MD5: 4a0789fdf0c92980aa69937bda46673e
SHA1: 6e52ff7da78d5a3645a56908725d180106035cbc
SHA256: 537f9e3bd3032549fa20e7c67c950fdf6a3fd3f7e4881f372089eaf099b7130d
SSDeep: 49152:OLC9Dq69xB1KJ/2rDTiCfQsOjUoyUv2ADWoGbTZXYmaoYrSxS31CjQnplu/JyuJ:OLC9BJq2rDOCoHjUoyMpyjFDaF SFCgQ
Size: 2983664 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPXv0896v102v105v122Delphistub, UPolyXv05_v6
Company: no certificate found
Created at: 1992-06-20 01:22:17
Analyzed on: WindowsXP SP3 32-bit

Summary:

SpyTool. A program used to apply passive protection methods to spyware, such as obfuscation, encryption or polymorphism. The original malicious program is usually encrypted/compressed and stored inside the wrapper.

Payload

No specific payload has been found.

Process activity

The SpyTool creates the following process(es):

UnityWebPlayer.exe:264
AmigoDistrib.exe:244
setup.exe:1136
MailRuUpdater.exe:1936
MailRuUpdater.exe:548
MailRuUpdater.exe:364
MailRuUpdater.exe:636
MailRuUpdater.exe:552

The SpyTool injects its code into the following process(es):

%original file name%.exe:492

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process UnityWebPlayer.exe:264 makes changes in the file system.
The SpyTool creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsf3.tmp\UserInfo.dll (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsf3.tmp\UAC.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (6360 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\npUnity3D32.dll (32784 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\info.plist (192 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\Uninstall.exe (6078 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsf2.tmp (67936 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\UnityWebPlayerUpdate.exe (19592 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsf3.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\UnityBugReporter.exe (25112 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\UnityWebPlayerNP.map (12536 bytes)

The SpyTool deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsf3.tmp\UserInfo.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa1.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsf3.tmp\System.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsf3.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsf3.tmp\UAC.dll (0 bytes)

The process AmigoDistrib.exe:244 makes changes in the file system.
The SpyTool creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\CR_EC2D0.tmp\setup.exe (17080 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\CR_EC2D0.tmp\SETUP.EX_ (1659 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\CR_EC2D0.tmp\CHROME.PACKED.7Z (366388 bytes)

The SpyTool deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\CR_EC2D0.tmp\setup.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\CR_EC2D0.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\CR_EC2D0.tmp\SETUP.EX_ (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\CR_EC2D0.tmp\CHROME.PACKED.7Z (0 bytes)

The process setup.exe:1136 makes changes in the file system.
The SpyTool creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\ro.pak (262 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\it.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\snapshot_blob.bin (1717 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\unitywebplayer.exe (5442 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\zh-TW.pak (214 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\VisualElements\smalllogo.png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\ko.pak (263 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\ta.pak (4185 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\sw.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\de.pak (256 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\PepperFlash\manifest.json (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\libglesv2.dll (7972 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\chrome_watcher.dll (2105 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\lv.pak (1425 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\chrome_child.dll (310844 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\amigo_FFA3C3E0-B3B6-4D8C-928C-75AA59A806A0\UnityWebPlayer.exe (7433 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\bn.pak (3361 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\hi.pak (1810 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\amigo_FFA3C3E0-B3B6-4D8C-928C-75AA59A806A0\MailRuUpdater.exe (39945 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\sk.pak (266 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\amigo_cr.exe (1615 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\pt-PT.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\libexif.dll (310 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\ko.pak (1425 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\en-GB.pak (212 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\sw.pak (236 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\xinput1_3.dll (601 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\hr.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\fi.pak (242 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\VisualElements (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\mr.pak (1801 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\sr.pak (1670 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\es-419.pak (259 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\kn.pak (4185 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\zh-CN.pak (211 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\chrome_100_percent.pak (7433 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\es.pak (263 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\chrome_200_percent.pak (9098 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\chrome.dll (237340 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\ca.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\nl.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\fi.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\hu.pak (272 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\amigo_resources.pak (30490 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\libegl.dll (601 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\icudtl.dat (75554 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\fr.pak (276 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\da.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\nb.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\te.pak (1863 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\sr.pak (2105 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\ms.pak (234 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\ca.pak (259 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\chrome_elf.dll (132 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\secondarytile.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\hi.pak (3361 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\en-GB.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\natives_blob.bin (1677 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\chrome.dll (238288 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\chrome_installer.log (1956 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\pt-BR.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\th.pak (1789 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\delegate_execute.exe (3707 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\amigo.exe (3765 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\vi.pak (287 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\natives_blob.bin (2321 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\VisualElements\splash-620x300.png (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\PepperFlash\manifest.json (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\delegate_execute.exe (4185 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\chrome.7z (1266233 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\nacl64.exe (15116 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\sv.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\it.pak (252 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\uk.pak (2321 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\d3dcompiler_47.dll (22433 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\es.pak (1425 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\chrome_200_percent.pak (7972 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\ml.pak (3735 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\nacl_irt_x86_64.nexe (23811 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\ja.pak (308 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\lt.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\ok.exe (142 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\44.4.2403.3.manifest (248 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\VisualElements\logo.png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\amigo_cr.exe (2105 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\ml.pak (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\ar.pak (1629 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\lt.pak (257 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\te.pak (3361 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\mm.exe (130 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\chrome_100_percent.pak (5442 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\mailruupdater.exe (38588 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\gu.pak (1796 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\nacl_irt_x86_64.nexe (22433 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\et.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\ru.pak (1675 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\44.4.2403.3.manifest (248 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\resources.pak (142877 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\chrome_elf.dll (673 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\cs.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\fa.pak (2105 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\fil.pak (1425 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\zh-CN.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\bg.pak (1705 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\he.pak (296 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\id.pak (228 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\el.pak (1747 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\vi.pak (1425 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\fr.pak (1425 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\pt-PT.pak (254 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\el.pak (3073 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\id.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\nl.pak (247 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\VisualElementsManifest.xml (396 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\vk.exe (167 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\tr.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\VisualElements\logo.png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\th.pak (3073 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\en-US.pak (212 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\hr.pak (244 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\es-419.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\fil.pak (262 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\wow_helper.exe (73 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\gu.pak (3073 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\uk.pak (1689 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\fa.pak (1648 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\icudtl.dat (76782 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\PepperFlash\pepflashplayer.dll (124045 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\da.pak (234 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\VisualElements\smalllogo.png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\ms.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\kn.pak (3669 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\hu.pak (1425 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\de.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\metro_driver.dll (1763 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\mr.pak (3073 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\et.pak (228 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\ja.pak (1425 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\snapshot_blob.bin (2321 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Extensions\external_extensions.json (103 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\secondarytile.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\metro_driver.dll (3073 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\zh-TW.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\libglesv2.dll (8657 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\xinput1_3.dll (81 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\libegl.dll (81 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\pl.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\nacl_irt_x86_32.nexe (17629 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\VisualElements\splash-620x300.png (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\nacl_irt_x86_32.nexe (19686 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\en-US.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\nacl64.exe (12289 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\sk.pak (1425 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\pl.pak (253 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\chrome_watcher.dll (1636 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\tr.pak (254 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\sl.pak (241 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\mg.exe (196 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\bn.pak (1830 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\sl.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\pt-BR.pak (249 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\ro.pak (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\chrome_child.dll (307964 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\ta.pak (3682 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\ar.pak (2105 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\ru.pak (2321 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\am.pak (2105 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\libexif.dll (1425 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\cs.pak (258 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\sv.pak (235 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\am.pak (1639 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\amigo_resources.pak (28502 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\he.pak (1425 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\lv.pak (262 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\resources.pak (144882 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\nb.pak (233 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\d3dcompiler_47.dll (23811 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\PepperFlash\pepflashplayer.dll (122658 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Extensions\external_extensions.json (103 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\bg.pak (2321 bytes)

The SpyTool deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\resources.pak (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\metro_driver.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\libglesv2.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\chrome_elf.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\MailRuUpdater.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\snapshot_blob.bin (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\chrome_watcher.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\xinput1_3.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\delegate_execute.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\libegl.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\nacl_irt_x86_32.nexe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\amigo_cr.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\libexif.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\mm.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\VisualElements (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\amigo.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\nacl64.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\PepperFlash\manifest.json (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\vk.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\chrome.7z (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\VisualElements\smalllogo.png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\natives_blob.bin (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\d3dcompiler_47.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\mg.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\chrome_200_percent.pak (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\unitywebplayer.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\ok.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\icudtl.dat (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\VisualElements\logo.png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\wow_helper.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\chrome.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\secondarytile.png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\amigo_resources.pak (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\VisualElementsManifest.xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\VisualElements\splash-620x300.png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\chrome_100_percent.pak (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\chrome_child.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\nacl_irt_x86_64.nexe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\44.4.2403.3.manifest (0 bytes)

The process MailRuUpdater.exe:548 makes changes in the file system.
The SpyTool creates and/or writes to the following file(s):

%System%\GroupPolicy\User\Registry.pol (8 bytes)
%System%\GroupPolicy\gpt.ini (119 bytes)
%System%\GroupPolicy\Machine\Registry.pol (8 bytes)

The process MailRuUpdater.exe:364 makes changes in the file system.
The SpyTool creates and/or writes to the following file(s):

%Program Files%\Mail.Ru\MailRuUpdater\MailRuUpdater.exe (45846 bytes)
%System%\GroupPolicy\gpt.ini (36 bytes)

The SpyTool deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\1BCF8110E04045D4AE314256C8F9A594.html (0 bytes)

The process MailRuUpdater.exe:636 makes changes in the file system.
The SpyTool creates and/or writes to the following file(s):

%Program Files%\Mail.Ru\MailRuUpdater\MailRuUpdater.exe (39945 bytes)
%Documents and Settings%\%current user%\Application Data\MailProducts\Id (38 bytes)
%Documents and Settings%\All Users\Application Data\Mail.Ru\Id (38 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe (39945 bytes)

The process MailRuUpdater.exe:552 makes changes in the file system.
The SpyTool creates and/or writes to the following file(s):

%System%\GroupPolicy\gpt.ini (36 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe (45846 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\mrutmp.exe (777338 bytes)

The SpyTool deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe.old (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\mrutmp.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\05DE2F7EAE1D44D28DBB99073FC17352.html (0 bytes)

The process %original file name%.exe:492 makes changes in the file system.
The SpyTool creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\2D8AFB49-E3C9-489B-9AAB-A503C50FA1BF\AmigoDistrib.exe (370096 bytes)

Registry activity

The process UnityWebPlayer.exe:264 makes changes in the system registry.
The SpyTool creates and/or sets the following values in system registry:

[HKCU\Software\Classes\UnityWebPlayer.UnityWebPlayer.1]
"(Default)" = "UnityWebPlayer Control"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0]
"Version" = "5.0.3f2"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}]
"(Default)" = "UnityWebPlayer Control"

[HKCU\Software\Classes\UnityWebPlayer.UnityWebPlayer\CurVer]
"(Default)" = "UnityWebPlayer.UnityWebPlayer.1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer]
"DisplayName" = "Unity Web Player"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\UnityWebPluginAX.ocx"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0\Suffixes]
"unity3d" = ""

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}]
"AppID" = "{F008CD3D-7044-4CD4-BE14-BF3FCCF144F9}"

[HKCU\Software\Classes\AppID\{F008CD3D-7044-4CD4-BE14-BF3FCCF144F9}]
"(Default)" = "UnityWebPlayer"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\Version]
"(Default)" = "1.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer]
"DisplayVersion" = "5.0.3f2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Unity\WebPlayer]
"UnityWebPlayerDevelopment" = "no"

[HKCU\Software\Classes\UnityWebPlayer.UnityWebPlayer.1\CLSID]
"(Default)" = "{444785F1-DE89-4295-863A-D46C3A781394}"

[HKCU\Software\Classes\TypeLib\{75A564FE-95D1-41A9-B1D9-10D1E3CB502B}\1.0\0\win32]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\UnityWebPluginAX.ocx"

[HKCU\Software\Classes\UnityWebPlayer.UnityWebPlayer]
"(Default)" = "UnityWebPlayer Control"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\TypeLib]
"(Default)" = "{75A564FE-95D1-41a9-B1D9-10D1E3CB502B}"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\MiscStatus]
"(Default)" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0]
"Description" = "Unity Player 5.0.3f2"

[HKCU\Software\Unity\WebPlayer]
"un.Directory" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\MiscStatus\1]
"(Default)" = "131473"

[HKCU\Software\Classes\Interface\{6130BEAD-7375-4DB7-8B6D-7E41303CE675}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0]
"vendor" = "Unity Technologies ApS"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCU\Software\Classes\TypeLib\{75A564FE-95D1-41A9-B1D9-10D1E3CB502B}\1.0\FLAGS]
"(Default)" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer]
"NoRepair" = "1"
"HelpLink" = "http://unity3d.com/"

[HKCU\Software\Classes\Interface\{6130BEAD-7375-4DB7-8B6D-7E41303CE675}\TypeLib]
"(Default)" = "{75A564FE-95D1-41A9-B1D9-10D1E3CB502B}"

[HKCU\Software\Classes\Interface\{6130BEAD-7375-4DB7-8B6D-7E41303CE675}]
"(Default)" = "_DUnityWebPlayerAX"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0]
"ProductName" = "Unity Web Player"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0\MimeTypes\application/vnd.unity]
"Description" = "Unity Player datafile"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{444785F1-DE89-4295-863A-D46C3A781394}]
"(Default)" = ""

[HKCU\Software\Classes\UnityWebPlayer.UnityWebPlayer\CLSID]
"(Default)" = "{444785F1-DE89-4295-863A-D46C3A781394}"

[HKCU\Software\Classes\Interface\{6130BEAD-7375-4DB7-8B6D-7E41303CE675}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D10F4BFD-C3ED-44B7-BD0D-83F05E4D52D5}]
"(Default)" = "_DUnityWebPlayerAXEvents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer]
"QuietUninstallString" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\Uninstall.exe /S /CurrentUser"
"EstimatedSize" = "12288"

[HKCU\Software\Unity\WebPlayer]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0\MimeTypes\application/vnd.unity]
"Suffixes" = "unity3d"

[HKCU\Software\Classes\TypeLib\{75A564FE-95D1-41A9-B1D9-10D1E3CB502B}\1.0\HELPDIR]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader"

[HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0]
"Path" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\npUnity3D32.dll"

[HKCU\Software\Classes\Interface\{D10F4BFD-C3ED-44B7-BD0D-83F05E4D52D5}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Unity\WebPlayer]
"UnityWebPlayerReleaseChannel" = "Stable"

[HKCU\Software\Classes\Interface\{D10F4BFD-C3ED-44B7-BD0D-83F05E4D52D5}\ProxyStubClsid]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "A9 65 7C 63 B3 9C 1A 6A 57 BD B9 94 C5 0B 8F C6"

[HKCU\Software\Classes\Interface\{6130BEAD-7375-4DB7-8B6D-7E41303CE675}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer]
"UninstallString" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\Uninstall.exe /CurrentUser"
"NoModify" = "1"
"URLInfoAbout" = "http://unity3d.com/unitywebplayer.html"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Classes\AppID\UnityWebPluginAX.ocx]
"AppID" = "{F008CD3D-7044-4CD4-BE14-BF3FCCF144F9}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\VersionIndependentProgID]
"(Default)" = "UnityWebPlayer.UnityWebPlayer"

[HKCU\Software\Classes\Interface\{D10F4BFD-C3ED-44B7-BD0D-83F05E4D52D5}\TypeLib]
"(Default)" = "{75A564FE-95D1-41A9-B1D9-10D1E3CB502B}"

[HKCU\Software\Classes\TypeLib\{75A564FE-95D1-41A9-B1D9-10D1E3CB502B}\1.0]
"(Default)" = "UnityWebPlayerAXLib"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer]
"DisplayIcon" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\Uninstall.exe"

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\ProgID]
"(Default)" = "UnityWebPlayer.UnityWebPlayer.1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{444785F1-DE89-4295-863A-D46C3A781394}\iexplore\AllowedDomains\*]
"(Default)" = ""

[HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\ToolboxBitmap32]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\UnityWebPluginAX.ocx, 102"

[HKCU\Software\Classes\Interface\{D10F4BFD-C3ED-44B7-BD0D-83F05E4D52D5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer]
"Publisher" = "Unity Technologies ApS"

The process AmigoDistrib.exe:244 makes changes in the system registry.
The SpyTool creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "F4 EF 07 F7 77 9C 4D 58 AC C5 EC B9 26 23 A5 B0"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"RFR" = "789104"
"newrfr" = "789104"

The process setup.exe:1136 makes changes in the system registry.
The SpyTool creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "76 46 90 91 F9 80 B8 B1 AB E8 48 B5 B3 01 40 93"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"stage" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKCU\Software\Amigo]
"InstallerResultUIString" = "Installation failed due to unspecified error. If Amigo is currently running, please close it and try again."
"InstallerResult" = "1"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"AgentInstall" = "0"
"Guid" = "{4FF0C67E-B990-44A6-B176-E5BCF6AEDE10}"

"amigoext" = "eeecheimdlkopnpajfcdmacgkjlkcmji;diciddlabejpoaofdnmoamebeohoiobg;egohihcbmlmdokfdoecjpdiadnkjgmdd;kgkggmpkealihpbjpdmcblcplljamohl;hlnkhcccfccipjdgeddoifmlognfajdp;mbipmajmbfjakbcfnjdldckninlnmhoe;hfpahoblpjopcfnlokmndooidiinhiie;nhhefclnfbjmnbbkhjplpnciolbbbdkd"
"InstallResult" = ""

[HKCU\Software\Amigo]
"InstallerError" = "7"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Extensions\external_extensions.json,"

To automatically run itself each time Windows is booted, the SpyTool adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"amigo" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe --no-startup-window"

The SpyTool deletes the following value(s) in system registry:

[HKCU\Software\Amigo]
"InstallerExtraCode1"

[HKCU\Software\Mail.Ru\AmigoInstaller]
"first_nosidebar"
"first_bookmark_bar"

The process MailRuUpdater.exe:1936 makes changes in the system registry.
The SpyTool creates and/or sets the following values in system registry:

[HKCU\Software\Mail.Ru\Tech\ptls\{E60E6A0E-4092-4965-85BB-AA1ED8EBBC8E}]
"RUNID" = "10"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"

[HKCU\Software\Mail.Ru\Tech\ptls\{8DC7BF6A-58F3-4740-B600-34E37FFADC21}]
"CH" = "1"

[HKCU\Software\Mail.Ru\Tech\ptls\{453FD166-5BF4-4C00-AD14-4065187ABBFB}]
"done_components" = ""

[HKCU\Software\Mail.Ru\Tech\ptls\{4519D3B5-465C-4AE2-A905-960CA7D5385C}\ch]
"gdup" = "LlybSVbttQqpAxIsKaevGioKg0tb/axI90ISNjitsCEQPPctNojJY8dgJgwMmY97RzqlYn6a0mjPbCJRSMjiN3RK2RVA8uxI6FUNXA=="

[HKCU\Software\Mail.Ru\Tech\ptls\{0ED2394C-62B6-4A80-A342-C2CA0B2A4E82}]
"finished_time" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Mail.Ru\Tech\ptls\{C753EB3C-0C13-43D0-B52C-300B785B5AE9}]
"RUNID" = "10"

[HKCU\Software\Mail.Ru\Tech\ptls\{8DC7BF6A-58F3-4740-B600-34E37FFADC21}]
"finished_time" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = ""
"Desktop" = ""

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\A]
"BaseClass" = "Drive"

[HKCU\Software\Mail.Ru\Tech\ptls\{89C5113F-E3B5-4549-966B-D94AA700D5CC}]
"finished_time" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKCU\Software\Mail.Ru\Tech\ptls\{F581DE96-9AA1-45C8-8335-B7445525371A}]
"ie" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Mail.Ru\Tech\ptls\{4C1D0C36-25B2-4774-80E8-DAE1E7898A1A}\ch]
"gdup" = "LlybSVbttQqpAxIsKaevGioKg0tb/axI90ISNjitsCEQPPctNojJY8dgJgwMmY97RzqlYn6a0mjPbCJRSMjiN3RK2RVA8uxI6FUNXA=="

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Mail.Ru\Tech\ptls\{B63A6D16-4F50-47C2-9BF7-A5D6E79C9EFD}\ch]
"gdup" = "LlybSVbttQqpAxIsKaevGioKg0tb/axI90ISNjitsCEQPPctNojJY8dgJgwMk497RzqlYn6a0mjPbCJRSMjiN3RK2RVA8uxI6FUNXA=="

[HKCU\Software\Mail.Ru\Tech\ptls\{8DC7BF6A-58F3-4740-B600-34E37FFADC21}]
"amigo" = "1"

[HKCU\Software\Mail.Ru\Tech\ptls\{3E57F3FE-4397-4DEA-A19A-760BFCD24242}]
"finished_time" = "Type: REG_QWORD, Length: 8"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F]
"BaseClass" = "Drive"

[HKCU\Software\Mail.Ru\Tech\ptls\{5A38BFBE-DFD4-46C5-8598-EE133F10611F}]
"RUNID" = "10"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Mail.Ru\Tech\ptls\{4C1D0C36-25B2-4774-80E8-DAE1E7898A1A}]
"RUNID" = "12"

[HKCU\Software\Mail.Ru\Tech\ptls\{8DC7BF6A-58F3-4740-B600-34E37FFADC21}]
"xpom" = "1"

[HKCU\Software\Mail.Ru\Tech]
"UserId" = "{4A0AC478-EB6E-4BB5-A7A5-77672F48630B}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\D]
"BaseClass" = "Drive"

[HKCU\Software\Mail.Ru\Tech\ptls\{B63A6D16-4F50-47C2-9BF7-A5D6E79C9EFD}]
"RUNID" = "11"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "39 7B 5A EF 10 90 D2 0A E7 29 F4 37 4D A5 A0 E4"

[HKCU\Software\Mail.Ru\Tech\ptls\{F9CC112D-19A0-455B-8D85-F5E9CB7D5914}]
"RUNID" = "10"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Mail.Ru\Tech\ptls\{E60E6A0E-4092-4965-85BB-AA1ED8EBBC8E}\ch]
"gdup" = "LlybSVbttQqpAxIsKaevGioKg0tb/axI90ISNjitsCEQPPctNojJY8dgJgwMk497RzqlYn6a0mjPbCJRSMjiN3RK2RVA8uxI6FUNXA=="

[HKCU\Software\Mail.Ru\Tech\ptls\{CFB9F60E-912D-43B3-91C9-9E06AE17ADE0}]
"finished_time" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Mail.Ru\Tech\ptls\{3CE4F0C3-2143-491F-8F20-27792166C41F}]
"RUNID" = "10"

[HKCU\Software\Mail.Ru\Tech\ptls\{F581DE96-9AA1-45C8-8335-B7445525371A}]
"ff" = "1"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\C]
"BaseClass" = "Drive"

[HKCU\Software\Mail.Ru\Tech\ptls\{4519D3B5-465C-4AE2-A905-960CA7D5385C}]
"RUNID" = "10"

[HKU\.DEFAULT\Software\Microsoft\Direct3D\MostRecentApplication]
"Name" = "MailRuUpdater.exe"

[HKCU\Software\Mail.Ru\Tech\ptls\{9A43760C-B8B0-44BA-8DB2-82041B01D78A}]
"finished_time" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Mail.Ru\Tech\ptls\{453FD166-5BF4-4C00-AD14-4065187ABBFB}]
"RUNID" = "10"

The SpyTool deletes the following value(s) in system registry:

[HKCU\Software\Mail.Ru\Tech\ptls\{8DC7BF6A-58F3-4740-B600-34E37FFADC21}]
"xpom"
"ch"
"amigo"

The process MailRuUpdater.exe:548 makes changes in the system registry.
The SpyTool creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "F1 D6 4C B1 AD 22 4E B3 FD 8A 95 D3 69 C8 8A C8"

[HKCU\Software\Mail.Ru\Tech\ptls\{0E26AC42-4B6E-4C84-8291-A0CAC999E70D}]
"finished_time" = "Type: REG_QWORD, Length: 8"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\C]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\D]
"BaseClass" = "Drive"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F]
"BaseClass" = "Drive"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = ""

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\A]
"BaseClass" = "Drive"

The SpyTool deletes the following registry key(s):

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects]
[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{652F968E-C2AC-440E-B8C6-3AD39A19DE87}User]
[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{652F968E-C2AC-440E-B8C6-3AD39A19DE87}Machine]

The process MailRuUpdater.exe:364 makes changes in the system registry.
The SpyTool creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "C0 A4 E1 99 18 EB AD 2B 0A 2C E6 13 D3 3F 15 02"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"

[HKCU\Software\Microsoft\Direct3D\MostRecentApplication]
"Name" = "MailRuUpdater.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Mail.Ru\Tech\ptls\{4947360E-E26B-4CC9-BB40-F4A30EDCA39E}]
"RUNID" = "10"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Mail.Ru\Tech\ptls\{FC604959-8A01-4E8B-A3E5-87CEEBD6FEDB}]
"finished_time" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Mail.Ru]
"SicSettings" = "22 serialization::archive 11 0 0 1 0 0 0 0 0 20 0 0 1 0 0 0 0 24 0 0 0"

The SpyTool deletes the following registry key(s):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{0D2BA2F4-20D7-4C59-B046-2FC569DE13DE}User]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{0D2BA2F4-20D7-4C59-B046-2FC569DE13DE}Machine]

The process MailRuUpdater.exe:636 makes changes in the system registry.
The SpyTool creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater]
"Publisher" = "Mail.Ru"
"InstallLocation" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater]
"UninstallString" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe uninstall"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater]
"DisplayName" = "Служба автоматического обновления программ"

[HKCU\Software\Mail.Ru\IE_Bar\Settings]
"Guid" = "{178AD620-E968-4849-A1B0-1B09F7AEAFF7}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Mail.Ru\Updater]
"Guid" = "{178AD620-E968-4849-A1B0-1B09F7AEAFF7}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater]
"VersionMinor" = "17"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater]
"VersionMajor" = "1"
"DisplayIcon" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru]
"MailRuUpdater.exe" = "Mail.Ru updater"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "E8 E3 C2 23 99 78 D8 5F 40 37 BC F5 3E 5B 7C 9F"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"LangID" = "09 04"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

The SpyTool modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

To automatically run itself each time Windows is booted, the SpyTool adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"MailRuUpdater" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe"

The SpyTool modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The SpyTool modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The SpyTool deletes the following registry key(s):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater]

The SpyTool deletes the following value(s) in system registry:
The SpyTool disables automatic startup of the application by deleting the following autorun value:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"MailRuUpdater"

The process MailRuUpdater.exe:552 makes changes in the system registry.
The SpyTool creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "79 3D DE FE 48 60 0F AD 6D 7A 19 9E E7 91 80 97"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Extensions\external_extensions.json, , \??\%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Extensions, , \??\%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\am.pak, , \??\%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\ar.pak, , \??\%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\bg.pak, , \??\%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\bn.pak, , \??\%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\ca.pak, , \??\%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp)"

The SpyTool modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The SpyTool modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

"UNCAsIntranet" = "1"

The SpyTool modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The SpyTool deletes the following registry key(s):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{552EF551-27A7-41F9-9FEF-817E5D58D15D}User]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{552EF551-27A7-41F9-9FEF-817E5D58D15D}Machine]

The process %original file name%.exe:492 makes changes in the system registry.
The SpyTool creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy\traceIdentifier]
"Guid" = "5f31090b-d990-4e91-b16d-46121d0255aa"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil\traceIdentifier]
"Guid" = "8aefce96-4618-42ff-a057-3536aa78233e"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"EventMessageFile" = "%System%\ESENT.dll"

"CategoryCount" = "16"

[HKLM\SOFTWARE\Microsoft\ESENT\Process\4a0789fdf0c92980aa69937bda46673e\DEBUG]
"Trace Level" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy]
"Active" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg]
"Active" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg]
"ControlFlags" = "1"
"LogSessionName" = "stdout"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"Active" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy]
"LogSessionName" = "stdout"
"ControlFlags" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg\traceIdentifier]
"Guid" = "5f31090b-d990-4e91-b16d-46121d0255aa"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "A9 A5 9A 0E E2 DE FC EE 9B E7 80 58 A3 DC 53 EA"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"CategoryMessageFile" = "%System%\ESENT.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"LogSessionName" = "stdout"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"TypesSupported" = "7"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\2D8AFB49-E3C9-489B-9AAB-A503C50FA1BF]
"AmigoDistrib.exe" = "Amigo Installer"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"ControlFlags" = "1"

The SpyTool modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The SpyTool modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The SpyTool modifies IE settings for security zones to map all urls to the Intranet Zone:

"IntranetName" = "1"

The SpyTool deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\ESENT\Process\4a0789fdf0c92980aa69937bda46673e\DEBUG]
"Trace Level"

Dropped PE files

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

No information is available.

