Trojan.Win32.BHO_8ffaab9808

by malwarelabrobot on April 25th, 2015 in Malware Descriptions.

Trojan.Win32.BHO.FD, mzpefinder_pcap_file.YR (Lavasoft MAS)
Behaviour: Trojan

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

Dynamic Analysis

Static Analysis

Network Activity

Map

Strings from Dumps

Removals

MD5: 8ffaab9808a5be564aa1cbe373536286
SHA1: e96ff8c44371055b5ceb7844c21b2b98cc028ff5
SHA256: 65d10dc3623ce6a565bf0535abe31192212a8cb576d905b47b2ac72c29c3babb
SSDeep: 1536:rLXB65939tY6HBg4sXJp ekp6jC /ClJUDS8qcy4rLnV5:rLk395hYXJpS4WKC8Djy4fnr
Size: 78232 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: UPolyXv05_v6
Company: iWin inc.
Created at: 2009-12-06 00:50:41
Analyzed on: Windows7Ada SP1 64-bit

Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):

iWinGames - Zuma Deluxe.exe:1832
iWinGamesToolbar.exe:704
iWinGamesSetup.exe:1812
InstGameInfoHelper.exe:824
iWinInstallOptions.exe:1744
Dwm.exe:940
iWinToolbarLauncher.exe:992
AdminWorker.exe:1776
AdminWorker.exe:1292
regsvr32.exe:2620
regsvr32.exe:2612
regsvr32.exe:2436
%original file name%.exe:816
GLWorker.exe:2588
GLWorker.exe:2296
GLWorker.exe:2160
iWinTrusted.exe:1460

The Trojan injects its code into the following process(es):

iWinGames.exe:296
Zuma.ifn:1004

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process iWinGames - Zuma Deluxe.exe:1832 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Games\iWin.com\Zuma Deluxe\sounds\jewelappear.ogg (16 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmMOREGAMESBUTTON.jpg (19 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\tunnellevel\Thumbs.db (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor1C.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baAccuracyPurple.gif (716 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor2C.gif (882 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\gemvanishes.ogg (15 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_fireball1.wav (2647 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\chime1.ogg (13 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\triangle\Thumbs.db (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\spiral.jpg (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_grayplosion.gif (422 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\ballclick1.ogg (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntDoor1.jpg (14 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_rolling.wav (3920 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\Blackswirley\Thumbs.db (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\cursor_dragging.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\cursor_text.gif (956 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\slidertrack.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\overunder.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor2B.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\inversespiral\inversespiral.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\triangle\triangle.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor4C.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_ballsdestroyed4.wav (6332 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\serpents\serpents-2.dat (10 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\gauntsky.jpg (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\warshak.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\spiral\spiral.dat (11 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\tunnellevel\tunnellevel.dat (14 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntSUNGEM.gif (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baSlowRed.gif (721 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baAccuracyYellow.gif (723 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\claw\Thumbs.db (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\LoaderBar.gif (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\groovefest\_Groovefest02.gif (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmGAUNTLETBUTTON.gif (815 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\squaresville\squaresville.dat (14 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\serpents\_serpentsT.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\Uninstall.exe (5990 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advsky.jpg (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBallBlue.gif (891 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmeyeleft.gif (274 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\cached_thumbnails\claw.png (5632 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\Hole.gif (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\NativeAlienExtended16.txt (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_bombexplode.wav (7632 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\ballsdestroyed4.ogg (337 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_chant14.wav (7380 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\cursor_hand.gif (501 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\Blackswirley\BlackSwirley-1.dat (10 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBackwardsRed.gif (723 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\NativeAlienExtended16.gif (15 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor2B.jpg (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmsun.gif (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\GLWorker.exe (33556 bytes)
C:\Games\iWin.com\Zuma Deluxe\properties\resources.xml (12 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_gauntpracticebutton.gif (896 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\Cancun12.txt (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor2A.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_earthquake.wav (10167 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\snakepit\Snakepit.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_warning1.wav (2910 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\MoreGamesButton.gif (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntMainMenuButton.jpg (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\NativeAlien48.gif (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBombRed.gif (679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE697.tmp\System.dll (23 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmOPTIONSBUTTON.jpg (19 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\cursor_pointer_.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_baLight.gif (120 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_Menubar.gif (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\_CancunOUTLINE10.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor1B.jpg (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\readme.html (10 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\reverse1.ogg (196 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_button2.wav (20 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\chant2.ogg (1541 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\riverbed\Thumbs.db (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\coaster\_tunnel02.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advtemple3.jpg (15 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_ufo1.wav (11686 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\warshak\warshak.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\button2.ogg (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_coingrab.wav (2235 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntHighscore.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_pop.wav (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\gauntscreen.jpg (604 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBackwardsGreen.gif (696 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\happyending.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_lighttrail2.wav (2204 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_Dialogbutton.gif (991 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntBackButton.gif (536 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_MoreGamesScreen.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_checkboxsliver.gif (52 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advback.gif (9 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\targetglyph\Thumbs.db (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\extralife.ogg (10 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_chain1.wav (7985 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\_CancunFAT8.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\COIN.gif (15 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\longrange.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntTitle.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\coaster.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\chant5.ogg (585 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntEagleGem.gif (818 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_chant4.wav (4555 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\grayplosion.gif (16 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GodHead.gif (15 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advtemple2.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\chant8.ogg (1778 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBackwardsWhite.gif (557 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baSlowWhite.gif (706 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\warning1.ogg (9 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\snakepit.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBallPurple.gif (415 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBallGreen.gif (606 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advtemple2.jpg (440 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\claw\claw.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GodHead.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\Cancun8.txt (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\ballsdestroyed3.ogg (641 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_baBomb.gif (206 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\Explosion.gif (1270 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor3B.jpg (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advmainmenubutton.gif (604 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor3C.jpg (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advstage.gif (714 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntDoor4.jpg (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmeyeleft.gif (135 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_chant5.wav (5438 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\cached_thumbnails\blackswirley.png (5870 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_accuracy3.wav (3397 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\serpents\serpents.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\cached_thumbnails\Thumbs.db (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\checkboxsliver.gif (67 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\tiltspiral\Thumbs.db (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntEagleGem.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_chant3.wav (6185 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\warshak\warshak.dat (12 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_jewelappear.wav (7057 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_ballsdestroyed3.wav (5794 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\chant6.ogg (567 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\_NativeAlien48.gif (18 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\riverbed\_Riverbed01.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\tut_mouse_r.jpg (969 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBackwardsYellow.gif (702 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\turnaround\Thumbs.db (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\spaceinvaders.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\tiltspiral\tiltspiral.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\Cancun13.txt (949 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_ballclick2.wav (2016 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\longrange\Thumbs.db (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baLightRed.gif (144 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\gauntpracticebutton.jpg (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\pitcover.gif (9 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBombWhite.gif (723 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE697.tmp\iWinInstallOptions.exe (6929 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\cursor_dragging_.gif (485 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntDoor4.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\riverbed\_Riverbed04.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\spiral\Spiral.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\pop.ogg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\lighttrail2.ogg (10 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor1A.jpg (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\inversespiral.jpg (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_ballsdestroyed1.wav (3341 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\tunnellevel\_tunnel1.gif (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baLightPurple.gif (143 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBombGreen.gif (677 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\squaresville\Thumbs.db (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\space\space.dat (17 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\serpents.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\glcfg.date (665 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor1C.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmhat.jpg (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baSlowGreen.gif (704 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\turnaround\turnaround.dat (11 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\serpents\_quake02.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\CancunFloat14.txt (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\underover\underover.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\targetglyph\Targetglyph.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\_Cancun8.gif (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntJaguarGem.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\MoreGamesScreen.jpg (1001 bytes)
C:\Games\iWin.com\Zuma Deluxe\properties\partner.xml (258 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\EYEBLINK.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\inversespiral\_tunnel.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\gaugegreen.gif (453 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_ballsdestroyed2.wav (3760 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advtemple4.jpg (25 bytes)
C:\Games\iWin.com\Zuma Deluxe\Zuma.ifn (59827 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\groovefest\Thumbs.db (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor4C.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\underover\_left.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\serpents\_quake03.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\groovefest.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baLightBlue.gif (148 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\underover\underover.dat (11 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_chant6.wav (4210 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\_Cancun10.gif (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_endoflevelpop1.wav (2746 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\chant3.ogg (17 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\cursor_pointer.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\NativeAlienExtended18.txt (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\coaster\coaster.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor1B.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor2A.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\underover\Thumbs.db (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\_NativeAlienExtended18.gif (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntDoor2.jpg (10 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\riverbed\_Riverbed03.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\chain1.ogg (14 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\fireball1.ogg (12 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\loopy\loopy.dat (11 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBombPurple.gif (703 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\serpents\serpents-1.dat (10 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advtemple1.jpg (2026 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor1A.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\license.txt (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_baAccuracyLight.gif (233 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\_Cancun13.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmeyemask.gif (829 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_hatchback.gif (363 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\snakepit\snakepit-1.dat (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmhat.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmOPTIONSBUTTON.gif (915 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\riverbed\_Riverbed02.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor4B.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_chime1.wav (3953 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\snakepit\Thumbs.db (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\cached_thumbnails\targetglyph.png (7372 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmARCADEBUTTON.jpg (494 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\serpents\_quake04.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\groovefest\_Groovefest03.gif (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_ballsdestroyed5.wav (3751 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\ufo1.ogg (1292 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\endoflevelpop1.ogg (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_SliderThumb.gif (167 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\Thumbs.db (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\tut_mouse_r_.jpg (805 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\ToadLives.gif (463 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_chant2.wav (8866 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\ballsdestroyed1.ogg (11 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\nebula1.jpg (1624 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\loopy\Thumbs.db (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBombYellow.gif (676 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\NativeAlien48.txt (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmeyeright.gif (198 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advmiddle.gif (12 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\loopy.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\accuracy3.ogg (12 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_ballclick1.wav (688 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\waitbar.gif (159 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\earthquake.ogg (1863 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntPlayButton.jpg (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advback.jpg (1497 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\targetglyph\targetglyph.dat (14 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\triangle.jpg (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\gauntsurvivalbutton.jpg (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBallRed.gif (990 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\riverbed\Riverbed.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBombBlue.gif (667 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\riverbed.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\CancunFloat14.gif (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntJaguarGem.gif (538 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\_CancunFloat14.gif (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmsunglow.jpg (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBallWhite.gif (844 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\chant1.ogg (1573 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_ballalpha.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\checkBUtton.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\Zuma.ifn.lnk (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_COIN.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\Blackswirley\BlackSwirley-2.dat (10 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\overunder\overunder.dat (15 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntDoor2.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\_NativeAlienExtended16.gif (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_dialogbox.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advHighscore.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntScreen.gif (9 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntDoor3.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntDoor3.jpg (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor3B.gif (996 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\loopy\_tunnel.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\coaster\_tunnel01.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baSlowBlue.gif (693 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\cached_thumbnails\spiral.png (2712 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\riverbed\riverbed.dat (12 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\Thumbs.db (24 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntTitle.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntMainMenuButton.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_checkBUtton.gif (567 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\gapbonus1.ogg (16 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\DialogButton.jpg (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\NativeAlienExtended18.gif (11 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\underover\_right.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\tunnellevel\tunnellevel.jpg (1181 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\warshak\Thumbs.db (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_chant1.wav (15399 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\coingrab.ogg (14 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_LoaderBar.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advmainmenubutton.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_Tongue.gif (263 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\helpback.jpg (14 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advplaybutton.jpg (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\button1.ogg (9 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\checkboxcap.gif (88 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\loopy\loopy.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baAccuracyWhite.gif (726 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\Cancun10.txt (9 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_gauntsurvivalbutton.gif (601 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor4B.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\tunnellevel\_tunnel2.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baSlowPurple.gif (704 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmMOREGAMESBUTTON.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\groovefest\Groovefest.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_toadlives.gif (357 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\underover.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advtemple4.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntHighscore.gif (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advtitle.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\Blackswirley\BlackSwirley.jpg (2503 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_gauge.gif (242 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\cached_thumbnails\riverbed.png (6624 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor3A.jpg (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntDoor1.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_gemvanishes.wav (2226 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baDotz.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\spaceinvaders\spaceinvaders.jpg (1444 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE697.tmp\NSISdl.dll (30 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmQUITBUTTON.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\overunder\_tunnel02.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\loadingscreen.jpg (2104 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\squaresville.jpg (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\tiltspiral\tiltspiral.dat (12 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\targetglyph.jpg (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advtemple1.gif (11 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\_Arial12Bold.gif (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmscreen.jpg (2104 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\sparkle.gif (800 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baAccuracyBlue.gif (684 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baSlowYellow.gif (682 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\squaresville\squaresville.jpg (2841 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\coaster\Thumbs.db (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\spiral\Thumbs.db (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\slowdown1.ogg (416 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\claw.jpg (12 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\turnaround\turnaround.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_ballshadow.gif (417 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\levels.xml (23 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advplaybutton.gif (449 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\triangle\triangle.dat (12 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advtemple3v.jpg (18 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntBackButton.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\overunder\Thumbs.db (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\chant4.ogg (784 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advtemple3v.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor3C.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_chant8.wav (13566 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\choral1.ogg (1770 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\longrange\longrange.dat (14 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advmiddle.jpg (15 bytes)
C:\Games\iWin.com\Zuma Deluxe\icon.ico (25 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advTitle.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_Hole.gif (719 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\spaceinvaders\_tunnel.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\spaceinvaders\spaceinvaders.dat (12 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmUFO.gif (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_SMALLFROGonPAD.gif (560 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\snakepit\snakepit-2.dat (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advtemple3.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\helpfront.jpg (1358 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\MenuButton.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\chant14.ogg (693 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baAccuracyGreen.gif (713 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\SliderThumb.gif (457 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_gapbonus1.wav (6134 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\claw\claw.dat (11 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\serpents\_serpentsB.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\rolling.ogg (330 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_extralife.wav (4191 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBallYellow.gif (1061 bytes)
C:\Games\iWin.com\Zuma Deluxe\properties\partner.xml.sig (24 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_choral1.wav (5405 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\tiltspiral.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\Arial12Bold.txt (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\frogland2.ogg (2536 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\inversespiral\Thumbs.db (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\music\zuma.mo3 (8449 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntNextButton.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_slowdown1.wav (13329 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmARCADEBUTTON.gif (846 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmeyeright.gif (115 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\ballclick2.ogg (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\ballsdestroyed2.ogg (15 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\coaster\coaster.dat (15 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor3A.gif (914 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_reverse1.wav (14954 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\spaceinvaders\Thumbs.db (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\serpents\Thumbs.db (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\inversespiral\inversespiral.dat (14 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_checkboxcap.gif (81 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\ballsdestroyed5.ogg (687 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntSUNGEM.gif (815 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_Menubutton.gif (483 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_baSlowLight.gif (251 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\turnaround.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\_Cancun12.gif (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baLightWhite.gif (138 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advHighscore.gif (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\Tongue.gif (663 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\groovefest\Groovefest.dat (13 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_slidertrack.gif (414 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\gauge.gif (468 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmsun.gif (800 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\riverbed\_Riverbed05.gif (852 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\overunder\_tunnel01.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advtemple2v.jpg (434 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\groovefest\_Groovefest01.gif (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntNextButton.gif (520 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBackwardsPurple.gif (704 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\tunnellevel.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\bombexplode.ogg (1637 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\Thumbs.db (14464 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmscreen.gif (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\stdat.dat (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmsky.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBackwardsBlue.gif (697 bytes)
C:\Games\iWin.com\Zuma Deluxe\Zuma_Deluxe_EULA.txt (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baLightGreen.gif (142 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\cursor_hand_.gif (533 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\serpents\_serpentsM.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advtemple2v.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\SMALLFROGonPAD.gif (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_pitcover.gif (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmQUITBUTTON.jpg (655 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\dialogbox.jpg (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\serpents\_quake01.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\overunder\overunder.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\bass.dll (4430 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmGAUNTLETBUTTON.jpg (19 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baLightYellow.gif (145 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor4A.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor4A.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor2C.jpg (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\longrange\longrange.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_baBackwardsLight.gif (280 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\Menubar.jpg (13 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_frogland2.wav (5656 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmUFO.jpg (12 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_helpfront.gif (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_button1.wav (1454 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baAccuracyRed.gif (722 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\blackswirley.jpg (5 bytes)

