K%O%s%

.%.-.3.7.9.?.W.[.o.y.

C%C'C3C7C9COCWCiC

%s: (%d bit)

Public-Key

Private-Key

recommended-private-length: %d bits

public-key:

private-key:

PKCS#3 DH Public-Key

PKCS#3 DH Private-Key

Public-Key: (%d bit)

Private-Key: (%d bit)

<unsupported>

IP Address:%d.%d.%d.%d

URI:%s

DNS:%s

email:%s

EdiPartyName:<unsupported>

X400Name:<unsupported>

othername:<unsupported>

/usr/local/ssl/certs

/usr/local/ssl/cert.pem

SSL_CERT_DIR

SSL_CERT_FILE

CONF part of OpenSSL 1.0.0g 18 Jan 2012

X509_PUBKEY

public_key

.\crypto\asn1\x_pubkey.c

name.relativename

name.fullname

certificateHold

Certificate Hold

cessationOfOperation

Cessation Of Operation

keyCompromise

Key Compromise

%*s%s:

%*sOnly Attribute Certificates

%*sOnly CA Certificates

%*sOnly User Certificates

%d.%d.%d.%d/%d.%d.%d.%d

%*sPolicy Text: %s

%*scrlUrl:

EXTENDED_KEY_USAGE

%*sZone: %s, User:

keyid

.\crypto\x509v3\v3_akey.c

d.usernotice

d.cpsuri

d.other

CERTIFICATEPOLICIES

%*sExplicit Text: %s

%*sNumber%s:

%*sOrganization: %s

%*sCPS: %s

PKEY_USAGE_PERIOD

keyCertSign

Certificate Sign

keyAgreement

Key Agreement

keyEncipherment

Key Encipherment

.\crypto\x509v3\v3_skey.c

pubkey

EC_PRIVATEKEY

publicKey

privateKey

value.implicitlyCA

value.parameters

value.named_curve

p.char_two

p.prime

p.ppBasis

p.tpBasis

p.onBasis

p.other

PKCS8_PRIV_KEY_INFO

pkey

pkeyalg

x%s

Basis Type: %s

Field Type: %s

ASN1 OID: %s

%s %s%lu (%s0x%lx)

value.bag

value.safes

value.shkeybag

value.keybag

value.sdsicert

value.x509cert

value.other

cert_info

\X

'() ,-./:=?

CONF_def part of OpenSSL 1.0.0g 18 Jan 2012

[[%s]]

[%s] %s=%s

MD5 part of OpenSSL 1.0.0g 18 Jan 2012

PROXY_CERT_INFO_EXTENSION

crlUrl

certStatus

certId

OCSP_CERTSTATUS

value.unknown

value.revoked

value.good

value.byKey

value.byName

reqCert

OCSP_CERTID

issuerKeyHash

certs

%s - d:d:d%.*s %d%s

AUTHORITY_KEYID

enc_key

key_enc_algor

cert

d.encrypted

d.digest

d.signed_and_enveloped

d.enveloped

d.sign

d.data

.\crypto\evp\evp_pkey.c

d.receiptList

d.allOrFirstTier

d.compressedData

d.authenticatedData

d.encryptedData

d.digestedData

d.envelopedData

d.signedData

d.ori

d.pwri

d.kekri

d.kari

d.ktri

CMS_PasswordRecipientInfo

keyDerivationAlgorithm

keyIdentifier

CMS_KeyAgreeRecipientInfo

recipientEncryptedKeys

CMS_OriginatorIdentifierOrKey

d.originatorKey

CMS_OriginatorPublicKey

CMS_RecipientEncryptedKey

CMS_KeyAgreeRecipientIdentifier

d.rKeyId

CMS_RecipientKeyIdentifier

CMS_OtherKeyAttribute

keyAttr

keyAttrId

CMS_KeyTransRecipientInfo

encryptedKey

keyEncryptionAlgorithm

certificates

d.crl

d.subjectKeyIdentifier

d.issuerAndSerialNumber

CMS_CertificateChoices

d.v2AttrCert

d.v1AttrCert

d.extendedCertificate

d.certificate

CMS_OtherCertificateFormat

otherCert

otherCertFormat

X.509 part of OpenSSL 1.0.0g 18 Jan 2012

OPENSSL_ALLOW_PROXY_CERTS

X509_CERT_PAIR

X509_CERT_AUX

%s.dll

%lu:%s:%s:%d:%s

ddddddZ

ddddddZ

PEM part of OpenSSL 1.0.0g 18 Jan 2012

phrase is too short, needs to be at least %d chars

Enter PEM pass phrase:

TRUSTED CERTIFICATE

CERTIFICATE REQUEST

NEW CERTIFICATE REQUEST

CERTIFICATE

X509 CERTIFICATE

PRIVATE KEY

ENCRYPTED PRIVATE KEY

ANY PRIVATE KEY

.\crypto\evp\evp_key.c

nkey <= EVP_MAX_KEY_LENGTH

?456789:;<=

!"#$%&'()* ,-./0123