PE Sections

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 47
33f630a73ee4b967b529e04797e5851d
e6551a9b885bd2db42ad791fb694bcc8
624cb22e647b96057416002d083f2de3
3a030974f82706ac0009f4fda32927a4
f74cc202a0f4d3599b0ec0d2775f9d23
a9f3f20a74331ff892a908e9127dccfd
88fe6a6783f0b2913d31183714c73adf
ac04f58dfbe7956c3b03934950767553
4b2803c2f24122651c9851703b650927
24003bb60e22f634aacf694ba499e0bb
2c1988306e086c35e9137b87a366649b
f290c090d4f4e93aee85490c6a104183
8407adb61d1f148abe9c4b7b55a88f75
691a6e733d66c5bb6a011699cd14bef4
68087fae984dfadbdc0c9c3a033d1360
53315b10853564af0e1c25e9c12698b7
67a81ba8fd81f3bc19380ccb8c0433b1
ed84bfb1bc56b879def6b7135aa27d3a
8126841d703f34fefaf56a7a44b22e0e
a54289061567ef330d06769f96dffd47
fed8da9f835714a2f9f190cf923194bb
672dee03b347e835d01b7ba8a4139c3c
19aa6ca60db46f1f6f8dde8505779b0d
f9db20e4e7c18bcaf9ea5f98a4ca5d14
76a66162415d58a3505033f85f7724a1
1468c64ef638b80b25a9ed54d9c23ed4

URLs

URL	IP
hxxp://cuidu.sevential.ru/api
hxxp://moscow.cdnmail.ru/AmigoDistrib.exe?rfr=789104
hxxp://mrds.mail.ru/update/2/version.txt?type=mru_install&GUID={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&rfr=&masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=0&mr_service=0&ovr=0&tool=mrupdater	217.69.139.245
hxxp://mrds.mail.ru/update/2/version.txt?type=mru_online&GUID={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&rfr=&tool=mrupdater&masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=0&mr_service=0	217.69.139.245
hxxp://mrds.mail.ru/update/2/version.txt?type=mru_online_service&GUID={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&rfr=&tool=mrupdater&masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=0&mr_service=1	217.69.139.245
hxxp://binupdate.mail.ru/updater/version.xml?masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=0&mr_service=0	217.69.134.55
hxxp://mrds.mail.ru/update/2/version.txt?type=mru_install_service&GUID={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&rfr=&tool=mrupdater&masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=1&mr_service=0	217.69.139.245
hxxp://moscow.cdnmail.ru/MailRuUpdater.exe
hxxp://binupdate.mail.ru/cache_policy.mrdj	217.69.134.55
hxxp://binupdate.mail.ru/tasks.mrdj?masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=0&mr_service=1	217.69.134.55
hxxp://binupdate.mail.ru/tasks/shortcuts.mrdj?masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=1&mr_service=1	217.69.134.55
hxxp://mrds.mail.ru/update/2/version.txt?type=mru_update&GUID={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&rfr=&tool=mrupdater&masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=3&mr_service=0	217.69.139.245
hxxp://binupdate.mail.ru/chrome/version2.xml?masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=9&mr_service=0	217.69.134.55
hxxp://binupdate.mail.ru/chrome/internet_to_amigo.xml?masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=9&mr_service=0	217.69.134.55
hxxp://mrds.mail.ru/update/2/version.txt?type=mru_online_service&GUID={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&tool=mrupdater&masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&user_id={4A0AC478-EB6E-4BB5-A7A5-77672F48630B}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.24.0.246&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=0&mr_service=1	217.69.139.245
hxxp://mrds.mail.ru/update/2/version.txt?type=mru_install_service&GUID={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&tool=mrupdater&masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&user_id={4A0AC478-EB6E-4BB5-A7A5-77672F48630B}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.24.0.246&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=5&mr_service=0	217.69.139.245
hxxp://binupdate.mail.ru/audit_config.mrdj	217.69.134.55
hxxp://binupdate.mail.ru/tasks.mrdj?masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&tool=mrupdater&ver=1.24.0.246	217.69.134.55
hxxp://binupdate.mail.ru/tasks/shortcuts.mrdj?masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&tool=mrupdater&ver=1.24.0.246	217.69.134.55
hxxp://amigobin.cdnmail.ru/AmigoDistrib.exe?rfr=789104	94.100.180.110
hxxp://mailruupdater.cdnmail.ru/MailRuUpdater.exe	94.100.180.110
hxxp://xml.binupdate.mail.ru/cache_policy.mrdj	217.69.134.56
hxxp://xml.binupdate.mail.ru/tasks/shortcuts.mrdj?masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&tool=mrupdater&ver=1.24.0.246	217.69.134.56
hxxp://xml.binupdate.mail.ru/tasks.mrdj?masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&tool=mrupdater&ver=1.24.0.246	217.69.134.56
hxxp://xml.binupdate.mail.ru/audit_config.mrdj	217.69.134.56
hxxp://xml.binupdate.mail.ru/tasks/shortcuts.mrdj?masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=1&mr_service=1	217.69.134.56
hxxp://xml.binupdate.mail.ru/tasks.mrdj?masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=0&mr_service=1	217.69.134.56

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

ET TROJAN Suspicious User-Agent (FULLSTUFF)
ET SHELLCODE Possible Call with No Offset TCP Shellcode
SURICATA STREAM ESTABLISHED packet out of window
SURICATA STREAM Packet with invalid ack
SURICATA STREAM ESTABLISHED invalid ack
ET SHELLCODE Possible TCP x86 JMP to CALL Shellcode Detected
ET TROJAN VMProtect Packed Binary Inbound via HTTP - Likely Hostile
SURICATA STREAM FIN out of window
SURICATA STREAM FIN invalid ack

Traffic

GET /update/2/version.txt?type=mru_online_service&GUID={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&tool=mrupdater&masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&user_id={4A0AC478-EB6E-4BB5-A7A5-77672F48630B}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.24.0.246&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=0&mr_service=1 HTTP/1.1

User-Agent: FULLSTUFF

Host: mrds.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 204 No Content

Server: nginx

Date: Thu, 04 Feb 2016 17:08:04 GMT

Connection: close

GET /cache_policy.mrdj HTTP/1.1

Host: xml.binupdate.mail.ru

Accept: */*

Connection: close

HTTP/1.1 503 Service Temporarily Unavailable

Server: nginx

Date: Thu, 04 Feb 2016 17:07:55 GMT

Content-Type: text/html

Content-Length: 206

Connection: close
<html>..<head><title>503 Service Temporarily Unavail
able</title></head>..<body bgcolor="white">..<cen
ter><h1>503 Service Temporarily Unavailable</h1></ce
nter>..<hr><center>nginx</center>..</body>.
.</html>....

POST /api HTTP/1.0

Connection: keep-alive

Content-Length: 877

Host: cuidu.sevential.ru

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

....x.}Tmo.8. .?uXlH.c[..v p/=.M. 0.l..Z..I..b..?*qr.p....MR$..i..<g....([email protected]..."-.r.3..U..E ......`@..!..A(k..,..G...!.J..#.......0..o.....h..'0V..]..........Ro>..D^<di.j........*^.&......r.-.a.6X..E.D.|L.z.......D.d..:..K_......Rz.s..|...~,.V]..`[email protected].'yY.4..."8....<KUW.%k...ZZQ*x.....[...p..6`f.....e.U..X..K,.].....5.'.flE_...d.....Ib=g.]".Ake.3..V[7.S |.m .......U..:........;#.f.^.J?_r.wr0.=7m?..R...............S3*u..V.W..3.^b.....1;rx' ..n...=...8...PF.oP...X....Kv.....F.}..[#:.k.JpD...E... a.Y..g.;2....D2..P......I...~....w
m.......&<J.......B....ILi..8t..rt~.HH.E.~4Jh..(e..`]99..."..Y..k...e4..'..,.....2.<o..-.(...2FN.<....F..M.5.,.A....x.f.........C.....:=.A.{..4...7..H.%.#6p.UB#..L....O.`....*...B.h...a.=...L.-...{q.....P..q..'...m..e.../i.'y..!..Mi.3..,..e.".......m....:...2x..........I..."IhY...4ae)........9.....z.h.......)
HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Thu, 04 Feb 2016 17:06:38 GMT

Content-Type: text/html; charset=utf-8

Connection: close

X-Powered-By: PHP/5.4.17
'...x..T.N.0....*<.%.M.b....J.TD_.*r..n..8r..E...;...........3....?
.c/M.A..%.l.%.......E.....(....).$sBF...<....$-C.g.....!....e......
,Av.o{a...zl..VM.X].. .b...l%6...v...Y.i.T;.S:e.j)...........NO.......
.<..,."NR.....jh.F....^!9d.J.g.U.h.g.........0i..2/..5..UM. Gg.,..9
._....G.hl.n..*.q.....y..0(..PPB.........=#}-....:.......oX..`.p-...b#
..kB.!.[xC(.n.....Y.VTn=.X,# ....?.9{...#..$...............MVjSSrl....
|x.J..T..d.?...:.\..I:.~.m.G.......H.$..4...;........J.2..].^_...v..[.
.....Z`....U.2k.>..Z......R"xV.,\..S]?]>...3.>......)..o.....
.Q.q{..U...e.o/......o?.......JAV.[J..&..Lj.4.d....5b.....g.y;HX.....(
.n.....j._.n)....g.(..J..%)F.9.;j;... .......A..l..1..^.,.s.JU.....m..
3...s..ZtU.rP:4..d..~mG.0..<v....t..S.;H`.........a..q....}..d..p..
*..

GET /cache_policy.mrdj HTTP/1.1

Host: xml.binupdate.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 503 Service Temporarily Unavailable

Server: nginx

Date: Thu, 04 Feb 2016 17:08:04 GMT

Content-Type: text/html

Content-Length: 206

Connection: close
<html>..<head><title>503 Service Temporarily Unavail
able</title></head>..<body bgcolor="white">..<cen
ter><h1>503 Service Temporarily Unavailable</h1></ce
nter>..<hr><center>nginx</center>..</body>.
.</html>....

GET /tasks/shortcuts.mrdj?masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&tool=mrupdater&ver=1.24.0.246 HTTP/1.1

User-Agent: RemoteConfigFetcher

Host: xml.binupdate.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 200 OK

Server: nginx

Date: Thu, 04 Feb 2016 17:08:04 GMT

Content-Type: application/x-mrd

Connection: close

Content-Transfer-Encoding: 8bit

Content-Length: 10465
d.=<;:;K.yg`pge@`bdor(3(|.%$#"! ...n^YV_Y_A]\\...U'..............0&
lt;>7?=zmv!&&7}Zonmlkjihgfeda.$!.1...XCX...._xQPONMLKJIHGFG)..%....
......................................................................
......................................................v{?0.:9876543210
/.-, (Kaigw}OmbaKWRRH...l<.......................,2;);4.>:0'v}.&
gt;; ?".>i.?6) 1'3o........Y...QxQPONMLKJIHGFEDCB<L.............
......................................................................
............................................l<'<@.9876543210/.-,
 *)('&'MmvdrQ[I.~BITXDPF.[TH_BB^Nvu.B^@..(...~}|{zyxwvutsr.|Enmlkjihgf
edcba`_\4...5.......!.......KRG=oDCBA@................................
.....j....d1...a/....z.....t........n....S....d.......................
....................5Q...1w~s?85.76543210/.-, *)('&%$!^].cb..gf.dk..]h
W..ruU..wrX..xHxM...,.9.....x7.2...;..b./....=....%.. XYVsXWVUTSRQPONM
LKJIHGFEF...................@:...Z....W.....P.....j.......b....|)...x.
...............................................'C...#t...<l....7X..
..1.CA@5A|..KNl..LKj..Q/(%.'&%$#"! .............BC_H\LR..@FSCWJ]..I.;.
...!....$...<.!...8.-.....l.%.. '...%,....VS\eNMLKJIHGFEDCBA@......
................Y=...U....n>....i.....c.......{....w ...q..........
...................................."D...<i...9g....2_BlFy..DDK8wOr
..M{RQ"Po..Z]}.._Ze..`...3......................KzE....#....&...>.?
...>./.....j!. ..#. 'T"...(/...-4...6NKbGFEDCBA@...................
..................................................................
<<< skipped >>>

POST /api HTTP/1.0

Connection: keep-alive

Content-Length: 188

Host: cuidu.sevential.ru

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

....x.%.An.1.E..u*a.
.e"..6J.i2..*w/..x_....T.....\.W.^..wS..#{.V../..-.tJ..(. ...y
.....!1I!..B.J.(.......

S&.3.,i.. i...!.XxL...ENmAU..i*.Z...7n...e..(2....Z[.cMe...K....Y.{..r..J...yB.
HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Thu, 04 Feb 2016 17:06:42 GMT

Content-Type: text/html; charset=utf-8

Connection: close

X-Powered-By: PHP/5.4.17
7...x......@...^..t=X.!Y...5......"..M.W4J..j......|..y...........

GET /audit_config.mrdj HTTP/1.1

Host: xml.binupdate.mail.ru

Accept: */*

User-Agent: RemoteConfigFetcher

Connection: close

HTTP/1.1 200 OK

Server: nginx

Date: Thu, 04 Feb 2016 17:08:04 GMT

Content-Type: application/x-mrd

Connection: close

Content-Transfer-Encoding: 8bit

Content-Length: 43
d.=<;:;[.sv.`Fx}jGcxnx.iku'$9"Z3........j<H..

GET /tasks/shortcuts.mrdj?masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=1&mr_service=1 HTTP/1.1

Host: xml.binupdate.mail.ru

Accept: */*

User-Agent: RemoteConfigFetcher

Connection: close

HTTP/1.1 200 OK

Server: nginx

Date: Thu, 04 Feb 2016 17:07:56 GMT

Content-Type: application/x-mrd

Connection: close

Content-Transfer-Encoding: 8bit

Content-Length: 10465
d.=<;:;K.yg`pge@`bdor(3(|.%$#"! ...n^YV_Y_A]\\...U'..............0&
lt;>7?=zmv!&&7}Zonmlkjihgfeda.$!.1...XCX...._xQPONMLKJIHGFG)..%....
......................................................................
......................................................v{?0.:9876543210
/.-, (Kaigw}OmbaKWRRH...l<.......................,2;);4.>:0'v}.&
gt;; ?".>i.?6) 1'3o........Y...QxQPONMLKJIHGFEDCB<L.............
......................................................................
............................................l<'<@.9876543210/.-,
 *)('&'MmvdrQ[I.~BITXDPF.[TH_BB^Nvu.B^@..(...~}|{zyxwvutsr.|Enmlkjihgf
edcba`_\4...5.......!.......KRG=oDCBA@................................
.....j....d1...a/....z.....t........n....S....d.......................
....................5Q...1w~s?85.76543210/.-, *)('&%$!^].cb..gf.dk..]h
W..ruU..wrX..xHxM...,.9.....x7.2...;..b./....=....%.. XYVsXWVUTSRQPONM
LKJIHGFEF...................@:...Z....W.....P.....j.......b....|)...x.
...............................................'C...#t...<l....7X..
..1.CA@5A|..KNl..LKj..Q/(%.'&%$#"! .............BC_H\LR..@FSCWJ]..I.;.
...!....$...<.!...8.-.....l.%.. '...%,....VS\eNMLKJIHGFEDCBA@......
................Y=...U....n>....i.....c.......{....w ...q..........
...................................."D...<i...9g....2_BlFy..DDK8wOr
..M{RQ"Po..Z]}.._Ze..`...3......................KzE....#....&...>.?
...>./.....j!. ..#. 'T"...(/...-4...6NKbGFEDCBA@...................
..................................................................
<<< skipped >>>

GET /AmigoDistrib.exe?rfr=789104 HTTP/1.1

Host: amigobin.cdnmail.ru

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

HTTP/1.1 200 OK

Server: nginx

Date: Thu, 04 Feb 2016 17:07:12 GMT

Content-Type: application/octet-stream

Content-Length: 48920808

Connection: keep-alive

Last-Modified: Fri, 25 Dec 2015 13:48:50 GMT

ETag: "567d4942-2ea78e8"

Accept-Ranges: bytes
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.........D.^.*E^.*E
^.*E...E_.*ES..EI.*ES..EP.*ES..E>.*E.C.EY.*E^. E9.*E#..EY.*ES..E_.*
E^..E].*E#..E_.*ERich^.*E........PE..L...>EKV......................
[email protected]...............
[email protected]>...........V..."..........@..
[email protected]....................
........text............................... ..`.data..................
[email protected]......................@[email protected]>
...@...@..................@[email protected][email protected]
......................................................................
......................................................................
......................................................................
......................................................................
.....................................................................m
@.ku@...@.*.@..........~@...@...@.....................>EKV........^
...0O..0C......>EKV.............O...C..{.8.A.6.9.D.3.4.5.-.D.5.6.4.
-.4.6.3.c.-.A.F.F.1.-.A.6.9.D.9.E.5.3.0.F.9.6.}.....{.4.e.a.1.6.a.c.7.
-.f.d.5.a.-.4.7.c.3.-.8.7.5.b.-.d.b.f.4.a.2.0.0.8.c.2.0.}.....{.8.B.A.
9.8.6.D.A.-.5.1.0.0.-.4.0.5.E.-.A.A.3.5.-.8.6.F.3.4.A.0.2.A.C.B.F.}...
..{.4.D.C.8.B.4.C.A.-.1.B.D.A.-.4.8.3.e.-.B.5.F.A.-.D.3.C.1.2.E.1.5.B.
6.2.D.}.....-.-.c.h.r.o.m.e.-.s.x.s.....-.-.c.h.r.o.m.e.....-.-.c.
<<< skipped >>>

GET /update/2/version.txt?type=mru_online&GUID={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&rfr=&tool=mrupdater&masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=0&mr_service=0 HTTP/1.1

Host: mrds.mail.ru

Accept: */*

User-Agent: FULLSTUFF

Connection: close

HTTP/1.1 204 No Content

Server: nginx

Date: Thu, 04 Feb 2016 17:07:55 GMT

Connection: close

GET /tasks.mrdj?masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=0&mr_service=1 HTTP/1.1

Host: xml.binupdate.mail.ru

Accept: */*

User-Agent: RemoteConfigFetcher

Connection: close

HTTP/1.1 200 OK

Server: nginx

Date: Thu, 04 Feb 2016 17:07:55 GMT

Content-Type: application/x-mrd

Connection: close

Content-Transfer-Encoding: 8bit

Content-Length: 9379
d..>O{jsd4/4h...-uO:8K?L60(0E71-..~...{~..t.w.t..m.imnT...^.* (.:0&
lt;~az-*"3y^Z[Xr=;#%/[email protected].......=........
......................................................................
...................................................~wqnn4z|y{t}.<ce
 ibShb.jjYge`i/7E.7523D2>?H.9;8.T....n.j.....a....oq.cimzocd..f.z}u
y.7krg=OMJKc%.._F[....Z.}z{S.....IPIYWJomjkC..........................
......................................................................
................................ .1....:dsgbzqtO.|dcyc}q%<%pqwd,574
[email protected].."./,.`WRT03.=);4 ulu/Y[XYFl.$.)"."*$=axaquwtu.ppq.
Z.}zP.4,  ]R( E&$SUNVY&...............................................
......................................................................
........../'/1/#/-:. VQ?PQ>KI4NHKK?Cx&9"z.674.^TX...AFFW.:&'$.Y_GAC
......*VWT~(? .>50.# 8?='95ipi<53 hIKHI]....XCXU.......Mdde.Fcan
D.T&&SS...............................................................
................................................................=]hoou
tHvdty`0 0t..... KocfoGgmaF....001>K?=:O.:&'.W...i.........si.kjt.n
bey.bh.~{u..xz.:d.d8HHIv\...XCX...._xxyfL.....J]FTTOhhi...............
......................................................................
..........................................?/-0....5epfe{ruP~.edx`|~$?$
wpte.4452.MAGS....^^JZDAN.#!.[..* .[.....j.`z.mma.eh~.`u.s{e...rpuwx9H
HE.XCX.||}zP...LWL.....JomjkC.........................................
..................................................................
<<< skipped >>>

GET /update/2/version.txt?type=mru_install&GUID={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&rfr=&masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=0&mr_service=0&ovr=0&tool=mrupdater HTTP/1.1

Host: mrds.mail.ru

Accept: */*

User-Agent: FULLSTUFF

Connection: close

HTTP/1.1 204 No Content

Server: nginx

Date: Thu, 04 Feb 2016 17:07:54 GMT

Connection: close

GET /update/2/version.txt?type=mru_install_service&GUID={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&rfr=&tool=mrupdater&masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=1&mr_service=0 HTTP/1.1

Host: mrds.mail.ru

Accept: */*

User-Agent: FULLSTUFF

Connection: close

HTTP/1.1 204 No Content

Server: nginx

Date: Thu, 04 Feb 2016 17:07:55 GMT

Connection: close

GET /MailRuUpdater.exe HTTP/1.1

Host: mailruupdater.cdnmail.ru

Accept: */*

Range: bytes=0-6058712

User-Agent: MailRuUpdater

Connection: close

HTTP/1.1 206 Partial Content

Server: nginx

Date: Thu, 04 Feb 2016 17:07:55 GMT

Content-Type: application/octet-stream

Content-Length: 6058712

Connection: close

Last-Modified: Tue, 02 Feb 2016 12:51:45 GMT

ETag: "56b0a661-5c72d8"

Content-Range: bytes 0-6058711/6058712
[email protected].........
..!..L.!This program cannot be run in DOS mode....$....... .mgo..4o..4
o..4f..4n..4.B.4a..4.|.4n..4b..4_..4b..4...4b..4v..4)..4h..4...4L..4o.
.4...4f..4...4f..4L..4o..4...4.B.4...4.B.4n..4b..4n..4o..4n..4.B.4n..4
Richo..4................PE..L......V.................*G...........1...
...@[email protected]].......]...@.....................
....`"[email protected]\.......Y..u...^G.8.............
.......>O.....X>O.@[email protected]
ext...{)G......*G................. ..`[email protected].........
....@[email protected][email protected]..."[email protected]
[email protected][email protected].............@[email protected]..
[email protected]..........................................
......................................................................
......................................................................
...................................................`....F 1.V.t$p..u..
.....D$.P..........u.^..`..L$l.T$hQR.D$.P......L$.QV......T$.j`R.7....
....^..`..............V.t$.jpj.V.!'1...........F...|6.F...p0.F.9Y...F.
1....F...Xh.F....d.F..O...Fl.........^..........V.t$.jpj.V..&1......g.
.j.F...g..F.r.n<.F.:.O..F..R.Q.F..h...F......F....[.Fl ........^...
........T$.UW.|$...........V.t$..F ...;.s..F$......F$.FhS.N ..tj.n(..@
s"[email protected].....~h[^_.....]..@... .SR..(R...1.j.UV......D$0j@.
..j.U.L$< ..Fh......%1..l$<..$.......v.SUV............. ...t
<<< skipped >>>

GET /update/2/version.txt?type=mru_update&GUID={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&rfr=&tool=mrupdater&masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=3&mr_service=0 HTTP/1.1

Host: mrds.mail.ru

Accept: */*

User-Agent: FULLSTUFF

Connection: close

HTTP/1.1 204 No Content

Server: nginx

Date: Thu, 04 Feb 2016 17:07:58 GMT

Connection: close

POST /api HTTP/1.0

Connection: keep-alive

Content-Length: 158

Host: cuidu.sevential.ru

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

....x.-.

.0..w...M.6...K..*......N.....U.f..j6.1v..s,.X:xq...0..3L..),.h.:....6./6..h....x....Tp&.(vl........&.LR.bJq4.w...p.o..k..4v"lFi6.-....L..s......5.
HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Thu, 04 Feb 2016 17:07:34 GMT

Content-Type: text/html; charset=utf-8

Connection: close

X-Powered-By: PHP/5.4.17
7...x......0...]..R........k...k.T.`([email protected]?.....b/..O..}?......

HEAD /MailRuUpdater.exe HTTP/1.1

Host: mailruupdater.cdnmail.ru

Connection: close

HTTP/1.1 200 OK

Server: nginx

Date: Thu, 04 Feb 2016 17:07:55 GMT

Content-Type: application/octet-stream

Content-Length: 6058712

Connection: close

Last-Modified: Tue, 02 Feb 2016 12:51:45 GMT

ETag: "56b0a661-5c72d8"

Accept-Ranges: bytes

GET /update/2/version.txt?type=mru_install_service&GUID={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&tool=mrupdater&masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&user_id={4A0AC478-EB6E-4BB5-A7A5-77672F48630B}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.24.0.246&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=5&mr_service=0 HTTP/1.1

User-Agent: FULLSTUFF

Host: mrds.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 204 No Content

Server: nginx

Date: Thu, 04 Feb 2016 17:08:04 GMT

Connection: close

GET /chrome/version2.xml?masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=9&mr_service=0 HTTP/1.1

Host: binupdate.mail.ru

Accept: */*

User-Agent: MailRuUpdater

Connection: close

HTTP/1.1 503 Service Temporarily Unavailable

Server: nginx

Date: Thu, 04 Feb 2016 17:08:04 GMT

Content-Type: text/html

Content-Length: 206

Connection: close
<html>..<head><title>503 Service Temporarily Unavail
able</title></head>..<body bgcolor="white">..<cen
ter><h1>503 Service Temporarily Unavailable</h1></ce
nter>..<hr><center>nginx</center>..</body>.
.</html>....

GET /tasks.mrdj?masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&tool=mrupdater&ver=1.24.0.246 HTTP/1.1

User-Agent: RemoteConfigFetcher

Host: xml.binupdate.mail.ru

Accept: */*

Accept-Encoding: identity;q=1.0, *;q=0

Connection: Close

HTTP/1.1 200 OK

Server: nginx

Date: Thu, 04 Feb 2016 17:08:04 GMT

Content-Type: application/x-mrd

Connection: close

Content-Transfer-Encoding: 8bit

Content-Length: 9379
d..>O{jsd4/4h...-uO:8K?L60(0E71-..~...{~..t.w.t..m.imnT...^.* (.:0&
lt;~az-*"3y^Z[Xr=;#%/[email protected].......=........
......................................................................
...................................................~wqnn4z|y{t}.<ce
 ibShb.jjYge`i/7E.7523D2>?H.9;8.T....n.j.....a....oq.cimzocd..f.z}u
y.7krg=OMJKc%.._F[....Z.}z{S.....IPIYWJomjkC..........................
......................................................................
................................ .1....:dsgbzqtO.|dcyc}q%<%pqwd,574
[email protected].."./,.`WRT03.=);4 ulu/Y[XYFl.$.)"."*$=axaquwtu.ppq.
Z.}zP.4,  ]R( E&$SUNVY&...............................................
......................................................................
........../'/1/#/-:. VQ?PQ>KI4NHKK?Cx&9"z.674.^TX...AFFW.:&'$.Y_GAC
......*VWT~(? .>50.# 8?='95ipi<53 hIKHI]....XCXU.......Mdde.Fcan
D.T&&SS...............................................................
................................................................=]hoou
tHvdty`0 0t..... KocfoGgmaF....001>K?=:O.:&'.W...i.........si.kjt.n
bey.bh.~{u..xz.:d.d8HHIv\...XCX...._xxyfL.....J]FTTOhhi...............
......................................................................
..........................................?/-0....5epfe{ruP~.edx`|~$?$
wpte.4452.MAGS....^^JZDAN.#!.[..* .[.....j.`z.mma.eh~.`u.s{e...rpuwx9H
HE.XCX.||}zP...LWL.....JomjkC.........................................
..................................................................
<<< skipped >>>

POST /api HTTP/1.0

Connection: keep-alive

Content-Length: 881

Host: cuidu.sevential.ru

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

....x.}T[o.8.. [email protected]..^...l..hT.84n....4....qB..i..8w....L.E*....dU..\Vy..hd..m&*...n.?.1ZDi4.T ..;..Ny$......E...`52qL.JC..o..Rk.$........ X..b.D.R..4.;8...gd\..`.2.........Oe...{..$.o.E.Vj....z...,..E.....9.E...hA.g.....;t!.5{.6.G........C.....#J.M&hv...:.1.zkjp.\P~_....I.....E).....DI..B.E.H.y.C.o.fR?OT.k....Mt...4..Q........zm,..}....2.z..X..K..ng... ..ONO..]S..'7....

.9..K$....x..zk...S)B..V..I:b..V.....g..w..l.<L....y.`..ToGw..~.C.O.b ...[D..-.~.<...'..{.j.q..M.S.5........(....H..7.nuc.y\]..M......__7......}%8.d}*.Y.....Yg.g.;..js..p.w.H.$-

...Va...-n....S..?6..$O./.....&7.?....
q..U..........h.."[email protected].\J.d.:l%I9.>..|J.,.o.......nKVZ..m...;....o.%.T...b7....%...~B...!...a.....vf.....Ke..:.j...).G..q8.M.H.D.......C.{.U;

Y..4...tXf7

.........M..f..W.x ..Y.i<..4NK.....<N......)My..9...ax...n...,..Xf...=,........TxCjY..~yA....oLU..P
.q.]...A.E...zS..
HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Thu, 04 Feb 2016 17:06:40 GMT

Content-Type: text/html; charset=utf-8

Connection: close

X-Powered-By: PHP/5.4.17
J...x..Um..6.. .../.... .d....N.^..._...3.(..1......M6..:...........@b
?."/IV........q .%....._.XB.E..6H.J{e.7.P.x(...q"...p.$.8...9.....:.B.
.m......:v.w..W..A../Y..> ..tl...~D.x*..V....].i..qx..XU;r...Z.X.JV
.....B.Q.x.A.Q.......Q[[.!..v............~.1n..4t....r.xwU.....X.E1...
.=P../..7..T..1<.z./y(.0(..PP...-:....J<..z.\........O4.J...F.wb
0.Ad.p..Wot.....F..'.u.,..W>y".D.Nr.'Y.3.u.\..cV)A.....s.9..-`..S.]
M...PLb..7&....Mb...sc.:....%.p....~..^;..tcwL.........V.bq%6.........
.?}..........Z.X>.@@.....g.Q..j...8.m...Bo....w...3....NGmfj<..m
 ..l.3 .!.....8k..>...o36......mLG.5.l.h..........~...... a..#.....
....J.>.....O.P{&....P..q...u.X:.L.. ...A.=.7C.....yC......@.....&g
t;t]]q......C...?.......5.?O7c...<r_..?...0......r.4...K....'.<f
....Y/y:.P........8.;..A.lX..e.....q|....^s......y..}..8 QH......fct.b
`...w.....(i..a...8!8.D../........y.s`D..........iQT.....*T."Q....PmJ.
.".B..R..~UV....|.=;.f..<.....F...

GET /cache_policy.mrdj HTTP/1.1

Host: xml.binupdate.mail.ru

Accept: */*

Connection: close

HTTP/1.1 503 Service Temporarily Unavailable

Server: nginx

Date: Thu, 04 Feb 2016 17:08:04 GMT

Content-Type: text/html

Content-Length: 206

Connection: close
<html>..<head><title>503 Service Temporarily Unavail
able</title></head>..<body bgcolor="white">..<cen
ter><h1>503 Service Temporarily Unavailable</h1></ce
nter>..<hr><center>nginx</center>..</body>.
.</html>....

GET /update/2/version.txt?type=mru_online_service&GUID={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&rfr=&tool=mrupdater&masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=4&elapsed_time=0&mr_service=1 HTTP/1.1

Host: mrds.mail.ru

Accept: */*

User-Agent: FULLSTUFF

Connection: close

HTTP/1.1 204 No Content

Server: nginx

Date: Thu, 04 Feb 2016 17:07:55 GMT

Connection: close

GET /chrome/internet_to_amigo.xml?masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=6&elapsed_time=9&mr_service=0 HTTP/1.1

Host: binupdate.mail.ru

Accept: */*

User-Agent: MailRuUpdater

Connection: close

HTTP/1.1 503 Service Temporarily Unavailable

Server: nginx

Date: Thu, 04 Feb 2016 17:08:04 GMT

Content-Type: text/html

Content-Length: 206

Connection: close
<html>..<head><title>503 Service Temporarily Unavail
able</title></head>..<body bgcolor="white">..<cen
ter><h1>503 Service Temporarily Unavailable</h1></ce
nter>..<hr><center>nginx</center>..</body>.
.</html>....

GET /updater/version.xml?masterid={47BD4FBA-C91F-4D53-9F21-1FE03F0F73B2}&osver=xp&osbit=32&osvernum=5.1&ossp=ServicePack3&uac=0&admin=1&ver=1.17.0.150&tool=mrupdater&guid={178AD620-E968-4849-A1B0-1B09F7AEAFF7}&praetorian=0&qipguard=0&yabrman=0&360ant=0&mailru_guard=0&mailru_updater=1&comp_mem=511&tool_mem=5&elapsed_time=0&mr_service=0 HTTP/1.1

Host: binupdate.mail.ru

Accept: */*

User-Agent: MailRuUpdater

Connection: close

HTTP/1.1 200 OK

Server: nginx

Date: Thu, 04 Feb 2016 17:07:55 GMT

Content-Type: text/xml; charset=utf-8

Connection: close

Content-Length: 281
<?xml version="1.0" encoding="utf-8" ?>.<xml>.<product_
name>MailRuUpdater</product_name>.<version>1.24.0.246&l
t;/version>.<fetch_url>hXXp://mailruupdater.cdnmail.ru/MailRu
Updater.exe</fetch_url>.<md5>c5fee2d9c146599b2f6230e27a74d
f73</md5>.<cmd_line>--install-service</cmd_line>.<
;/xml>..