The process iWinGamesToolbar.exe:704 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\footer.htm (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rank1.png (451 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\bg-pnl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\newtab\newtab.html (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-close-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_20.png (287 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\tab-off-l.png (205 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\text-ellipsis.xml (423 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\searchboxlite_end.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\loadingMid.gif (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\widgets-square-24px.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\downloadcom.png (972 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\highlight_blue.png (309 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\TRUSTe_about.png (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\youtube.png (608 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\btn_slider.png (763 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-pref-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\about_logo.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-calendar.png (566 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\imap.png (278 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\menu_separator_white.png (133 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphna.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\css\ie-only.css (153 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\about.xml (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\tab-off-l.png (205 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\categories-bg-gradient-grid.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\wmpstreamer.html (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\data\rss\rss.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\notifylabel-left.png (274 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rank3_5.png (639 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\scrollbar-handle.png (155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\comcast.png (421 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png (313 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\css\panels.css (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\menuitemleft.png (323 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_02.png (248 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\ico-playstation.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\options-weather.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\shadow-leftmenu.png (963 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\searchboxlite.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\iwingamestoolbar\setupCfg.xml (561 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\hotmail.png (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-dark-middle22-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\js\jquery.tinyscrollbar.min.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-box-next.png (791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\lock.png (316 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_08.png (328 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\template.html (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\sprite-dropdown.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\newtab\images\powered_by_yahoo.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-dark-right22-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\apps-bg-gradient-grid.png (995 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-dark-left22.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\ttlbar-left.png (266 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\bg-pnl520x390.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\orange.gif (260 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\css\popupAbout.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\downloadcom.png (972 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-options-design.png (704 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\apps-hover.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\throbber.gif (825 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\js\jquery.qtip.min.js (1552 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png (683 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rename.gif (223 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\ico-playstation-down.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\vmn.css (9 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\rsspreview.html (241 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\games.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\movetarget.png (507 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\gripper.png (308 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\skin-orange.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\tab-on-r.png (278 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.pinterest\widget.jsw (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome.manifest (236 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\js\default.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\found.png (902 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-options-design.png (704 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-add.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_09.png (288 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\notifylabel-right.png (267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\images\default.png (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.googlemap\widget.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rankna.png (771 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\icons\na-s.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\mailcom.png (254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\search.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\toolbar.htm (718 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\titlebar-left.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-dollar.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rss-feed.png (498 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\tab-on-r.png (278 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\slider.png (329 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rank4_5.png (718 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\neterror.xhtml (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\default.png (867 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\css\popupWidgets.css (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\btn-close-grey.png (263 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\btn-close-grey.png (263 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\css\slider.css (540 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\toolbar.htm (718 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\ca.png (763 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\add.png (653 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\ttlbar-right.png (286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\searchbar\searchbar-background-middle.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\dtx-test.css (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\add.png (653 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\btn-close.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\bg-btn-end.png (232 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\websiteinspector-norating.gif (904 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\titlebar-middle.png (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\notifylabel_ff.png (210 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\over-blue.png (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\ico-playstation-down.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png (431 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\websiteinspector-highrisk.gif (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-launch.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rank5.png (708 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\star_x_orange.png (367 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\dtxtransparentwin.xul (657 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\icons\cond999.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-mdl-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\dtxpanel.xul (573 bytes)
%Program Files% (x86)\iwingamestoolbar\partner.xml (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.youtubeshortcut\widget.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\searchbox_end.png (458 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\win-right-bottomglow.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\arrow-up.gif (46 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphred0.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphred5.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\left-menu-hover.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\vmncode.js (14 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\like_over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\searchbox-pnlbtm.png (532 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\scroll-topwin.png (951 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rssback.gif (469 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\menuitemleft-vista.png (307 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\win-left-topglow.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rank5.png (708 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.wikipediashortcut\widget.jsw (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\external.js (26688 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-dark-middle22.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\images\bg.gif (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\typevalue.xml (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\iwingamestoolbar\setupCfg.xml (561 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\arrow-up.gif (46 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-dark-left22-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\btn-wide-close.png (857 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-dark-middle22-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\highlight_lime.png (300 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\fg.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-close.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\facebook.png (235 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\win-top-middleglow.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\new-games.png (518 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_04.png (293 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\tb_icon.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.gmailshortcut\widget.jsw (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\highlight.png (811 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rank4.png (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\icon-Add.png (228 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\websiteinspector-verified.gif (120 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\titlebar-right.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\loadingMid.gif (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\images.png (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\gamecategory.xsl (704 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\dtx-test.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\separator.png (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\btn-widgets-over.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-close-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\skin-lichen.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rss-folder.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\external.js (26688 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-try-left.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\btn_slider.png (763 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\arrow-sml.png (211 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\highlight_blue.png (309 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\scroll-bg-206.png (663 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\gmail.png (741 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rss.png (772 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\scripts\defscript.js (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\highlight_lime.png (300 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\dictionary.png (746 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\view-thumb-over.png (380 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\icons\icons.xml (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png (532 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\bg-btn-start.png (236 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphred3_5.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\widget_version.txt (32 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\win-bottom-middleglow.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\ico-check.png (248 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\btn-close-greyover.png (444 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\images\btn-wide-close.png (857 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\websiteinspector-verifying.gif (180 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\skin-bluesky.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rss-found.png (677 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-addtoolbar-right.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.gmailshortcut\widget.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\newsitem.gif (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\star_x_orange.png (367 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\data\weather\icons.xml (6 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\skin-yellow.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\images\Thumbs.db (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rss-reload.png (384 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\highlight_magenta.png (302 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\iwingamestoolbar\geoip.xml (423 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btndark-right.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\scripts\defscript.js (408 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-volume-2.png (721 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-play.png (248 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\arrow-right.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.yahooshortcut\widget.jsw (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\dtxprefwin.xul (307 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\search.png (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-back.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png (532 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\win-btm-left.png (204 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\components\dtTransparency.dll (2392 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\yahoosearch.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\btn-close-grey.png (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\modify.png (708 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\highlight_cyan.png (299 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_06.png (316 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\CountryLocaleXML.xml (86 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\zoom.png (732 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-eq-warning.png (969 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_12.png (173 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-facebook.png (413 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\divider.png (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.pinterest\widget.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\shopping.png (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.youtubeshortcut\widget.jsw (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\ttlbar-mdl.png (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-eq-busy.gif (769 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\searchbar\searchbar-background-middle.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\scrollt-disable.png (832 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\aol.png (648 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\throbber.gif (825 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\logo.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\options-search.png (4 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\menul-bgover.png (168 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\titlebar-left.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\transparent.gif (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\titlebar-middle.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\wmpstreamer.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\newtab\images\btn_search.gif (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lichen.gif (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\popupRSS.html (4 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\options-main.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-eq-off.png (824 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\comcast.png (421 bytes)
%Program Files% (x86)\iwingamestoolbar\uninstall.exe (10035 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\btnright-down-vista.png (289 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\arrow-sml.png (211 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\data\search\search.xsl (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\remove.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\css\ie-only.css (153 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rank0.png (387 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\default.png (867 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\mygames.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\embarq.png (253 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\win-btm-mdl.png (118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\button-splitter-vista.png (264 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\pixsy.png (690 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-news24.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\launchers.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\shopping.png (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\btnleft-down-vista.png (310 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\scrollt-over.png (892 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-btn-play-on.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-back.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\css\popupWidgets.css (11 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rss-expand.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\music.png (570 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\options-weather.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\menuitemback-down-vista.png (202 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-next-over.png (442 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-dark-right22-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\btnleft-down-vista.png (310 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-close-grey.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rss-folder-remove.png (540 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\websiteinspector-lowrisk.gif (174 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\RSSLogo.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\btn-search.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\win-left.png (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\toolbarsplitter.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\play-games.png (676 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\scroll-right.png (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\websiteinspector-verified-user.gif (120 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\pop.png (543 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\popupWeather.html (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rsstopback.gif (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\websiteinspector-lowrisk.gif (174 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\btnright-vista.png (309 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\ico-playstation-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\wframe.html (562 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\options\options-main.png (4 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\translate.png (633 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-add-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\dtxpaneltransparent.xul (653 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\Thumbs.db (6 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\wikipedia.png (586 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-eq-busy.gif (769 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\btnright-vista.png (309 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\settings.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\bg-scrollbar-track-y.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\arrow-right.gif (46 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\win-right.png (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\images\transparent.gif (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\ioSpecial.ini (26 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\js\kendo.all.min.js (11344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_19.png (299 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\minus.gif (152 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\email.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rss-folder-remove.png (540 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\orange.gif (260 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-volume-mute.png (788 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\ico-shield.png (740 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\lastsearch-thumb-back.gif (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\websiteinspector-highrisk-user.gif (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_15.png (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\nsProcess.dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\collapsed_button.gif (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.youtubeshortcut\widget.jsw (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png (313 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\throbber.gif (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\modify.png (724 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-info-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\bg-btnover.png (179 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\widgets.png (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\dtuser.exe (16944 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\images\win-btm-mdl.png (1552 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\highlight_cyan.png (299 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-volume-0.png (614 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-btn-play-on.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE0.tmp (144829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\separator.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\reload.png (905 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\menu_separator_bar.png (129 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\menuitemright-down-vista.png (252 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\css\dialog.css (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\btn-close-grey.png (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\win-right-middleglow.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\siteinfo.png (792 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\main.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\scroll-bg.png (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\footer-short-middle.png (968 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-btn-pause-on.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png (607 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\menuitemleft-down-vista.png (289 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\images\Thumbs.db (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\dtxlogo.png (867 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\text-ellipsis.xml (423 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\transparent_1px.gif (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\about.xml (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\neterror.xhtml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\grey.gif (158 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\bg-btnover-start.png (306 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\icons\na-s.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btndark-left.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\edit-back.png (214 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png (649 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-joystick24.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.wikipediashortcut\widget.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-add-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-close-grey-over.png (457 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\glass.png (360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\neterror.xhtml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\magnifier.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-try-left-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\arrow-left.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\apps-bg-gradient-grid.png (995 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\menuitemback-down-vista.png (202 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-volume-3.png (793 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-eq-buffer.gif (755 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\arrow-right-disabled.gif (46 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rename.gif (223 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\data\dynamicElements\vmntoolbar.xsl (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\nsisFirewall.dll (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\css\popupGames.css (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\managerpanel.html (10 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\facebook.png (235 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-options.png (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\scrollb-disable.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\alexabutton.css (632 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\vmncode.js (14 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\images\win-btm-right.png (1552 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rss.png (832 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\scrollbar-track.png (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rankna.png (771 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\modify.png (708 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\search-go.png (840 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\scrollt.png (893 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\email_on.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\modify-save.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\protect-id.png (737 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\highlight_yellow.png (309 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\notifylabel-middle.png (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\menu_bg-basic.png (446 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\scroll-left.png (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\menuitem-splitter.png (136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\TRUSTe_about.png (6 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\modules\datastore.jsm (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\throbber.gif (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-install.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\pop.png (543 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\icons\weather.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\btn-wide-close-over.png (873 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\arrowr-bluew5.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\bg-btnover-end.png (424 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\searchbox_end.png (458 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-add.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rank0_5.png (451 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\vmncode.js (14 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\skin-bluelite.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\btn-close-over.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\dictionary.png (746 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphred5.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\bg-btnover-mdl_ff.png (179 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.hotmailshortcut\widget.jsw (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\music-note.png (775 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\sprite.png (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png (460 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\titlebar-right.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\button-splitter-down-vista.png (261 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-facebook.png (413 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-btn-pause.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\rsswin.xsl (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\widget.jsw (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-eq-bg.png (691 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\data\search\engines.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\panel-botm-noscroll.png (448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\logo-separator.png (582 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_03.png (218 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\pixsy.png (690 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\xml.dll (812 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-options-on.png (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphred0.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\titlebar-left.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\btn-settings-over.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\scrollt.png (893 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.googlemap\widget.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\dislike.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\win-right-bottomglow.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\bg-btn-mdl.png (134 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\initHTML.html (481 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\searchbar\searchbar-background-right.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rank0_5.png (451 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\css\dialog.css (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\win-left-bottomglow.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\vmn.css (9 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rank2_5.png (587 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\bullet-orange.gif (43 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\ico-check.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\btn-close.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\iwingamestoolbar\geoip.xml (423 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\view-detailed-over.png (451 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\scrollb-down.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\titlebar-right.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png (643 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-drag.png (486 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\btn-close.png (290 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\plus.gif (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-dark-right22.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\btnback-down-vista.png (207 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\bg-btnover-end.png (424 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\bg.gif (8 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\view-detailed-on.png (496 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\scripts\defscript.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\fg.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\movetarget.png (507 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.hotmailshortcut\widget.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\notifylabel-left.png (274 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\btnleft-vista.png (307 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\paneltemplate.html (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\tb_icon.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rss-folder-rename.png (621 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_10.png (250 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rss-found.png (677 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\menul-bgover.png (168 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\sprite-dropdown.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-info.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\initHTML.html (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rsstabdivider.gif (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\ico-shield.png (740 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\box-check.png (174 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rssback.gif (469 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-drag.png (486 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-right-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\win-btm-right.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png (336 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\icon-shop.png (233 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\arrow-sml-drop.png (188 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_16.png (278 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\searchbox.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\grey.gif (158 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\components\windowmediator.js (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\relatedlinks.png (691 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rss.png (772 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphred3.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\template.xml (810 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\debugbar\debug.html (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\icon-play.png (290 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\dtxlogo.png (867 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\notifylabel-right.png (267 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\search.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-user-monitor.png (853 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\ca.png (763 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-volume-mute.png (788 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\btn-close-greyover.png (444 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.yahooshortcut\widget.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-search-pnlbtm.png (916 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\aol.png (648 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\iwin_logo.png (8 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\js\jquery.qtip-1.0.0-rc3.min.js (1552 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\vmnrsswin.xml (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\sortby_bg.png (583 bytes)
%Program Files% (x86)\iwingamestoolbar\install.ico (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\yahoo.png (244 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\js\jquery.qtip-1.0.0-rc3.min.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.pandora\widget.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\bg-btnover-mdl.png (197 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_12.png (173 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.pinterest\widget.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\ttlbar-mdl.png (146 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-next-over.png (442 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ajax-loader.gif (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\options\options-main.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\templateFF.html (6 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\icons\na-t.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\websiteinspector-norating.gif (904 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png (643 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\btn-widgets.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\websiteinspector-highrisk.gif (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.pinterest\widget.jsw (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\win-right-middleglow.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\toolbar.xul (27504 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\zoom.png (732 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\vmncode.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\images\win-btm-right.png (1552 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\searchboxlite.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\data\rss\rss.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\bg-btn-mdl_ff.png (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\icons\icons.xml (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\logo.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\highlight_magenta.png (302 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rank3.png (580 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-eq-warning.png (969 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rss-expand.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_06.png (316 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.ymailshortcut\widget.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png (649 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\over-orange.png (169 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-btn-play.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\arrowr-bluew5.png (205 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rank1_5.png (526 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\news.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rank4_5.png (718 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\popupHTML.html (802 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\alexabutton.css (632 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\about.gif (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\btn-close-greyover.png (444 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\btnback-vista.png (207 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\new-games.png (518 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\css\manager.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\protect-id.png (737 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_08.png (328 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\bg-btnover-start.png (306 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-options-design-on.png (701 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ajax-loader.gif (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\technorati.png (493 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\css\popupRSS.css (6 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\blank.gif (55 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-joystick24.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\like_over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\encyclopediabritannicagamesbar64.dll (27704 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.youtubeshortcut\widget.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\main.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\js\jquery-ui.js (6584 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\scroll-right.png (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\js\jquery.js (3312 bytes)
%Program Files% (x86)\iwingamestoolbar\dtuser.exe (33888 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\toolbar.xul (27504 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\arrow-left.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\scrollt-down.png (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-close-greyover.png (457 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.ymailshortcut\widget.jsw (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\main.html (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\move.gif (58 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-addtoolbar-right.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\transparent_1px.gif (45 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-twitter.png (525 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\js\jquery.uniform.min.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\icon-download.png (251 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\js\kendo.all.min.js (11344 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-mdl-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\bg-aboutbox.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\widget.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\bluelite.gif (160 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\iwingamestoolbar\guid.dat (38 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\technorati.png (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.yahooshortcut\widget.jsw (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\searchbar\searchbar-background-right.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\button-splitter-down-vista.png (261 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\music-note.png (775 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\separator.png (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iwingamestoolbar-manifest.xml (9 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_21.png (300 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rss-subscribe.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\managerpanel.html (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\toolbarsplitter.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-close-grey.png (283 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\css\popupGames.css (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\menuitem-splitter.png (136 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\fast.png (949 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\logo-about.png (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\css\popupAbout.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\win-bottom-middleglow.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\arrow-down-white.png (982 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\arrow-sml-drop.png (188 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\email.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\view-detailed-on.png (496 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-options-on.png (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\popupGames.html (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\components\IdtTransparency.xpt (156 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-addtoolbar-left.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\menu_bg-basic.png (446 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\websearch.png (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\proxy.html (354 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-close-greyover.png (457 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\options-search.png (4 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphred2_5.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-install.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\bluesky.gif (160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\track.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\preferences.xml (663 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\bg-btn-start.png (236 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btndark-left-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rank3.png (580 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\arrow-dn.gif (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\iwingamestoolbar\guid.dat (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\remove.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-btn-pause.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\view-thumb-on.png (402 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\widgets-square-16px.png (690 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\loadingMid.gif (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\translate.png (633 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-previous-over.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\apps-hover.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iwingamestoolbar_Install_Log.txt (1465 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\ico-radio.png (879 bytes)
%Program Files% (x86)\iwingamestoolbar\encyclopediabritannicagamesbar.dll (19096 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\dislike.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\collapse.png (264 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\data\search\engines.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\images\win-btm-right-resize.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\ttlbar-right.png (286 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-volume-3.png (793 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\yellow.gif (260 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\win-btm-right-resize.png (214 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\gamethumb-on.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btndark-right-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\volumeslider.html (4 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\widget_version.txt (32 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\toolbarsplitter.gif (76 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-try-left.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\gameList.xsl (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\scroll.png (455 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\proxy.html (354 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\gotd.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\gripper.png (308 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-eq-off.png (824 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\UAC.dll (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_18.png (312 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\gamecategory.xsl (704 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\imap.png (278 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\newsitem.gif (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\icon-play.png (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.pandora\widget.jsw (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-launch.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-addtoolbar-left-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rank1.png (451 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\dtx.css (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\track.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\volumeslider.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\bg-btnover-divider.png (240 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\win-left-bottomglow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\RSSLogo.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\resize-box.gif (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_10.png (250 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-moredetails.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-launch-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\newtab\images\field_bg.gif (389 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rsstopback.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\LogEx.dll (1597 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\chevron.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\sprite.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphred3.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\modify-save.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rank2.png (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\menul-bgon.png (179 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\scroll-bg-206.png (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\template.xml (810 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\star_blank.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\images.png (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\p_yahoo.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_02.png (248 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\thumb-up.png (754 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\neterror.xhtml (344 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\btn-wide-close.png (857 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-btn-play.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\throbber.gif (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\options\options-weather.png (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.ymailshortcut\widget.jsw (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\about.gif (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rss-subscribe.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\ico-check.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_07.png (254 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio.png (355 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\widgets.png (447 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\options\options-weather.png (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\btnright-down-vista.png (289 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\searchbar\searchbar-background-left.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\skin.xml (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\topbar-inside-gradient.png (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\featured-games.png (656 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphna.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\search-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\footer-short-middle.png (968 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\ico-playstation-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-previous.png (476 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\mygames.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\menuitemright-vista.png (309 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png (205 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\paneltemplate.html (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphred1.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\dtxpanelwin.xul (407 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\arrow-dn.gif (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\btn-widgets-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\footer-short-left.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\js\jquery.qtip.min.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\arrow-dn.gif (46 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\logo-separator.png (636 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-next.png (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-eq-buffer.gif (755 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\vmn.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\tab-on-l.png (167 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_15.png (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\checkmark.png (309 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\win-left-topglow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png (196 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\lock.png (316 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\popupWidgets.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\yahoosearch.png (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphred4.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\settings.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rss-collapse.png (187 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\games.xsl (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\newtab\newtab.html (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png (431 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-right-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\resize-box.gif (92 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.googlemap\widget.jsw (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\js\jquery.url.js (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-user-monitor.png (853 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\mail.png (543 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\dislike_over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\logo-separator.png (582 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\options-main.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\modules\datastore.jsm (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\close-normal.png (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\InetLoad.dll (804 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\scrollb.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.wikipediashortcut\widget.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\modify.png (724 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rank1_5.png (526 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rss-delete.png (511 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\music.png (570 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\menuseparatorback.gif (165 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-pref-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\ppcbully.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\categories-bg-gradient-grid.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\search-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\logo-about.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\template.html (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.pandora\widget.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\games.xsl (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\win-right-topglow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphred1.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\gameList.xsl (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\data\dynamicElements\vmntoolbar.xsl (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-play-left.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\close-normal.png (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\scrollt-over.png (892 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\expand.png (303 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_13.png (277 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\footer-short-middle.png (968 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\gotd.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rank2.png (531 bytes)
%Program Files% (x86)\iwingamestoolbar\components\windowmediator.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png (683 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\data\weather\icons.xml (6 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\TRUSTe_about.png (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\gameData.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphred0_5.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\images\win-btm-left.png (1552 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\footer-short-left.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\bg-btnover-mdl.png (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\wikipedia.png (586 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\arrow-up.gif (46 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\emailnotifierproviders.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-pref.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\popupWidgets.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\websiteinspector-highrisk-user.gif (110 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\dtxpanel.xul (573 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-volume-1.png (668 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\scrollb-disable.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-dark-middle22.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\help.png (652 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\scroll.png (455 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\newtab\images\powered_by_yahoo.gif (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-box-next.png (791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-download.png (692 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rsschannelback.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\options\options-widgets.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.gmailshortcut\widget.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\logo-separator.png (636 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphred4_5.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\websearch.png (853 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-close.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-next.png (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\embarq.png (253 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\menuitemleft-down-vista.png (289 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\bluesky.gif (160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.hotmailshortcut\widget.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-search-pnlbtm.png (916 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\like.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\ico-radio.png (879 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\bg-pnl520x390.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\search.png (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-addtoolbar-left.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\gameData.js (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\btnback-down-vista.png (207 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\found.png (902 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\slider.png (329 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\titlebar-middle.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\transparent.gif (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\titlebar-middle.png (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lichen.gif (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\button-splitter.png (264 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\scroll-topwin.png (951 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\rsspreview.html (241 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\icons\weather.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\sortby_bg.png (583 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\collapse.png (264 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\js\jquery.js (3312 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\titlebar-left.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\skin-bluesky.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\bg-scrollbar-trackend-y.png (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\bg-pnl.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-play-left.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\btn_settings.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-options-design-on.png (701 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\win-left-middleglow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\modifyhot.png (149 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\tab-off-r.png (312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\dtx.css (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\images\btn-wide-close-over.png (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_16.png (278 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\throbber.gif (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\scrollb.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\rsswin.xml (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_18.png (312 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\skin-lichen.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\win-right.png (114 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rank4.png (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\arrow-down-white.png (982 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\btnback-vista.png (207 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphred2.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\bg-btnover-mdl_ff.png (179 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\skin.xml (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.hotmailshortcut\widget.jsw (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\bullet-orange.gif (43 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\bg-scrollbar-trackend-y.png (964 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\js\jquery-ui.js (6584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\newtab\images\bullet.gif (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_20.png (287 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\arrow-right-disabled.gif (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.gmailshortcut\widget.jsw (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png (460 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rank3_5.png (639 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\scrollt-down.png (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\footer.htm (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\topbar-inside-gradient.png (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\ttlbar-left.png (266 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\highlight_yellow.png (309 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\menuseparatorback.gif (165 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\skin-bluelite.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\btn-search-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\win-btm-left.png (204 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rank0.png (387 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\bg-btn-mdl.png (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-mdl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\icons\na.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_13.png (277 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rank2_5.png (587 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\btn-close.png (290 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\magnifier.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\popupRSS.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\logo-over.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\footer-short-right.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\gamethumb2-over.png (574 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-eq-on.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\bg-btn-divider.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-previous.png (476 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\modifyhot.png (149 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\websiteinspector-verified-user.gif (120 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btndark-left.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_14.png (270 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-btn-pause-on.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\scroll-bg.png (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\dislike_over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.yahooshortcut\widget.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_11.png (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\relatedlinks.png (691 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\dtxpanelwin.xul (407 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\over-blue.png (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\plus.gif (157 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphred0_5.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\menuitemright-down-vista.png (252 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\bg-scrollbar-thumb-y.png (966 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\siteinfo.png (792 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-addtoolbar-left-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\geoip[1].xml (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\arrow-right.gif (46 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\win-right-topglow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\icons\cond999.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-play-left-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\win-left.png (114 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\button-splitter-vista.png (264 bytes)
%Program Files% (x86)\iwingamestoolbar\toolbar.xml (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\gametype.xsl (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\gamethumb-on.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\images\win-btm-right-resize.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\js\default.js (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\featured-games.png (656 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-launch-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\yellow.gif (260 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\footer-short-right.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\footer-short-left.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\data\search\search.xsl (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\skin-yellow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\js\jquery.tinyscrollbar.js (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\newtab\images\bullet.gif (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\btnleft-vista.png (307 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\icon-Add.png (228 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\btn-search.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\btn-widgets.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\footer-short-middle.png (968 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\star.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\install.rdf (838 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\images\win-btm-left.png (1552 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-tags.png (209 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\arrow-right.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\scrollb-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\icons\na.png (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\options\options-widgets.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rss-delete.png (511 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\win-btm-right-resize.png (214 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\modules\nsDragAndDrop.js (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\ico-playstation.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\footer-short-right.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\btn-settings.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.wikipediashortcut\widget.jsw (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\css\panels.css (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\appsfeatured-bg-gradient-grid.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\images\win-btm-mdl.png (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\games.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\menuitemright-vista.png (309 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\divider.png (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\dtxprefwin.xul (307 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\js\jquery.tinyscrollbar.min.js (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\skin-grey.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\bg.gif (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\inetc.dll (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\slideron.png (386 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\featured-bg-btm-gradient.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\popupWeather.css (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.pandora\widget.jsw (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\gamethumb2-over.png (574 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-volume-1.png (668 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\menu_separator_bar.png (129 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\win-btm-right.png (205 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\scrollb-down.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphredna.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\images\default.png (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\win-btm-mdl.png (118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\blank.gif (55 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\slideron.png (386 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-info.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\scripts\defscript.js (408 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-dollar.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-mdl.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\widget.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.googlemap\widget.jsw (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\chevron.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\featured-bg-btm-gradient.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\css\ie7-only.css (136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_09.png (288 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png (607 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\btn-close-greyover.png (444 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\logo-over.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\thumb-up.png (754 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\templateFF.html (6 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\css\dialog.css (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\vmnrsswin.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\ppcbully.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\star_x_grey.png (328 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\bg-btn-divider.png (205 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\icon-Info.png (218 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-dark-left22-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphred4.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\box-check.png (174 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\expanded_button.gif (181 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\js\jquery.url.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_21.png (300 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\js\jquery.uniform.min.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphred2_5.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\menuitemback-vista.png (209 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphred1_5.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\searchbar\searchbar-background-left.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\btn-search-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\minus.gif (152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\help.png (652 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\star_x_grey.png (328 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\toolbarsplitter.gif (76 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\menuitemleft-vista.png (307 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\expanded_button.gif (181 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\AccessControl.dll (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\dtxpaneltransparent.xul (653 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphred1_5.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphred2.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-twitter.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\highlight.png (811 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_19.png (299 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\skin-orange.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\bg-aboutbox.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\icon-download.png (251 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-dark-left22.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\mailcom.png (254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\close-hot.png (579 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\btn-settings.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\notifylabel-middle.png (203 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\dtxtransparentwin.xul (657 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-eq-bg.png (691 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\images\btn-wide-close-over.png (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\news.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rss-collapse.png (187 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\star.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\btn_settings.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\searchbox.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\typevalue.xml (31 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rss-folder-rename.png (621 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\js\jquery.tinyscrollbar.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\icon-shop.png (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\throbber.gif (825 bytes)
%Program Files% (x86)\iwingamestoolbar\manifest.xml (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\appsfeatured-bg-gradient-grid.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\btn-wide-close-over.png (873 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_04.png (293 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_14.png (270 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\freegame.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\iwin_logo.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\css\dialog.css (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\css\jquery.qtip.css (13 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\options\options-search.png (4 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-calendar.png (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\edit-back.png (214 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\newtab\images\field_bg.gif (389 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rss-reload.png (384 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\bg-scrollbar-track-y.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\arrow-up.gif (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\options\options-weather.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\footer-short-right.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\hotmail.png (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-tags.png (209 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\win-left-middleglow.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\bg-scrollbar-thumb-y.png (966 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\fast.png (949 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\play-games.png (676 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\TRUSTe_about.png (6 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png (160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\shadow-leftmenu.png (963 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\menuitemleft.png (323 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\options\options-search.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\scroll-left.png (257 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-info-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\images\bg.gif (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\websiteinspector-verified.gif (120 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\web.png (575 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\css\jquery.qtip.css (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png (4 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\popupGames.html (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\images\btn-wide-close.png (857 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\like.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\dtxwin.xul (387 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\css\manager.css (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\separator.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rss-folder.png (630 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\preferences.xml (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\rsswin.xml (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\freegame.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\edit-back-hot.png (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\System.dll (23 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-options.png (493 bytes)
%Program Files% (x86)\iwingamestoolbar\encyclopediabritannicagamesbarX.dll (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\manifest.xml (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\icons\na-t.png (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\checkmark.png (309 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-volume-2.png (721 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-close-grey-over.png (457 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\scrollbar-track.png (92 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-previous-over.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\menuitemback-vista.png (209 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\bg-btn-end.png (232 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\view-detailed-over.png (451 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\email_on.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphred3_5.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\notifylabel_ff.png (210 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\button-splitter.png (264 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\widgets-square-24px.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\searchboxlite_end.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphredna.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\bg-btn-mdl_ff.png (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btndark-right.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\about_logo.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\tab-off-r.png (312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\youtube.png (608 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\newtab\images\btn_search.gif (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\star_blank.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png (160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\btn-widgets.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-play-left-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\css\ie7-only.css (136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-eq-on.gif (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-pref.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\menu_separator_white.png (133 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\popupWeather.css (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btndark-right-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\expand.png (303 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\vmn.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\search-go.png (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\babylon_logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\websiteinspector-verifying.gif (180 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-try-left-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\titlebar-right.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\images\transparent.gif (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rsschannelback.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\loadingMid.gif (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\btn-search.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\view-thumb-over.png (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-news24.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\add.png (653 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\searchbox-pnlbtm.png (532 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\dtxwin.xul (387 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\scrollbar-handle.png (155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio.png (355 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\tab-on-l.png (167 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\move.gif (58 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btndark-left-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\collapsed_button.gif (184 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\arrow-dn.gif (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\popupWeather.html (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\btn-search.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\gametype.xsl (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\btn-widgets.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png (336 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\scrollb-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\p_yahoo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\options\options-weather.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\throbber.gif (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-play.png (248 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\bg-btnover-divider.png (240 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\footer-short-left.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-moredetails.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\yahoo.png (244 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\widget.jsw (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rss-feed.png (498 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\lastsearch-thumb-back.gif (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\glass.png (360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\bg-btnover.png (179 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\web.png (575 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\debugbar\debug.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\widgets-square-16px.png (690 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\btn-widgets-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\menul-bgon.png (179 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\over-orange.png (169 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.ymailshortcut\widget.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\btn-close-over.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\edit-back-hot.png (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\ico-check.png (248 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\gmail.png (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rss.png (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\Thumbs.db (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\main.html (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_11.png (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\icon-Info.png (218 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_07.png (254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\view-thumb-on.png (402 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\css\slider.css (540 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-volume-0.png (614 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\panel-botm-noscroll.png (448 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\babylon_logo.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\win-top-middleglow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\launchers.css (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\btn-widgets-over.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\close-hot.png (579 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\emailnotifierproviders.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rsstabdivider.gif (85 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\btn-settings-over.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\popupHTML.html (802 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\css\popupRSS.css (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\reload.png (905 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\bluelite.gif (160 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-download.png (692 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\modules\nsDragAndDrop.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\rsswin.xsl (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\wframe.html (562 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\scrollt-disable.png (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_03.png (218 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-dark-right22.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\left-menu-hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\mail.png (543 bytes)
%Program Files% (x86)\iwingamestoolbar\encyclopediabritannicagamesbarX64.dll (5064 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphred4_5.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\add.png (653 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\skin-grey.png (3 bytes)