The SpyTool connects to the servers at the folowing location(s):

.text

`.rdata

@.data

.rsrc

@.reloc

FTPG

FTPj

SHA256 block transform for x86, CRYPTOGAMS by <[email protected]>

.EKSWU

SHA1 block transform for x86, CRYPTOGAMS by <[email protected]>

DlSHA512 block transform for x86, CRYPTOGAMS by <[email protected]>

|$@3|$<3

Camellia for x86 by <[email protected]>

6-9'6-9'

$6.:$6.:

*?#1*?#1

>8$4,8$4,

AES for x86, CRYPTOGAMS by <[email protected]>

RC4 for x86, CRYPTOGAMS by <[email protected]>

Montgomery Multiplication for x86, CRYPTOGAMS by <[email protected]>

FtPS

<0|1<:}-

<0|9<:}5

w%s( 

j.hLD

8%u(j

;*u%C

 FTPj

F\ FTP

<x%uY

><%uB

t.Jx 

j.Yf;

_tcPVj@

.PjRW

.FAy,

t%9xT

.6.78.9:;

B.CDEFGH

?%Y-%u

m-%du

?%H:%u

M:%Su

C:\Build\desktop_apps\SputnikLib/log_ng.h

..\CommonFiles\antivirus\antivirus_core.cpp

..\CommonFiles\audit\audit.cpp

KERNEL32.DLL

..\CommonFiles\audit\audit_browsers_manager.cpp

c:\build\desktop_apps\commonfiles\audit\audit_browsers_manager.h

ReportTime

..\CommonFiles\audit\audit_browser_settings.cpp

mailru::AuditBrowserSettings::MakeReport

) report successfully done

Make report failed

mailru::AuditBrowserSettings::ScheduleReportCheck

mailru::AuditBrowserSettings::CollectReportInfo

mailru::AuditBrowserSettings::CheckReport

error report structer

..\CommonFiles\audit\audit_google_chrome.cpp

mailru::AuditGoogleChrome::CheckerHomepageCh::RestoreChild

mailru::AuditGoogleChrome::CheckerDefaultSearchCh::RestoreChild

mailru::AuditGoogleChrome::CheckerVbmCh::RestoreChild

:Incorrect key length

RegOpenKeyTransactedW

C:\Build\desktop_apps\SputnikLib/reg_key.hpp

mailru::reg_keyT<0>::check

C:\Build\desktop_apps\CommonFiles/sql_lite_bind.hpp

mailru::sqlite_bind::column_int

mailru::sqlite_bind::column_int64

mailru::sqlite_bind::column_string

mailru::sqlite_bind::column_string16

mailru::sqlite_bind::column_blob

mailru::sqlite_bind::column_byte_length

mailru::sqlite_bind::column_blob_as_string

..\CommonFiles\browsers_patching\cookies\chromium_cookies_manager.cpp

..\CommonFiles\browsers_patching\cookies\firefox_cookies_manager.cpp

mailru::cookies::FirefoxCookieManager::FindByName

RegCreateKeyTransactedW

..\CommonFiles\chrome_safe_browsing.cpp

mailru::chromium::ChromeSafeBrowsing::CleanUpExtensionDataBase

mailru::chromium::ChromeSafeBrowsing::ReadSafeBrowsingFile

Unable to read chrome blocklist

Chrome blocklist file is not valid

chrome blocklist contains unsupported elements

shard_header.add_prefix_count > kMaxAddSubChunksCount

mailru::chromium::ChromeSafeBrowsing::WriteSafeBrowsingFile

startup_urls

urls_to_restore_on_startup

RegDeleteKeyTransactedW

boost::too_few_args: format-string referred to more arguments than were passed

boost::too_many_args: format-string referred to less arguments than were passed

c:\build\desktop_apps\sputniklib\temp_dir.h

%%%%-%%%%-%%%%-%%%%

..\CommonFiles\chromium_settings.cpp

hXXp://mail.ru

hXXp://VVV.mail.ru

browser.show_home_button

session.restore_on_startup

yandex\.ru. clid

mailru::chromium::settings::search_url

chrome_settings_overrides

search_url

template_url_data

mailru::chromium::settings::search_url_without_extensions

suggestions_url

suggestions_url_post_params

windows-1251

keyword

mail.ru

D15371FE-C188-4E99-9841-A91F3BCBCCC3

search_terms_replacement_key

search_url_post_params

favicon_url

hXXp://go.mail.ru/favicon.ico

image_url

image_url_post_params

instant_url

instant_url_post_params

originating_url

alternate_urls

default_search_provider_data.template_url_data

suggest_url

default_search_provider.name

default_search_provider.search_url

go.mail.ru

keystore_encryption_bootstrap_token

chrome_url_overrides

chrome-extension://

extensions.settings.

mail.ru

mailru::chromium::settings::url_from_ext_id

extensions.known_disabled

update_url

runtime.onStartup

.enabled

hXXp://xml.binupdate.mail.ru/amigo/check_policy.amg

check_policy.amg not loaded

check_policy.amg NOT decoded

check_policy.amg NOT parsed

mailru::chromium::settings::InstallExtensionFromUrlNoThrow

mailru::chromium::settings::GetWebDataSmt

hXXp://VVV.mail.ru/cnt/7861

hXXp://agent.mail.ru/ru/download/agent_windows/download.html?sputnik=1

hXXp://img.imgsmail.ru/r/agent/favicon.ico

hXXp://mail.ru/cnt/10445

hXXp://VVV.mail.ru/

hXXp://go.mail.ru/search?fr=ntg&q={SearchTerms}

hXXp://m.mail.ru/cgi-bin/splash?opera=1

hXXp://VVV.mail.ru/cnt/5090

hXXp://go.mail.ru/search?q=%s&fr=ntg

@mail.ru

hXXp://suggests.go.mail.ru/ff3?q={SearchTerm}

hXXp://go.mail.ru/search_images?utf8in=1&q=%s&fr=oprtb

hXXp://go.mail.ru/favicon_images.ico

hXXp://go.mail.ru/search_video?utf8in=1&q=%s&fr=oprtb

hXXp://go.mail.ru/favicon_video.ico

hXXp://VVV.mail.ru/cnt/5091

hXXp://redir.opera.com/speeddials/mail.ru

hXXp://redir.opera.com/bookmarks/mail.ru

hXXp://go.mail.ru/search?q=%s&fr=opr11

hXXp://go.mail.ru/search?q={searchTerms}&fr=ntg

hXXp://suggests.go.mail.ru/ff3?q={searchTerms}

hXXp://go.mail.ru/search?q={SearchTerms}&fr=ntg

hXXp://mail.ru/cnt/9824

hXXp://mail.ru/cnt/10226

hXXp://go.mail.ru/?pin=1

mailru::default_browser::find_executable

..\CommonFiles\default_browser.cpp

C:\Build\desktop_apps\SputnikLib/com_scope.h

..\CommonFiles\enemy_soft_checker.cpp

..\commonfiles\file_util.cpp

..\CommonFiles\firefox_extension_patcher.cpp

mailru::FirefoxExtensionPatcher::Install

mailru::FirefoxExtensionPatcher::PatchExtensionJson

updateURL

iconURL

mailru::FirefoxExtensionPatcher::Enable

mailru::FirefoxExtensionPatcher::PatchFileTime

mailru::FirefoxExtensionPatcher::InstallFromUrl

C:\Build\desktop_apps\3party\ticpp/ticpp.h

..\CommonFiles\firefox_settings.cpp

mailru::firefox::settings::~settings

browser.startup.page

browser.startup.homepage

Profile%d

hXXp://go.mail.ru

@Mail.Ru

browser.search.selectedEngine

browser.search.defaultenginename

browser.search.defaulturl

keyword.URL

extensions.enabledAddons

mailru::firefox::settings::is_yandex_elements_intsalled

[email protected]

browser.search.suggest.enabled

browser.search.useDBForOrder

Firefox

..\CommonFiles\gpo_manager.cpp

GetRegistryKey for machine failed

GetRegistryKey for user failed

..\CommonFiles\ie_extension_patcher.cpp

mailru::IEExtensionPatcher::InstallFromUrl

..\CommonFiles\ie_settings.cpp

..\CommonFiles\metrics\common_metrics_params.cpp

..\CommonFiles\products\extensions_storage_writer.cpp

.product_id

..\CommonFiles\rfr_manager.cpp

..\CommonFiles\shortcut_check.cpp

c:\build\desktop_apps\commonfiles\tasks\TaskShortcuts.h

..\CommonFiles\Tasks\RemoteTaskExecuter.cpp

mailru::RemoteTasksExecuter::Stop

mailru::RemoteTasksExecuter::InitTasks

mailru::RemoteTasksExecuter::InterruptTaskThread

mailru::RemoteTasksExecuter::ExecuteTask

mailru::RemoteTasksExecuter::FetchTasks

..\CommonFiles\Tasks\TaskChromiumRoutinePatcher.cpp

google chrome sync_enabled

..\CommonFiles\Tasks\TaskEmulateWebStoreInstallation.cpp

..\CommonFiles\Tasks\TaskGoogleBlockedMailruExtensions.cpp

..\CommonFiles\Tasks\TaskGoogleBlockedMailruSettings.cpp

..\CommonFiles\Tasks\TaskGoogleBlockedVisualBookmarks.cpp

ChromeVbmId

ChromeVbmArchive

..\CommonFiles\Tasks\TaskInstallUpdater.cpp

..\CommonFiles\Tasks\TaskInterface.cpp

..\CommonFiles\Tasks\TaskInstallUpdaterAsService.cpp

cmd_line =

14000000000000000

..\CommonFiles\Tasks\TaskPreventSRT.cpp

mailru::TaskPreventSRT::SendReporterMetric

software_reporter

ReporterLogPattern

..\CommonFiles\Tasks\TaskPeriodicRestoreMailExtensions.cpp

Chrome

..\CommonFiles\Tasks\TaskPropUpMailExtensions.cpp

ERROR: chrome_value is empty

..\CommonFiles\Tasks\TaskRemovePornExtensions.cpp

..\CommonFiles\Tasks\TaskRestoreMailVisualBookmarks.cpp

..\CommonFiles\Tasks\TaskStartGroupBlackList.cpp

mailru::TaskStartGroupBlackList::ProceedGoogleChrome

ProceedGoogleChrome patch prepared

ProceedGoogleChrome start patching

google_chrome object constructed

Google Chrome settings are synced

Google Chrome extensions are synced

TaskStartGroupBlackList::ProceedGoogleChrome failed, error =

ProceedGoogleChrome patch_util.set_was_patch(true);

mailru::TaskStartGroupBlackList::CleanUpChromeStartPages

mailru::TaskStartGroupBlackList::ProceedFirefox

ProceedFirefox is running

hXXp://go.mail.ru/?ffverfix=1&fr=ffverfix_sg

TaskStartGroupBlackList::ProceedGoogleChrome failed, er =

TaskStartGroupBlackList::ProceedGoogleChrome failed

hXXp://go.mail.ru/?ieverfix=1&fr=ieverfix_sg

..\CommonFiles\Tasks\TaskYandexHomepageDistribRemove.cpp

..\CommonFiles\tasks\task_amigo_remove_pinned_tabs.cpp

..\CommonFiles\Tasks\task_checksum_verify.cpp

xpinstall.signatures.required

..\CommonFiles\Tasks\task_monitor_user_process.cpp

..\CommonFiles\Tasks\task_save_ff_extensions.cpp

..\CommonFiles\tasks\task_user_preferences.cpp

mailru::TaskUserPreferences::AnalyzeFirefox

hXXp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml

hXXp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml#smartbox

..\CommonFiles\yandex_elements.cpp

mailru::YandexElements::IsSmartBarBlockingSearch

mailru::YandexElements::DisableSmartBar

mailru::YandexElements::ReadStateConfig

class Json::Value *__thiscall mailru::YandexElements::FindSettingInStateConfig(class Json::Value &,const class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > &,const class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > &) const

mailru::YandexElements::FindSettingInStateConfig

browser.uiCustomization.state

mailru::YandexElements::RestoreOriginalSearchBox

guid_manager.cpp

installer.cpp

mailru::reg_keyT<0>::throw_on_error

main.cpp

Started with cmd line

c:\build\desktop_apps\mailruupdater\concrete_update_task.hpp

self_update_task.cpp

SendBrowsersStatistic.cpp

c:\build\desktop_apps\mailruupdater\SendBrowsersStatistic.h

updater::SendBrowsersStastic::BrowserData<class mailru::chromium::settings_amigo>::getDSEurl

updater::SendBrowsersStastic::BrowserData<class mailru::chromium::settings_mail>::getDSEurl

updater::SendBrowsersStastic::BrowserData<class mailru::chromium::settings_google>::getDSEurl

service.cpp

asio.misc

asio.misc error

C:\Build\boost_1_56_0\boost/exception/detail/exception_ptr.hpp

system_info\system_info_collector.cpp

s-sputnik.mail.ru

thread.entry_event

thread.exit_event

255.255.255.255

HTTP error:

asio.ssl

asio.ssl error

add_certificate_authority

^HTTP/1.1 (\d ) (. )

system_info\system_info_sender.cpp

https

HTTP/1.1

update_info.cpp

fetch_url

Program fetch url

md5 fetch url

cmd_line

util.cpp

SHA-256 part of OpenSSL 1.0.0g 18 Jan 2012

len>=0 && len<=(int)sizeof(ctx->key)

j <= (int)sizeof(ctx->key)

Stack part of OpenSSL 1.0.0g 18 Jan 2012

ssl_sess_cert

ssl_cert

evp_pkey

x509_pkey

%s(%d): OpenSSL internal error, assertion failed: %s

X.509 part of OpenSSL 1.0.0g 18 Jan 2012

OPENSSL_ALLOW_PROXY_CERTS

cert_info

CERTIFICATE

passed a null parameter

DSO support routines

x509 certificate routines

error:lX:%s:%s:%s

d.registeredID

d.iPAddress

d.uniformResourceIdentifier

d.ediPartyName

d.directoryName

d.dNSName

d.rfc822Name

d.otherName

SHA1 part of OpenSSL 1.0.0g 18 Jan 2012

SHA-512 part of OpenSSL 1.0.0g 18 Jan 2012

supportedAlgorithms

crossCertificatePair

certificateRevocationList

cACertificate

userCertificate

userPassword

supportedApplicationContext

Microsoft Local Key set

LocalKeySet

id-Gost28147-89-None-KeyMeshing

id-Gost28147-89-CryptoPro-KeyMeshing

password based MAC

id-PasswordBasedMAC

X509v3 Certificate Issuer

certificateIssuer

certicom-arc

Proxy Certificate Information

proxyCertInfo

Microsoft Smartcardlogin

msSmartcardLogin

joint-iso-itu-t

JOINT-ISO-ITU-T

set-rootKeyThumb

setAttr-Cert

setCext-cCertRequired

setCext-certType

setct-CertResTBE

setct-CertReqTBEX

setct-CertReqTBE

setct-AcqCardCodeMsgTBE

setct-CertInqReqTBS

setct-CertResData

setct-CertReqTBS

setct-CertReqData

setct-PCertResTBS

setct-PCertReqData

setct-AcqCardCodeMsg

certificate extensions

set-certExt

set-msgExt

id-ecPublicKey

id-cmc-confirmCertAcceptance

id-cmc-getCert

id-regInfo-certReq

id-regCtrl-protocolEncrKey

id-regCtrl-oldCertID

id-it-revPassphrase

id-it-keyPairParamRep

id-it-keyPairParamReq

id-it-unsupportedOIDs

id-it-caKeyUpdateInfo

id-it-encKeyPairTypes

id-it-signKeyPairTypes

id-it-caProtEncCert

id-mod-attribute-cert

id-mod-qualified-cert-93

id-mod-qualified-cert-88

id-smime-aa-ets-certCRLTimestamp

id-smime-aa-ets-certValues

id-smime-aa-ets-CertificateRefs

id-smime-aa-ets-otherSigCert

id-smime-aa-smimeEncryptCerts

id-smime-aa-signingCertificate

id-smime-aa-encrypKeyPref

id-smime-aa-msgSigDigest

id-smime-ct-publishCert

id-smime-mod-msg-v3

sdsiCertificate

x509Certificate

localKeyID

certBag

pkcs8ShroudedKeyBag

keyBag

pbeWithSHA1And2-KeyTripleDES-CBC

pbeWithSHA1And3-KeyTripleDES-CBC

TLS Web Client Authentication

TLS Web Server Authentication

X509v3 Extended Key Usage

extendedKeyUsage

X509v3 Authority Key Identifier

authorityKeyIdentifier

X509v3 Certificate Policies

certificatePolicies

X509v3 Private Key Usage Period

privateKeyUsagePeriod

X509v3 Key Usage

keyUsage

X509v3 Subject Key Identifier

subjectKeyIdentifier

Netscape Certificate Sequence

nsCertSequence

Netscape CA Policy Url

nsCaPolicyUrl

Netscape Renewal Url

nsRenewalUrl

Netscape CA Revocation Url

nsCaRevocationUrl

Netscape Revocation Url

nsRevocationUrl

Netscape Base Url

nsBaseUrl

Netscape Cert Type

nsCertType

Netscape Certificate Extension

nsCertExt

extendedCertificateAttributes

challengePassword

dhKeyAgreement

lhash part of OpenSSL 1.0.0g 18 Jan 2012

/usr/local/ssl/certs

/usr/local/ssl/cert.pem

SSL_CERT_DIR

SSL_CERT_FILE

CONF part of OpenSSL 1.0.0g 18 Jan 2012

%d.%d.%d.%d/%d.%d.%d.%d

%*s%s:

ddddddZ

ddddddZ

X509_PUBKEY

public_key

.\crypto\asn1\x_pubkey.c

name.relativename

name.fullname

certificateHold

Certificate Hold

cessationOfOperation

Cessation Of Operation

keyCompromise

Key Compromise

%*sOnly Attribute Certificates

%*sOnly CA Certificates

%*sOnly User Certificates

AUTHORITY_KEYID

keyid

X509_CERT_PAIR

X509_CERT_AUX

ASN.1 part of OpenSSL 1.0.0g 18 Jan 2012

PEM part of OpenSSL 1.0.0g 18 Jan 2012

phrase is too short, needs to be at least %d chars

Enter PEM pass phrase:

TRUSTED CERTIFICATE

CERTIFICATE REQUEST

NEW CERTIFICATE REQUEST

X509 CERTIFICATE

PRIVATE KEY

ENCRYPTED PRIVATE KEY

ANY PRIVATE KEY

RSA part of OpenSSL 1.0.0g 18 Jan 2012

Big Number part of OpenSSL 1.0.0g 18 Jan 2012

CONF_def part of OpenSSL 1.0.0g 18 Jan 2012

[[%s]]

[%s] %s=%s

keylen <= sizeof key

EVP_CIPHER_key_length(cipher) <= (int)sizeof(md_tmp)

PROXY_CERT_INFO_EXTENSION

%d.%d.%d.%d

<unsupported>

IP Address:%d.%d.%d.%d

URI:%s

DNS:%s

email:%s

EdiPartyName:<unsupported>

X400Name:<unsupported>

othername:<unsupported>

DSA part of OpenSSL 1.0.0g 18 Jan 2012

.\crypto\ec\ec_key.c

Diffie-Hellman part of OpenSSL 1.0.0g 18 Jan 2012

value.single

value.set

pubkey

enc_key

key_enc_algor

cert

d.encrypted

d.digest

d.signed_and_enveloped

d.enveloped

d.sign

d.data

d.other

priv_key

pub_key

EC_PRIVATEKEY

publicKey

privateKey

value.implicitlyCA

value.parameters

value.named_curve

p.char_two

p.prime

p.ppBasis

p.tpBasis

p.onBasis

p.other

PKCS8_PRIV_KEY_INFO

pkey

pkeyalg

.\crypto\evp\evp_pkey.c

\X

d.usernotice

d.cpsuri

CERTIFICATEPOLICIES

%*sExplicit Text: %s

%*sNumber%s:

%*sOrganization: %s

%*sCPS: %s

MD5 part of OpenSSL 1.0.0g 18 Jan 2012

'() ,-./:=?

%*sPolicy Text: %s

%*scrlUrl:

EXTENDED_KEY_USAGE

%*sZone: %s, User:

.\crypto\x509v3\v3_akey.c

PKEY_USAGE_PERIOD

keyCertSign

Certificate Sign

keyAgreement

Key Agreement

keyEncipherment

Key Encipherment

.\crypto\x509v3\v3_skey.c

.\crypto\evp\evp_key.c

nkey <= EVP_MAX_KEY_LENGTH

EVP part of OpenSSL 1.0.0g 18 Jan 2012

?456789:;<=

!"#$%&'()* ,-./0123

RAND part of OpenSSL 1.0.0g 18 Jan 2012

You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html

hexkey

rsa_keygen_pubexp

rsa_keygen_bits

%s.dll

RIPE-MD160 part of OpenSSL 1.0.0g 18 Jan 2012

SHA part of OpenSSL 1.0.0g 18 Jan 2012

MD4 part of OpenSSL 1.0.0g 18 Jan 2012

CAST part of OpenSSL 1.0.0g 18 Jan 2012

Blowfish part of OpenSSL 1.0.0g 18 Jan 2012

:RC2 part of OpenSSL 1.0.0g 18 Jan 2012

.pp@0

aEÐ

 (#EÚ

ÚE<<0

IDEA part of OpenSSL 1.0.0g 18 Jan 2012

libdes part of OpenSSL 1.0.0g 18 Jan 2012

DES part of OpenSSL 1.0.0g 18 Jan 2012

keylength

keyfunc

.\crypto\pkcs12\p12_key.c

EC part of OpenSSL 1.0.0g 18 Jan 2012

.\crypto\dh\dh_key.c

%s: (%d bit)

Public-Key

Private-Key

recommended-private-length: %d bits

public-key:

private-key:

PKCS#3 DH Public-Key

PKCS#3 DH Private-Key

Public-Key: (%d bit)

Private-Key: (%d bit)

x%s

%s - d:d:d%.*s %d%s

crlUrl

certStatus

certId

OCSP_CERTSTATUS

value.unknown

value.revoked

value.good

value.byKey

value.byName

reqCert

OCSP_CERTID

issuerKeyHash

certs

USER32.DLL

NETAPI32.DLL

ADVAPI32.DLL

ECDSA part of OpenSSL 1.0.0g 18 Jan 2012

Basis Type: %s

Field Type: %s

ASN1 OID: %s

%s %s%lu (%s0x%lx)

%lu:%s:%s:%d:%s

Verifying - %s

ECDH part of OpenSSL 1.0.0g 18 Jan 2012

%'%1$=%C%K%O%s%

.%.-.3.7.9.?.W.[.o.y.

C%C'C3C7C9COCWCiC

value.bag

value.safes

value.shkeybag

value.keybag

value.sdsicert

value.x509cert

value.other

d.receiptList

d.allOrFirstTier

d.compressedData

d.authenticatedData

d.encryptedData

d.digestedData

d.envelopedData

d.signedData

d.ori

d.pwri

d.kekri

d.kari

d.ktri

CMS_PasswordRecipientInfo

keyDerivationAlgorithm

keyIdentifier

CMS_KeyAgreeRecipientInfo

recipientEncryptedKeys

CMS_OriginatorIdentifierOrKey

d.originatorKey

CMS_OriginatorPublicKey

CMS_RecipientEncryptedKey

CMS_KeyAgreeRecipientIdentifier

d.rKeyId

CMS_RecipientKeyIdentifier

CMS_OtherKeyAttribute

keyAttr

keyAttrId

CMS_KeyTransRecipientInfo

encryptedKey

keyEncryptionAlgorithm

certificates

d.crl

d.subjectKeyIdentifier

d.issuerAndSerialNumber

CMS_CertificateChoices

d.v2AttrCert

d.v1AttrCert

d.extendedCertificate

d.certificate

CMS_OtherCertificateFormat

otherCert

otherCertFormat

OpenSSL 1.0.0g 18 Jan 2012

GOST signature length is %d

.\ssl\ssl_cert.c

%-23s %s Kx=%-8s Au=%-4s Enc=%-9s Mac=%-4s%s

EXPORT56

EXPORT40

EXPORT

wrong number of key bits

unsupported status type

unsupported ssl version

unsupported protocol

unsupported elliptic curve

unsupported digest type

unsupported compression algorithm

unsupported cipher

unknown pkey type

unknown key exchange type

unknown certificate type

unable to find public key parameters

unable to extract public key

unable to decode ecdh certs

unable to decode dh certs

tried to use unsupported cipher

tls peer did not respond with certificate list

tls client cert req with anon cipher

tlsv1 unsupported extension

tlsv1 certificate unobtainable

tlsv1 bad certificate status response

tlsv1 bad certificate hash value

tlsv1 alert export restriction

sslv3 alert unsupported certificate

sslv3 alert no certificate

sslv3 alert certificate unknown

sslv3 alert certificate revoked

sslv3 alert certificate expired

sslv3 alert bad certificate

signature for non signing certificate

reuse cert type not zero

reuse cert length not zero

public key not rsa

public key is not rsa

public key encrypt error

peer error unsupported certificate type

peer error no certificate

peer error certificate

peer did not return a certificate

null ssl method passed

no publickey

no private key assigned

no privatekey

Peer haven't sent GOST certificate, required for selected ciphersuite

no client cert received

no client cert method

no ciphers passed

no certificate specified

no certificate set

no certificate returned

no certificate assigned

no certificates returned

missing tmp rsa pkey

missing tmp rsa key

missing tmp ecdh key

missing tmp dh key

missing rsa signing cert

missing rsa encrypting cert

missing rsa certificate

missing export tmp rsa key

missing export tmp dh key

missing dsa signing cert

missing dh rsa cert

missing dh key

missing dh dsa cert

krb5 server rd_req (keytab perms?)

key arg too long

invalid ticket keys length

http request

https proxy request

error generating tmp rsa key

ecc cert should have sha1 signature

ecc cert should have rsa signature

ecc cert not for signing

ecc cert not for key agreement

cert length mismatch

certificate verify failed

bad ecc cert

bad dh pub key length

TLS1_SETUP_KEY_BLOCK

tls1_cert_verify_mac

SSL_VERIFY_CERT_CHAIN

SSL_use_RSAPrivateKey_file

SSL_use_RSAPrivateKey_ASN1

SSL_use_RSAPrivateKey

SSL_use_PrivateKey_file

SSL_use_PrivateKey_ASN1

SSL_use_PrivateKey

SSL_use_certificate_file

SSL_use_certificate_ASN1

SSL_use_certificate

SSL_SET_PKEY

SSL_SET_CERT

SSL_SESS_CERT_NEW

SSL_GET_SIGN_PKEY

SSL_GET_SERVER_SEND_CERT

SSL_CTX_use_RSAPrivateKey_file

SSL_CTX_use_RSAPrivateKey_ASN1

SSL_CTX_use_RSAPrivateKey

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey_ASN1

SSL_CTX_use_PrivateKey

SSL_CTX_use_certificate_file

SSL_CTX_use_certificate_chain_file

SSL_CTX_use_certificate_ASN1

SSL_CTX_use_certificate

SSL_CTX_set_client_cert_engine

SSL_CTX_check_private_key

SSL_CHECK_SRVR_ECC_CERT_AND_ALG

SSL_check_private_key

SSL_CERT_NEW

SSL_CERT_INSTANTIATE

SSL_CERT_INST

SSL_CERT_DUP

SSL_add_file_cert_subjects_to_stack

SSL_add_dir_cert_subjects_to_stack

SSL3_SETUP_KEY_BLOCK

SSL3_SEND_SERVER_KEY_EXCHANGE

SSL3_SEND_SERVER_CERTIFICATE

SSL3_SEND_CLIENT_KEY_EXCHANGE

SSL3_SEND_CLIENT_CERTIFICATE

SSL3_SEND_CERTIFICATE_REQUEST

SSL3_OUTPUT_CERT_CHAIN

SSL3_GET_SERVER_CERTIFICATE

SSL3_GET_KEY_EXCHANGE

SSL3_GET_CLIENT_KEY_EXCHANGE

SSL3_GET_CLIENT_CERTIFICATE

SSL3_GET_CERT_VERIFY

SSL3_GET_CERT_STATUS

SSL3_GET_CERTIFICATE_REQUEST

SSL3_GENERATE_KEY_BLOCK

SSL3_CHECK_CERT_AND_ALGORITHM

SSL3_ADD_CERT_TO_BUF

SSL2_SET_CERTIFICATE

SSL2_GENERATE_KEY_MATERIAL

REQUEST_CERTIFICATE

GET_CLIENT_MASTER_KEY

DTLS1_SEND_SERVER_KEY_EXCHANGE

DTLS1_SEND_SERVER_CERTIFICATE

DTLS1_SEND_CLIENT_KEY_EXCHANGE

DTLS1_SEND_CLIENT_CERTIFICATE

DTLS1_SEND_CERTIFICATE_REQUEST

DTLS1_OUTPUT_CERT_CHAIN

DTLS1_ADD_CERT_TO_BUF

CLIENT_MASTER_KEY

CLIENT_CERTIFICATE

SSLv2 part of OpenSSL 1.0.0g 18 Jan 2012

s->session->master_key_length >= 0 && s->session->master_key_length < (int)sizeof(s->session->master_key)

c->iv_len <= (int)sizeof(s->session->key_arg)

s->s2->key_material_length <= sizeof s->s2->key_material

SSLv3 part of OpenSSL 1.0.0g 18 Jan 2012

TLSv1 part of OpenSSL 1.0.0g 18 Jan 2012

os.length <= (int)sizeof(ret->session_id)

DTLSv1 part of OpenSSL 1.0.0g 18 Jan 2012

key expansion

client write key

server write key

%s:%d: rec->data != rec->input

D:\Libs\opencv\sources\modules\core\include\opencv2/core/mat.inl.hpp

D:\Libs\opencv\sources\modules\imgproc\src\templmatch.cpp

img.dims <= 2 && templ.dims <= 2 && corr.dims <= 2

corrsize.height <= img.rows   templ.rows - 1 && corrsize.width <= img.cols   templ.cols - 1

(depth == CV_8U || depth == CV_32F) && type == _templ.type() && _img.dims() <= 2

_img.size().height <= _templ.size().height && _img.size().width <= _templ.size().width

D:\Libs\opencv\sources\modules\imgproc\src\sumpixels.cpp

D:\Libs\opencv\sources\modules\core\src\alloc.cpp

D:\Libs\opencv\sources\modules\core\src\matrix.cpp

m.dims >= 2

0 <= _rowRange.start && _rowRange.start <= _rowRange.end && _rowRange.end <= m.rows

0 <= _colRange.start && _colRange.start <= _colRange.end && _colRange.end <= m.cols

m.dims <= 2

0 <= roi.x && 0 <= roi.width && roi.x   roi.width <= m.cols && 0 <= roi.y && 0 <= roi.height && roi.y   roi.height <= m.rows

r == Range::all() || (0 <= r.start && r.start < r.end && r.end <= m.size[i])

COI is not supported by the function

0 <= i && i < (int)vv.size()

0 <= i && i < (int)v.size()

Unknown/unsupported array type

i < (int)vv.size()