The process iWinGamesSetup.exe:1812 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Play iWin Games.lnk (1 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\product\feature.jpg (10 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\ous\ous-promo-banner.jpg (3166 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iWin Games\Play iWin Games.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\arrow.bmp (4232 bytes)
C:\ProgramData\Microsoft\Windows\GameExplorer\{79665D30-8B94-4767-B4F1-AB583F1DF566}\PlayTasks\0\Play.lnk (1 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\buttons\continue-orange-132.gif (4 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\common\header-bg.gif (371 bytes)
C:\ProgramData\iWin Games\opal\FlashPlayerControl.dll (9175 bytes)
%Program Files% (x86)\iWin Games\ftdownload.dat (512 bytes)
%Program Files% (x86)\iWin Games\pages\alert32x32.gif (1 bytes)
C:\ProgramData\iWin Games\opal\Flash.ocx (45652 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\leftimg.bmp (4907 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\ous\hotel-iwin.gif (2 bytes)
%Program Files% (x86)\iWin Games\pages\offline_tag.gif (9 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\buttons\close-blue-28.gif (1 bytes)
C:\ProgramData\iWin Games\opal\opal.ver (5 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\buttons\yesiwantabackupcd-orange-197.gif (7 bytes)
C:\ProgramData\Microsoft\Windows\GameExplorer\{79665D30-8B94-4767-B4F1-AB583F1DF566}\SupportTasks\0\Home Page.lnk (322 bytes)
%Program Files% (x86)\iWin Games\iWinGames.exe (149370 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\common\header-small-bg.gif (243 bytes)
%Program Files% (x86)\iWin Games\gamepage\success.html (1 bytes)
%Program Files% (x86)\iWin Games\pages\arcadeCheck.js (929 bytes)
%Program Files% (x86)\iWin Games\sounds\slidebackin.wav (1561 bytes)
%Program Files% (x86)\iWin Games\sounds\slideout.wav (833 bytes)
%Program Files% (x86)\iWin Games\gamepage\styles\base.css (3 bytes)
%Program Files% (x86)\iWin Games\gamepage\scripts\disconnected-upsell.js (7 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\misc\blue-bottom-triangle.gif (171 bytes)
%Program Files% (x86)\iWin Games\pages\login.html (256 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\ous\opalbox.jpg (23 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\ous\opal.gif (1 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\global\logo.gif (3 bytes)
C:\Users\Public\Desktop\Play iWin Games.lnk (1 bytes)
%Program Files% (x86)\iWin Games\gamepage\css\offline.css (1 bytes)
%Program Files% (x86)\iWin Games\gamepage\operationfailed.html (2 bytes)
%Program Files% (x86)\iWin Games\pages\offline.jpg (648 bytes)
C:\ProgramData\Microsoft\Windows\GameExplorer\{79665D30-8B94-4767-B4F1-AB583F1DF566}\SupportTasks\1\Support.lnk (322 bytes)
%Program Files% (x86)\iWin Games\gamepage\styles\shoppingcart.css (2 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\ous\eus.jpg (15120 bytes)
%Program Files% (x86)\iWin Games\gamepage\scripts\popups.js (5 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Play iWin Games.lnk (238 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\nsExec.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\InstGameInfoHelper.exe (3611 bytes)
%Program Files% (x86)\iWin Games\gamepage\scripts\prototype-1.6.js (2697 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\global\page-bg.gif (3 bytes)
%Program Files% (x86)\iWin Games\WebUpdater.exe (6381 bytes)
%Program Files% (x86)\iWin Games\pages\offline.html (781 bytes)
%Program Files% (x86)\iWin Games\sounds\download_completed.wav (1053 bytes)
%Program Files% (x86)\iWin Games\gamepage\styles\disconnected-upsell.css (14 bytes)
%Program Files% (x86)\iWin Games\pages\error.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\ftdownload.dat (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\btmimg.bmp (4590 bytes)
%Program Files% (x86)\iWin Games\sounds\start.wav (1975 bytes)
%Program Files% (x86)\iWin Games\Uninstall.exe (9661 bytes)
%Program Files% (x86)\iWin Games\gamepage\end.html (6 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\global\logo-invis.gif (13 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\plans\plan2.gif (5 bytes)
%Program Files% (x86)\iWin Games\host.cfg (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\header.bmp (4150 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\common\loading.gif (1 bytes)
%Program Files% (x86)\iWin Games\pages\terrie404.gif (940 bytes)
%Program Files% (x86)\iWin Games\pages\blank2.html (74 bytes)
%Program Files% (x86)\iWin Games\sounds\button_click.wav (8 bytes)
%Program Files% (x86)\iWin Games\gamepage\disconnected-upsell.html (6 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\plans\plan3.gif (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\BgImage.dll (15 bytes)
%Program Files% (x86)\iWin Games\gamepage\open.html (256 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\ous\hotel-bg.gif (732 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\bg_header.gif (503 bytes)
%Program Files% (x86)\iWin Games\AdminWorker.exe (7092 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\System.dll (23 bytes)
%Program Files% (x86)\iWin Games\pages\offline.css (417 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\ous\divider.gif (172 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\desktop_bottom.bmp (10448 bytes)
%Program Files% (x86)\iWin Games\iWinTrusted.exe (5258 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\continuefreetrial-32.gif (2 bytes)
%Program Files% (x86)\iWin Games\sounds\animationBack.wav (488 bytes)
%Program Files% (x86)\iWin Games\sounds\coins.wav (3458 bytes)
%Program Files% (x86)\iWin Games\pages\maintenance.html (567 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\global\page-header-small-bg.jpg (10 bytes)
%Program Files% (x86)\iWin Games\pages\orange-im-connected-60.gif (7 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\plans\plan1.gif (6 bytes)
%Program Files% (x86)\iWin Games\pages\error404.css (745 bytes)
%Program Files% (x86)\iWin Games\sounds\animation.wav (2366 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\desktop_top.bmp (8368 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\logo.jpg (13 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\misc\information.gif (582 bytes)
%Program Files% (x86)\iWin Games\gamepage\expired.html (1 bytes)
%Program Files% (x86)\iWin Games\gamepage\buynow.html (3 bytes)
%Program Files% (x86)\iWin Games\pages\offlineBg.gif (960 bytes)
%Program Files% (x86)\iWin Games\pages\iwin_logo.gif (5 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\global\page-bg-swirly.gif (8 bytes)
%Program Files% (x86)\iWin Games\pages\test.html (718 bytes)
%Program Files% (x86)\iWin Games\pages\blank.html (251 bytes)
%Program Files% (x86)\iWin Games\gamepage\common.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\GameuxInstallHelper.dll (3207 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\alert32x32.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\iwintoolbar.ini (6 bytes)
%Program Files% (x86)\iWin Games\WebUpdater.bmp (1485 bytes)

The process InstGameInfoHelper.exe:824 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\tn_feat[1].jpg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\tn_feat.bmp (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\6898945648087804561[1].txt (572 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\tn_feat.jpg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\gametitle.txt (11 bytes)

The process iWinInstallOptions.exe:1744 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFBDC.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFBDC.tmp\iWinToolbarLauncher.exe (7631 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFBDC.tmp\NSISdl.dll (30 bytes)

The process iWinToolbarLauncher.exe:992 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsyB47.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsyB47.tmp\modern-header.bmp (769 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsyB47.tmp\iWinGamesToolbar.exe (142566 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsyB47.tmp\iwintoolbar.ini (8581 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsyB47.tmp\InstallOptions.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js (2281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsyB47.tmp\nsisdl.dll (30 bytes)

The process AdminWorker.exe:1292 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iWinGames\Downloads\iWinGames - Zuma Deluxe.exe (3638 bytes)
C:\Users\Public\Desktop\Zuma Deluxe.lnk (1 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iWin Games\Uninstall Games\Uninstall Zuma Deluxe.lnk (1 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iWin Games\Games\Launch Zuma Deluxe.lnk (1 bytes)

The process regsvr32.exe:2620 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\iwingamestoolbar\dtx.ini (15 bytes)
%Program Files% (x86)\iwingamestoolbar\encyclopediabritannicagamesbarX.dll (118 bytes)

The process regsvr32.exe:2612 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files% (x86)\iwingamestoolbar\encyclopediabritannicagamesbarX64.dll (135 bytes)

The process regsvr32.exe:2436 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\iwingamestoolbar\dtx.ini (2 bytes)

The process %original file name%.exe:816 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssEE45.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssEE45.tmp\ftdownload.dat (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssEE45.tmp\NSISdl.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssEE45.tmp\iWinGamesSetup.exe (326691 bytes)

The process iWinGames.exe:296 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iWinGames\Downloads\file_161005030115486598.unk (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\brand-styles[1].css (609 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\gotomygames-blue-48[1].gif (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\ui[1].css (30833 bytes)
C:\ProgramData\iWin Games\drm\drm_85_Zuma.ifn.stdat (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iWinGames\downloadslist_backup.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iWinGames\Downloads\file_181005030115487924.unk (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\pause[1].gif (325 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iWinGames\Downloads\cache.dat (437 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\firstinstall[1].htm (971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\up[1].gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iWinGames\Downloads\file_501005030115520091.unk (2 bytes)
C:\ProgramData\iWin Games\opal\FlashPlayerControl.dll (397 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\submit-blue-22[1].gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\TLIGZU3J.txt (100 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iWinGames\Downloads\file_311005030115501012.unk (164189 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\stop[1].gif (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iWinGames\Downloads\file_251005030115495349.unk (572 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\XWGPWGI6FHRCV26GXOQ3.temp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\logo2[1].gif (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iWinGames\Downloads\file_301005030115500763.unk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Sun\Java\Deployment\deployment.properties (640 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\iwinshortcut[1].gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\firstinstall[1].css (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5FPBC2M2SAY7GERZNK0Q.temp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\firstinstall[1].js (145 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iWinGames\GamesManager_15_04_24.log (55094 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\core-standard[1].js (259677 bytes)

The process Zuma.ifn:1004 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E48DDEA3BF68DF580551FA0F27950B54 (573 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E48DDEA3BF68DF580551FA0F27950B54 (1320 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 (680 bytes)

Registry activity

The process iWinGames - Zuma Deluxe.exe:1832 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Zuma Deluxe]
"DisplayIcon" = "C:\Games\iWin.com\Zuma Deluxe\Uninstall.exe"
"NoModify" = "1"
"EstimatedSize" = "16213"
"UninstallString" = "C:\Games\iWin.com\Zuma Deluxe\Uninstall.exe"

[HKLM\SOFTWARE\Wow6432Node\iWinArcade]
"85" = "Zuma Deluxe"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Zuma Deluxe]
"NoRepair" = "1"
"HelpLink" = "http://support.iwin.com/"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer]
"GlobalAssocChangedCounter" = "37"

[HKLM\SOFTWARE\Wow6432Node\iWinArcade\Zuma Deluxe]
"GameName" = "Zuma Deluxe"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Zuma Deluxe]
"DisplayVersion" = "1.0.0.1"

[HKLM\SOFTWARE\Wow6432Node\iWinArcade\Zuma Deluxe]
"InstallDir" = "C:\Games\iWin.com\Zuma Deluxe"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Zuma Deluxe]
"DisplayName" = "Zuma Deluxe"

[HKLM\SOFTWARE\Wow6432Node\iWinArcade\Zuma Deluxe]
"GameExe" = "GameLauncher.exe"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Zuma Deluxe]
"Publisher" = "iWin.com"

The process iWinGamesToolbar.exe:704 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iwingamestoolbar]
"NoRepair" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}]
"AppName" = "uninstall.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "73 19 B4 EB 33 7E D0 01"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iwingamestoolbar]
"Publisher" = "Visicom Media inc."
"DisplayIcon" = "%Program Files% (x86)\iwingamestoolbar\install.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "88 C7 FC D3 33 7E D0 01"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}]
"AppPath" = "%Program Files% (x86)\iwingamestoolbar"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iwingamestoolbar]
"InstallLocation" = "%Program Files% (x86)\iwingamestoolbar"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\GameuxInstallHelper.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssEE45.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\nsProcess.dll,"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iwingamestoolbar]
"DisplayVersion" = "1.0.11.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iwingamestoolbar]
"NoModify" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}]
"AppPath" = "%Program Files% (x86)\iwingamestoolbar"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iwingamestoolbar]
"UninstallString" = "%Program Files% (x86)\iwingamestoolbar\uninstall.exe"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}]
"AppName" = "uninstall.exe"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}]
"Policy" = "3"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8C6FC3E3-50EF-4763-AB3A-90D1016F6264}]
"Policy" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4A 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iwingamestoolbar]
"EstimatedSize" = "2139"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CE5049F8-9BA4-48D0-A859-5287456F3026}]
"Policy" = "3"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8C6FC3E3-50EF-4763-AB3A-90D1016F6264}]
"AppName" = "dtuser.exe"
"AppPath" = "%Program Files% (x86)\iwingamestoolbar"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CE5049F8-9BA4-48D0-A859-5287456F3026}]
"AppPath" = "%Program Files% (x86)\iwingamestoolbar"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iwingamestoolbar]
"DisplayName" = "iWin Games Toolbar"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}]
"Policy" = "3"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CE5049F8-9BA4-48D0-A859-5287456F3026}]
"AppName" = "dtuser.exe"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"ITBarLayout"

The Trojan disables automatic startup of the application by deleting the following autorun value:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"NSIS.Library.RegTool.v1"

"NSIS.Library.RegTool.v3"

"NSIS.Library.RegTool.v2"

"NSIS.Library.RegTool.v5"

"NSIS.Library.RegTool.v4"

The process iWinGamesSetup.exe:1812 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\GameUX\Games\{79665D30-8B94-4767-B4F1-AB583F1DF566}]
"Description" = "iWin Games Manager Application"
"ApplicationId" = "{D5F5C21E-26EC-11DF-97B4-D49755D89593}"

[HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81]
"Blob" = "0F 00 00 00 01 00 00 00 14 00 00 00 85 FE F1 1B"

[HKLM\SOFTWARE\Wow6432Node\iWinArcade]
"Install_Dir" = "%Program Files% (x86)\iWin Games"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iWinArcade]
"NoModify" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION]
"iWinGames.exe" = "8000"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iWinArcade]
"DisplayVersion" = "2.92"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\GameuxInstallHelper.dll,"

[HKCU\Software\iWinArcade]
"enableDesktopAlerts" = "false"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\GameUX\Games\{79665D30-8B94-4767-B4F1-AB583F1DF566}]
"Type" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iWinArcade]
"DisplayIcon" = "%Program Files% (x86)\iWin Games\Uninstall.exe"
"NoRepair" = "1"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\iWinArcade]
"installroot" = "C:\Games\iWin.com"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iWinArcade]
"UninstallString" = "%Program Files% (x86)\iWin Games\Uninstall.exe"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\GameUX\Games\{79665D30-8B94-4767-B4F1-AB583F1DF566}]
"ConfigGDFBinaryPath" = "%Program Files% (x86)\iWin Games\iWinGames.exe"
"IsSigned" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\GameUX]
"LastSupportedGameInstallTime" = "Type: REG_QWORD, Length: 8"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\GameUX\Games\{79665D30-8B94-4767-B4F1-AB583F1DF566}]
"ConfigApplicationPath" = "%Program Files% (x86)\iWin Games"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iWinArcade]
"DisplayName" = "iWin Games"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\GameUX\Games\{79665D30-8B94-4767-B4F1-AB583F1DF566}]
"ConfigInstallType" = "2"
"Title" = "Play iWin Games"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates]
"91C6D6EE3E8AC86384E548C299295C756C817B81"

The Trojan disables automatic startup of the application by deleting the following autorun value:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"iWinArcadeIECleanup"

The process InstGameInfoHelper.exe:824 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "2D 85 33 3A 90 73 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 48 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "6B 38 41 C0 33 7E D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process Dwm.exe:940 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@%SystemRoot%\system32]
"fveui.dll,-844" = "BitLocker Data Recovery Agent"
"fveui.dll,-843" = "BitLocker Drive Encryption"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

[HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81]
"Blob" = "04 00 00 00 01 00 00 00 10 00 00 00 8C CA DC 0B"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates]
"91C6D6EE3E8AC86384E548C299295C756C817B81"

The process iWinToolbarLauncher.exe:992 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = "Yahoo"

[HKCU\Software\Microsoft\Internet Explorer\Main]
"Start Page" = "https://www.yahoo.com/?fr=oberhp&type=iwingamestoolbar"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\Yahoo]
"URL" = "http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=oberhp&type=iwingamestoolbar"
"FaviconURL" = "http://search.yahoo.com/favicon.ico"
"SuggestionsURL" = "http://ie.search.yahoo.com/os?command={SearchTerms}"
"DisplayName" = "Yahoo! Search"