(size_t)i < vv.size()

!fixedSize() || ((Mat*)obj)->size.operator()() == _sz

!fixedSize() || ((UMat*)obj)->size.operator()() == _sz

!fixedSize() || ((Mat*)obj)->size.operator()() == Size(_cols, _rows)

!fixedSize() || ((UMat*)obj)->size.operator()() == Size(_cols, _rows)

CV_MAT_TYPE(mtype) == m.type()

m.dims == d

m.size[j] == sizes[j]

d == 2 && ((sizes[0] == sz.height && sizes[1] == sz.width) || (allowTransposed && sizes[0] == sz.width && sizes[1] == sz.height))

!fixedSize() || len == vv.size()

Vectors with element size %d are not supported. Please, modify OutputArray::create()

v[j].empty()

i < (int)v.size()

checkScalar(value, type(), arr.kind(), _InputArray::CUDA_GPU_MAT)

_m.dims() <= 2

_src.dims() <= 2 && esz <= 32

src.size() == dst.size() && (src.cols == 1 || src.rows == 1)

dst.cols == dst.rows

m.dims <= 2 && m.rows == m.cols

_src.dims() <= 2

A.size == arrays[i0]->size

A.step[d-1] == A.elemSize()

%s:%d: error: (%d) %s in function %s

%s:%d: error: (%d) %s

OpenCV Error: %s (%s) in %s, file %s, line %d

Inplace operation is not supported

Input image depth is not supported by function

Unsupported format or combination of formats

Input COI is not supported

No CUDA support

No OpenGL support

Unknown %s code %d

D:\Libs\opencv\sources\modules\core\src\system.cpp

tlsKey != TLS_OUT_OF_INDEXES

cv::TLSContainerStorage::releaseKey

key_ >= 0

D:\Libs\opencv\sources\modules\core\src\convert.cpp

j < nsrcs && src[j].depth() == depth

i1 >= 0 && j < ndsts && dst[j].depth() == depth

D:\Libs\opencv\sources\modules\core\src\copy.cpp

mask.depth() == CV_8U && (mcn == 1 || mcn == cn)

size() == mask.size()

checkScalar(value, type(), _value.kind(), _InputArray::MAT )

mask.empty() || (mask.type() == CV_8U && size == mask.size)

Unknown/unsupported border type

src.depth() == dst.depth() && src.size == dst.size

(coi1 != 0 || src.channels() == 1) && (coi2 != 0 || dst.channels() == 1)

src.channels() == dst.channels()

D:\Libs\opencv\sources\modules\core\src\matop.cpp

CV_MAT_CN(_type) == e.a.channels()

Unknown operation

D:\Libs\opencv\sources\modules\core\src\arithm.cpp

The operation is neither 'array op array' (where arrays have the same size and type), nor 'array op scalar', nor 'scalar op array'

(mtype == CV_8U || mtype == CV_8S) && _mask.sameSize(*psrc1)

The operation is neither 'array op array' (where arrays have the same size and the same number of channels), nor 'array op scalar', nor 'scalar op array'

type2 == CV_64F && (sz2.height == 1 || sz2.height == 4)

(mtype == CV_8UC1 || mtype == CV_8SC1) && _mask.sameSize(*psrc1)

The operation is neither 'array op array' (where arrays have the same size and the same type), nor 'array op scalar', nor 'scalar op array'

D:\Libs\opencv\sources\modules\core\src\stat.cpp

mask.empty() || mask.type() == CV_8U

mask.empty() || mask.type() == CV_8UC1

dst.type() == CV_64F && dst.isContinuous() && (dst.cols == 1 || dst.rows == 1) && dcn >= cn

D:\Libs\opencv\sources\modules\core\src\mathfuncs.cpp

!)>D:\Libs\opencv\sources\modules\core\src\dxt.cpp

type == srcB.type() && srcA.size() == srcB.size()

D:\Libs\opencv\sources\modules\core\src\umatrix.cpp

D:\Libs\opencv\sources\modules\core\src\array.cpp

_dst.data == data0

NULL array pointer is passed

Unrecognized or unsupported array type

unrecognized or unsupported array type

Only continuous nD arrays are supported here

Unsupported format

rect.width >= 0 && rect.height >= 0 && rect.x < image->width && rect.y < image->height && rect.x   rect.width >= (int)(rect.width > 0) && rect.y   rect.height >= (int)(rect.height > 0)

D:\Libs\opencv\sources\modules\core\src\datastructs.cpp

D:\Libs\opencv\sources\modules\core\include\opencv2/core/private.cuda.hpp

The library is compiled without CUDA support

D:\Libs\opencv\sources\modules\core\src\opengl.cpp

The library is compiled without OpenGL support

OpenCL.dll

D:\Libs\opencv\sources\modules\core\src\matmul.cpp

type == B.type() && (type == CV_32FC1 || type == CV_64FC1 || type == CV_32FC2 || type == CV_64FC2)

a_size.width == len

a_size.height == len

C.type() == type && (((flags&GEMM_3_T) == 0 && C.rows == d_size.height && C.cols == d_size.width) || ((flags&GEMM_3_T) != 0 && C.rows == d_size.width && C.cols == d_size.height))

type == _src2.type()

src1.size == src2.size

src.channels() == 1

delta.channels() == 1 && (delta.rows == src.rows || delta.rows == 1) && (delta.cols == src.cols || delta.cols == 1)

D:\Libs\opencv\sources\modules\core\src\lapack.cpp

type == _src2.type() && (type == CV_32F || type == CV_64F)

(method != DECOMP_LU && method != DECOMP_CHOLESKY) || is_normal || src.rows == src.cols

src.rows == src.cols

w.type() == u.type() && u.type() == vt.type() && u.data && vt.data && w.data

u.cols >= nm && vt.rows >= nm && (w.size() == Size(nm, 1) || w.size() == Size(1, nm) || w.size() == Size(vt.rows, u.cols))

rhs.data == 0 || (rhs.type() == type && rhs.rows == m)

D:\Libs\opencv\sources\modules\core\src\persistence.cpp

-.Inf

An attempt to add element without a key to a map, or add element with key to sequence

The key is an empty

The key is too long

Key must start with a letter or _

Key names may only contain alphanumeric characters [a-zA-Z0-9], '-', '_' and ' '

Key should start with a letter or _

Key name may only contain alphanumeric characters [a-zA-Z0-9], '-' and '_'

elements with keys can not be written to sequence

Images with planar data layout are not supported

2if%s

ß%s

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

0123456789-

%b %d %H : %M : %S %Y

%m / %d / %y

%I : %M : %S %p

%d / %m / %y

The repeat operator "*" cannot start a regular expression.

The repeat operator "?" cannot start a regular expression.

The repeat operator " " cannot start a regular expression.

Found a closing repetition operator } with no corresponding {.

Can't terminate a sub-expression with an alternation operator |.

The \c and \C escape sequences are not supported by POSIX basic regular expressions: try the Perl syntax instead.

A regular expression can start with the alternation operator |.

Invalid alternation operators within (?...) block.

More than one alternation operator | was encountered inside a conditional expression.

Alternation operators are not allowed inside a DEFINE block.

A repetition operator cannot be applied to a zero-width assertion.

left-curly-bracket

right-curly-bracket

0123456789

Unmatched quantified repeat operator { or \{.

Invalid preceding regular expression prior to repetition operator.

kernel32.dll

boost::filesystem::directory_iterator::operator  

boost thread: trying joining itself

Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag

libs\log\src\code_conversion.cpp

libs\log\src\global_logger_storage.cpp

libs\log\src\attribute_name.cpp

[u-u-u u:u:u.u] [%s] %s %s

[u-u-u u:u:u.u] [%s] %s %ls

libs\log\src\thread_specific.cpp

Line %d, Column %d

remote_config.cpp

Path.cpp

%Y-%m-%d %H:%M:%S

en_US.UTF-8

log_ng.cpp

mailru::log_ng::ExecutionTimeLogger::~ExecutionTimeLogger

AccountInfo.cpp

filesystem_utils.cpp

system\windows_services.cpp

mailru::windows_services::StopService

Resource.cpp

string.cpp

mailru::sqlite::database::database

sqlite.cpp

encryption.cpp

hXXp://

hXXps://

mailru::firefox_js_core::load_prefs_js

firefox_js.cpp

version_info.cpp

c:\build\desktop_apps\sputniklib\auto_handle.hpp

process_enumerate.cpp

unzip.cpp

process_util.cpp

!"#$%&'(

)* ,-./0123

is_admin.cpp

Suggest URL

mailru::opera::searchini::save

opera_searchini.cpp

user_logon_watcher.cpp

sync_objects.cpp

SessionsInfo.cpp

mailru::WaitForUserLogIn

uninstall_manager.cpp

mailru::url_parser::init

url_parser.cpp

sqlite_reader.cpp

mailru::SqliteReader::SqliteReader

testing_env.cpp

metrics\async_metric_scheduler.cpp

crash_handler.cpp

network\http_client_impl.cpp

mailru::`anonymous-namespace'::ParseHttpDate

hXXp://any.url/

C:\Build\desktop_apps\3party\boost/network/protocol/http/client/connection/connection_delegate_factory.hpp

class boost::shared_ptr<struct boost::network::http::impl::connection_delegate> __cdecl boost::network::http::impl::connection_delegate_factory<struct boost::network::http::tags::http_async_8bit_udp_resolve>::new_connection_delegate(class boost::asio::io_service &,bool,bool,class boost::optional<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class boost::optional<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class boost::optional<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class boost::optional<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class boost::optional<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,long)

HTTPS not supported.

shortcut.cpp

system_info\system_info.cpp

task_scheduler.cpp

caching_policy.cpp

Visual C   CRT: Not enough memory to complete call to strerror.

%S#[k

?#%X.y

MaxPolicyElementKey

Operation not permitted

Inappropriate I/O control operation

Broken pipe

operator

GetProcessWindowStation

pExecutionResource

c:\build\desktop_apps\3party\ticpp\ticpp.h

ticpp.cpp

Type is unsupported

&#xX;

</%s>

%s="%s"

%s='%s'

<!--%s-->

<![CDATA[%s]]>

version="%s"

encoding="%s"

standalone="%s"

type="%s"

href="%s"

unsupported version

.UTF-8

.windows-

windows1250

windows1251

windows1252

windows1253

windows1254

windows1255

windows1256

windows1257

windows874

windows932

windows936

Invalid or unsupported charset:

SQLite format 3

3.9.2

mjB?A@usrtREINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYWITHOUTERELEASEATTACHAVINGROUPDATEBEGINNERECURSIVEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTRIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY

CREATE TABLE sqlite_master(

sql text

CREATE TEMP TABLE sqlite_temp_master(

sqlite_attach

defer_foreign_keys

foreign_key_check

foreign_key_list

foreign_keys

sqlite_rename_table

sqlite_rename_trigger

sqlite_rename_parent

SQL logic error or missing database

unknown operation

large file support is disabled

sqlite_stat1

sqlite_stat3

sqlite_stat4

FOREIGN KEY

RowKey

sqlite_version

sqlite_source_id

sqlite_log

sqlite_compileoption_used

sqlite_compileoption_get

GetProcessHeap

sqlite_detach

SQLITE_

d-d-d d:d:d

d:d:d

d-d-d

failed to allocate %u bytes of memory

failed memory resize %u to %u bytes

922337203685477580

API call with %s database connection pointer

os_win.c:%d: (%lu) %s(%s) - %s

delayed %dms for lock/sharing conflict at line %d

%s-shm

%s%c%s

recovered %d pages from %s

recovered %d frames from WAL file %s

cannot limit WAL size: %s

invalid page number %d

2nd reference to page %d

Failed to read ptrmap key=%d

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

%d of %d pages missing from overflow list starting at %d

failed to get page %d

freelist leaf count too big on page %d

Page %d:

unable to get the page. error code=%d

btreeInitPage() returns error code %d

On tree page %d cell %d:

On page %d at right child:

Offset %d out of range %d..%d

Multiple uses for byte %u of page %d

Fragmentation of %d bytes reported as %d on page %d

Page %d is never used

Pointer map page %d is referenced

unknown database %s

%s(%d)

%s-mjXXXXXX9XXz

MJ delete: %s

MJ collide: %s

-mjX9X

FOREIGN KEY constraint failed

unable to use function %s in the requested context

bind on a busy prepared statement: [%s]

zeroblob(%d)

abort at %d in [%s]: %s

%s constraint failed: %s

%s constraint failed

cannot open savepoint - SQL statements in progress

no such savepoint: %s

cannot release savepoint - SQL statements in progress

cannot commit transaction - SQL statements in progress

sqlite_temp_master

sqlite_master

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

cannot change %s wal mode from within a transaction

database table is locked: %s

statement aborts at %d: [%s] %s

cannot open value of type %s

cannot open virtual table: %s

cannot open table without rowid: %s

cannot open view: %s

no such column: "%s"

foreign key

indexed

cannot open %s column for writing

misuse of aliased aggregate %s

%s: %s.%s.%s

%s: %s.%s

%s: %s

%s prohibited in %s

the "." operator

not authorized to use function: %s

%r %s BY term out of range - should be between 1 and %d

too many terms in %s BY clause

Expression tree is too large (maximum depth %d)

variable number must be between ?1 and ?%d

too many SQL variables

too many columns in %s

EXECUTE %s%s SUBQUERY %d

hex literal too big: %s

misuse of aggregate: %s()

%.*s"%w"%s

%s%.*s"%w"

%s OR name=%Q

type='trigger' AND (%s)

sqlite_

table %s may not be altered

there is already another table or index with this name: %s

view %s may not be altered

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

sqlite_sequence

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

Cannot add a PRIMARY KEY column

UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q

sqlite_altertab_%s

CREATE TABLE %Q.%s(%s)

DELETE FROM %Q.%s WHERE %s=%Q

SELECT tbl,idx,stat FROM %Q.sqlite_stat1

too many attached databases - max %d

database %s is already in use

unable to open database: %s

no such database: %s

cannot detach database %s

database %s is locked

%s %T cannot reference objects in database %s

%s cannot use variables

access to %s.%s.%s is prohibited

access to %s.%s is prohibited

object name reserved for internal use: %s

there is already an index named %s

too many columns on %s

duplicate column name: %s

default value of column [%s] is not constant

table "%s" has more than one primary key

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

PRIMARY KEY missing on table %s

CREATE %s %.*s

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

CREATE TABLE %Q.sqlite_sequence(name,seq)

view %s is circularly defined

UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d

sqlite_stat%d

DELETE FROM %Q.sqlite_sequence WHERE name=%Q

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

sqlite_stat

table %s may not be dropped

use DROP TABLE to delete table %s

use DROP VIEW to delete view %s

foreign key on %s should reference only one column of table %T

number of columns in foreign key does not match the number of columns in the referenced table

unknown column "%s" in foreign key definition

cannot create a TEMP index on non-TEMP table "%s"

table %s may not be indexed

views may not be indexed

virtual tables may not be indexed

there is already a table named %s

index %s already exists

sqlite_autoindex_%s_%d

expressions prohibited in PRIMARY KEY and UNIQUE constraints

CREATE%s INDEX %.*s

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

no such index: %S

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

a JOIN clause is required before %s

%s.%s

%s.rowid

unable to identify the object to be reindexed

duplicate WITH table name: %s

no such collation sequence: %s

table %s may not be modified

cannot modify %s because it is a view

foreign key mismatch - "%w" referencing "%w"

table %S has no column named %s

table %S has %d columns but %d values were supplied

%d values for %d columns

sqlite3_extension_init

unable to open shared library [%s]

sqlite3_

no entry point [%s] in shared library [%s]

error during initialization: %s

automatic extension loading failed: %s

*** in database %s ***

NULL value in %s.%s

unsupported encoding: %s

malformed database schema (%s)

%z - %s

unsupported file format

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

database schema is locked: %s

unknown or unsupported join type: %T %T%s%T

RIGHT and FULL OUTER JOINs are not currently supported

a NATURAL join may not have an ON or USING clause

cannot have both ON and USING clauses in the same join

cannot join using column %s - column not present in both tables

USE TEMP B-TREE FOR %s

COMPOUND SUBQUERIES %d AND %d %s(%s)

column%d

%s:%d

recursive aggregate queries not supported

ORDER BY clause should come after %s not before

LIMIT clause should come after %s not before

SELECTs to the left and right of %s do not have the same number of result columns

no such index: %s

multiple references to recursive table: %s

circular reference: %s

table %s has %d values for %d columns

multiple recursive references: %s

recursive reference in a subquery: %s

sqlite_sq_%p

too many references to "%s": max 65535

'%s' is not a function

%s.%s.%s

no such table: %s

SCAN TABLE %s%s%s

expected %d columns for '%s' but got %d

sqlite3_get_table() called with two or more incompatible queries

cannot create %s trigger on view: %S

cannot create INSTEAD OF trigger on table: %S

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

no such trigger: %S

-- TRIGGER %s

no such column: %s

cannot VACUUM - SQL statements in progress

PRAGMA vacuum_db.synchronous=OFF

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND coalesce(rootpage,1)>0

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND coalesce(rootpage,1)>0

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d

vtable constructor called recursively: %s

vtable constructor failed: %s

vtable constructor did not declare schema: %s

no such module: %s

ANY(%s)

SUBQUERY %d

TABLE %s

AS %s

PRIMARY KEY

COVERING INDEX %s

INDEX %s

USING INTEGER PRIMARY KEY (rowid%s?)

VIRTUAL TABLE INDEX %d:%s

too many arguments on %s() - max %d

automatic index on %s(%s)

table %s: xBestIndex returned an invalid plan

%s.xBestIndex() malfunction

at most %d tables in a join

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

unknown database: %s

no such %s mode: %s

%s mode not allowed: %s

no such vfs: %s

database corruption at line %d of [%.10s]

misuse at line %d of [%.10s]

cannot open file at line %d of [%.10s]

no such table column: %s.%s

N1.2.5

<fd:%d>

deflate 1.2.5 Copyright 1995-2010 Jean-loup Gailly and Mark Adler

1.2.5

inflate 1.2.5 Copyright 1995-2010 Mark Adler

.\crypto\engine\eng_pkey.c

RSA PRIVATE KEY

PUBLIC KEY

DSA PRIVATE KEY

EC PRIVATE KEY

Load certs from files in a directory

%s%clx.%s%d

unsupported type

unsupported recpientinfo type

unsupported recipient type

unsupported kek algorithm

unsupported content type

signer certificate not found

private key does not match certificate

no public key

no private key

no msgsigdigest

no key or cert

no key

not supported for this key type

not key transport

msgsigdigest wrong length

msgsigdigest verification failure

msgsigdigest error

invalid key length

invalid encrypted key length

error setting key

error getting public key

certificate verify error

certificate has no keyid

certificate already present

CMS_SIGNERINFO_VERIFY_CERT

CMS_RecipientInfo_set0_pkey

CMS_RecipientInfo_set0_key

CMS_RecipientInfo_ktri_cert_cmp

cms_msgSigDigest_add1

CMS_GET0_CERTIFICATE_CHOICES

CMS_EncryptedData_set1_key

CMS_decrypt_set1_pkey

CMS_decrypt_set1_key

CMS_add1_recipient_cert

CMS_add0_recipient_key

CMS_add0_cert

unsupported requestorname type

no certificates in chain

error parsing url

PARSE_HTTP_LINE1

OCSP_parse_url

OCSP_cert_id_new

unimplemented public key method

invalid cmd number

invalid cmd name

failed loading public key

failed loading private key

cmd not executable

ENGINE_UNLOAD_KEY

ENGINE_load_ssl_client_cert

ENGINE_load_public_key

ENGINE_load_private_key

ENGINE_get_pkey_meth

ENGINE_get_pkey_asn1_meth

ENGINE_ctrl_cmd_string

ENGINE_ctrl_cmd

ENGINE_cmd_is_executable

unsupported md algorithm

invalid signer certificate purpose

ess signing certificate error

ess add signing cert error

TS_VERIFY_CERT

TS_TST_INFO_set_msg_imprint

TS_RESP_CTX_set_signer_cert

TS_RESP_CTX_set_certs

TS_REQ_set_msg_imprint

TS_MSG_IMPRINT_set_algo

TS_CHECK_SIGNING_CERTS

ESS_SIGNING_CERT_NEW_INIT

ESS_CERT_ID_NEW_INIT

ESS_ADD_SIGNING_CERT

functionality not supported

WIN32_JOINER

unsupported pkcs12 mode

key gen error

PKCS8_add_keyusage

PKCS12_PBE_keyivgen

PKCS12_newpass

PKCS12_MAKE_SHKEYBAG

PKCS12_MAKE_KEYBAG

PKCS12_key_gen_uni

PKCS12_key_gen_asc

PKCS12_add_localkeyid

unsupported option

unable to get issuer keyid

policy syntax not currently supported

operation not defined

no proxy cert policy language defined

no issuer certificate

extension setting not supported

V2I_EXTENDED_KEY_USAGE

V2I_AUTHORITY_KEYID

S2I_SKEY_ID

S2I_ASN1_SKEY_ID

R2I_CERTPOL

unsupported cipher type

unable to find certificate

signing not supported for this key type

operation not supported on this type

no recipient matches key

no recipient matches certificate

encryption not supported for this key type

decrypted key is wrong length

PKCS7_add_certificate

unsupported method

no port specified

no port defined

no accept port specified

BIO_get_port

ECDH_compute_key

data too large for key size

unsupported field

passed null parameter

not a supported NIST prime

missing private key

keys not set

invalid private key

PKEY_EC_SIGN

PKEY_EC_PARAMGEN

PKEY_EC_KEYGEN

PKEY_EC_DERIVE

PKEY_EC_CTRL_STR

PKEY_EC_CTRL

o2i_ECPublicKey

i2o_ECPublicKey

i2d_ECPrivateKey

EC_KEY_print_fp

EC_KEY_print

EC_KEY_new

EC_KEY_generate_key

EC_KEY_copy

EC_KEY_check_key

ECKEY_TYPE2PARAM

ECKEY_PUB_ENCODE

ECKEY_PUB_DECODE

ECKEY_PRIV_ENCODE

ECKEY_PRIV_DECODE

ECKEY_PARAM_DECODE

ECKEY_PARAM2TYPE

DO_EC_KEY_PRINT

d2i_ECPrivateKey

zlib not supported

wrong public key type

unsupported public key type

unsupported encryption algorithm

unsupported any defined by type

unknown public key type

unable to decode rsa private key

unable to decode rsa key

streaming not supported

private key header missing

digest and key type not supported

bad password read

X509_PKEY_new

i2d_RSA_PUBKEY

i2d_PublicKey

i2d_PrivateKey

i2d_EC_PUBKEY

i2d_DSA_PUBKEY

d2i_X509_PKEY

d2i_PublicKey

d2i_PrivateKey

d2i_AutoPrivateKey

unsupported algorithm

unknown key type

unable to get certs public key

public key encode error

public key decode error

no cert set for us to verify

method not supported

loading cert dir

key values mismatch

key type mismatch

cert already in hash table

cant check dh key

X509_verify_cert

X509_STORE_add_cert

X509_REQ_check_private_key

X509_PUBKEY_set

X509_PUBKEY_get

X509_load_cert_file

X509_load_cert_crl_file

X509_get_pubkey_parameters

X509_check_private_key

GET_CERT_BY_SUBJECT

ADD_CERT_DIR

PKEY_DSA_KEYGEN

PKEY_DSA_CTRL

unsupported key components

unsupported encryption

read key

public key no rsa

problems getting password

keyblob too short

keyblob header parse error

expecting public key blob

expecting private key blob

error converting private key

PEM_WRITE_PRIVATEKEY

PEM_READ_PRIVATEKEY

PEM_READ_BIO_PRIVATEKEY

PEM_PK8PKEY

PEM_F_PEM_WRITE_PKCS8PRIVATEKEY

DO_PK8PKEY_FP

DO_PK8PKEY

d2i_PKCS8PrivateKey_fp

d2i_PKCS8PrivateKey_bio

unsupported salt type

unsupported private key algorithm

unsupported prf

unsupported key size

unsupported key derivation function

unsupported keylength

unsuported number of rounds

private key encode error

private key decode error

operaton not initialized

operation not supported for this keytype

no operation set

no key set

keygen failure

invalid operation

expecting a ec key

expecting a ecdsa key

expecting a dsa key

expecting a dh key

expecting an rsa key

different key types

ctrl operation not implemented

command not supported

camellia key setup failed

bn pubkey error

bad key length

aes key setup failed

PKEY_SET_TYPE

PKCS5_v2_PBE_keyivgen

PKCS5_PBE_keyivgen

EVP_PKEY_verify_recover_init

EVP_PKEY_verify_recover

EVP_PKEY_verify_init

EVP_PKEY_verify

EVP_PKEY_sign_init

EVP_PKEY_sign

EVP_PKEY_paramgen_init

EVP_PKEY_paramgen

EVP_PKEY_new

EVP_PKEY_keygen_init

EVP_PKEY_keygen

EVP_PKEY_get1_RSA

EVP_PKEY_get1_EC_KEY

EVP_PKEY_GET1_ECDSA

EVP_PKEY_get1_DSA

EVP_PKEY_get1_DH

EVP_PKEY_encrypt_old

EVP_PKEY_encrypt_init

EVP_PKEY_encrypt

EVP_PKEY_derive_set_peer

EVP_PKEY_derive_init

EVP_PKEY_derive

EVP_PKEY_decrypt_old

EVP_PKEY_decrypt_init

EVP_PKEY_decrypt

EVP_PKEY_CTX_dup

EVP_PKEY_CTX_ctrl_str

EVP_PKEY_CTX_ctrl

EVP_PKEY_copy_parameters

EVP_PKEY2PKCS8_broken

EVP_PKCS82PKEY_BROKEN

EVP_PKCS82PKEY

EVP_CIPHER_CTX_set_key_length

ECKEY_PKEY2PKCS8

ECDSA_PKEY2PKCS8

DSA_PKEY2PKCS8

DSAPKEY2PKCS8

D2I_PKEY

CAMELLIA_INIT_KEY

AES_INIT_KEY

invalid public key

PKEY_DH_KEYGEN

PKEY_DH_DERIVE

GENERATE_KEY

COMPUTE_KEY

rsa operations not supported

key size too small

invalid keybits

illegal or unsupported padding mode

digest too big for rsa key

data too small for key size

RSA_generate_key

RSA_check_key

RSA_BUILTIN_KEYGEN

PKEY_RSA_VERIFYRECOVER

PKEY_RSA_SIGN

PKEY_RSA_CTRL_STR

PKEY_RSA_CTRL

NETSCAPE_CERT_SEQUENCE

.\crypto\asn1\x_pkey.c

!$&'()* ,;=

Operation not permitted on an object without an associated state.

libs\log\src\text_file_backend.cpp

%H:%M:%S.%f

C:\Build\desktop_apps\_out\MailRuUpdater.pdb

MailRuUpdater.exe

??0?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@QAE@XZ

??0?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@QAE@XZ

??0?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@QAE@XZ

??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@XZ@51

??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@XZ@51

??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@XZ@51

??_B?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@51

??_B?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ@51

?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@XZ

?get_const_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@XZ

?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@XZ

?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ

?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@XZ

?get_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@XZ

?get_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@XZ

?get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ

?get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ

?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ

?instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@A

?instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@A

?instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@A

?instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@A

?instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@A

?instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@A

?instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@A

?instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@A

?instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@A

?instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@A

?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ

?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z

?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z

?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z

?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z

?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z

?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z

?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@detail@34@A

?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@detail@34@A

?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@detail@34@A

?t@?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@detail@34@A

?t@?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@634@A

CreateIoCompletionPort

KERNEL32.dll

SetWindowsHookExW

UnhookWindowsHookEx

USER32.dll

GDI32.dll

RegCloseKey

RegOpenKeyExW

RegCreateKeyExW

RegDeleteKeyW

RegEnumKeyExW

RegQueryInfoKeyW

ReportEventA

ADVAPI32.dll

FindExecutableW

ShellExecuteW

SHELL32.dll

ole32.dll

OLEAUT32.dll

SHLWAPI.dll

COMCTL32.dll

WS2_32.dll

PSAPI.DLL

USERENV.dll

WTSAPI32.dll

CertCloseStore

CertEnumCertificatesInStore

CertOpenSystemStoreW

CRYPT32.dll

d3d9.dll

VERSION.dll

GetCPInfo

ShellExecuteExW

CoInternetParseUrl

urlmon.dll

PeekNamedPipe

-----BEGIN PUBLIC KEY-----

-----END PUBLIC KEY-----

HTTP/

zcÁ

.?AV?$_Ref_count_obj@VAuditGoogleChrome@mailru@@@std@@

.?AV?$_Ref_count_obj@VAuditFirefox@mailru@@@std@@

.?AVAuditFirefox@mailru@@

.?AVCheckerFirefox@AuditFirefox@mailru@@

.?AVCheckerHomepageFirefox@AuditFirefox@mailru@@

.?AVCheckerDefaultSearchFirefox@AuditFirefox@mailru@@

.?AVCheckerVbmFirefox@AuditFirefox@mailru@@

.?AV?$_Ref_count_obj@VCheckerHomepageFirefox@AuditFirefox@mailru@@@std@@

.?AV?$_Ref_count_obj@VCheckerDefaultSearchFirefox@AuditFirefox@mailru@@@std@@

.?AV?$_Ref_count_obj@VCheckerVbmFirefox@AuditFirefox@mailru@@@std@@

.?AVAuditGoogleChrome@mailru@@

.?AVCheckerCh@AuditGoogleChrome@mailru@@

.?AVCheckerHomepageCh@AuditGoogleChrome@mailru@@

.?AVCheckerDefaultSearchCh@AuditGoogleChrome@mailru@@

.?AVCheckerVbmCh@AuditGoogleChrome@mailru@@

.?AV?$_Ref_count_obj@VCheckerHomepageCh@AuditGoogleChrome@mailru@@@std@@

.?AV?$_Ref_count_obj@VCheckerDefaultSearchCh@AuditGoogleChrome@mailru@@@std@@

.?AV?$_Ref_count_obj@VCheckerVbmCh@AuditGoogleChrome@mailru@@@std@@

.?AVFirefoxCookieManager@cookies@mailru@@

.?AVChromeExtensionStorage@mailru@@

.?AVFirefoxExtensionStorage@mailru@@

.?AUChromeExtensionTraits@checksum_traits@mailru@@

.?AUFirefoxExtensionTraits@checksum_traits@mailru@@

.?AVsettings@firefox@mailru@@

.?AVTaskExecuteAV@mailru@@

.?AV?$_Ref_count_obj@VTaskExecuteAV@mailru@@@std@@

.?AV?$thread_data@V?$bind_t@XV?$mf0@XVRemoteTasksExecuter@mailru@@@_mfi@boost@@V?$list1@V?$value@PAVRemoteTasksExecuter@mailru@@@_bi@boost@@@_bi@3@@_bi@boost@@@detail@boost@@

.?AV?$thread_data@V?$bind_t@XV?$mf1@XVRemoteTasksExecuter@mailru@@ABV?$shared_ptr@VTaskInterface@mailru@@@std@@@_mfi@boost@@V?$list2@V?$value@PAVRemoteTasksExecuter@mailru@@@_bi@boost@@V?$value@V?$shared_ptr@VTaskInterface@mailru@@@std@@@23@@_bi@3@@_bi@boost@@@detail@boost@@