The process AdminWorker.exe:1776 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process AdminWorker.exe:1292 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\iWinArcade\Shortcuts\C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
"iWin Games/Games/Launch Zuma Deluxe.lnk" = "STARTGAME_LOCAL 85"

[HKCU\Software\iWinArcade\Shortcuts\C:\Users\Public\Desktop]
"Zuma Deluxe.lnk" = "STARTGAME_LOCAL 85"

[HKLM\SOFTWARE\Wow6432Node\iWinArcade\Zuma Deluxe]
"SkuID" = "6898945648087804561"
"GameID" = "85"

The process regsvr32.exe:2620 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C29F28CE-1C64-483D-80CC-05AB2AFF3E5C}]
"(Default)" = ""

[HKCR\Wow6432Node\CLSID\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Wow6432Node\CLSID\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}]
"(Default)" = "iWin Games Toolbar"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}" = "iWin Games Toolbar"

[HKCR\Wow6432Node\CLSID\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\InprocServer32]
"(Default)" = "%Program Files% (x86)\iwingamestoolbar\encyclopediabritannicagamesbarX.dll"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}]
"(Default)" = "iWin Games Toolbar"

The process regsvr32.exe:2436 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C29F28CE-1C64-483D-80CC-05AB2AFF3E5C}]
"(Default)" = ""

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}" = "iWin Games Toolbar"

[HKCR\CLSID\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\InprocServer32]
"(Default)" = "%Program Files% (x86)\iwingamestoolbar\encyclopediabritannicagamesbarX64.dll"
"ThreadingModel" = "Apartment"

[HKCR\CLSID\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}]
"(Default)" = "iWin Games Toolbar"

It registers itself as a Browser Helper Object (BHO) to ensure its automatic execution every time Internet Explorer is run. It does this by creating the following registry key(s)/entry(ies):

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}]
"(Default)" = "iWin Games Toolbar"

The process %original file name%.exe:816 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\GameuxInstallHelper.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssEE45.tmp\,"

The process GLWorker.exe:2588 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Licenses]
"{I316DD9866EDAD49C}" = "07 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKCU\Software\Licenses]
"{0316DD9866EDAD49C}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 7E A4 44 A3"

The process GLWorker.exe:2296 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{278D65E7-0D75-2C26-2E45-2EA11A5BF8FC}]
"AppID" = "{3e5ca495-8d6a-4d1f-ad99-177b426c8b8e}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKCU\Software\Licenses]
"{I316DD9866EDAD49C}" = "01 00 00 00"

[HKCR\Wow6432Node\CLSID\{278D65E7-0D75-2C26-2E45-2EA11A5BF8FC}\LocalServer32]
"(Default)" = "%systemroot%\SysWow64\WinrsHost.exe"
"ServerExecutable" = "%systemroot%\SysWow64\WinrsHost.exe"

[HKCR\Wow6432Node\CLSID\{278D65E7-0D75-2C26-2E45-2EA11A5BF8FC}]
"(Default)" = "Microsoft Windows Remote Shell Host"

[HKCU\Software\Licenses]
"{0316DD9866EDAD49C}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 7E A4 44 A3"
"{K7C0DB872A3F777C0}" = "3C 91 3A D3 45 17 1F 46 74 E8 01 64 22 18 AF B6"

The Trojan deletes the following value(s) in system registry:

[HKCR\Wow6432Node\CLSID\{278D65E7-0D75-2C26-2E45-2EA11A5BF8FC}]
"0"

The process GLWorker.exe:2160 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Licenses]
"{I316DD9866EDAD49C}" = "04 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKCU\Software\Licenses]
"{0316DD9866EDAD49C}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 7E A4 44 A3"

The process iWinGames.exe:296 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-8FFF-0FFF-FFF6-FFFF5F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-4FFF-0FFF-FFF6-FFFF1F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-7FFF-0FFF-FFF6-FFFF8F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-0FFF-0FFF-FFF6-FFFF8F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-8FFF-0FFF-FFF6-FFFF2F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-7FFF-0FFF-FFF6-FFFF9F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-7FFF-0FFF-FFF6-FFFF6F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-3FFF-0FFF-FFF6-FFFF1F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-4FFF-0FFF-FFF6-FFFF7F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-6FFF-0FFF-FFF6-FFFF8F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-2FFF-0FFF-FFF6-FFFF0F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-0FFF-0FFF-FFF6-FFFF3F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-4FFF-0FFF-FFF6-FFFF6F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-1FFF-0FFF-FFF6-FFFF4F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-4FFF-0FFF-FFF6-FFFF9F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-2FFF-0FFF-FFF6-FFFF9F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-2FFF-0FFF-FFF6-FFFF3F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-6FFF-0FFF-FFF6-FFFF7F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-8FFF-0FFF-FFF6-FFFF5F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-7FFF-0FFF-FFF6-FFFF2F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-8FFF-0FFF-FFF6-FFFF1F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-7FFF-0FFF-FFF6-FFFF0F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-1FFF-0FFF-FFF6-FFFF9F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-4FFF-0FFF-FFF6-FFFF1F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-7FFF-0FFF-FFF6-FFFF6F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-4FFF-0FFF-FFF6-FFFF6F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-1FFF-0FFF-FFF6-FFFF5F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-3FFF-0FFF-FFF6-FFFF2F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-3FFF-0FFF-FFF6-FFFF5F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-2FFF-0FFF-FFF6-FFFF1F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-5FFF-0FFF-FFF6-FFFF9F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-7FFF-0FFF-FFF6-FFFF6F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-4FFF-0FFF-FFF6-FFFF7F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-5FFF-0FFF-FFF6-FFFF3F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-5FFF-0FFF-FFF6-FFFF5F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-1FFF-0FFF-FFF6-FFFF8F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-9FFF-0FFF-FFF6-FFFF9F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-1FFF-0FFF-FFF6-FFFF2F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-8FFF-0FFF-FFF6-FFFF4F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-6FFF-0FFF-FFF6-FFFF8F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-4FFF-0FFF-FFF6-FFFF4F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-2FFF-0FFF-FFF6-FFFF8F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-5FFF-0FFF-FFF6-FFFF6F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-5FFF-0FFF-FFF6-FFFF8F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-3FFF-0FFF-FFF6-FFFF8F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-5FFF-0FFF-FFF6-FFFF9F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-2FFF-0FFF-FFF6-FFFF0F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-8FFF-0FFF-FFF6-FFFF9F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-4FFF-0FFF-FFF6-FFFF0F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-3FFF-0FFF-FFF6-FFFF4F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-9FFF-0FFF-FFF6-FFFF3F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-2FFF-0FFF-FFF6-FFFF5F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-5FFF-0FFF-FFF6-FFFF2F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-4FFF-0FFF-FFF6-FFFF9F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-7FFF-0FFF-FFF6-FFFF3F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-7FFF-0FFF-FFF6-FFFF4F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-8FFF-0FFF-FFF6-FFFF7F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-0FFF-0FFF-FFF6-FFFF5F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-0FFF-0FFF-FFF6-FFFF8F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-9FFF-0FFF-FFF6-FFFF1F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-9FFF-0FFF-FFF6-FFFF4F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-0FFF-0FFF-FFF6-FFFF0F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-4FFF-0FFF-FFF6-FFFF3F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-1FFF-0FFF-FFF6-FFFF7F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-0FFF-0FFF-FFF6-FFFF3F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-8FFF-0FFF-FFF6-FFFF2F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-2FFF-0FFF-FFF6-FFFF6F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-1FFF-0FFF-FFF6-FFFF1F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-3FFF-0FFF-FFF6-FFFF7F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-9FFF-0FFF-FFF6-FFFF7F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-8FFF-0FFF-FFF6-FFFF3F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-7FFF-0FFF-FFF6-FFFF9F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-5FFF-0FFF-FFF6-FFFF5F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-5FFF-0FFF-FFF6-FFFF0F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-2FFF-0FFF-FFF6-FFFF9F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-3FFF-0FFF-FFF6-FFFF8F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-8FFF-0FFF-FFF6-FFFF0F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-1FFF-0FFF-FFF6-FFFF7F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-8FFF-0FFF-FFF6-FFFF8F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-2FFF-0FFF-FFF6-FFFF5F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-3FFF-0FFF-FFF6-FFFF4F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-7FFF-0FFF-FFF6-FFFF9F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-3FFF-0FFF-FFF6-FFFF8F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-4FFF-0FFF-FFF6-FFFF0F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-5FFF-0FFF-FFF6-FFFF0F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-5FFF-0FFF-FFF6-FFFF2F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-6FFF-0FFF-FFF6-FFFF2F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-1FFF-0FFF-FFF6-FFFF7F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-4FFF-0FFF-FFF6-FFFF6F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-8FFF-0FFF-FFF6-FFFF5F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-0FFF-0FFF-FFF6-FFFF0F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-0FFF-0FFF-FFF6-FFFF5F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-9FFF-0FFF-FFF6-FFFF9F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-2FFF-0FFF-FFF6-FFFF2F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-6FFF-0FFF-FFF6-FFFF9F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-1FFF-0FFF-FFF6-FFFF2F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-9FFF-0FFF-FFF6-FFFF0F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-7FFF-0FFF-FFF6-FFFF4F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-7FFF-0FFF-FFF6-FFFF1F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-3FFF-0FFF-FFF6-FFFF1F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-5FFF-0FFF-FFF6-FFFF8F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-6FFF-0FFF-FFF6-FFFF4F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-6FFF-0FFF-FFF6-FFFF5F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-7FFF-0FFF-FFF6-FFFF0F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-2FFF-0FFF-FFF6-FFFF0F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-3FFF-0FFF-FFF6-FFFF2F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-1FFF-0FFF-FFF6-FFFF4F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-3FFF-0FFF-FFF6-FFFF2F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-2FFF-0FFF-FFF6-FFFF3F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-6FFF-0FFF-FFF6-FFFF1F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-0FFF-0FFF-FFF6-FFFF2F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-3FFF-0FFF-FFF6-FFFF5F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-9FFF-0FFF-FFF6-FFFF4F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-1FFF-0FFF-FFF6-FFFF1F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-0FFF-0FFF-FFF6-FFFF6F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-6FFF-0FFF-FFF6-FFFF7F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-9FFF-0FFF-FFF6-FFFF3F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-8FFF-0FFF-FFF6-FFFF7F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-3FFF-0FFF-FFF6-FFFF3F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-5FFF-0FFF-FFF6-FFFF6F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-9FFF-0FFF-FFF6-FFFF7F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-9FFF-0FFF-FFF6-FFFF2F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-0FFF-0FFF-FFF6-FFFF9F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-4FFF-0FFF-FFF6-FFFF0F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-2FFF-0FFF-FFF6-FFFF1F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-9FFF-0FFF-FFF6-FFFF1F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-5FFF-0FFF-FFF6-FFFF3F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-6FFF-0FFF-FFF6-FFFF4F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-6FFF-0FFF-FFF6-FFFF2F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-7FFF-0FFF-FFF6-FFFF3F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-4FFF-0FFF-FFF6-FFFF9F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-4FFF-0FFF-FFF6-FFFF4F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-1FFF-0FFF-FFF6-FFFF5F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-3FFF-0FFF-FFF6-FFFF0F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-3FFF-0FFF-FFF6-FFFF6F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-0FFF-0FFF-FFF6-FFFF9F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-2FFF-0FFF-FFF6-FFFF6F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-8FFF-0FFF-FFF6-FFFF6F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-7FFF-0FFF-FFF6-FFFF1F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-9FFF-0FFF-FFF6-FFFF6F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-2FFF-0FFF-FFF6-FFFF9F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-7FFF-0FFF-FFF6-FFFF7F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-7FFF-0FFF-FFF6-FFFF5F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-2FFF-0FFF-FFF6-FFFF7F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-8FFF-0FFF-FFF6-FFFF2F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-9FFF-0FFF-FFF6-FFFF6F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-4FFF-0FFF-FFF6-FFFF4F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-0FFF-0FFF-FFF6-FFFF6F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-6FFF-0FFF-FFF6-FFFF2F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-7FFF-0FFF-FFF6-FFFF0F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-6FFF-0FFF-FFF6-FFFF1F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-8FFF-0FFF-FFF6-FFFF4F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-9FFF-0FFF-FFF6-FFFF0F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-5FFF-0FFF-FFF6-FFFF6F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-6FFF-0FFF-FFF6-FFFF4F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-9FFF-0FFF-FFF6-FFFF9F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-3FFF-0FFF-FFF6-FFFF5F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-1FFF-0FFF-FFF6-FFFF8F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-3FFF-0FFF-FFF6-FFFF7F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-9FFF-0FFF-FFF6-FFFF6F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-8FFF-0FFF-FFF6-FFFF8F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-5FFF-0FFF-FFF6-FFFF0F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-6FFF-0FFF-FFF6-FFFF1F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-5FFF-0FFF-FFF6-FFFF5F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-2FFF-0FFF-FFF6-FFFF8F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-4FFF-0FFF-FFF6-FFFF3F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-9FFF-0FFF-FFF6-FFFF1F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-4FFF-0FFF-FFF6-FFFF1F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-5FFF-0FFF-FFF6-FFFF2F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-2FFF-0FFF-FFF6-FFFF3F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-2FFF-0FFF-FFF6-FFFF6F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-4FFF-0FFF-FFF6-FFFF7F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-8FFF-0FFF-FFF6-FFFF1F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-8FFF-0FFF-FFF6-FFFF8F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-5FFF-0FFF-FFF6-FFFF9F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-5FFF-0FFF-FFF6-FFFF8F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-2FFF-0FFF-FFF6-FFFF4F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-9FFF-0FFF-FFF6-FFFF7F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-5FFF-0FFF-FFF6-FFFF3F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-6FFF-0FFF-FFF6-FFFF5F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF3F-6FFF-0FFF-FFF6-FFFF6F0FF4IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-7FFF-0FFF-FFF6-FFFF3F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-9FFF-0FFF-FFF6-FFFF4F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-7FFF-0FFF-FFF6-FFFF7F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-6FFF-0FFF-FFF6-FFFF7F0FF5IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF5F-4FFF-0FFF-FFF6-FFFF3F0FF6IW}]
[HKLM\SOFTWARE\Wow6432Node\WinKernelTimeServiceIWN\{853FFF4F-0FFF-0FFF-FFF6-FFFF2F0FF5IW}]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process Zuma.ifn:1004 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Licenses]
"{I316DD9866EDAD49C}" = "0A 00 00 00"