.?AVTaskOneTimeWithChromeAutorunPatch@mailru@@

.?AV?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@

.?AU?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@

.?AUProcessKey@sysinfo@mailru@@

.?AV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@

.?AV?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@

.?AV?$singleton_wrapper@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@detail@serialization@boost@@

.?AV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@

.?AV?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@

.?AV?$singleton_wrapper@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@detail@serialization@boost@@

.?AV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@

.?AV?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@

.?AV?$singleton_wrapper@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@detail@serialization@boost@@

.?AV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$typeid_wrapper@V?$resolver_service@Vtcp@ip@asio@boost@@@ip@asio@boost@@@detail@asio@boost@@

.?AV?$typeid_wrapper@V?$stream_socket_service@Vtcp@ip@asio@boost@@@asio@boost@@@detail@asio@boost@@

.?AV?$stream_socket_service@Vtcp@ip@asio@boost@@@asio@boost@@

.?AV?$service_base@V?$stream_socket_service@Vtcp@ip@asio@boost@@@asio@boost@@@detail@asio@boost@@

.?AV?$resolver_service@Vtcp@ip@asio@boost@@@ip@asio@boost@@

.?AV?$service_base@V?$resolver_service@Vtcp@ip@asio@boost@@@ip@asio@boost@@@detail@asio@boost@@

.?AV?$_Ref_count@V?$vector@V?$basic_resolver_entry@Vtcp@ip@asio@boost@@@ip@asio@boost@@V?$allocator@V?$basic_resolver_entry@Vtcp@ip@asio@boost@@@ip@asio@boost@@@std@@@std@@@std@@

.?AVwindows_file_codecvt@@

.PAUattribute_name_info_tag@v2s_mt_nt5@log@boost@@

.?AVexception@sqlite@mailru@@

.?AVHttpError@mailru@@

.?AV?$bind_t@XV?$mf4@XU?$async_resolver@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@@policies@http@network@boost@@AAV?$basic_resolver@Vudp@ip@asio@boost@@V?$resolver_service@Vudp@ip@asio@boost@@@234@@ip@asio@5@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@GV?$function@$$A6AXABVerror_code@system@boost@@U?$pair@V?$basic_resolver_iterator@Vudp@ip@asio@boost@@@ip@asio@boost@@V1234@@std@@@Z@5@@_mfi@boost@@V?$list5@V?$value@PAU?$async_connection_policy@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@http@network@boost@@@_bi@boost@@U?$arg@$00@3@U?$arg@$01@3@U?$arg@$02@3@U?$arg@$03@3@@_bi@3@@_bi@boost@@

.?AV?$wrapped_handler@Vstrand@io_service@asio@boost@@V?$bind_t@XV?$mf8@XU?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@GG_NV?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@5@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@5@ABVerror_code@system@5@U?$pair@V?$basic_resolver_iterator@Vudp@ip@asio@boost@@@ip@asio@boost@@V1234@@7@@_mfi@boost@@V?$list9@V?$value@V?$shared_ptr@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@boost@@@_bi@boost@@V?$value@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@23@V?$value@G@23@V523@V?$value@_N@23@V?$value@V?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@boost@@@23@V?$value@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@boost@@@23@U?$arg@$00@3@U?$arg@$01@3@@_bi@3@@_bi@4@Uis_continuation_if_running@detail@34@@detail@asio@boost@@

.?AV?$wrapped_handler@Vstrand@io_service@asio@boost@@V?$bind_t@XV?$mf8@XU?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@GG_NV?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@5@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@5@U?$pair@V?$basic_resolver_iterator@Vudp@ip@asio@boost@@@ip@asio@boost@@V1234@@7@ABVerror_code@system@5@@_mfi@boost@@V?$list9@V?$value@V?$shared_ptr@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@boost@@@_bi@boost@@V?$value@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@23@V?$value@G@23@V523@V?$value@_N@23@V?$value@V?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@boost@@@23@V?$value@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@boost@@@23@V?$value@U?$pair@V?$basic_resolver_iterator@Vudp@ip@asio@boost@@@ip@asio@boost@@V1234@@std@@@23@U?$arg@$00@3@@_bi@3@@_bi@4@Uis_continuation_if_running@detail@34@@detail@asio@boost@@

.?AV?$wrapped_handler@Vstrand@io_service@asio@boost@@V?$bind_t@XV?$mf5@XU?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@_NV?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@5@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@5@ABVerror_code@system@5@I@_mfi@boost@@V?$list6@V?$value@V?$shared_ptr@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@boost@@@_bi@boost@@V?$value@_N@23@V?$value@V?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@boost@@@23@V?$value@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@boost@@@23@U?$arg@$00@3@U?$arg@$01@3@@_bi@3@@_bi@4@Uis_continuation_if_running@detail@34@@detail@asio@boost@@

.?AV?$wrapped_handler@Vstrand@io_service@asio@boost@@V?$bind_t@XV?$mf5@XU?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@W4state_t@12345@_NV?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@5@ABVerror_code@system@5@I@_mfi@boost@@V?$list6@V?$value@V?$shared_ptr@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@boost@@@_bi@boost@@V?$value@W4state_t@?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@23@V?$value@_N@23@V?$value@V?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@boost@@@23@U?$arg@$00@3@U?$arg@$01@3@@_bi@3@@_bi@4@Uis_continuation_if_running@detail@34@@detail@asio@boost@@

.?AV?$typeid_wrapper@V?$resolver_service@Vudp@ip@asio@boost@@@ip@asio@boost@@@detail@asio@boost@@

.?AV?$resolver_service@Vudp@ip@asio@boost@@@ip@asio@boost@@

.?AV?$service_base@V?$resolver_service@Vudp@ip@asio@boost@@@ip@asio@boost@@@detail@asio@boost@@

.?AU?$async_connection_base@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@

.?AU?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@

.?AU?$http_async_protocol_handler@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@

.?AV?$enable_shared_from_this@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@boost@@

.?AV?$sp_counted_impl_p@Uconnection_impl@?$async_connection_policy@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@http@network@boost@@@detail@boost@@

.?AV?$sp_counted_impl_p@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@detail@boost@@

.?AV?$sp_counted_impl_p@Unormal_delegate@impl@http@network@boost@@@detail@boost@@

.?AV?$sp_counted_impl_p@U?$basic_client_impl@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@http@network@boost@@@detail@boost@@

.?AV?$_Ref_count@V?$vector@V?$basic_resolver_entry@Vudp@ip@asio@boost@@@ip@asio@boost@@V?$allocator@V?$basic_resolver_entry@Vudp@ip@asio@boost@@@ip@asio@boost@@@std@@@std@@@std@@

.?AVinvalid_scheduler_policy_key@Concurrency@@

.?AVinvalid_operation@Concurrency@@

.?AVunsupported_os@Concurrency@@

.?AVinvalid_oversubscribe_operation@Concurrency@@

.?AUITopologyExecutionResource@Concurrency@@

.?AUIExecutionContext@Concurrency@@

.?AVExecutionResource@details@Concurrency@@

.?AUIExecutionResource@Concurrency@@

.?AUconnection_delegate@impl@http@network@boost@@

.?AUnormal_delegate@impl@http@network@boost@@

Inappropriate I/O control opera

<requestedExecutionLevel level='asInvoker' uiAccess='false' />

<assemblyIdentity type='win32' name='Microsoft.Windows.Common-Controls' version='6.0.0.0' processorArchitecture='x86' publicKeyToken='6595b64144ccf1df' language='*' />

6%7u7s9

:,:0:4:8:<:

>'?.?8?^?

9-9@9[9{9

9 <$<(<,<

5_:V:

6'7,71767

9-9Z9}9

9%:*:/:4:@:}:

0C0S0c0

5&6,62686

:0:4:8:<:

6)606<6]6@7

5,62686>6

3?3R3c3o3v3

6#8(8-828>8{8

4#4(4&585

2!2f3o3

8,;0;4;8;

6f7D7

&050&181\1

9!9 9&=6=

777<7[7`7

4%4s4z4

< <$<(<,<0<4<8<<<@<

<"=(=,=0=4=

8!8%8)8-818

:,;1;7;>;

>%> >5>@>

9 :*:3:>:

5 6*636?6

0&181^1|1

9Ÿ9u9

3'3-323@3{3

7,8 :`:^;

;#;2;@;#=2=@=

00c0x0

: ;$;(;,;0;

6 6c6<6

1 2$2(2,2

-141(5@8

= =$=(=,=0=4=

3 3$3(3,303

7 7-787@7_7

6 7$7(7,70747

:*:;:$=-=2=

5]5b6

?"?'?5?>?

:#:-:3:=:

< <$<(<,<0<

; ;$;(;,;

? ?$?(?,?0?4?8?

; ;$;(;,;0;

7 7$7(7,7074787<7@7

< <$<(<,<0<4<8<<<

6 6$6(6,606

2 2$2(2,2024282<2

3 3$3(3,30343

1 1(14181

1014181<1

; ;$;(;,;0;4;8;

5 5$5(5,5054585<5

3 3(343\3

6 6(646\6

:$:,:8:\:

>$>,>8>\>|>

< <(<0<<<`<

3 3(303<3`3

: :(:0:<:`:

>$>,>8>`>

=,=8=@=`=

>,>8>@>`>

0 0(000<0`0

6(646<6\6

=$=,=8=`=

: ;,;4;`;|;

= =(=0=<=`=

/signatures.mrdj

hXXp://mrds.mail.ru/update/2/version.txt

/sputnik/spmrids.mrdj

JMail.Ru\Sputnik\Report

hXXp://xml.binupdate.mail.ru/audit_config.mrdj

Start new check operation

failed to parse. New report Created

restore mail.ru for:

operation_type

checker->Check failed, msg =

hXXp://xml.binupdate.mail.ru/sputnik/spmrids.mrdj

hXXp://xml.binupdate.mail.ru/sputnik/spmrids.mrdj successfully fetched

FFExtensions/FFVbm/Url

Hp/Url

Dse/Url

Vbm/Url

Advapi32.dll

creation_utc, host_key, name, path, expires_utc, value, encrypted_value, secure, httponly, last_access_utc

psqlite3_reset

sqlite3_bind_text16

sqlite3_busy_timeout

L FROM cookies WHERE name = ? AND host_key = ?

name,value,host,path,expiry,baseDomain lastAccessed,creationTime,isSecure,isHttpOnly

/tasks/browsers.mrdj

Google\Chrome\User Data\Safe Browsing Extension Blacklist

OGoogle/Chrome/User Data

Google/Chrome/Application

Software\Policies\Google\Chrome

Google Chrome

Google/Chrome/User Data/Default

Google/Chrome/Application/chrome.exe

Software/Google/Chrome/BLBeacon

Software\Mail.Ru\AmigoInstaller

sqlite3_bind_blob

_0.localstorage

chrome-extension_

key TEXT UNIQUE ON CONFLICT REPLACE,

SELECT value FROM ItemTable WHERE key = ?

URLS

sqlite3_exec

select k.url from meta m, keywords k where m.key='Default Search Provider ID' and m.value=k.id

Mail.Ru

dSELECT id FROM keywords WHERE keyword = 'mail.ru' COLLATE NOCASE

DELETE FROM keywords WHERE short_name = '@MAIL.RU'

SELECT * FROM keywords

ALTER TABLE keywords ADD COLUMN alternate_urls VARCHAR DEFAULT ''

ALTER TABLE keywords ADD COLUMN search_terms_replacement_key VARCHAR DEFAULT ''

INSERT INTO keywords

id, short_name, keyword, favicon_url, url, show_in_default_list, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, suggest_url, prepopulate_id, created_by_policy, instant_url, last_modified, sync_guid

@Mail.Ru','go.mail.ru','hXXp://go.mail.ru/favicon.ico','hXXp://go.mail.ru/search?q={searchTerms}&fr=ntg',1,1,'',1333701777,0,'windows-1251','hXXp://suggests.go.mail.ru/ff3?q={searchTerms}',%PREPOPULATE_ID%,0,'',0,'03095DE3-A6E7-4793-A20C-399A0F4A92E1'

UPDATE keywords SET short_name = '

@Mail.Ru', keyword = 'go.mail.ru', favicon_url = 'hXXp://go.mail.ru/favicon.ico', url = 'hXXp://go.mail.ru/search?q={searchTerms}&fr=ntg%RFR%',show_in_default_list = '1' WHERE id = '%ID%'

SELECT id , prepopulate_id FROM keywords WHERE keyword = 'go.mail.ru' COLLATE NOCASE

SELECT id , prepopulate_id FROM keywords WHERE keyword = 'mail.ru' COLLATE NOCASE

SELECT id, prepopulate_id FROM keywords

' WHERE key = 'Default Search Provider ID'

' WHERE key = 'Default Search Provider ID Backup'

UPDATE keywords SET suggest_url = '%SUGGEST_URL%' WHERE keyword like '%mail.ru%'

%SUGGEST_URL%

manifest.json

^(chrome-extension://)?(\w{32})?/?

Software/Google/Chrome/Extensions

Sync Data Backup/SyncData.sqlite3

hXXps://clients2.google.com/service/update2/crx

hXXp://xml.binupdate.mail.ru/guard/mrids.mrdj

chrome_url_overrides/newtab

Extension from url installed

DefaultSearchProviderSearchURL

DefaultSearchProviderKeyword

DefaultSearchProviderInstantURL

DefaultSearchProviderSuggestURL

^chrome-extension://([a-z]{32})/

Web Data

SELECT value FROM meta WHERE key = 'version'

Reading web data version failed:

qmail.ru

VVV.mail.ru

VVV.go.mail.ru

common_process.exe

{A12C4AB1-F4D0-4771-8C21-613E9D12491F}

{1079004F-E4EF-4A44-9D1F-7C9CE09CE258}

{901B414B-72A2-48C6-8DCD-29388B8B3E40}

{0ED2394C-62B6-4A80-A342-C2CA0B2A4E82}

{E60E6A0E-4092-4965-85BB-AA1ED8EBBC8E}

{ADAC3638-040C-498C-845A-F89B99705444}

{4519D3B5-465C-4AE2-A905-960CA7D5385C}

{F581DE96-9AA1-45C8-8335-B7445525371A}

{DCEF19BB-AB61-48F4-A7CB-6D677D90D1C2}

{B63A6D16-4F50-47C2-9BF7-A5D6E79C9EFD}

{11A1974E-9BEF-4B50-8E2F-9F25FC775BD1}

{3E57F3FE-4397-4DEA-A19A-760BFCD24242}

{63CF3EC2-0122-429B-AB91-781D5D6A8513}

{D33EDE61-8E43-4C1F-9371-6A240B4DA5C9}

{ABCAA0D8-A892-481F-9492-ACC63768F659}

{8DC7BF6A-58F3-4740-B600-34E37FFADC21}

{4C1D0C36-25B2-4774-80E8-DAE1E7898A1A}

{96AF929E-B8EB-499E-99A8-095E4262BE26}

{027940D4-10B8-43B6-9707-A4EE47618E1D}

{45DA0BF7-F31B-4360-BF9A-8E7374A78916}

{5552B451-2086-4B64-82C6-732B18E41FCD}

{F9CC112D-19A0-455B-8D85-F5E9CB7D5914}

{0E26AC42-4B6E-4C84-8291-A0CAC999E70D}

{CFB9F60E-912D-43B3-91C9-9E06AE17ADE0}

{3CE4F0C3-2143-491F-8F20-27792166C41F}

{4947360E-E26B-4CC9-BB40-F4A30EDCA39E}

{14737ADB-9F88-47E8-A76F-D365509795AC}

{25A21CA7-3B29-4A32-8F04-25389F58ED78}

{9A43760C-B8B0-44BA-8DB2-82041B01D78A}

{E26CB86D-BD59-40B5-B285-55ACAC12C019}

chrome-extension://clpdgmdkdnijjbgmnajolnbnjejoeogm/visual-bookmarks.html

chrome-extension://hcncjpganfocbfoenaemagjjopkkindp/visual-bookmarks.html

chrome-extension://jaocgokledfmfebefgbeokdodbbdjhdd/visual-bookmarks.html

chrome-extension://dhngkpgdbpbkopndlpkicfaiffphdkbo/visual-bookmarks.html

Software\AppDataLow\Software\Mail.Ru\IE_Bar

Software\Mail.Ru\IE_Bar

Software/Mail.Ru/Updater

Software\Mail.Ru\Flags

SOFTWARE/Microsoft/Windows/CurrentVersion/Uninstall

SOFTWARE/Microsoft/Windows/CurrentVersion/Run

SOFTWARE/Mail.Ru

{09900DE8-1DCA-443F-9243-26FF581438AF}

{58810E75-E249-44C6-B989-11D227263E24}

{91397D20-1446-11D4-8AF4-0040CA1127B6}

{95289393-33EA-4F8D-B952-483415B9C955}

hXXp://mrds.mail.ru/update/2/

Software/Mail.Ru

hXXp://go.mail.ru/distib/ep/?q={SearchTerms}

hXXp://suggests.go.mail.ru/ie8?q={SearchTerms}

{FFEBBF0A-C22C-4172-89FF-45215A135AC7}

Mail.Ru

iexplore.exe

{8E8F97CD-60B5-456F-A201-73065652D099}

Mail.Ru/mrkeeper.exe

hXXp://go.mail.ru/search?q={SearchTerms}&fr=iextn

{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}

{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}

hXXp://go.mail.ru/search?fr=ntg&q=

hXXp://go.mail.ru/distib/ep/

firefox.exe

[email protected]

[email protected]

opera.exe

chrome.exe

hXXp://go.mail.ru/distib/ep/?q={searchTerms}

SOFTWARE/Google/Chrome/Extensions

4amigo.exe

nichrome.exe

browser.exe

Yandex.Browser.New

Software/Mail.Ru/ChromeInstaller

hXXp://xml.binupdate.mail.ru/guard/update/version.xml

F777C640-57F8-4ECE-A40B-F571D25C2EFE

.html

opera

launcher.exe

SOFTWARE/Microsoft/Windows/CurrentVersion/Uninstall/Google Chrome

SOFTWARE/Microsoft/Windows/CurrentVersion/Uninstall/Bromium

Software/Microsoft/Windows/CurrentVersion/Uninstall/Xpom

Software/Microsoft/Windows/CurrentVersion/Uninstall/{1B89BC31-F539-4EBD-B94F-C24705C73433}

Software/Microsoft/Windows/CurrentVersion/Uninstall/YandexBrowser

xpom.exe

Software/Microsoft/Windows/CurrentVersion/Uninstall/xpom

Software/Microsoft/Windows/CurrentVersion/Uninstall/Amigo

google chrome

firefox

Microsoft/Windows/Start Menu

Microsoft/Windows/

extensions.json

Unable to patch extensions.json

install.rdf

em:updateURL

em:iconURL

nFailed to parse extensions.json

Failed to write extensions.json:

tsearch-metadata.json

sessionstore.js

places.sqlite

cookies.sqlite

prefs.js

Mozilla\Firefox\profiles.ini

Mozilla\Firefox

search.json

LMozilla Firefox

mailru.xml

<SearchPlugin xmlns="hXXp://VVV.mozilla.org/2006/browser/search/" xmlns:os="hXXp://a9.com/-/spec/opensearch/1.1/">

<os:ShortName>@Mail.Ru</os:ShortName>

@Mail.Ru</os:Description>

<SearchForm>hXXp://VVV.mail.ru/</SearchForm>

<os:Url type="application/x-suggestions json" method="GET" template="hXXp://suggests.go.mail.ru/ff3?q={searchTerms}"></os:Url>

<os:Url type="text/html" method="GET" template="%SEARCH_URL%"/>

%SEARCH_URL%

extensions.ini

ini keys failed

extensions.json not parsed!

System32/GroupPolicy/Machine/Registry.pol

System32/GroupPolicy/User/Registry.pol

Sysnative/GroupPolicy/Machine/Registry.pol

Sysnative/GroupPolicy/User/Registry.pol

SysWOW64/GroupPolicy/Machine/Registry.pol

SysWOW64/GroupPolicy/User/Registry.pol

SELECT last_visit_time FROM urls order by last_visit_time DESC LIMIT 1

couldn't create instance of IUrlHistoryStg2

EnumUrls failed

Software/Microsoft/Windows/CurrentVersion/Explorer/Browser Helper Objects

Software/Microsoft/Windows/CurrentVersion/Ext/Settings

Mail.Ru/Sputnik

SOFTWARE/Microsoft/Windows/CurrentVersion/URL/DefaultPrefix

FaviconURLFallback

SuggestionsURL

ie.reg

[-HKEY_USERS\

import

reg.exe

Mail.Ru/Id

GuardMailRu.exe

File: %s

Software\Microsoft\Windows\CurrentVersion\Run

Software\Mail.ru\Tech\ptls

hXXp://go.mail.ru/distib/mark/

go_metric_url

hXXp://mrds.mail.ru/update/2/version.txt?type=product_online_metric

mrds_metric_url

.installed_product

MailProducts/Nrs.dat

Software/Mail.Ru/Guard

R.delay

hXXp://xml.binupdate.mail.ru/tasks/shortcuts.mrdj

url_argument

key_arg

^(http[s]?:\/\/)?(www\.)?([\w\.-] )([:\/].*)?$

{598504EA-A67F-4E3C-9CB2-F686B72D4BE6}

{453FD166-5BF4-4C00-AD14-4065187ABBFB}

{5A38BFBE-DFD4-46C5-8598-EE133F10611F}

T{89C5113F-E3B5-4549-966B-D94AA700D5CC}

{CEFC557D-A2A9-45BD-B751-904437A0C01C}

T{FE104FA7-83DD-4B96-862E-843CDF135D62}

{C753EB3C-0C13-43D0-B52C-300B785B5AE9}

T{FC604959-8A01-4E8B-A3E5-87CEEBD6FEDB}

RemoteTasksExecuter thread stuck

Remote tasks execution started

hXXp://xml.binupdate.mail.ru/tasks.mrdj

SSoftware/Microsoft/Windows/CurrentVersion/Run

Syahoo.com

webalta.ru

yambler.net

yafinder.com

Found mail.ru extension of type

Task execution failed:

ThXXp://mailruupdater.cdnmail.ru/MailRuUpdater.exe

Ttask_executed

Software\Mail.Ru

Allow service process execute task

--uac-passed

mru_uac_passed

TVVV.

Guard@Mail\.ru

SwReporter

software_reporter_tool.log

Error parsing reporter logs:

dFailed to update SwReporter data:

since_last_exec

chrome

hXXp://xml.binupdate.mail.ru/tasks/ext_settings.mrdj

Start proceed Google Chrome

Google Chrome is done

Google Chrome is not done

Start proceed Firefox

Firefox is done

Firefox is not done

hXXp://xml.binupdate.mail.ru/tasks/sg_settings.mrdj

hXXp://go.mail.ru/?chverfix=1&fr=chverfix_sg

hXXp://go.mail.ru/search?q={SearchTerms}&ieverfix=1&fr=ieverfix_dse

hXXp://xml.binupdate.mail.ru/sputnik/spmrids.mrdj successfully fetching failed

T/checksums.mrdj

FFExtensions/Hp/Url

search_provider/search_url

chrome_settings_overrides/

manifest/chrome_settings_overrides

MRSputnikData/history.xml

SELECT urls.url, visit_time

FROM visits INNER JOIN urls

ON visits.url = urls.id

IEExtensions/Dse/Url

T{EC32BCCC-7012-459F-8D79-6E7D38DC1ECD}

Tvk.com/audios

ok.ru/music

my.mail.ru/music

e.mail.ru/messages/inbox

vk.com/app

ok.ru/game

ok.ru/app

my.mail.ru/app

games.mail.ru

SELECT id, url, last_visit_time FROM urls where url like '%%%1%%%' order by last_visit_time DESC limit 1

SELECT url, last_visit_date FROM moz_places where url like '%%%1%%%' and guid != '' and guid notnull order by last_visit_date desc limit 1

\Toolbar\Custom\Packages\hXXp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox

Yandex\Toolbar\state.json

yasearch-xb\plugins.json

Software\Mail.Ru\Updater

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

uac-passed

Tamigo_tmp.exe

hXXp://binupdate.mail.ru/amigo/version2.xml

internet_tmp.exe

hXXp://binupdate.mail.ru/chrome/version3.xml

internetupdater_tmp.exe

hXXp://binupdate.mail.ru/chrome/version2.xml

0.0.0.0

inttoam_tmp.exe

hXXp://binupdate.mail.ru/chrome/internet_to_amigo.xml

28.0.1501.430

hXXp://binupdate.mail.ru/updater/version.xml

mrutmp.exe

.mru_update_service

amsg

ovr_chrome

last_chrome

Google/Chrome/User Data/Default/History

/friends.mrdj

Updater.Mail.Ru

Mail.Ru Group

Updater.Mail.Ru exist

Updater.Mail.Ru: Error during coping file, rc =

Service::Update update operation is proceed

gUpdater.Mail.Ru: StartService: RegisterServiceCtrlHandler returned error

Updater.Mail.Ru: StartService: SetServiceStatus returned error

Updater.Mail.Ru: SERVICE_CONTROL_STOP

Updater.Mail.Ru: SERVICE_CONTROL_INTERROGATE

Updater.Mail.Ru: SERVICE_CONTROL_SHUTDOWN

%userprofile%

YSOFTWARE/Mail.ru

Mail.ru/ifrm

asio-58CCDC44-6264-4842-90C2-F3C545CB8AA7-%u-%p

TestModes/NoHttpsHostVerification

xml.binupdate.mail.ru

%1% (%2%)

Software/Mail.Ru/Tech/UserID

Software/Microsoft/Windows/CurrentVersion/Explorer/Shell Folders

\StringFileInfo\xx

sqlite3_prepare16_v2

sqlite3_step

SQLite error %1% returned by %2%

SQLite error code %1%, file %2%

Incorrect firefox js file

0123456789 ,.

notepad.exe

SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/System

stub.exe

Invalid url

Hx

hXXp://xml.binupdate.mail.ru/tenv.mrdj

filter.cfg

metrics.csv

http.csv

%Y%m%d

%Y-%m-%d

%H:%M:%S

%Y%m%dT%H%M%S%F%q

%Y-%m-%d %H:%M:%S%F%Q

%Y-%b-%d %H:%M:%S%F %z

%O:%M:%S%F

Failed to parse HTTP date:

Http client stuck

YInternet Explorer/iexplore.exe

%Y-%b-%d

p%Y%m%d

SOFTWARE/Microsoft/Windows/CurrentVersion/Explorer/Shell Folders

Global\651CB287-2277-4F76-84C6-1D61E868304B

Mail.ru/CommonCache

hXXp://xml.binupdate.mail.ru/cache_policy.mrdj

rCachingPolicy/Urls

combase.dll

mscoree.dll

qadvapi32.dll

skernel32.dll

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

portuguese-brazilian

%5N.log

f.exe

%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe

Mail.Ru updater

1.24.0.246

MailRuUpdater.exe_1936:

.text

`.rdata

@.data

.rsrc

@.reloc

FTPG

FTPj

SHA256 block transform for x86, CRYPTOGAMS by <[email protected]>

.EKSWU

SHA1 block transform for x86, CRYPTOGAMS by <[email protected]>

DlSHA512 block transform for x86, CRYPTOGAMS by <[email protected]>

|$@3|$<3

Camellia for x86 by <[email protected]>

6-9'6-9'

$6.:$6.:

*?#1*?#1

>8$4,8$4,

AES for x86, CRYPTOGAMS by <[email protected]>

RC4 for x86, CRYPTOGAMS by <[email protected]>

Montgomery Multiplication for x86, CRYPTOGAMS by <[email protected]>

FtPS

<0|1<:}-

<0|9<:}5

w%s( 

j.hLD

8%u(j

;*u%C

 FTPj

F\ FTP

<x%uY

><%uB

t.Jx 

j.Yf;

_tcPVj@

.PjRW

.FAy,

t%9xT

.6.78.9:;

B.CDEFGH

?%Y-%u

m-%du

?%H:%u

M:%Su

C:\Build\desktop_apps\SputnikLib/log_ng.h

..\CommonFiles\antivirus\antivirus_core.cpp

..\CommonFiles\audit\audit.cpp

KERNEL32.DLL

..\CommonFiles\audit\audit_browsers_manager.cpp

c:\build\desktop_apps\commonfiles\audit\audit_browsers_manager.h

ReportTime

..\CommonFiles\audit\audit_browser_settings.cpp

mailru::AuditBrowserSettings::MakeReport

) report successfully done

Make report failed

mailru::AuditBrowserSettings::ScheduleReportCheck

mailru::AuditBrowserSettings::CollectReportInfo

mailru::AuditBrowserSettings::CheckReport

error report structer

..\CommonFiles\audit\audit_google_chrome.cpp

mailru::AuditGoogleChrome::CheckerHomepageCh::RestoreChild

mailru::AuditGoogleChrome::CheckerDefaultSearchCh::RestoreChild

mailru::AuditGoogleChrome::CheckerVbmCh::RestoreChild

:Incorrect key length

RegOpenKeyTransactedW

C:\Build\desktop_apps\SputnikLib/reg_key.hpp

mailru::reg_keyT<0>::check

C:\Build\desktop_apps\CommonFiles/sql_lite_bind.hpp

mailru::sqlite_bind::column_int

mailru::sqlite_bind::column_int64

mailru::sqlite_bind::column_string

mailru::sqlite_bind::column_string16

mailru::sqlite_bind::column_blob

mailru::sqlite_bind::column_byte_length

mailru::sqlite_bind::column_blob_as_string

..\CommonFiles\browsers_patching\cookies\chromium_cookies_manager.cpp

..\CommonFiles\browsers_patching\cookies\firefox_cookies_manager.cpp

mailru::cookies::FirefoxCookieManager::FindByName

RegCreateKeyTransactedW

..\CommonFiles\chrome_safe_browsing.cpp

mailru::chromium::ChromeSafeBrowsing::CleanUpExtensionDataBase

mailru::chromium::ChromeSafeBrowsing::ReadSafeBrowsingFile

Unable to read chrome blocklist

Chrome blocklist file is not valid

chrome blocklist contains unsupported elements

shard_header.add_prefix_count > kMaxAddSubChunksCount

mailru::chromium::ChromeSafeBrowsing::WriteSafeBrowsingFile

startup_urls

urls_to_restore_on_startup

RegDeleteKeyTransactedW

boost::too_few_args: format-string referred to more arguments than were passed

boost::too_many_args: format-string referred to less arguments than were passed

c:\build\desktop_apps\sputniklib\temp_dir.h

%%%%-%%%%-%%%%-%%%%

..\CommonFiles\chromium_settings.cpp

hXXp://mail.ru

hXXp://VVV.mail.ru

browser.show_home_button

session.restore_on_startup

yandex\.ru. clid

mailru::chromium::settings::search_url

chrome_settings_overrides

search_url

template_url_data

mailru::chromium::settings::search_url_without_extensions

suggestions_url

suggestions_url_post_params

windows-1251

keyword

mail.ru

D15371FE-C188-4E99-9841-A91F3BCBCCC3

search_terms_replacement_key

search_url_post_params

favicon_url

hXXp://go.mail.ru/favicon.ico

image_url

image_url_post_params

instant_url

instant_url_post_params

originating_url

alternate_urls

default_search_provider_data.template_url_data

suggest_url

default_search_provider.name

default_search_provider.search_url

go.mail.ru

keystore_encryption_bootstrap_token

chrome_url_overrides

chrome-extension://

extensions.settings.