[HKLM\System\CurrentControlSet\Hardware Profiles\UnitedVideo\CONTROL\VIDEO\{A28A78DE-FF67-4FA3-81B7-7E4A7D57EB3F}\0000]
"DefaultSettings.DriverExtra" = "60 EA 00 00 E8 03 00 00 15 00 00 00 01 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1070586301"

[HKLM\SOFTWARE\Wow6432Node\PopCap\Zuma\Test3D]
"FailureReason" = ""

[HKLM\System\CurrentControlSet\Hardware Profiles\UnitedVideo\CONTROL\VIDEO\{A28A78DE-FF67-4FA3-81B7-7E4A7D57EB3F}\0000]
"DefaultSettings.FixedOutput" = "0"

[HKLM\System\CurrentControlSet\Control\GraphicsDrivers\Connectivity\NOEDID_15AD_0405_00000000_000F0000_0^20ED182961F2CFDB3A2D28C95A99744F]
"Recent" = "NOEDID_15AD_0405_00000000_000F0000_0"

[HKLM\System\CurrentControlSet\Hardware Profiles\UnitedVideo\CONTROL\VIDEO\{A28A78DE-FF67-4FA3-81B7-7E4A7D57EB3F}\0000]
"Attach.RelativeX" = "0"

[HKLM\SOFTWARE\Wow6432Node\PopCap\Zuma]
"InProgress" = "1"

[HKCU\Software\Licenses]
"{K7C0DB872A3F777C0}" = "B7 21 27 88 45 17 1F 46 74 E8 01 64 22 18 AF B6"

[HKLM\System\CurrentControlSet\Hardware Profiles\UnitedVideo\CONTROL\VIDEO\{A28A78DE-FF67-4FA3-81B7-7E4A7D57EB3F}\0000]
"DefaultSettings.YPanning" = "0"

[HKLM\SOFTWARE\Wow6432Node\PopCap\Zuma\Test3D]
"Warning" = "Unsupported video card."

[HKLM\System\CurrentControlSet\Control\GraphicsDrivers\Configuration\NOEDID_15AD_0405_00000000_000F0000_0^20ED182961F2CFDB3A2D28C95A99744F]
"TimeStamp" = "Type: REG_QWORD, Length: 8"

[HKLM\SOFTWARE\Wow6432Node\PopCap\Zuma\Test3D]
"MinVidMemory" = "6"

[HKLM\System\CurrentControlSet\Hardware Profiles\UnitedVideo\CONTROL\VIDEO\{A28A78DE-FF67-4FA3-81B7-7E4A7D57EB3F}\0001]
"Attach.ToDesktop" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "Zuma.ifn"

[HKLM\System\CurrentControlSet\Hardware Profiles\UnitedVideo\CONTROL\VIDEO\{A28A78DE-FF67-4FA3-81B7-7E4A7D57EB3F}\0000]
"DefaultSettings.Flags" = "0"
"Attach.ToDesktop" = "1"

[HKLM\System\CurrentControlSet\Control\GraphicsDrivers\Connectivity\NOEDID_15AD_0405_00000000_000F0000_0^20ED182961F2CFDB3A2D28C95A99744F]
"Internal" = "NOEDID_15AD_0405_00000000_000F0000_0"

[HKLM\System\CurrentControlSet\Hardware Profiles\UnitedVideo\CONTROL\VIDEO\{A28A78DE-FF67-4FA3-81B7-7E4A7D57EB3F}\0000]
"DefaultSettings.XPanning" = "0"

[HKLM\SOFTWARE\Wow6432Node\PopCap\Zuma\Test3D]
"Version" = "2"
"DisplayGUID" = "4D 1B B7 D7 45 47 CF 11 1D 76 05 24 AF C2 CD 35"

[HKLM\System\CurrentControlSet\Hardware Profiles\UnitedVideo\CONTROL\VIDEO\{A28A78DE-FF67-4FA3-81B7-7E4A7D57EB3F}\0000]
"DefaultSettings.BitsPerPel" = "32"

[HKCU\Software\Licenses]
"{0316DD9866EDAD49C}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 7E A4 44 A3"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

[HKLM\System\CurrentControlSet\Hardware Profiles\UnitedVideo\CONTROL\VIDEO\{A28A78DE-FF67-4FA3-81B7-7E4A7D57EB3F}\0000]
"DefaultSettings.XResolution" = "1716"
"Attach.RelativeY" = "0"
"DefaultSettings.VRefresh" = "60"

[HKLM\SOFTWARE\Wow6432Node\PopCap\Zuma\Test3D]
"RecVidMemory" = "14"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Direct3D\MostRecentApplication]
"Name" = "Zuma.ifn"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKLM\System\CurrentControlSet\Hardware Profiles\UnitedVideo\CONTROL\VIDEO\{A28A78DE-FF67-4FA3-81B7-7E4A7D57EB3F}\0000]
"DefaultSettings.Orientation" = "0"

[HKLM\System\CurrentControlSet\Control\MediaResources\DirectSound\Speaker Configuration]
"Speaker Configuration" = "4"

[HKLM\System\CurrentControlSet\Hardware Profiles\UnitedVideo\CONTROL\VIDEO\{A28A78DE-FF67-4FA3-81B7-7E4A7D57EB3F}\0000]
"DefaultSettings.YResolution" = "901"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\PopCap\Zuma]
"Is3D"

The process iWinTrusted.exe:1460 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\Interface\{3B16338D-AFD9-46FF-8BEE-4FEC95946937}]
"(Default)" = "IiWinTrusted"

[HKCR\Wow6432Node\CLSID\{635ADC07-6F19-42a7-8043-EDD19678CE14}\TypeLib]
"(Default)" = "{44E6B68E-8DA5-4093-921B-7275E5B3906A}"

[HKCR\iWinTrusted.CoiWinTrusted]
"(Default)" = "iWinTrusted Class"

[HKCR\Wow6432Node\CLSID\{635ADC07-6F19-42a7-8043-EDD19678CE14}\VersionIndependentProgID]
"(Default)" = "iWinTrusted.CoiWinTrusted"

[HKCR\Interface\{3B16338D-AFD9-46FF-8BEE-4FEC95946937}]
"(Default)" = "IiWinTrusted"

[HKCR\Wow6432Node\CLSID\{635ADC07-6F19-42a7-8043-EDD19678CE14}\LocalServer32]
"(Default)" = "%Program Files% (x86)\iWin Games\iWinTrusted.exe /server"

[HKCR\TypeLib\{44E6B68E-8DA5-4093-921B-7275E5B3906A}\1.0\HELPDIR]
"(Default)" = "%Program Files% (x86)\iWin Games"

[HKCR\AppID\iWinTrusted.EXE]
"AppID" = "{635ADC07-6F19-42a7-8043-EDD19678CE14}"

[HKCR\TypeLib\{44E6B68E-8DA5-4093-921B-7275E5B3906A}\1.0]
"(Default)" = "iWinTrusted 1.1 Type Library"

[HKCR\Interface\{3B16338D-AFD9-46FF-8BEE-4FEC95946937}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{635ADC07-6F19-42a7-8043-EDD19678CE14}]
"AppID" = "{635ADC07-6F19-42a7-8043-EDD19678CE14}"

[HKCR\iWinTrusted.CoiWinTrusted.1\CLSID]
"(Default)" = "{635ADC07-6F19-42a7-8043-EDD19678CE14}"

[HKCR\Wow6432Node\CLSID\{635ADC07-6F19-42a7-8043-EDD19678CE14}]
"(Default)" = "iWinTrusted Class"

[HKCR\TypeLib\{44E6B68E-8DA5-4093-921B-7275E5B3906A}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\iWinTrusted.CoiWinTrusted\CurVer]
"(Default)" = "iWinTrusted.CoiWinTrusted.1"

[HKCR\Wow6432Node\CLSID\{635ADC07-6F19-42a7-8043-EDD19678CE14}\ProgID]
"(Default)" = "iWinTrusted.CoiWinTrusted.1"

[HKCR\Interface\{3B16338D-AFD9-46FF-8BEE-4FEC95946937}\TypeLib]
"(Default)" = "{44E6B68E-8DA5-4093-921B-7275E5B3906A}"

[HKCR\Wow6432Node\Interface\{3B16338D-AFD9-46FF-8BEE-4FEC95946937}\TypeLib]
"Version" = "1.0"

[HKCR\AppID\{635ADC07-6F19-42a7-8043-EDD19678CE14}]
"LocalService" = "iWinTrusted"

[HKCR\Wow6432Node\Interface\{3B16338D-AFD9-46FF-8BEE-4FEC95946937}\TypeLib]
"(Default)" = "{44E6B68E-8DA5-4093-921B-7275E5B3906A}"

[HKCR\AppID\{635ADC07-6F19-42a7-8043-EDD19678CE14}]
"(Default)" = "iWinTrusted"

[HKCR\iWinTrusted.CoiWinTrusted\CLSID]
"(Default)" = "{635ADC07-6F19-42a7-8043-EDD19678CE14}"

[HKCR\Interface\{3B16338D-AFD9-46FF-8BEE-4FEC95946937}\TypeLib]
"Version" = "1.0"

[HKCR\Wow6432Node\Interface\{3B16338D-AFD9-46FF-8BEE-4FEC95946937}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\TypeLib\{44E6B68E-8DA5-4093-921B-7275E5B3906A}\1.0\0\win32]
"(Default)" = "%Program Files% (x86)\iWin Games\iWinTrusted.exe"

[HKCR\iWinTrusted.CoiWinTrusted.1]
"(Default)" = "iWinTrusted Class"

Dropped PE files

MD5	File path
9d586295ffd2afdc291e17fa12179871	c:\Games\iWin.com\Zuma Deluxe\GLWorker.exe
b0a11e882be162739c078f0bfff28909	c:\Games\iWin.com\Zuma Deluxe\Uninstall.exe
6c33e842353c6c59424d4b9f9eca8e8d	c:\Games\iWin.com\Zuma Deluxe\Zuma.ifn
9d85c5a847eb0d67cd2ddf20d29c3eb6	c:\Games\iWin.com\Zuma Deluxe\bass.dll
8d07b0bc269acc98c53d54b5f88ecd97	c:\Program Files (x86)\iWin Games\AdminWorker.exe
211b2e9ddd2b60b823dba5babbf3e72c	c:\Program Files (x86)\iWin Games\Uninstall.exe
b8057176429633538af2ba8471445e02	c:\Program Files (x86)\iWin Games\WebUpdater.exe
da544183530162783cd2be1a890f4543	c:\Program Files (x86)\iWin Games\iWinGames.exe
41f25fc9facea5edaa2d73736360afca	c:\Program Files (x86)\iWin Games\iWinTrusted.exe
bff3d44021f36e2d9873fa19769afef5	c:\Program Files (x86)\iwingamestoolbar\dtuser.exe
0b9bfaa1a15b12938b0d4411ed8ebe72	c:\Program Files (x86)\iwingamestoolbar\encyclopediabritannicagamesbar.dll
723b063bf7c8bbd1f60f9b253c02ed2a	c:\Program Files (x86)\iwingamestoolbar\encyclopediabritannicagamesbar64.dll
cc1299348c7b41fe21b3168500be26a2	c:\Program Files (x86)\iwingamestoolbar\encyclopediabritannicagamesbarX.dll
bdb25e804f310c674eed08cda2e69e34	c:\Program Files (x86)\iwingamestoolbar\encyclopediabritannicagamesbarX64.dll
f8452a8df1634cdf256ee0499bbb898e	c:\Program Files (x86)\iwingamestoolbar\uninstall.exe
f3b3ee66ca76c94510555abe9d00a353	c:\ProgramData\iWin Games\opal\Flash.ocx
a19e2a014bd5f39e865c8201b2ee8c8e	c:\ProgramData\iWin Games\opal\FlashPlayerControl.dll
f3b3ee66ca76c94510555abe9d00a353	c:\Users\All Users\iWin Games\opal\Flash.ocx
a19e2a014bd5f39e865c8201b2ee8c8e	c:\Users\All Users\iWin Games\opal\FlashPlayerControl.dll
4d3ac88054df63fc810427bdaa96c458	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\GameuxInstallHelper.dll
05450face243b3a7472407b999b03a72	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\nsProcess.dll
fbda05aa26e02d38effb82294e83ea69	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\xml.dll
9232d0e2a87b415869b128b2e7dc7953	c:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\components\dtTransparency.dll
bff3d44021f36e2d9873fa19769afef5	c:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\dtuser.exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: iWin inc.
Product Name: iWin Games
Product Version: 1.0.1.0
Legal Copyright: (c) iWin inc.
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 1.0.1.0
File Description: iWin Games Downloader
Comments:
Language: Language Neutral