mail.ru

mailru::chromium::settings::url_from_ext_id

extensions.known_disabled

update_url

runtime.onStartup

.enabled

hXXp://xml.binupdate.mail.ru/amigo/check_policy.amg

check_policy.amg not loaded

check_policy.amg NOT decoded

check_policy.amg NOT parsed

mailru::chromium::settings::InstallExtensionFromUrlNoThrow

mailru::chromium::settings::GetWebDataSmt

hXXp://VVV.mail.ru/cnt/7861

hXXp://agent.mail.ru/ru/download/agent_windows/download.html?sputnik=1

hXXp://img.imgsmail.ru/r/agent/favicon.ico

hXXp://mail.ru/cnt/10445

hXXp://VVV.mail.ru/

hXXp://go.mail.ru/search?fr=ntg&q={SearchTerms}

hXXp://m.mail.ru/cgi-bin/splash?opera=1

hXXp://VVV.mail.ru/cnt/5090

hXXp://go.mail.ru/search?q=%s&fr=ntg

@mail.ru

hXXp://suggests.go.mail.ru/ff3?q={SearchTerm}

hXXp://go.mail.ru/search_images?utf8in=1&q=%s&fr=oprtb

hXXp://go.mail.ru/favicon_images.ico

hXXp://go.mail.ru/search_video?utf8in=1&q=%s&fr=oprtb

hXXp://go.mail.ru/favicon_video.ico

hXXp://VVV.mail.ru/cnt/5091

hXXp://redir.opera.com/speeddials/mail.ru

hXXp://redir.opera.com/bookmarks/mail.ru

hXXp://go.mail.ru/search?q=%s&fr=opr11

hXXp://go.mail.ru/search?q={searchTerms}&fr=ntg

hXXp://suggests.go.mail.ru/ff3?q={searchTerms}

hXXp://go.mail.ru/search?q={SearchTerms}&fr=ntg

hXXp://mail.ru/cnt/9824

hXXp://mail.ru/cnt/10226

hXXp://go.mail.ru/?pin=1

mailru::default_browser::find_executable

..\CommonFiles\default_browser.cpp

C:\Build\desktop_apps\SputnikLib/com_scope.h

..\CommonFiles\enemy_soft_checker.cpp

..\commonfiles\file_util.cpp

..\CommonFiles\firefox_extension_patcher.cpp

mailru::FirefoxExtensionPatcher::Install

mailru::FirefoxExtensionPatcher::PatchExtensionJson

updateURL

iconURL

mailru::FirefoxExtensionPatcher::Enable

mailru::FirefoxExtensionPatcher::PatchFileTime

mailru::FirefoxExtensionPatcher::InstallFromUrl

C:\Build\desktop_apps\3party\ticpp/ticpp.h

..\CommonFiles\firefox_settings.cpp

mailru::firefox::settings::~settings

browser.startup.page

browser.startup.homepage

Profile%d

hXXp://go.mail.ru

@Mail.Ru

browser.search.selectedEngine

browser.search.defaultenginename

browser.search.defaulturl

keyword.URL

extensions.enabledAddons

mailru::firefox::settings::is_yandex_elements_intsalled

[email protected]

browser.search.suggest.enabled

browser.search.useDBForOrder

Firefox

..\CommonFiles\gpo_manager.cpp

GetRegistryKey for machine failed

GetRegistryKey for user failed

..\CommonFiles\ie_extension_patcher.cpp

mailru::IEExtensionPatcher::InstallFromUrl

..\CommonFiles\ie_settings.cpp

..\CommonFiles\metrics\common_metrics_params.cpp

..\CommonFiles\products\extensions_storage_writer.cpp

.product_id

..\CommonFiles\rfr_manager.cpp

..\CommonFiles\shortcut_check.cpp

c:\build\desktop_apps\commonfiles\tasks\TaskShortcuts.h

..\CommonFiles\Tasks\RemoteTaskExecuter.cpp

mailru::RemoteTasksExecuter::Stop

mailru::RemoteTasksExecuter::InitTasks

mailru::RemoteTasksExecuter::InterruptTaskThread

mailru::RemoteTasksExecuter::ExecuteTask

mailru::RemoteTasksExecuter::FetchTasks

..\CommonFiles\Tasks\TaskChromiumRoutinePatcher.cpp

google chrome sync_enabled

..\CommonFiles\Tasks\TaskEmulateWebStoreInstallation.cpp

..\CommonFiles\Tasks\TaskGoogleBlockedMailruExtensions.cpp

..\CommonFiles\Tasks\TaskGoogleBlockedMailruSettings.cpp

..\CommonFiles\Tasks\TaskGoogleBlockedVisualBookmarks.cpp

ChromeVbmId

ChromeVbmArchive

..\CommonFiles\Tasks\TaskInstallUpdater.cpp

..\CommonFiles\Tasks\TaskInterface.cpp

..\CommonFiles\Tasks\TaskInstallUpdaterAsService.cpp

cmd_line =

14000000000000000

..\CommonFiles\Tasks\TaskPreventSRT.cpp

mailru::TaskPreventSRT::SendReporterMetric

software_reporter

ReporterLogPattern

..\CommonFiles\Tasks\TaskPeriodicRestoreMailExtensions.cpp

Chrome

..\CommonFiles\Tasks\TaskPropUpMailExtensions.cpp

ERROR: chrome_value is empty

..\CommonFiles\Tasks\TaskRemovePornExtensions.cpp

..\CommonFiles\Tasks\TaskRestoreMailVisualBookmarks.cpp

..\CommonFiles\Tasks\TaskStartGroupBlackList.cpp

mailru::TaskStartGroupBlackList::ProceedGoogleChrome

ProceedGoogleChrome patch prepared

ProceedGoogleChrome start patching

google_chrome object constructed

Google Chrome settings are synced

Google Chrome extensions are synced

TaskStartGroupBlackList::ProceedGoogleChrome failed, error =

ProceedGoogleChrome patch_util.set_was_patch(true);

mailru::TaskStartGroupBlackList::CleanUpChromeStartPages

mailru::TaskStartGroupBlackList::ProceedFirefox

ProceedFirefox is running

hXXp://go.mail.ru/?ffverfix=1&fr=ffverfix_sg

TaskStartGroupBlackList::ProceedGoogleChrome failed, er =

TaskStartGroupBlackList::ProceedGoogleChrome failed

hXXp://go.mail.ru/?ieverfix=1&fr=ieverfix_sg

..\CommonFiles\Tasks\TaskYandexHomepageDistribRemove.cpp

..\CommonFiles\tasks\task_amigo_remove_pinned_tabs.cpp

..\CommonFiles\Tasks\task_checksum_verify.cpp

xpinstall.signatures.required

..\CommonFiles\Tasks\task_monitor_user_process.cpp

..\CommonFiles\Tasks\task_save_ff_extensions.cpp

..\CommonFiles\tasks\task_user_preferences.cpp

mailru::TaskUserPreferences::AnalyzeFirefox

hXXp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml

hXXp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml#smartbox

..\CommonFiles\yandex_elements.cpp

mailru::YandexElements::IsSmartBarBlockingSearch

mailru::YandexElements::DisableSmartBar

mailru::YandexElements::ReadStateConfig

class Json::Value *__thiscall mailru::YandexElements::FindSettingInStateConfig(class Json::Value &,const class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > &,const class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > &) const

mailru::YandexElements::FindSettingInStateConfig

browser.uiCustomization.state

mailru::YandexElements::RestoreOriginalSearchBox

guid_manager.cpp

installer.cpp

mailru::reg_keyT<0>::throw_on_error

main.cpp

Started with cmd line

c:\build\desktop_apps\mailruupdater\concrete_update_task.hpp

self_update_task.cpp

SendBrowsersStatistic.cpp

c:\build\desktop_apps\mailruupdater\SendBrowsersStatistic.h

updater::SendBrowsersStastic::BrowserData<class mailru::chromium::settings_amigo>::getDSEurl

updater::SendBrowsersStastic::BrowserData<class mailru::chromium::settings_mail>::getDSEurl

updater::SendBrowsersStastic::BrowserData<class mailru::chromium::settings_google>::getDSEurl

service.cpp

asio.misc

asio.misc error

C:\Build\boost_1_56_0\boost/exception/detail/exception_ptr.hpp

system_info\system_info_collector.cpp

s-sputnik.mail.ru

thread.entry_event

thread.exit_event

255.255.255.255

HTTP error:

asio.ssl

asio.ssl error

add_certificate_authority

^HTTP/1.1 (\d ) (. )

system_info\system_info_sender.cpp

https

HTTP/1.1

update_info.cpp

fetch_url

Program fetch url

md5 fetch url

cmd_line

util.cpp

SHA-256 part of OpenSSL 1.0.0g 18 Jan 2012

len>=0 && len<=(int)sizeof(ctx->key)

j <= (int)sizeof(ctx->key)

Stack part of OpenSSL 1.0.0g 18 Jan 2012

ssl_sess_cert

ssl_cert

evp_pkey

x509_pkey

%s(%d): OpenSSL internal error, assertion failed: %s

X.509 part of OpenSSL 1.0.0g 18 Jan 2012

OPENSSL_ALLOW_PROXY_CERTS

cert_info

CERTIFICATE

passed a null parameter

DSO support routines

x509 certificate routines

error:lX:%s:%s:%s

d.registeredID

d.iPAddress

d.uniformResourceIdentifier

d.ediPartyName

d.directoryName

d.dNSName

d.rfc822Name

d.otherName

SHA1 part of OpenSSL 1.0.0g 18 Jan 2012

SHA-512 part of OpenSSL 1.0.0g 18 Jan 2012

supportedAlgorithms

crossCertificatePair

certificateRevocationList

cACertificate

userCertificate

userPassword

supportedApplicationContext

Microsoft Local Key set

LocalKeySet

id-Gost28147-89-None-KeyMeshing

id-Gost28147-89-CryptoPro-KeyMeshing

password based MAC

id-PasswordBasedMAC

X509v3 Certificate Issuer

certificateIssuer

certicom-arc

Proxy Certificate Information

proxyCertInfo

Microsoft Smartcardlogin

msSmartcardLogin

joint-iso-itu-t

JOINT-ISO-ITU-T

set-rootKeyThumb

setAttr-Cert

setCext-cCertRequired

setCext-certType

setct-CertResTBE

setct-CertReqTBEX

setct-CertReqTBE

setct-AcqCardCodeMsgTBE

setct-CertInqReqTBS

setct-CertResData

setct-CertReqTBS

setct-CertReqData

setct-PCertResTBS

setct-PCertReqData

setct-AcqCardCodeMsg

certificate extensions

set-certExt

set-msgExt

id-ecPublicKey

id-cmc-confirmCertAcceptance

id-cmc-getCert

id-regInfo-certReq

id-regCtrl-protocolEncrKey

id-regCtrl-oldCertID

id-it-revPassphrase

id-it-keyPairParamRep

id-it-keyPairParamReq

id-it-unsupportedOIDs

id-it-caKeyUpdateInfo

id-it-encKeyPairTypes

id-it-signKeyPairTypes

id-it-caProtEncCert

id-mod-attribute-cert

id-mod-qualified-cert-93

id-mod-qualified-cert-88

id-smime-aa-ets-certCRLTimestamp

id-smime-aa-ets-certValues

id-smime-aa-ets-CertificateRefs

id-smime-aa-ets-otherSigCert

id-smime-aa-smimeEncryptCerts

id-smime-aa-signingCertificate

id-smime-aa-encrypKeyPref

id-smime-aa-msgSigDigest

id-smime-ct-publishCert

id-smime-mod-msg-v3

sdsiCertificate

x509Certificate

localKeyID

certBag

pkcs8ShroudedKeyBag

keyBag

pbeWithSHA1And2-KeyTripleDES-CBC

pbeWithSHA1And3-KeyTripleDES-CBC

TLS Web Client Authentication

TLS Web Server Authentication

X509v3 Extended Key Usage

extendedKeyUsage

X509v3 Authority Key Identifier

authorityKeyIdentifier

X509v3 Certificate Policies

certificatePolicies

X509v3 Private Key Usage Period

privateKeyUsagePeriod

X509v3 Key Usage

keyUsage

X509v3 Subject Key Identifier

subjectKeyIdentifier

Netscape Certificate Sequence

nsCertSequence

Netscape CA Policy Url

nsCaPolicyUrl

Netscape Renewal Url

nsRenewalUrl

Netscape CA Revocation Url

nsCaRevocationUrl

Netscape Revocation Url

nsRevocationUrl

Netscape Base Url

nsBaseUrl

Netscape Cert Type

nsCertType

Netscape Certificate Extension

nsCertExt

extendedCertificateAttributes

challengePassword

dhKeyAgreement

lhash part of OpenSSL 1.0.0g 18 Jan 2012

/usr/local/ssl/certs

/usr/local/ssl/cert.pem

SSL_CERT_DIR

SSL_CERT_FILE

CONF part of OpenSSL 1.0.0g 18 Jan 2012

%d.%d.%d.%d/%d.%d.%d.%d

%*s%s:

ddddddZ

ddddddZ

X509_PUBKEY

public_key

.\crypto\asn1\x_pubkey.c

name.relativename

name.fullname

certificateHold

Certificate Hold

cessationOfOperation

Cessation Of Operation

keyCompromise

Key Compromise

%*sOnly Attribute Certificates

%*sOnly CA Certificates

%*sOnly User Certificates

AUTHORITY_KEYID

keyid

X509_CERT_PAIR

X509_CERT_AUX

ASN.1 part of OpenSSL 1.0.0g 18 Jan 2012

PEM part of OpenSSL 1.0.0g 18 Jan 2012

phrase is too short, needs to be at least %d chars

Enter PEM pass phrase:

TRUSTED CERTIFICATE

CERTIFICATE REQUEST

NEW CERTIFICATE REQUEST

X509 CERTIFICATE

PRIVATE KEY

ENCRYPTED PRIVATE KEY

ANY PRIVATE KEY

RSA part of OpenSSL 1.0.0g 18 Jan 2012

Big Number part of OpenSSL 1.0.0g 18 Jan 2012

CONF_def part of OpenSSL 1.0.0g 18 Jan 2012

[[%s]]

[%s] %s=%s

keylen <= sizeof key

EVP_CIPHER_key_length(cipher) <= (int)sizeof(md_tmp)

PROXY_CERT_INFO_EXTENSION

%d.%d.%d.%d

<unsupported>

IP Address:%d.%d.%d.%d

URI:%s

DNS:%s

email:%s

EdiPartyName:<unsupported>

X400Name:<unsupported>

othername:<unsupported>

DSA part of OpenSSL 1.0.0g 18 Jan 2012

.\crypto\ec\ec_key.c

Diffie-Hellman part of OpenSSL 1.0.0g 18 Jan 2012

value.single

value.set

pubkey

enc_key

key_enc_algor

cert

d.encrypted

d.digest

d.signed_and_enveloped

d.enveloped

d.sign

d.data

d.other

priv_key

pub_key

EC_PRIVATEKEY

publicKey

privateKey

value.implicitlyCA

value.parameters

value.named_curve

p.char_two

p.prime

p.ppBasis

p.tpBasis

p.onBasis

p.other

PKCS8_PRIV_KEY_INFO

pkey

pkeyalg

.\crypto\evp\evp_pkey.c

\X

d.usernotice

d.cpsuri

CERTIFICATEPOLICIES

%*sExplicit Text: %s

%*sNumber%s:

%*sOrganization: %s

%*sCPS: %s

MD5 part of OpenSSL 1.0.0g 18 Jan 2012

'() ,-./:=?

%*sPolicy Text: %s

%*scrlUrl:

EXTENDED_KEY_USAGE

%*sZone: %s, User:

.\crypto\x509v3\v3_akey.c

PKEY_USAGE_PERIOD

keyCertSign

Certificate Sign

keyAgreement

Key Agreement

keyEncipherment

Key Encipherment

.\crypto\x509v3\v3_skey.c

.\crypto\evp\evp_key.c

nkey <= EVP_MAX_KEY_LENGTH

EVP part of OpenSSL 1.0.0g 18 Jan 2012

?456789:;<=

!"#$%&'()* ,-./0123

RAND part of OpenSSL 1.0.0g 18 Jan 2012

You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html

hexkey

rsa_keygen_pubexp

rsa_keygen_bits

%s.dll

RIPE-MD160 part of OpenSSL 1.0.0g 18 Jan 2012

SHA part of OpenSSL 1.0.0g 18 Jan 2012

MD4 part of OpenSSL 1.0.0g 18 Jan 2012

CAST part of OpenSSL 1.0.0g 18 Jan 2012

Blowfish part of OpenSSL 1.0.0g 18 Jan 2012

:RC2 part of OpenSSL 1.0.0g 18 Jan 2012

.pp@0

aEÐ

 (#EÚ

ÚE<<0

IDEA part of OpenSSL 1.0.0g 18 Jan 2012

libdes part of OpenSSL 1.0.0g 18 Jan 2012

DES part of OpenSSL 1.0.0g 18 Jan 2012

keylength

keyfunc

.\crypto\pkcs12\p12_key.c

EC part of OpenSSL 1.0.0g 18 Jan 2012

.\crypto\dh\dh_key.c

%s: (%d bit)

Public-Key

Private-Key

recommended-private-length: %d bits

public-key:

private-key:

PKCS#3 DH Public-Key

PKCS#3 DH Private-Key

Public-Key: (%d bit)

Private-Key: (%d bit)

x%s

%s - d:d:d%.*s %d%s

crlUrl

certStatus

certId

OCSP_CERTSTATUS

value.unknown

value.revoked

value.good

value.byKey

value.byName

reqCert

OCSP_CERTID

issuerKeyHash

certs

USER32.DLL

NETAPI32.DLL

ADVAPI32.DLL

ECDSA part of OpenSSL 1.0.0g 18 Jan 2012

Basis Type: %s

Field Type: %s

ASN1 OID: %s

%s %s%lu (%s0x%lx)

%lu:%s:%s:%d:%s

Verifying - %s

ECDH part of OpenSSL 1.0.0g 18 Jan 2012

%'%1$=%C%K%O%s%

.%.-.3.7.9.?.W.[.o.y.

C%C'C3C7C9COCWCiC

value.bag

value.safes

value.shkeybag

value.keybag

value.sdsicert

value.x509cert

value.other

d.receiptList

d.allOrFirstTier

d.compressedData

d.authenticatedData

d.encryptedData

d.digestedData

d.envelopedData

d.signedData

d.ori

d.pwri

d.kekri

d.kari

d.ktri

CMS_PasswordRecipientInfo

keyDerivationAlgorithm

keyIdentifier

CMS_KeyAgreeRecipientInfo

recipientEncryptedKeys

CMS_OriginatorIdentifierOrKey

d.originatorKey

CMS_OriginatorPublicKey

CMS_RecipientEncryptedKey

CMS_KeyAgreeRecipientIdentifier

d.rKeyId

CMS_RecipientKeyIdentifier

CMS_OtherKeyAttribute

keyAttr

keyAttrId

CMS_KeyTransRecipientInfo

encryptedKey

keyEncryptionAlgorithm

certificates

d.crl

d.subjectKeyIdentifier

d.issuerAndSerialNumber

CMS_CertificateChoices

d.v2AttrCert

d.v1AttrCert

d.extendedCertificate

d.certificate

CMS_OtherCertificateFormat

otherCert

otherCertFormat

OpenSSL 1.0.0g 18 Jan 2012

GOST signature length is %d

.\ssl\ssl_cert.c

%-23s %s Kx=%-8s Au=%-4s Enc=%-9s Mac=%-4s%s

EXPORT56

EXPORT40

EXPORT

wrong number of key bits

unsupported status type

unsupported ssl version

unsupported protocol

unsupported elliptic curve

unsupported digest type

unsupported compression algorithm

unsupported cipher

unknown pkey type

unknown key exchange type

unknown certificate type

unable to find public key parameters

unable to extract public key

unable to decode ecdh certs

unable to decode dh certs

tried to use unsupported cipher

tls peer did not respond with certificate list

tls client cert req with anon cipher

tlsv1 unsupported extension

tlsv1 certificate unobtainable

tlsv1 bad certificate status response

tlsv1 bad certificate hash value

tlsv1 alert export restriction

sslv3 alert unsupported certificate

sslv3 alert no certificate

sslv3 alert certificate unknown

sslv3 alert certificate revoked

sslv3 alert certificate expired

sslv3 alert bad certificate

signature for non signing certificate

reuse cert type not zero

reuse cert length not zero

public key not rsa

public key is not rsa

public key encrypt error

peer error unsupported certificate type

peer error no certificate

peer error certificate

peer did not return a certificate

null ssl method passed

no publickey

no private key assigned

no privatekey

Peer haven't sent GOST certificate, required for selected ciphersuite

no client cert received

no client cert method

no ciphers passed

no certificate specified

no certificate set

no certificate returned

no certificate assigned

no certificates returned

missing tmp rsa pkey

missing tmp rsa key

missing tmp ecdh key

missing tmp dh key

missing rsa signing cert

missing rsa encrypting cert

missing rsa certificate

missing export tmp rsa key

missing export tmp dh key

missing dsa signing cert

missing dh rsa cert

missing dh key

missing dh dsa cert

krb5 server rd_req (keytab perms?)

key arg too long

invalid ticket keys length

http request

https proxy request

error generating tmp rsa key

ecc cert should have sha1 signature

ecc cert should have rsa signature

ecc cert not for signing

ecc cert not for key agreement

cert length mismatch

certificate verify failed

bad ecc cert

bad dh pub key length

TLS1_SETUP_KEY_BLOCK

tls1_cert_verify_mac

SSL_VERIFY_CERT_CHAIN

SSL_use_RSAPrivateKey_file

SSL_use_RSAPrivateKey_ASN1

SSL_use_RSAPrivateKey

SSL_use_PrivateKey_file

SSL_use_PrivateKey_ASN1

SSL_use_PrivateKey

SSL_use_certificate_file

SSL_use_certificate_ASN1

SSL_use_certificate

SSL_SET_PKEY

SSL_SET_CERT

SSL_SESS_CERT_NEW

SSL_GET_SIGN_PKEY

SSL_GET_SERVER_SEND_CERT

SSL_CTX_use_RSAPrivateKey_file

SSL_CTX_use_RSAPrivateKey_ASN1

SSL_CTX_use_RSAPrivateKey

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey_ASN1

SSL_CTX_use_PrivateKey

SSL_CTX_use_certificate_file

SSL_CTX_use_certificate_chain_file

SSL_CTX_use_certificate_ASN1

SSL_CTX_use_certificate

SSL_CTX_set_client_cert_engine

SSL_CTX_check_private_key

SSL_CHECK_SRVR_ECC_CERT_AND_ALG

SSL_check_private_key

SSL_CERT_NEW

SSL_CERT_INSTANTIATE

SSL_CERT_INST

SSL_CERT_DUP

SSL_add_file_cert_subjects_to_stack

SSL_add_dir_cert_subjects_to_stack

SSL3_SETUP_KEY_BLOCK

SSL3_SEND_SERVER_KEY_EXCHANGE

SSL3_SEND_SERVER_CERTIFICATE

SSL3_SEND_CLIENT_KEY_EXCHANGE

SSL3_SEND_CLIENT_CERTIFICATE

SSL3_SEND_CERTIFICATE_REQUEST

SSL3_OUTPUT_CERT_CHAIN

SSL3_GET_SERVER_CERTIFICATE

SSL3_GET_KEY_EXCHANGE

SSL3_GET_CLIENT_KEY_EXCHANGE

SSL3_GET_CLIENT_CERTIFICATE

SSL3_GET_CERT_VERIFY

SSL3_GET_CERT_STATUS

SSL3_GET_CERTIFICATE_REQUEST

SSL3_GENERATE_KEY_BLOCK

SSL3_CHECK_CERT_AND_ALGORITHM

SSL3_ADD_CERT_TO_BUF

SSL2_SET_CERTIFICATE

SSL2_GENERATE_KEY_MATERIAL

REQUEST_CERTIFICATE

GET_CLIENT_MASTER_KEY

DTLS1_SEND_SERVER_KEY_EXCHANGE

DTLS1_SEND_SERVER_CERTIFICATE

DTLS1_SEND_CLIENT_KEY_EXCHANGE

DTLS1_SEND_CLIENT_CERTIFICATE

DTLS1_SEND_CERTIFICATE_REQUEST

DTLS1_OUTPUT_CERT_CHAIN

DTLS1_ADD_CERT_TO_BUF

CLIENT_MASTER_KEY

CLIENT_CERTIFICATE

SSLv2 part of OpenSSL 1.0.0g 18 Jan 2012

s->session->master_key_length >= 0 && s->session->master_key_length < (int)sizeof(s->session->master_key)

c->iv_len <= (int)sizeof(s->session->key_arg)

s->s2->key_material_length <= sizeof s->s2->key_material

SSLv3 part of OpenSSL 1.0.0g 18 Jan 2012

TLSv1 part of OpenSSL 1.0.0g 18 Jan 2012

os.length <= (int)sizeof(ret->session_id)

DTLSv1 part of OpenSSL 1.0.0g 18 Jan 2012

key expansion

client write key

server write key

%s:%d: rec->data != rec->input

D:\Libs\opencv\sources\modules\core\include\opencv2/core/mat.inl.hpp

D:\Libs\opencv\sources\modules\imgproc\src\templmatch.cpp

img.dims <= 2 && templ.dims <= 2 && corr.dims <= 2

corrsize.height <= img.rows   templ.rows - 1 && corrsize.width <= img.cols   templ.cols - 1

(depth == CV_8U || depth == CV_32F) && type == _templ.type() && _img.dims() <= 2

_img.size().height <= _templ.size().height && _img.size().width <= _templ.size().width

D:\Libs\opencv\sources\modules\imgproc\src\sumpixels.cpp

D:\Libs\opencv\sources\modules\core\src\alloc.cpp

D:\Libs\opencv\sources\modules\core\src\matrix.cpp

m.dims >= 2

0 <= _rowRange.start && _rowRange.start <= _rowRange.end && _rowRange.end <= m.rows

0 <= _colRange.start && _colRange.start <= _colRange.end && _colRange.end <= m.cols

m.dims <= 2

0 <= roi.x && 0 <= roi.width && roi.x   roi.width <= m.cols && 0 <= roi.y && 0 <= roi.height && roi.y   roi.height <= m.rows

r == Range::all() || (0 <= r.start && r.start < r.end && r.end <= m.size[i])

COI is not supported by the function

0 <= i && i < (int)vv.size()

0 <= i && i < (int)v.size()

Unknown/unsupported array type

i < (int)vv.size()

(size_t)i < vv.size()

!fixedSize() || ((Mat*)obj)->size.operator()() == _sz

!fixedSize() || ((UMat*)obj)->size.operator()() == _sz

!fixedSize() || ((Mat*)obj)->size.operator()() == Size(_cols, _rows)

!fixedSize() || ((UMat*)obj)->size.operator()() == Size(_cols, _rows)

CV_MAT_TYPE(mtype) == m.type()

m.dims == d

m.size[j] == sizes[j]

d == 2 && ((sizes[0] == sz.height && sizes[1] == sz.width) || (allowTransposed && sizes[0] == sz.width && sizes[1] == sz.height))

!fixedSize() || len == vv.size()

Vectors with element size %d are not supported. Please, modify OutputArray::create()

v[j].empty()

i < (int)v.size()

checkScalar(value, type(), arr.kind(), _InputArray::CUDA_GPU_MAT)

_m.dims() <= 2

_src.dims() <= 2 && esz <= 32

src.size() == dst.size() && (src.cols == 1 || src.rows == 1)

dst.cols == dst.rows

m.dims <= 2 && m.rows == m.cols

_src.dims() <= 2

A.size == arrays[i0]->size

A.step[d-1] == A.elemSize()

%s:%d: error: (%d) %s in function %s

%s:%d: error: (%d) %s

OpenCV Error: %s (%s) in %s, file %s, line %d

Inplace operation is not supported

Input image depth is not supported by function

Unsupported format or combination of formats

Input COI is not supported

No CUDA support

No OpenGL support

Unknown %s code %d

D:\Libs\opencv\sources\modules\core\src\system.cpp

tlsKey != TLS_OUT_OF_INDEXES

cv::TLSContainerStorage::releaseKey

key_ >= 0

D:\Libs\opencv\sources\modules\core\src\convert.cpp

j < nsrcs && src[j].depth() == depth

i1 >= 0 && j < ndsts && dst[j].depth() == depth

D:\Libs\opencv\sources\modules\core\src\copy.cpp

mask.depth() == CV_8U && (mcn == 1 || mcn == cn)

size() == mask.size()

checkScalar(value, type(), _value.kind(), _InputArray::MAT )

mask.empty() || (mask.type() == CV_8U && size == mask.size)

Unknown/unsupported border type

src.depth() == dst.depth() && src.size == dst.size

(coi1 != 0 || src.channels() == 1) && (coi2 != 0 || dst.channels() == 1)

src.channels() == dst.channels()

D:\Libs\opencv\sources\modules\core\src\matop.cpp

CV_MAT_CN(_type) == e.a.channels()

Unknown operation

D:\Libs\opencv\sources\modules\core\src\arithm.cpp

The operation is neither 'array op array' (where arrays have the same size and type), nor 'array op scalar', nor 'scalar op array'

(mtype == CV_8U || mtype == CV_8S) && _mask.sameSize(*psrc1)

The operation is neither 'array op array' (where arrays have the same size and the same number of channels), nor 'array op scalar', nor 'scalar op array'

type2 == CV_64F && (sz2.height == 1 || sz2.height == 4)

(mtype == CV_8UC1 || mtype == CV_8SC1) && _mask.sameSize(*psrc1)

The operation is neither 'array op array' (where arrays have the same size and the same type), nor 'array op scalar', nor 'scalar op array'

D:\Libs\opencv\sources\modules\core\src\stat.cpp

mask.empty() || mask.type() == CV_8U

mask.empty() || mask.type() == CV_8UC1

dst.type() == CV_64F && dst.isContinuous() && (dst.cols == 1 || dst.rows == 1) && dcn >= cn

D:\Libs\opencv\sources\modules\core\src\mathfuncs.cpp

!)>D:\Libs\opencv\sources\modules\core\src\dxt.cpp

type == srcB.type() && srcA.size() == srcB.size()

D:\Libs\opencv\sources\modules\core\src\umatrix.cpp

D:\Libs\opencv\sources\modules\core\src\array.cpp

_dst.data == data0

NULL array pointer is passed

Unrecognized or unsupported array type

unrecognized or unsupported array type

Only continuous nD arrays are supported here

Unsupported format

rect.width >= 0 && rect.height >= 0 && rect.x < image->width && rect.y < image->height && rect.x   rect.width >= (int)(rect.width > 0) && rect.y   rect.height >= (int)(rect.height > 0)

D:\Libs\opencv\sources\modules\core\src\datastructs.cpp

D:\Libs\opencv\sources\modules\core\include\opencv2/core/private.cuda.hpp

The library is compiled without CUDA support

D:\Libs\opencv\sources\modules\core\src\opengl.cpp

The library is compiled without OpenGL support

OpenCL.dll

D:\Libs\opencv\sources\modules\core\src\matmul.cpp

type == B.type() && (type == CV_32FC1 || type == CV_64FC1 || type == CV_32FC2 || type == CV_64FC2)

a_size.width == len

a_size.height == len

C.type() == type && (((flags&GEMM_3_T) == 0 && C.rows == d_size.height && C.cols == d_size.width) || ((flags&GEMM_3_T) != 0 && C.rows == d_size.width && C.cols == d_size.height))

type == _src2.type()

src1.size == src2.size

src.channels() == 1

delta.channels() == 1 && (delta.rows == src.rows || delta.rows == 1) && (delta.cols == src.cols || delta.cols == 1)

D:\Libs\opencv\sources\modules\core\src\lapack.cpp

type == _src2.type() && (type == CV_32F || type == CV_64F)

(method != DECOMP_LU && method != DECOMP_CHOLESKY) || is_normal || src.rows == src.cols

src.rows == src.cols

w.type() == u.type() && u.type() == vt.type() && u.data && vt.data && w.data

u.cols >= nm && vt.rows >= nm && (w.size() == Size(nm, 1) || w.size() == Size(1, nm) || w.size() == Size(vt.rows, u.cols))

rhs.data == 0 || (rhs.type() == type && rhs.rows == m)

D:\Libs\opencv\sources\modules\core\src\persistence.cpp

-.Inf

An attempt to add element without a key to a map, or add element with key to sequence

The key is an empty

The key is too long

Key must start with a letter or _

Key names may only contain alphanumeric characters [a-zA-Z0-9], '-', '_' and ' '

Key should start with a letter or _

Key name may only contain alphanumeric characters [a-zA-Z0-9], '-' and '_'

elements with keys can not be written to sequence

Images with planar data layout are not supported

2if%s

ß%s

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

0123456789-

%b %d %H : %M : %S %Y

%m / %d / %y

%I : %M : %S %p

%d / %m / %y

The repeat operator "*" cannot start a regular expression.

The repeat operator "?" cannot start a regular expression.

The repeat operator " " cannot start a regular expression.

Found a closing repetition operator } with no corresponding {.

Can't terminate a sub-expression with an alternation operator |.

The \c and \C escape sequences are not supported by POSIX basic regular expressions: try the Perl syntax instead.

A regular expression can start with the alternation operator |.

Invalid alternation operators within (?...) block.

More than one alternation operator | was encountered inside a conditional expression.

Alternation operators are not allowed inside a DEFINE block.

A repetition operator cannot be applied to a zero-width assertion.

left-curly-bracket

right-curly-bracket

0123456789

Unmatched quantified repeat operator { or \{.

Invalid preceding regular expression prior to repetition operator.

kernel32.dll

boost::filesystem::directory_iterator::operator  

boost thread: trying joining itself

Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag

libs\log\src\code_conversion.cpp

libs\log\src\global_logger_storage.cpp

libs\log\src\attribute_name.cpp

[u-u-u u:u:u.u] [%s] %s %s

[u-u-u u:u:u.u] [%s] %s %ls

libs\log\src\thread_specific.cpp

Line %d, Column %d

remote_config.cpp

Path.cpp

%Y-%m-%d %H:%M:%S

en_US.UTF-8

log_ng.cpp

mailru::log_ng::ExecutionTimeLogger::~ExecutionTimeLogger

AccountInfo.cpp

filesystem_utils.cpp

system\windows_services.cpp

mailru::windows_services::StopService

Resource.cpp

string.cpp

mailru::sqlite::database::database

sqlite.cpp

encryption.cpp

hXXp://

hXXps://

mailru::firefox_js_core::load_prefs_js

firefox_js.cpp

version_info.cpp

c:\build\desktop_apps\sputniklib\auto_handle.hpp

process_enumerate.cpp

unzip.cpp

process_util.cpp

!"#$%&'(

)* ,-./0123

is_admin.cpp

Suggest URL

mailru::opera::searchini::save

opera_searchini.cpp

user_logon_watcher.cpp

sync_objects.cpp

SessionsInfo.cpp

mailru::WaitForUserLogIn

uninstall_manager.cpp

mailru::url_parser::init

url_parser.cpp

sqlite_reader.cpp

mailru::SqliteReader::SqliteReader

testing_env.cpp

metrics\async_metric_scheduler.cpp

crash_handler.cpp

network\http_client_impl.cpp

mailru::`anonymous-namespace'::ParseHttpDate

hXXp://any.url/

C:\Build\desktop_apps\3party\boost/network/protocol/http/client/connection/connection_delegate_factory.hpp

class boost::shared_ptr<struct boost::network::http::impl::connection_delegate> __cdecl boost::network::http::impl::connection_delegate_factory<struct boost::network::http::tags::http_async_8bit_udp_resolve>::new_connection_delegate(class boost::asio::io_service &,bool,bool,class boost::optional<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class boost::optional<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class boost::optional<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class boost::optional<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class boost::optional<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,long)

HTTPS not supported.

shortcut.cpp

system_info\system_info.cpp

task_scheduler.cpp

caching_policy.cpp

Visual C   CRT: Not enough memory to complete call to strerror.

%S#[k

?#%X.y

MaxPolicyElementKey

Operation not permitted

Inappropriate I/O control operation

Broken pipe

operator

GetProcessWindowStation

pExecutionResource

c:\build\desktop_apps\3party\ticpp\ticpp.h

ticpp.cpp

Type is unsupported

&#xX;

</%s>

%s="%s"

%s='%s'

<!--%s-->

<![CDATA[%s]]>

version="%s"

encoding="%s"

standalone="%s"

type="%s"

href="%s"

unsupported version

.UTF-8

.windows-

windows1250

windows1251

windows1252

windows1253

windows1254

windows1255

windows1256

windows1257

windows874

windows932

windows936

Invalid or unsupported charset:

SQLite format 3

3.9.2

mjB?A@usrtREINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYWITHOUTERELEASEATTACHAVINGROUPDATEBEGINNERECURSIVEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTRIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY

CREATE TABLE sqlite_master(

sql text

CREATE TEMP TABLE sqlite_temp_master(

sqlite_attach

defer_foreign_keys

foreign_key_check

foreign_key_list

foreign_keys

sqlite_rename_table

sqlite_rename_trigger

sqlite_rename_parent

SQL logic error or missing database

unknown operation

large file support is disabled

sqlite_stat1

sqlite_stat3

sqlite_stat4

FOREIGN KEY

RowKey

sqlite_version

sqlite_source_id

sqlite_log

sqlite_compileoption_used

sqlite_compileoption_get

GetProcessHeap

sqlite_detach

SQLITE_

d-d-d d:d:d

d:d:d

d-d-d

failed to allocate %u bytes of memory

failed memory resize %u to %u bytes

922337203685477580

API call with %s database connection pointer

os_win.c:%d: (%lu) %s(%s) - %s

delayed %dms for lock/sharing conflict at line %d

%s-shm

%s%c%s

recovered %d pages from %s

recovered %d frames from WAL file %s

cannot limit WAL size: %s

invalid page number %d

2nd reference to page %d

Failed to read ptrmap key=%d

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

%d of %d pages missing from overflow list starting at %d

failed to get page %d

freelist leaf count too big on page %d

Page %d:

unable to get the page. error code=%d

btreeInitPage() returns error code %d

On tree page %d cell %d:

On page %d at right child:

Offset %d out of range %d..%d

Multiple uses for byte %u of page %d

Fragmentation of %d bytes reported as %d on page %d

Page %d is never used

Pointer map page %d is referenced

unknown database %s

%s(%d)

%s-mjXXXXXX9XXz

MJ delete: %s

MJ collide: %s

-mjX9X

FOREIGN KEY constraint failed

unable to use function %s in the requested context

bind on a busy prepared statement: [%s]

zeroblob(%d)

abort at %d in [%s]: %s

%s constraint failed: %s

%s constraint failed

cannot open savepoint - SQL statements in progress

no such savepoint: %s

cannot release savepoint - SQL statements in progress

cannot commit transaction - SQL statements in progress

sqlite_temp_master

sqlite_master

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

cannot change %s wal mode from within a transaction

database table is locked: %s

statement aborts at %d: [%s] %s

cannot open value of type %s

cannot open virtual table: %s

cannot open table without rowid: %s

cannot open view: %s

no such column: "%s"

foreign key

indexed

cannot open %s column for writing

misuse of aliased aggregate %s

%s: %s.%s.%s

%s: %s.%s

%s: %s

%s prohibited in %s

the "." operator

not authorized to use function: %s

%r %s BY term out of range - should be between 1 and %d

too many terms in %s BY clause

Expression tree is too large (maximum depth %d)

variable number must be between ?1 and ?%d

too many SQL variables

too many columns in %s

EXECUTE %s%s SUBQUERY %d

hex literal too big: %s

misuse of aggregate: %s()

%.*s"%w"%s

%s%.*s"%w"

%s OR name=%Q

type='trigger' AND (%s)

sqlite_

table %s may not be altered

there is already another table or index with this name: %s

view %s may not be altered

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

sqlite_sequence

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

Cannot add a PRIMARY KEY column

UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q

sqlite_altertab_%s

CREATE TABLE %Q.%s(%s)

DELETE FROM %Q.%s WHERE %s=%Q

SELECT tbl,idx,stat FROM %Q.sqlite_stat1

too many attached databases - max %d

database %s is already in use

unable to open database: %s

no such database: %s

cannot detach database %s

database %s is locked

%s %T cannot reference objects in database %s

%s cannot use variables

access to %s.%s.%s is prohibited

access to %s.%s is prohibited

object name reserved for internal use: %s

there is already an index named %s

too many columns on %s

duplicate column name: %s

default value of column [%s] is not constant

table "%s" has more than one primary key

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

PRIMARY KEY missing on table %s

CREATE %s %.*s

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

CREATE TABLE %Q.sqlite_sequence(name,seq)

view %s is circularly defined

UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d

sqlite_stat%d

DELETE FROM %Q.sqlite_sequence WHERE name=%Q

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

sqlite_stat

table %s may not be dropped

use DROP TABLE to delete table %s

use DROP VIEW to delete view %s

foreign key on %s should reference only one column of table %T

number of columns in foreign key does not match the number of columns in the referenced table

unknown column "%s" in foreign key definition

cannot create a TEMP index on non-TEMP table "%s"

table %s may not be indexed

views may not be indexed

virtual tables may not be indexed

there is already a table named %s

index %s already exists

sqlite_autoindex_%s_%d

expressions prohibited in PRIMARY KEY and UNIQUE constraints

CREATE%s INDEX %.*s

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

no such index: %S

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

a JOIN clause is required before %s

%s.%s

%s.rowid

unable to identify the object to be reindexed

duplicate WITH table name: %s

no such collation sequence: %s

table %s may not be modified

cannot modify %s because it is a view

foreign key mismatch - "%w" referencing "%w"

table %S has no column named %s

table %S has %d columns but %d values were supplied

%d values for %d columns

sqlite3_extension_init

unable to open shared library [%s]

sqlite3_

no entry point [%s] in shared library [%s]

error during initialization: %s

automatic extension loading failed: %s

*** in database %s ***

NULL value in %s.%s

unsupported encoding: %s

malformed database schema (%s)

%z - %s

unsupported file format

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

database schema is locked: %s

unknown or unsupported join type: %T %T%s%T

RIGHT and FULL OUTER JOINs are not currently supported

a NATURAL join may not have an ON or USING clause

cannot have both ON and USING clauses in the same join

cannot join using column %s - column not present in both tables

USE TEMP B-TREE FOR %s

COMPOUND SUBQUERIES %d AND %d %s(%s)

column%d

%s:%d

recursive aggregate queries not supported

ORDER BY clause should come after %s not before

LIMIT clause should come after %s not before

SELECTs to the left and right of %s do not have the same number of result columns

no such index: %s

multiple references to recursive table: %s

circular reference: %s

table %s has %d values for %d columns

multiple recursive references: %s

recursive reference in a subquery: %s

sqlite_sq_%p

too many references to "%s": max 65535

'%s' is not a function

%s.%s.%s

no such table: %s

SCAN TABLE %s%s%s

expected %d columns for '%s' but got %d

sqlite3_get_table() called with two or more incompatible queries

cannot create %s trigger on view: %S

cannot create INSTEAD OF trigger on table: %S

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

no such trigger: %S

-- TRIGGER %s

no such column: %s

cannot VACUUM - SQL statements in progress

PRAGMA vacuum_db.synchronous=OFF

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND coalesce(rootpage,1)>0

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND coalesce(rootpage,1)>0

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d

vtable constructor called recursively: %s

vtable constructor failed: %s

vtable constructor did not declare schema: %s

no such module: %s

ANY(%s)

SUBQUERY %d

TABLE %s

AS %s

PRIMARY KEY

COVERING INDEX %s

INDEX %s

USING INTEGER PRIMARY KEY (rowid%s?)

VIRTUAL TABLE INDEX %d:%s

too many arguments on %s() - max %d

automatic index on %s(%s)

table %s: xBestIndex returned an invalid plan

%s.xBestIndex() malfunction

at most %d tables in a join

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

unknown database: %s

no such %s mode: %s

%s mode not allowed: %s

no such vfs: %s

database corruption at line %d of [%.10s]

misuse at line %d of [%.10s]

cannot open file at line %d of [%.10s]

no such table column: %s.%s

N1.2.5

<fd:%d>

deflate 1.2.5 Copyright 1995-2010 Jean-loup Gailly and Mark Adler

1.2.5

inflate 1.2.5 Copyright 1995-2010 Mark Adler

.\crypto\engine\eng_pkey.c

RSA PRIVATE KEY

PUBLIC KEY

DSA PRIVATE KEY

EC PRIVATE KEY

Load certs from files in a directory

%s%clx.%s%d

unsupported type

unsupported recpientinfo type

unsupported recipient type

unsupported kek algorithm

unsupported content type

signer certificate not found

private key does not match certificate

no public key

no private key

no msgsigdigest

no key or cert

no key

not supported for this key type

not key transport

msgsigdigest wrong length

msgsigdigest verification failure

msgsigdigest error

invalid key length

invalid encrypted key length

error setting key

error getting public key

certificate verify error

certificate has no keyid

certificate already present

CMS_SIGNERINFO_VERIFY_CERT

CMS_RecipientInfo_set0_pkey

CMS_RecipientInfo_set0_key

CMS_RecipientInfo_ktri_cert_cmp

cms_msgSigDigest_add1

CMS_GET0_CERTIFICATE_CHOICES

CMS_EncryptedData_set1_key

CMS_decrypt_set1_pkey

CMS_decrypt_set1_key

CMS_add1_recipient_cert

CMS_add0_recipient_key

CMS_add0_cert

unsupported requestorname type

no certificates in chain

error parsing url

PARSE_HTTP_LINE1

OCSP_parse_url

OCSP_cert_id_new

unimplemented public key method

invalid cmd number

invalid cmd name

failed loading public key

failed loading private key

cmd not executable

ENGINE_UNLOAD_KEY

ENGINE_load_ssl_client_cert

ENGINE_load_public_key

ENGINE_load_private_key

ENGINE_get_pkey_meth

ENGINE_get_pkey_asn1_meth

ENGINE_ctrl_cmd_string

ENGINE_ctrl_cmd

ENGINE_cmd_is_executable

unsupported md algorithm

invalid signer certificate purpose

ess signing certificate error

ess add signing cert error

TS_VERIFY_CERT

TS_TST_INFO_set_msg_imprint

TS_RESP_CTX_set_signer_cert

TS_RESP_CTX_set_certs

TS_REQ_set_msg_imprint

TS_MSG_IMPRINT_set_algo

TS_CHECK_SIGNING_CERTS

ESS_SIGNING_CERT_NEW_INIT

ESS_CERT_ID_NEW_INIT

ESS_ADD_SIGNING_CERT

functionality not supported

WIN32_JOINER

unsupported pkcs12 mode

key gen error

PKCS8_add_keyusage

PKCS12_PBE_keyivgen

PKCS12_newpass

PKCS12_MAKE_SHKEYBAG

PKCS12_MAKE_KEYBAG

PKCS12_key_gen_uni

PKCS12_key_gen_asc

PKCS12_add_localkeyid

unsupported option

unable to get issuer keyid

policy syntax not currently supported

operation not defined

no proxy cert policy language defined

no issuer certificate

extension setting not supported

V2I_EXTENDED_KEY_USAGE

V2I_AUTHORITY_KEYID

S2I_SKEY_ID

S2I_ASN1_SKEY_ID

R2I_CERTPOL

unsupported cipher type

unable to find certificate

signing not supported for this key type

operation not supported on this type

no recipient matches key

no recipient matches certificate

encryption not supported for this key type

decrypted key is wrong length

PKCS7_add_certificate

unsupported method

no port specified

no port defined

no accept port specified

BIO_get_port

ECDH_compute_key

data too large for key size

unsupported field

passed null parameter

not a supported NIST prime

missing private key

keys not set

invalid private key

PKEY_EC_SIGN

PKEY_EC_PARAMGEN

PKEY_EC_KEYGEN

PKEY_EC_DERIVE

PKEY_EC_CTRL_STR

PKEY_EC_CTRL

o2i_ECPublicKey

i2o_ECPublicKey

i2d_ECPrivateKey

EC_KEY_print_fp

EC_KEY_print

EC_KEY_new

EC_KEY_generate_key

EC_KEY_copy

EC_KEY_check_key

ECKEY_TYPE2PARAM

ECKEY_PUB_ENCODE

ECKEY_PUB_DECODE

ECKEY_PRIV_ENCODE

ECKEY_PRIV_DECODE

ECKEY_PARAM_DECODE

ECKEY_PARAM2TYPE

DO_EC_KEY_PRINT

d2i_ECPrivateKey

zlib not supported

wrong public key type

unsupported public key type

unsupported encryption algorithm

unsupported any defined by type

unknown public key type

unable to decode rsa private key

unable to decode rsa key

streaming not supported

private key header missing

digest and key type not supported

bad password read

X509_PKEY_new

i2d_RSA_PUBKEY

i2d_PublicKey

i2d_PrivateKey

i2d_EC_PUBKEY

i2d_DSA_PUBKEY

d2i_X509_PKEY

d2i_PublicKey

d2i_PrivateKey

d2i_AutoPrivateKey

unsupported algorithm

unknown key type

unable to get certs public key

public key encode error

public key decode error

no cert set for us to verify

method not supported

loading cert dir

key values mismatch

key type mismatch

cert already in hash table

cant check dh key

X509_verify_cert

X509_STORE_add_cert

X509_REQ_check_private_key

X509_PUBKEY_set

X509_PUBKEY_get

X509_load_cert_file

X509_load_cert_crl_file

X509_get_pubkey_parameters

X509_check_private_key

GET_CERT_BY_SUBJECT

ADD_CERT_DIR

PKEY_DSA_KEYGEN

PKEY_DSA_CTRL

unsupported key components

unsupported encryption

read key

public key no rsa

problems getting password

keyblob too short

keyblob header parse error

expecting public key blob

expecting private key blob

error converting private key

PEM_WRITE_PRIVATEKEY

PEM_READ_PRIVATEKEY

PEM_READ_BIO_PRIVATEKEY

PEM_PK8PKEY

PEM_F_PEM_WRITE_PKCS8PRIVATEKEY

DO_PK8PKEY_FP

DO_PK8PKEY

d2i_PKCS8PrivateKey_fp

d2i_PKCS8PrivateKey_bio

unsupported salt type

unsupported private key algorithm

unsupported prf

unsupported key size

unsupported key derivation function

unsupported keylength

unsuported number of rounds

private key encode error

private key decode error

operaton not initialized

operation not supported for this keytype

no operation set

no key set

keygen failure

invalid operation

expecting a ec key

expecting a ecdsa key

expecting a dsa key

expecting a dh key

expecting an rsa key

different key types

ctrl operation not implemented

command not supported

camellia key setup failed

bn pubkey error

bad key length

aes key setup failed

PKEY_SET_TYPE

PKCS5_v2_PBE_keyivgen

PKCS5_PBE_keyivgen

EVP_PKEY_verify_recover_init

EVP_PKEY_verify_recover

EVP_PKEY_verify_init

EVP_PKEY_verify

EVP_PKEY_sign_init

EVP_PKEY_sign

EVP_PKEY_paramgen_init

EVP_PKEY_paramgen

EVP_PKEY_new

EVP_PKEY_keygen_init

EVP_PKEY_keygen

EVP_PKEY_get1_RSA

EVP_PKEY_get1_EC_KEY

EVP_PKEY_GET1_ECDSA

EVP_PKEY_get1_DSA

EVP_PKEY_get1_DH

EVP_PKEY_encrypt_old

EVP_PKEY_encrypt_init

EVP_PKEY_encrypt

EVP_PKEY_derive_set_peer

EVP_PKEY_derive_init

EVP_PKEY_derive

EVP_PKEY_decrypt_old

EVP_PKEY_decrypt_init

EVP_PKEY_decrypt

EVP_PKEY_CTX_dup

EVP_PKEY_CTX_ctrl_str

EVP_PKEY_CTX_ctrl

EVP_PKEY_copy_parameters

EVP_PKEY2PKCS8_broken

EVP_PKCS82PKEY_BROKEN

EVP_PKCS82PKEY

EVP_CIPHER_CTX_set_key_length

ECKEY_PKEY2PKCS8

ECDSA_PKEY2PKCS8

DSA_PKEY2PKCS8

DSAPKEY2PKCS8

D2I_PKEY

CAMELLIA_INIT_KEY

AES_INIT_KEY

invalid public key

PKEY_DH_KEYGEN

PKEY_DH_DERIVE

GENERATE_KEY

COMPUTE_KEY

rsa operations not supported

key size too small

invalid keybits

illegal or unsupported padding mode

digest too big for rsa key

data too small for key size

RSA_generate_key

RSA_check_key

RSA_BUILTIN_KEYGEN

PKEY_RSA_VERIFYRECOVER

PKEY_RSA_SIGN

PKEY_RSA_CTRL_STR

PKEY_RSA_CTRL

NETSCAPE_CERT_SEQUENCE

.\crypto\asn1\x_pkey.c

!$&'()* ,;=

Operation not permitted on an object without an associated state.

libs\log\src\text_file_backend.cpp

%H:%M:%S.%f

C:\Build\desktop_apps\_out\MailRuUpdater.pdb

MailRuUpdater.exe

??0?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@QAE@XZ

??0?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@QAE@XZ

??0?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@QAE@XZ

??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@XZ@51

??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@XZ@51

??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@XZ@51

??_B?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@51

??_B?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ@51

??_B?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ@51

?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@XZ

?get_const_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@XZ

?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@XZ

?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ

?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ

?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@XZ

?get_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@XZ

?get_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@XZ

?get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ

?get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@XZ

?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ

?instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@23@A

?instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@23@A

?instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@23@A

?instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@A

?instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@A

?instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@A

?instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@A

?instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@3@A

?instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@3@A

?instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@3@A

?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ

?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z

?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z

?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z

?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z

?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z

?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z

?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@detail@34@A

?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@detail@34@A

?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@detail@34@A

?t@?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@detail@34@A

?t@?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@634@A

?t@?1??get_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@634@A

CreateIoCompletionPort

KERNEL32.dll

SetWindowsHookExW

UnhookWindowsHookEx

USER32.dll

GDI32.dll

RegCloseKey

RegOpenKeyExW

RegCreateKeyExW

RegDeleteKeyW

RegEnumKeyExW

RegQueryInfoKeyW

ReportEventA

ADVAPI32.dll

FindExecutableW

ShellExecuteW

SHELL32.dll

ole32.dll

OLEAUT32.dll

SHLWAPI.dll

COMCTL32.dll

WS2_32.dll

PSAPI.DLL

USERENV.dll

WTSAPI32.dll

CertCloseStore

CertEnumCertificatesInStore

CertOpenSystemStoreW

CRYPT32.dll

d3d9.dll

VERSION.dll

GetCPInfo

ShellExecuteExW

CoInternetParseUrl

urlmon.dll

PeekNamedPipe

-----BEGIN PUBLIC KEY-----

-----END PUBLIC KEY-----

HTTP/

zcÁ

.?AV?$_Ref_count_obj@VAuditGoogleChrome@mailru@@@std@@

.?AV?$_Ref_count_obj@VAuditFirefox@mailru@@@std@@

.?AVAuditFirefox@mailru@@

.?AVCheckerFirefox@AuditFirefox@mailru@@

.?AVCheckerHomepageFirefox@AuditFirefox@mailru@@

.?AVCheckerDefaultSearchFirefox@AuditFirefox@mailru@@

.?AVCheckerVbmFirefox@AuditFirefox@mailru@@

.?AV?$_Ref_count_obj@VCheckerHomepageFirefox@AuditFirefox@mailru@@@std@@

.?AV?$_Ref_count_obj@VCheckerDefaultSearchFirefox@AuditFirefox@mailru@@@std@@

.?AV?$_Ref_count_obj@VCheckerVbmFirefox@AuditFirefox@mailru@@@std@@

.?AVAuditGoogleChrome@mailru@@

.?AVCheckerCh@AuditGoogleChrome@mailru@@

.?AVCheckerHomepageCh@AuditGoogleChrome@mailru@@

.?AVCheckerDefaultSearchCh@AuditGoogleChrome@mailru@@

.?AVCheckerVbmCh@AuditGoogleChrome@mailru@@

.?AV?$_Ref_count_obj@VCheckerHomepageCh@AuditGoogleChrome@mailru@@@std@@

.?AV?$_Ref_count_obj@VCheckerDefaultSearchCh@AuditGoogleChrome@mailru@@@std@@

.?AV?$_Ref_count_obj@VCheckerVbmCh@AuditGoogleChrome@mailru@@@std@@

.?AVFirefoxCookieManager@cookies@mailru@@

.?AVChromeExtensionStorage@mailru@@

.?AVFirefoxExtensionStorage@mailru@@

.?AUChromeExtensionTraits@checksum_traits@mailru@@

.?AUFirefoxExtensionTraits@checksum_traits@mailru@@

.?AVsettings@firefox@mailru@@

.?AVTaskExecuteAV@mailru@@

.?AV?$_Ref_count_obj@VTaskExecuteAV@mailru@@@std@@

.?AV?$thread_data@V?$bind_t@XV?$mf0@XVRemoteTasksExecuter@mailru@@@_mfi@boost@@V?$list1@V?$value@PAVRemoteTasksExecuter@mailru@@@_bi@boost@@@_bi@3@@_bi@boost@@@detail@boost@@

.?AV?$thread_data@V?$bind_t@XV?$mf1@XVRemoteTasksExecuter@mailru@@ABV?$shared_ptr@VTaskInterface@mailru@@@std@@@_mfi@boost@@V?$list2@V?$value@PAVRemoteTasksExecuter@mailru@@@_bi@boost@@V?$value@V?$shared_ptr@VTaskInterface@mailru@@@std@@@23@@_bi@3@@_bi@boost@@@detail@boost@@

.?AVTaskOneTimeWithChromeAutorunPatch@mailru@@

.?AV?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@

.?AU?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@

.?AUProcessKey@sysinfo@mailru@@

.?AV?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@

.?AV?$singleton@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@serialization@boost@@

.?AV?$singleton_wrapper@V?$extended_type_info_typeid@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@serialization@boost@@@detail@serialization@boost@@

.?AV?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$map@UProcessKey@sysinfo@mailru@@UProcessInfo@23@U?$less@UProcessKey@sysinfo@mailru@@@std@@V?$allocator@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@6@@std@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@

.?AV?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@serialization@boost@@

.?AV?$singleton_wrapper@V?$extended_type_info_typeid@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@serialization@boost@@@detail@serialization@boost@@

.?AV?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@U?$pair@$$CBUProcessKey@sysinfo@mailru@@UProcessInfo@23@@std@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$oserializer@Vtext_woarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@

.?AV?$singleton@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@serialization@boost@@

.?AV?$singleton_wrapper@V?$extended_type_info_typeid@UProcessKey@sysinfo@mailru@@@serialization@boost@@@detail@serialization@boost@@

.?AV?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$iserializer@Vtext_wiarchive@archive@boost@@UProcessKey@sysinfo@mailru@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$typeid_wrapper@V?$resolver_service@Vtcp@ip@asio@boost@@@ip@asio@boost@@@detail@asio@boost@@

.?AV?$typeid_wrapper@V?$stream_socket_service@Vtcp@ip@asio@boost@@@asio@boost@@@detail@asio@boost@@

.?AV?$stream_socket_service@Vtcp@ip@asio@boost@@@asio@boost@@

.?AV?$service_base@V?$stream_socket_service@Vtcp@ip@asio@boost@@@asio@boost@@@detail@asio@boost@@

.?AV?$resolver_service@Vtcp@ip@asio@boost@@@ip@asio@boost@@

.?AV?$service_base@V?$resolver_service@Vtcp@ip@asio@boost@@@ip@asio@boost@@@detail@asio@boost@@

.?AV?$_Ref_count@V?$vector@V?$basic_resolver_entry@Vtcp@ip@asio@boost@@@ip@asio@boost@@V?$allocator@V?$basic_resolver_entry@Vtcp@ip@asio@boost@@@ip@asio@boost@@@std@@@std@@@std@@

.?AVwindows_file_codecvt@@

.PAUattribute_name_info_tag@v2s_mt_nt5@log@boost@@

.?AVexception@sqlite@mailru@@

.?AVHttpError@mailru@@

.?AV?$bind_t@XV?$mf4@XU?$async_resolver@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@@policies@http@network@boost@@AAV?$basic_resolver@Vudp@ip@asio@boost@@V?$resolver_service@Vudp@ip@asio@boost@@@234@@ip@asio@5@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@GV?$function@$$A6AXABVerror_code@system@boost@@U?$pair@V?$basic_resolver_iterator@Vudp@ip@asio@boost@@@ip@asio@boost@@V1234@@std@@@Z@5@@_mfi@boost@@V?$list5@V?$value@PAU?$async_connection_policy@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@http@network@boost@@@_bi@boost@@U?$arg@$00@3@U?$arg@$01@3@U?$arg@$02@3@U?$arg@$03@3@@_bi@3@@_bi@boost@@

.?AV?$wrapped_handler@Vstrand@io_service@asio@boost@@V?$bind_t@XV?$mf8@XU?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@GG_NV?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@5@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@5@ABVerror_code@system@5@U?$pair@V?$basic_resolver_iterator@Vudp@ip@asio@boost@@@ip@asio@boost@@V1234@@7@@_mfi@boost@@V?$list9@V?$value@V?$shared_ptr@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@boost@@@_bi@boost@@V?$value@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@23@V?$value@G@23@V523@V?$value@_N@23@V?$value@V?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@boost@@@23@V?$value@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@boost@@@23@U?$arg@$00@3@U?$arg@$01@3@@_bi@3@@_bi@4@Uis_continuation_if_running@detail@34@@detail@asio@boost@@

.?AV?$wrapped_handler@Vstrand@io_service@asio@boost@@V?$bind_t@XV?$mf8@XU?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@GG_NV?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@5@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@5@U?$pair@V?$basic_resolver_iterator@Vudp@ip@asio@boost@@@ip@asio@boost@@V1234@@7@ABVerror_code@system@5@@_mfi@boost@@V?$list9@V?$value@V?$shared_ptr@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@boost@@@_bi@boost@@V?$value@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@23@V?$value@G@23@V523@V?$value@_N@23@V?$value@V?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@boost@@@23@V?$value@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@boost@@@23@V?$value@U?$pair@V?$basic_resolver_iterator@Vudp@ip@asio@boost@@@ip@asio@boost@@V1234@@std@@@23@U?$arg@$00@3@@_bi@3@@_bi@4@Uis_continuation_if_running@detail@34@@detail@asio@boost@@

.?AV?$wrapped_handler@Vstrand@io_service@asio@boost@@V?$bind_t@XV?$mf5@XU?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@_NV?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@5@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@5@ABVerror_code@system@5@I@_mfi@boost@@V?$list6@V?$value@V?$shared_ptr@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@boost@@@_bi@boost@@V?$value@_N@23@V?$value@V?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@boost@@@23@V?$value@V?$function@$$A6A_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@boost@@@23@U?$arg@$00@3@U?$arg@$01@3@@_bi@3@@_bi@4@Uis_continuation_if_running@detail@34@@detail@asio@boost@@

.?AV?$wrapped_handler@Vstrand@io_service@asio@boost@@V?$bind_t@XV?$mf5@XU?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@W4state_t@12345@_NV?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@5@ABVerror_code@system@5@I@_mfi@boost@@V?$list6@V?$value@V?$shared_ptr@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@boost@@@_bi@boost@@V?$value@W4state_t@?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@23@V?$value@_N@23@V?$value@V?$function@$$A6AXABV?$iterator_range@PBD@boost@@ABVerror_code@system@2@@Z@boost@@@23@U?$arg@$00@3@U?$arg@$01@3@@_bi@3@@_bi@4@Uis_continuation_if_running@detail@34@@detail@asio@boost@@

.?AV?$typeid_wrapper@V?$resolver_service@Vudp@ip@asio@boost@@@ip@asio@boost@@@detail@asio@boost@@

.?AV?$resolver_service@Vudp@ip@asio@boost@@@ip@asio@boost@@

.?AV?$service_base@V?$resolver_service@Vudp@ip@asio@boost@@@ip@asio@boost@@@detail@asio@boost@@

.?AU?$async_connection_base@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@

.?AU?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@

.?AU?$http_async_protocol_handler@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@

.?AV?$enable_shared_from_this@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@boost@@

.?AV?$sp_counted_impl_p@Uconnection_impl@?$async_connection_policy@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@http@network@boost@@@detail@boost@@

.?AV?$sp_counted_impl_p@U?$http_async_connection@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@impl@http@network@boost@@@detail@boost@@

.?AV?$sp_counted_impl_p@Unormal_delegate@impl@http@network@boost@@@detail@boost@@

.?AV?$sp_counted_impl_p@U?$basic_client_impl@Uhttp_async_8bit_udp_resolve@tags@http@network@boost@@$00$00@http@network@boost@@@detail@boost@@

.?AV?$_Ref_count@V?$vector@V?$basic_resolver_entry@Vudp@ip@asio@boost@@@ip@asio@boost@@V?$allocator@V?$basic_resolver_entry@Vudp@ip@asio@boost@@@ip@asio@boost@@@std@@@std@@@std@@

.?AVinvalid_scheduler_policy_key@Concurrency@@

.?AVinvalid_operation@Concurrency@@

.?AVunsupported_os@Concurrency@@

.?AVinvalid_oversubscribe_operation@Concurrency@@

.?AUITopologyExecutionResource@Concurrency@@

.?AUIExecutionContext@Concurrency@@

.?AVExecutionResource@details@Concurrency@@

.?AUIExecutionResource@Concurrency@@

.?AUconnection_delegate@impl@http@network@boost@@

.?AUnormal_delegate@impl@http@network@boost@@

Inappropriate I/O control opera

<requestedExecutionLevel level='asInvoker' uiAccess='false' />

<assemblyIdentity type='win32' name='Microsoft.Windows.Common-Controls' version='6.0.0.0' processorArchitecture='x86' publicKeyToken='6595b64144ccf1df' language='*' />

6%7u7s9

:,:0:4:8:<:

>'?.?8?^?

9-9@9[9{9

9 <$<(<,<

5_:V:

6'7,71767

9-9Z9}9

9%:*:/:4:@:}:

0C0S0c0

5&6,62686

:0:4:8:<:

6)606<6]6@7

5,62686>6

3?3R3c3o3v3

6#8(8-828>8{8

4#4(4&585

2!2f3o3

8,;0;4;8;

6f7D7

&050&181\1

9!9 9&=6=

777<7[7`7

4%4s4z4

< <$<(<,<0<4<8<<<@<

<"=(=,=0=4=

8!8%8)8-818

:,;1;7;>;

>%> >5>@>

9 :*:3:>:

5 6*636?6

0&181^1|1

9Ÿ9u9

3'3-323@3{3

7,8 :`:^;

;#;2;@;#=2=@=

00c0x0

: ;$;(;,;0;

6 6c6<6

1 2$2(2,2

-141(5@8

= =$=(=,=0=4=

3 3$3(3,303

7 7-787@7_7

6 7$7(7,70747

:*:;:$=-=2=

5]5b6

?"?'?5?>?

:#:-:3:=:

< <$<(<,<0<

; ;$;(;,;

? ?$?(?,?0?4?8?

; ;$;(;,;0;

7 7$7(7,7074787<7@7

< <$<(<,<0<4<8<<<

6 6$6(6,606

2 2$2(2,2024282<2

3 3$3(3,30343

1 1(14181

1014181<1

; ;$;(;,;0;4;8;

5 5$5(5,5054585<5

3 3(343\3

6 6(646\6

:$:,:8:\:

>$>,>8>\>|>

< <(<0<<<`<

3 3(303<3`3

: :(:0:<:`:

>$>,>8>`>

=,=8=@=`=

>,>8>@>`>

0 0(000<0`0

6(646<6\6

=$=,=8=`=

: ;,;4;`;|;

= =(=0=<=`=

/signatures.mrdj

hXXp://mrds.mail.ru/update/2/version.txt

/sputnik/spmrids.mrdj

JMail.Ru\Sputnik\Report

hXXp://xml.binupdate.mail.ru/audit_config.mrdj

Start new check operation

failed to parse. New report Created

restore mail.ru for:

operation_type

checker->Check failed, msg =

hXXp://xml.binupdate.mail.ru/sputnik/spmrids.mrdj

hXXp://xml.binupdate.mail.ru/sputnik/spmrids.mrdj successfully fetched

FFExtensions/FFVbm/Url

Hp/Url

Dse/Url

Vbm/Url

Advapi32.dll

creation_utc, host_key, name, path, expires_utc, value, encrypted_value, secure, httponly, last_access_utc

psqlite3_reset

sqlite3_bind_text16

sqlite3_busy_timeout

L FROM cookies WHERE name = ? AND host_key = ?

name,value,host,path,expiry,baseDomain lastAccessed,creationTime,isSecure,isHttpOnly

/tasks/browsers.mrdj

Google\Chrome\User Data\Safe Browsing Extension Blacklist

OGoogle/Chrome/User Data

Google/Chrome/Application

Software\Policies\Google\Chrome

Google Chrome

Google/Chrome/User Data/Default

Google/Chrome/Application/chrome.exe

Software/Google/Chrome/BLBeacon

Software\Mail.Ru\AmigoInstaller

sqlite3_bind_blob

_0.localstorage

chrome-extension_

key TEXT UNIQUE ON CONFLICT REPLACE,

SELECT value FROM ItemTable WHERE key = ?

URLS

sqlite3_exec

select k.url from meta m, keywords k where m.key='Default Search Provider ID' and m.value=k.id

Mail.Ru

dSELECT id FROM keywords WHERE keyword = 'mail.ru' COLLATE NOCASE

DELETE FROM keywords WHERE short_name = '@MAIL.RU'

SELECT * FROM keywords

ALTER TABLE keywords ADD COLUMN alternate_urls VARCHAR DEFAULT ''

ALTER TABLE keywords ADD COLUMN search_terms_replacement_key VARCHAR DEFAULT ''

INSERT INTO keywords

id, short_name, keyword, favicon_url, url, show_in_default_list, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, suggest_url, prepopulate_id, created_by_policy, instant_url, last_modified, sync_guid

@Mail.Ru','go.mail.ru','hXXp://go.mail.ru/favicon.ico','hXXp://go.mail.ru/search?q={searchTerms}&fr=ntg',1,1,'',1333701777,0,'windows-1251','hXXp://suggests.go.mail.ru/ff3?q={searchTerms}',%PREPOPULATE_ID%,0,'',0,'03095DE3-A6E7-4793-A20C-399A0F4A92E1'

UPDATE keywords SET short_name = '

@Mail.Ru', keyword = 'go.mail.ru', favicon_url = 'hXXp://go.mail.ru/favicon.ico', url = 'hXXp://go.mail.ru/search?q={searchTerms}&fr=ntg%RFR%',show_in_default_list = '1' WHERE id = '%ID%'

SELECT id , prepopulate_id FROM keywords WHERE keyword = 'go.mail.ru' COLLATE NOCASE

SELECT id , prepopulate_id FROM keywords WHERE keyword = 'mail.ru' COLLATE NOCASE

SELECT id, prepopulate_id FROM keywords

' WHERE key = 'Default Search Provider ID'

' WHERE key = 'Default Search Provider ID Backup'

UPDATE keywords SET suggest_url = '%SUGGEST_URL%' WHERE keyword like '%mail.ru%'

%SUGGEST_URL%

manifest.json

^(chrome-extension://)?(\w{32})?/?

Software/Google/Chrome/Extensions

Sync Data Backup/SyncData.sqlite3

hXXps://clients2.google.com/service/update2/crx

hXXp://xml.binupdate.mail.ru/guard/mrids.mrdj

chrome_url_overrides/newtab

Extension from url installed

DefaultSearchProviderSearchURL

DefaultSearchProviderKeyword

DefaultSearchProviderInstantURL

DefaultSearchProviderSuggestURL

^chrome-extension://([a-z]{32})/

Web Data

SELECT value FROM meta WHERE key = 'version'

Reading web data version failed:

qmail.ru

VVV.mail.ru

VVV.go.mail.ru

common_process.exe

{A12C4AB1-F4D0-4771-8C21-613E9D12491F}

{1079004F-E4EF-4A44-9D1F-7C9CE09CE258}

{901B414B-72A2-48C6-8DCD-29388B8B3E40}

{0ED2394C-62B6-4A80-A342-C2CA0B2A4E82}

{E60E6A0E-4092-4965-85BB-AA1ED8EBBC8E}

{ADAC3638-040C-498C-845A-F89B99705444}

{4519D3B5-465C-4AE2-A905-960CA7D5385C}

{F581DE96-9AA1-45C8-8335-B7445525371A}

{DCEF19BB-AB61-48F4-A7CB-6D677D90D1C2}

{B63A6D16-4F50-47C2-9BF7-A5D6E79C9EFD}

{11A1974E-9BEF-4B50-8E2F-9F25FC775BD1}

{3E57F3FE-4397-4DEA-A19A-760BFCD24242}

{63CF3EC2-0122-429B-AB91-781D5D6A8513}

{D33EDE61-8E43-4C1F-9371-6A240B4DA5C9}

{ABCAA0D8-A892-481F-9492-ACC63768F659}

{8DC7BF6A-58F3-4740-B600-34E37FFADC21}

{4C1D0C36-25B2-4774-80E8-DAE1E7898A1A}

{96AF929E-B8EB-499E-99A8-095E4262BE26}

{027940D4-10B8-43B6-9707-A4EE47618E1D}

{45DA0BF7-F31B-4360-BF9A-8E7374A78916}

{5552B451-2086-4B64-82C6-732B18E41FCD}

{F9CC112D-19A0-455B-8D85-F5E9CB7D5914}

{0E26AC42-4B6E-4C84-8291-A0CAC999E70D}

{CFB9F60E-912D-43B3-91C9-9E06AE17ADE0}

{3CE4F0C3-2143-491F-8F20-27792166C41F}

{4947360E-E26B-4CC9-BB40-F4A30EDCA39E}

{14737ADB-9F88-47E8-A76F-D365509795AC}

{25A21CA7-3B29-4A32-8F04-25389F58ED78}

{9A43760C-B8B0-44BA-8DB2-82041B01D78A}

{E26CB86D-BD59-40B5-B285-55ACAC12C019}

chrome-extension://clpdgmdkdnijjbgmnajolnbnjejoeogm/visual-bookmarks.html

chrome-extension://hcncjpganfocbfoenaemagjjopkkindp/visual-bookmarks.html

chrome-extension://jaocgokledfmfebefgbeokdodbbdjhdd/visual-bookmarks.html

chrome-extension://dhngkpgdbpbkopndlpkicfaiffphdkbo/visual-bookmarks.html

Software\AppDataLow\Software\Mail.Ru\IE_Bar

Software\Mail.Ru\IE_Bar

Software/Mail.Ru/Updater

Software\Mail.Ru\Flags

SOFTWARE/Microsoft/Windows/CurrentVersion/Uninstall

SOFTWARE/Microsoft/Windows/CurrentVersion/Run

SOFTWARE/Mail.Ru

{09900DE8-1DCA-443F-9243-26FF581438AF}

{58810E75-E249-44C6-B989-11D227263E24}

{91397D20-1446-11D4-8AF4-0040CA1127B6}

{95289393-33EA-4F8D-B952-483415B9C955}

hXXp://mrds.mail.ru/update/2/

Software/Mail.Ru

hXXp://go.mail.ru/distib/ep/?q={SearchTerms}

hXXp://suggests.go.mail.ru/ie8?q={SearchTerms}

{FFEBBF0A-C22C-4172-89FF-45215A135AC7}

Mail.Ru

iexplore.exe

{8E8F97CD-60B5-456F-A201-73065652D099}

Mail.Ru/mrkeeper.exe

hXXp://go.mail.ru/search?q={SearchTerms}&fr=iextn

{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}

{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}

hXXp://go.mail.ru/search?fr=ntg&q=

hXXp://go.mail.ru/distib/ep/

firefox.exe

[email protected]

[email protected]

opera.exe

chrome.exe

hXXp://go.mail.ru/distib/ep/?q={searchTerms}

SOFTWARE/Google/Chrome/Extensions

4amigo.exe

nichrome.exe

browser.exe

Yandex.Browser.New

Software/Mail.Ru/ChromeInstaller

hXXp://xml.binupdate.mail.ru/guard/update/version.xml

F777C640-57F8-4ECE-A40B-F571D25C2EFE

.html

opera

launcher.exe

SOFTWARE/Microsoft/Windows/CurrentVersion/Uninstall/Google Chrome

SOFTWARE/Microsoft/Windows/CurrentVersion/Uninstall/Bromium

Software/Microsoft/Windows/CurrentVersion/Uninstall/Xpom

Software/Microsoft/Windows/CurrentVersion/Uninstall/{1B89BC31-F539-4EBD-B94F-C24705C73433}

Software/Microsoft/Windows/CurrentVersion/Uninstall/YandexBrowser

xpom.exe

Software/Microsoft/Windows/CurrentVersion/Uninstall/xpom

Software/Microsoft/Windows/CurrentVersion/Uninstall/Amigo

google chrome

firefox

Microsoft/Windows/Start Menu

Microsoft/Windows/

extensions.json

Unable to patch extensions.json

install.rdf

em:updateURL

em:iconURL

nFailed to parse extensions.json

Failed to write extensions.json:

tsearch-metadata.json

sessionstore.js

places.sqlite

cookies.sqlite

prefs.js

Mozilla\Firefox\profiles.ini

Mozilla\Firefox

search.json

LMozilla Firefox

mailru.xml

<SearchPlugin xmlns="hXXp://VVV.mozilla.org/2006/browser/search/" xmlns:os="hXXp://a9.com/-/spec/opensearch/1.1/">

<os:ShortName>@Mail.Ru</os:ShortName>

@Mail.Ru</os:Description>

<SearchForm>hXXp://VVV.mail.ru/</SearchForm>

<os:Url type="application/x-suggestions json" method="GET" template="hXXp://suggests.go.mail.ru/ff3?q={searchTerms}"></os:Url>

<os:Url type="text/html" method="GET" template="%SEARCH_URL%"/>

%SEARCH_URL%

extensions.ini

ini keys failed

extensions.json not parsed!

System32/GroupPolicy/Machine/Registry.pol

System32/GroupPolicy/User/Registry.pol

Sysnative/GroupPolicy/Machine/Registry.pol

Sysnative/GroupPolicy/User/Registry.pol

SysWOW64/GroupPolicy/Machine/Registry.pol

SysWOW64/GroupPolicy/User/Registry.pol

SELECT last_visit_time FROM urls order by last_visit_time DESC LIMIT 1

couldn't create instance of IUrlHistoryStg2

EnumUrls failed

Software/Microsoft/Windows/CurrentVersion/Explorer/Browser Helper Objects

Software/Microsoft/Windows/CurrentVersion/Ext/Settings

Mail.Ru/Sputnik

SOFTWARE/Microsoft/Windows/CurrentVersion/URL/DefaultPrefix

FaviconURLFallback

SuggestionsURL

ie.reg

[-HKEY_USERS\

import

reg.exe

Mail.Ru/Id

GuardMailRu.exe

File: %s

Software\Microsoft\Windows\CurrentVersion\Run

Software\Mail.ru\Tech\ptls

hXXp://go.mail.ru/distib/mark/

go_metric_url

hXXp://mrds.mail.ru/update/2/version.txt?type=product_online_metric

mrds_metric_url

.installed_product

MailProducts/Nrs.dat

Software/Mail.Ru/Guard

R.delay

hXXp://xml.binupdate.mail.ru/tasks/shortcuts.mrdj

url_argument

key_arg

^(http[s]?:\/\/)?(www\.)?([\w\.-] )([:\/].*)?$

{598504EA-A67F-4E3C-9CB2-F686B72D4BE6}

{453FD166-5BF4-4C00-AD14-4065187ABBFB}

{5A38BFBE-DFD4-46C5-8598-EE133F10611F}

T{89C5113F-E3B5-4549-966B-D94AA700D5CC}

{CEFC557D-A2A9-45BD-B751-904437A0C01C}

T{FE104FA7-83DD-4B96-862E-843CDF135D62}

{C753EB3C-0C13-43D0-B52C-300B785B5AE9}

T{FC604959-8A01-4E8B-A3E5-87CEEBD6FEDB}

RemoteTasksExecuter thread stuck

Remote tasks execution started

hXXp://xml.binupdate.mail.ru/tasks.mrdj

SSoftware/Microsoft/Windows/CurrentVersion/Run

Syahoo.com

webalta.ru

yambler.net

yafinder.com

Found mail.ru extension of type

Task execution failed:

ThXXp://mailruupdater.cdnmail.ru/MailRuUpdater.exe

Ttask_executed

Software\Mail.Ru

Allow service process execute task

--uac-passed

mru_uac_passed

TVVV.

Guard@Mail\.ru

SwReporter

software_reporter_tool.log

Error parsing reporter logs:

dFailed to update SwReporter data:

since_last_exec

chrome

hXXp://xml.binupdate.mail.ru/tasks/ext_settings.mrdj

Start proceed Google Chrome

Google Chrome is done

Google Chrome is not done

Start proceed Firefox

Firefox is done

Firefox is not done

hXXp://xml.binupdate.mail.ru/tasks/sg_settings.mrdj

hXXp://go.mail.ru/?chverfix=1&fr=chverfix_sg

hXXp://go.mail.ru/search?q={SearchTerms}&ieverfix=1&fr=ieverfix_dse

hXXp://xml.binupdate.mail.ru/sputnik/spmrids.mrdj successfully fetching failed

T/checksums.mrdj

FFExtensions/Hp/Url

search_provider/search_url

chrome_settings_overrides/

manifest/chrome_settings_overrides

MRSputnikData/history.xml

SELECT urls.url, visit_time

FROM visits INNER JOIN urls

ON visits.url = urls.id

IEExtensions/Dse/Url

T{EC32BCCC-7012-459F-8D79-6E7D38DC1ECD}

Tvk.com/audios

ok.ru/music

my.mail.ru/music

e.mail.ru/messages/inbox

vk.com/app

ok.ru/game

ok.ru/app

my.mail.ru/app

games.mail.ru

SELECT id, url, last_visit_time FROM urls where url like '%%%1%%%' order by last_visit_time DESC limit 1

SELECT url, last_visit_date FROM moz_places where url like '%%%1%%%' and guid != '' and guid notnull order by last_visit_date desc limit 1

\Toolbar\Custom\Packages\hXXp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox

Yandex\Toolbar\state.json

yasearch-xb\plugins.json

Software\Mail.Ru\Updater

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

uac-passed

Tamigo_tmp.exe

hXXp://binupdate.mail.ru/amigo/version2.xml

internet_tmp.exe

hXXp://binupdate.mail.ru/chrome/version3.xml

internetupdater_tmp.exe

hXXp://binupdate.mail.ru/chrome/version2.xml

0.0.0.0

inttoam_tmp.exe

hXXp://binupdate.mail.ru/chrome/internet_to_amigo.xml

28.0.1501.430

hXXp://binupdate.mail.ru/updater/version.xml

mrutmp.exe

.mru_update_service

amsg

ovr_chrome

last_chrome

Google/Chrome/User Data/Default/History

/friends.mrdj

Updater.Mail.Ru

Mail.Ru Group

Updater.Mail.Ru exist

Updater.Mail.Ru: Error during coping file, rc =

Service::Update update operation is proceed

gUpdater.Mail.Ru: StartService: RegisterServiceCtrlHandler returned error

Updater.Mail.Ru: StartService: SetServiceStatus returned error

Updater.Mail.Ru: SERVICE_CONTROL_STOP

Updater.Mail.Ru: SERVICE_CONTROL_INTERROGATE

Updater.Mail.Ru: SERVICE_CONTROL_SHUTDOWN

%userprofile%

YSOFTWARE/Mail.ru

Mail.ru/ifrm

asio-58CCDC44-6264-4842-90C2-F3C545CB8AA7-%u-%p

TestModes/NoHttpsHostVerification

xml.binupdate.mail.ru

%1% (%2%)

Software/Mail.Ru/Tech/UserID

Software/Microsoft/Windows/CurrentVersion/Explorer/Shell Folders

\StringFileInfo\xx

sqlite3_prepare16_v2

sqlite3_step

SQLite error %1% returned by %2%

SQLite error code %1%, file %2%

Incorrect firefox js file

0123456789 ,.

notepad.exe

SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/System

stub.exe

Invalid url

Hx

hXXp://xml.binupdate.mail.ru/tenv.mrdj

filter.cfg

metrics.csv

http.csv

%Y%m%d

%Y-%m-%d

%H:%M:%S

%Y%m%dT%H%M%S%F%q

%Y-%m-%d %H:%M:%S%F%Q

%Y-%b-%d %H:%M:%S%F %z

%O:%M:%S%F

Failed to parse HTTP date:

Http client stuck

YInternet Explorer/iexplore.exe

%Y-%b-%d

p%Y%m%d

SOFTWARE/Microsoft/Windows/CurrentVersion/Explorer/Shell Folders

Global\651CB287-2277-4F76-84C6-1D61E868304B

Mail.ru/CommonCache

hXXp://xml.binupdate.mail.ru/cache_policy.mrdj

rCachingPolicy/Urls

combase.dll

mscoree.dll

qadvapi32.dll

skernel32.dll

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

portuguese-brazilian

%5N.log

f.exe

%Program Files%\Mail.Ru\MailRuUpdater\MailRuUpdater.exe

Mail.Ru updater

1.24.0.246

Remove it with Ad-Aware

1. Click (here) to download and install Ad-Aware Free Antivirus.
2. Update the definition files.
3. Run a full scan of your computer.

Manual removal*

1. Terminate malicious process(es) (How to End a Process With the Task Manager):
   

   UnityWebPlayer.exe:264
   AmigoDistrib.exe:244
   setup.exe:1136
   MailRuUpdater.exe:1936
   MailRuUpdater.exe:548
   MailRuUpdater.exe:364
   MailRuUpdater.exe:636
   MailRuUpdater.exe:552
   

2. Delete the original SpyTool file.
   
3. Delete or disinfect the following files created/modified by the SpyTool:
   

   %Documents and Settings%\%current user%\Local Settings\Temp\nsf3.tmp\UserInfo.dll (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\nsf3.tmp\UAC.dll (784 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (6360 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\npUnity3D32.dll (32784 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\info.plist (192 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\Uninstall.exe (6078 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\nsf2.tmp (67936 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\UnityWebPlayerUpdate.exe (19592 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\nsf3.tmp\System.dll (11 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\UnityBugReporter.exe (25112 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Unity\WebPlayer\loader\UnityWebPlayerNP.map (12536 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\CR_EC2D0.tmp\setup.exe (17080 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\CR_EC2D0.tmp\SETUP.EX_ (1659 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\CR_EC2D0.tmp\CHROME.PACKED.7Z (366388 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\ro.pak (262 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\it.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\snapshot_blob.bin (1717 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\unitywebplayer.exe (5442 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\zh-TW.pak (214 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\VisualElements\smalllogo.png (6 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\ko.pak (263 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\ta.pak (4185 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\sw.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\de.pak (256 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\PepperFlash\manifest.json (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\libglesv2.dll (7972 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\chrome_watcher.dll (2105 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\lv.pak (1425 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\chrome_child.dll (310844 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\amigo_FFA3C3E0-B3B6-4D8C-928C-75AA59A806A0\UnityWebPlayer.exe (7433 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\bn.pak (3361 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\hi.pak (1810 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\amigo_FFA3C3E0-B3B6-4D8C-928C-75AA59A806A0\MailRuUpdater.exe (39945 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\sk.pak (266 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\amigo_cr.exe (1615 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\pt-PT.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\libexif.dll (310 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\ko.pak (1425 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\en-GB.pak (212 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe (4545 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\sw.pak (236 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\xinput1_3.dll (601 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\hr.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\fi.pak (242 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\VisualElements (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\mr.pak (1801 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\sr.pak (1670 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\es-419.pak (259 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\kn.pak (4185 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\zh-CN.pak (211 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\chrome_100_percent.pak (7433 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\es.pak (263 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\chrome_200_percent.pak (9098 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\chrome.dll (237340 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\ca.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\nl.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\fi.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\hu.pak (272 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\amigo_resources.pak (30490 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\libegl.dll (601 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\icudtl.dat (75554 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\fr.pak (276 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\da.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\nb.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\te.pak (1863 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\sr.pak (2105 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\ms.pak (234 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\ca.pak (259 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\chrome_elf.dll (132 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\secondarytile.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\hi.pak (3361 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\en-GB.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\natives_blob.bin (1677 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\chrome.dll (238288 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\chrome_installer.log (1956 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\pt-BR.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\th.pak (1789 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\delegate_execute.exe (3707 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\amigo.exe (3765 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\vi.pak (287 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\natives_blob.bin (2321 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\VisualElements\splash-620x300.png (8 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\PepperFlash\manifest.json (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\delegate_execute.exe (4185 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\chrome.7z (1266233 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\nacl64.exe (15116 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\sv.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\it.pak (252 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\uk.pak (2321 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\d3dcompiler_47.dll (22433 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\es.pak (1425 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\chrome_200_percent.pak (7972 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\ml.pak (3735 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\nacl_irt_x86_64.nexe (23811 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\ja.pak (308 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\lt.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\ok.exe (142 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\44.4.2403.3.manifest (248 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\VisualElements\logo.png (6 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\amigo_cr.exe (2105 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\ml.pak (4545 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\ar.pak (1629 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\lt.pak (257 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\te.pak (3361 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\mm.exe (130 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\chrome_100_percent.pak (5442 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\mailruupdater.exe (38588 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\gu.pak (1796 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\nacl_irt_x86_64.nexe (22433 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\et.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\ru.pak (1675 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\44.4.2403.3.manifest (248 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\resources.pak (142877 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\chrome_elf.dll (673 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\cs.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\fa.pak (2105 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\fil.pak (1425 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\zh-CN.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\bg.pak (1705 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\he.pak (296 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\id.pak (228 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\el.pak (1747 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\vi.pak (1425 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\fr.pak (1425 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\pt-PT.pak (254 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\el.pak (3073 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\id.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\nl.pak (247 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\VisualElementsManifest.xml (396 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\vk.exe (167 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\tr.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\VisualElements\logo.png (6 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\th.pak (3073 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\en-US.pak (212 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\hr.pak (244 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\es-419.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\fil.pak (262 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\wow_helper.exe (73 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\gu.pak (3073 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\uk.pak (1689 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\fa.pak (1648 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\icudtl.dat (76782 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\PepperFlash\pepflashplayer.dll (124045 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\da.pak (234 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\VisualElements\smalllogo.png (6 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\ms.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\kn.pak (3669 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\hu.pak (1425 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\de.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\metro_driver.dll (1763 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\mr.pak (3073 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\et.pak (228 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\ja.pak (1425 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\snapshot_blob.bin (2321 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Extensions\external_extensions.json (103 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\secondarytile.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\metro_driver.dll (3073 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\zh-TW.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\libglesv2.dll (8657 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\xinput1_3.dll (81 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\libegl.dll (81 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\pl.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\nacl_irt_x86_32.nexe (17629 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\VisualElements\splash-620x300.png (8 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\nacl_irt_x86_32.nexe (19686 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\en-US.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\nacl64.exe (12289 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\sk.pak (1425 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\pl.pak (253 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\chrome_watcher.dll (1636 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\tr.pak (254 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\sl.pak (241 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\mg.exe (196 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\bn.pak (1830 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\sl.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\pt-BR.pak (249 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\ro.pak (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\chrome_child.dll (307964 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\ta.pak (3682 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\ar.pak (2105 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\ru.pak (2321 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\am.pak (2105 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\libexif.dll (1425 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\cs.pak (258 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\sv.pak (235 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\am.pak (1639 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\amigo_resources.pak (28502 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\he.pak (1425 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\lv.pak (262 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\resources.pak (144882 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Locales\nb.pak (233 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\d3dcompiler_47.dll (23811 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\PepperFlash\pepflashplayer.dll (122658 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Temp\source1136_18201\Chrome-bin\44.4.2403.3\Extensions\external_extensions.json (103 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\44.4.2403.3\Locales\bg.pak (2321 bytes)
   %System%\GroupPolicy\User\Registry.pol (8 bytes)
   %System%\GroupPolicy\gpt.ini (119 bytes)
   %System%\GroupPolicy\Machine\Registry.pol (8 bytes)
   %Program Files%\Mail.Ru\MailRuUpdater\MailRuUpdater.exe (45846 bytes)
   %Documents and Settings%\%current user%\Application Data\MailProducts\Id (38 bytes)
   %Documents and Settings%\All Users\Application Data\Mail.Ru\Id (38 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe (39945 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\mrutmp.exe (777338 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\2D8AFB49-E3C9-489B-9AAB-A503C50FA1BF\AmigoDistrib.exe (370096 bytes)

4. Delete the following value(s) in the autorun key (How to Work with System Registry):
   

   [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
   "amigo" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Amigo\Application\amigo.exe --no-startup-window"
   
   [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
   "MailRuUpdater" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Mail.Ru\MailRuUpdater.exe"

5. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
   
6. Reboot the computer.
   

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.