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	4096	22738	23040	4.45908	c69726ed422d3dcfdec9731986daa752
.rdata	28672	4496	4608	3.59034	a2c7710fa66fcbb43c7ef0ab9eea5e9a
.data	36864	110456	1024	3.20082	e59cdcb732e4bfbc84cc61dd68354f78
.ndata	147456	32768	0	0	d41d8cd98f00b204e9800998ecf8427e
.rsrc	180224	20464	20480	3.89637	b2a7dc9390af02b8dff96df829be9f8e

Dropped from:

Downloaded by:

Similar by SSDeep:

d0c395a51dc33a6784393366c25f1a1a
1bb4a2626b78ee81bc0eeeb15e9031f6
25e41ff324fd26650319b3f5564df394
3f5a401405c861d8c8fd8f96ee7bb0f2

Similar by Lavasoft Polymorphic Checker:

Total found: 8
d84ff4cbf9737aa13ff4fe48fc05a2aa
3f5a401405c861d8c8fd8f96ee7bb0f2
940b81c7c166725817bc87e924531777
25e41ff324fd26650319b3f5564df394
1bb4a2626b78ee81bc0eeeb15e9031f6
e3c39e860c7571179b1613615192300d
7218d508a72074ffaf764d1d9912b490
d0c395a51dc33a6784393366c25f1a1a

URLs

URL	IP
hxxp://stamp-vpc-aws-iwin-com-1981998893.us-east-1.elb.amazonaws.com/games/iWinGamesSetup.exe
hxxp://www-aws-iwin-com-vpc-1371601338.us-east-1.elb.amazonaws.com/arcade/rawinfo/85/6898945648087804561
hxxp://cdn-vpc-aws-iwin-com-1060965153.us-east-1.elb.amazonaws.com/images/product/85/tn_feat.jpg
hxxp://www-aws-iwin-com-vpc-1371601338.us-east-1.elb.amazonaws.com/gm-config
hxxp://www-aws-iwin-com-vpc-1371601338.us-east-1.elb.amazonaws.com/dgu?game=ARCD&ver=2.92&dist=iwin
hxxp://www-aws-iwin-com-vpc-1371601338.us-east-1.elb.amazonaws.com/corp/firstinstall/firstinstall.html
hxxp://www-aws-iwin-com-vpc-1371601338.us-east-1.elb.amazonaws.com/styles/ui.css
hxxp://www-aws-iwin-com-vpc-1371601338.us-east-1.elb.amazonaws.com/corp/firstinstall/styles/firstinstall.css
hxxp://www-aws-iwin-com-vpc-1371601338.us-east-1.elb.amazonaws.com/scripts/core-standard.js
hxxp://www-aws-iwin-com-vpc-1371601338.us-east-1.elb.amazonaws.com/corp/firstinstall/scripts/firstinstall.js
hxxp://www-aws-iwin-com-vpc-1371601338.us-east-1.elb.amazonaws.com/corp/firstinstall/images/iwinshortcut.gif
hxxp://www-aws-iwin-com-vpc-1371601338.us-east-1.elb.amazonaws.com/corp/firstinstall/images/pause.gif
hxxp://www-aws-iwin-com-vpc-1371601338.us-east-1.elb.amazonaws.com/corp/firstinstall/images/stop.gif
hxxp://cs230.wac.edgecastcdn.net/images/site-brand/default/styles/brand-styles.css
hxxp://gs1.wpc.v1cdn.net/gg/pf/iwin/85/acd_60m_pogoiwin1/iwin/ZumaDeluxeSetup.exe
hxxp://www-aws-iwin-com-vpc-1371601338.us-east-1.elb.amazonaws.com/corp/firstinstall/images/submit-blue-22.gif
hxxp://www-aws-iwin-com-vpc-1371601338.us-east-1.elb.amazonaws.com/corp/firstinstall/images/gotomygames-blue-48.gif
hxxp://www-aws-iwin-com-vpc-1371601338.us-east-1.elb.amazonaws.com/corp/firstinstall/images/up.gif
hxxp://www-aws-iwin-com-vpc-1371601338.us-east-1.elb.amazonaws.com/corp/firstinstall/images/logo2.gif
hxxp://www-aws-iwin-com-vpc-1371601338.us-east-1.elb.amazonaws.com/services/dlog?act=start&gid=85&sid=6898945648087804561&hid=70b3bd0bb03902329dc0233ec50d14d970b3&lid=13&aid=49&ft=1
hxxp://www-aws-iwin-com-vpc-1371601338.us-east-1.elb.amazonaws.com/services/dlog?act=complete&gid=85&sid=6898945648087804561&hid=70b3bd0bb03902329dc0233ec50d14d970b3&lid=13&aid=49&ft=1
hxxp://stamp-vpc-aws-iwin-com-1981998893.us-east-1.elb.amazonaws.com/games/iWinInstallOptions.exe
hxxp://cdn-vpc-aws-iwin-com-1060965153.us-east-1.elb.amazonaws.com/toolbar/iWinToolbarLauncher.exe
hxxp://cdn-vpc-aws-iwin-com-1060965153.us-east-1.elb.amazonaws.com/toolbar/iWinGamesToolbar.exe
hxxp://search.vmn.net/newtab/geoip.php	69.50.138.116
hxxp://uninstall.co/data/autoenableFFiwingamestoolbar.txt	173.45.162.51
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?09fe029732e128a1
hxxp://e10088.dspb.akamaiedge.net/pki/CRL/products/Microsoft Windows Hardware Compatibility PCA(1).crl
hxxp://a1363.dscg.akamai.net/pki/crl/products/microsoftrootcert.crl
hxxp://a1363.dscg.akamai.net/pki/crl/products/WinPCA.crl
hxxp://a1363.dscg.akamai.net/pki/crl/products/MicrosoftTimeStampPCA.crl
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/authrootstl.cab?0e79683a6ca82184
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS+zcBkvzl4=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECECxELMMsQejE6tpxhn5zqHA=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI=
hxxp://e6845.ce.akamaiedge.net/ThawtePremiumServerCA.crl
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECECVRccvD8Qb29B4D63fPT+k=
hxxp://a1621.g.akamai.net/pki/crl/products/MicCodSigPCA_08-31-2010.crl
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAKQll6RM0DNpmNM7zH3/Qc=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECECsZtUu3q+4aJiMRHAKa9Ek=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTEemCaVgs8Tuh2B9fGVE0pKKNyzgQUTF+nNhcF4oZhIkk5jLmo40rgOBoCEC6utoKGY/7ZdVX4/iTzOxo=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRODEXefhs/UZFum2o8YfzOFwceMwQUkz5j3yJ0BOBkhDHd2yOfDq+2TZMCEA89qsgV9niZmSI6gIO0S/U=
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?09fe029732e128a1	194.146.191.112
hxxp://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECECxELMMsQejE6tpxhn5zqHA=	23.43.139.27
hxxp://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECECsZtUu3q+4aJiMRHAKa9Ek=	23.43.139.27
hxxp://gm.iwin.com/corp/firstinstall/images/pause.gif	107.23.46.162
hxxp://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECECVRccvD8Qb29B4D63fPT+k=	23.43.139.27
hxxp://dl.iwin.com/games/iWinInstallOptions.exe	54.165.57.164
hxxp://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS+zcBkvzl4=	23.43.139.27
hxxp://gm.iwin.com/corp/firstinstall/images/iwinshortcut.gif	107.23.46.162
hxxp://download.iwincdn.com/gg/pf/iwin/85/acd_60m_pogoiwin1/iwin/ZumaDeluxeSetup.exe	93.184.221.131
hxxp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl	194.146.191.113
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI=	23.43.139.27
hxxp://dl.iwin.com/games/iWinGamesSetup.exe	54.165.57.164
hxxp://gm.iwin.com/styles/ui.css	107.23.46.162
hxxp://ws.iwin.com/services/dlog?act=complete&gid=85&sid=6898945648087804561&hid=70b3bd0bb03902329dc0233ec50d14d970b3&lid=13&aid=49&ft=1	54.210.204.175
hxxp://crl.thawte.com/ThawtePremiumServerCA.crl	23.43.133.163
hxxp://gm.iwin.com/scripts/core-standard.js	107.23.46.162
hxxp://gm.iwin.com/arcade/rawinfo/85/6898945648087804561	107.23.46.162
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w=	23.43.139.27
hxxp://p.iwin.com/toolbar/iWinToolbarLauncher.exe	54.164.199.162
hxxp://p.iwin.com/toolbar/iWinGamesToolbar.exe	54.164.199.162
hxxp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl	194.146.191.113
hxxp://gm.iwin.com/corp/firstinstall/images/logo2.gif	107.23.46.162
hxxp://gm.iwin.com/corp/firstinstall/images/stop.gif	107.23.46.162
hxxp://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl	194.146.191.113
hxxp://gm.iwin.com/corp/firstinstall/firstinstall.html	107.23.46.162
hxxp://gm.iwin.com/dgu?game=ARCD&ver=2.92&dist=iwin	107.23.46.162
hxxp://gm.iwin.com/corp/firstinstall/styles/firstinstall.css	107.23.46.162
hxxp://www.iwin.com/arcade/rawinfo/85/6898945648087804561	54.210.204.175
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8=	23.43.139.27
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?0e79683a6ca82184	194.146.191.112
hxxp://gm.iwin.com/corp/firstinstall/scripts/firstinstall.js	107.23.46.162
hxxp://crl.microsoft.com/pki/crl/products/WinPCA.crl	194.146.191.113
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRODEXefhs/UZFum2o8YfzOFwceMwQUkz5j3yJ0BOBkhDHd2yOfDq+2TZMCEA89qsgV9niZmSI6gIO0S/U=	23.43.139.27
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTEemCaVgs8Tuh2B9fGVE0pKKNyzgQUTF+nNhcF4oZhIkk5jLmo40rgOBoCEC6utoKGY/7ZdVX4/iTzOxo=	23.43.139.27
hxxp://gm.iwin.com/corp/firstinstall/images/gotomygames-blue-48.gif	107.23.46.162
hxxp://gm.iwin.com/corp/firstinstall/images/up.gif	107.23.46.162
hxxp://gm.iwin.com/gm-config	107.23.46.162
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAKQll6RM0DNpmNM7zH3/Qc=	23.43.139.27
hxxp://static.iwincdn.com/images/site-brand/default/styles/brand-styles.css	68.232.35.54
hxxp://ws.iwin.com/services/dlog?act=start&gid=85&sid=6898945648087804561&hid=70b3bd0bb03902329dc0233ec50d14d970b3&lid=13&aid=49&ft=1	54.210.204.175
hxxp://www.microsoft.com/pki/CRL/products/Microsoft Windows Hardware Compatibility PCA(1).crl	23.64.223.148
hxxp://gm.iwin.com/corp/firstinstall/images/submit-blue-22.gif	107.23.46.162
hxxp://img.iwin.com/images/product/85/tn_feat.jpg	54.210.226.131

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

SURICATA UDPv4 invalid checksum
SURICATA IPv4 invalid checksum
ET MALWARE iwin.com Games/Spyware User-Agent (iWin GameInfo Installer Helper)
ET TROJAN Suspicious User-Agent (NSIS_DOWNLOAD)
ET POLICY User-Agent (NSIS_Inetc (Mozilla)) - Sometimes used by hostile installers
ET POLICY Executable served from Amazon S3

Traffic

GET /services/dlog?act=start&gid=85&sid=6898945648087804561&hid=70b3bd0bb03902329dc0233ec50d14d970b3&lid=13&aid=49&ft=1 HTTP/1.1

Cache-Control: no-cache

Pragma: no-cache

Accept: */*

User-Agent: NextDM/2.92

Arcade-version: 2.92

OS-Description:  Windows 7 , 64-bit

Host: ws.iwin.com

Connection: close


HTTP/1.1 200 OK

Accept-Ranges: bytes

Age: 0

Cache-control: no-cache="set-cookie"

Date: Fri, 24 Apr 2015 02:10:31 GMT

Server: nginx/1.1.19

Set-Cookie: AWSELB=3B7F317D1E9786A7B1859B3536CAFEF1380C73778DBDCFB09194C5107B56910187FA09D75311224EEE134A599A5A52D528D356E0315A5144DD52EA2D6D056AD24E9B8BE5BD;PATH=/

Via: 1.1 varnish

X-Varnish: 107072240

Content-Length: 2

Connection: Close

OK..

HEAD /gg/pf/iwin/85/acd_60m_pogoiwin1/iwin/ZumaDeluxeSetup.exe HTTP/1.1

Cache-Control: no-cache

Pragma: no-cache

Accept: */*

User-Agent: NextDM/2.92

Arcade-version: 2.92

OS-Description:  Windows 7 , 64-bit

Host: download.iwincdn.com

Connection: close


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=2592000

Content-Type: application/x-msdos-program

Date: Fri, 24 Apr 2015 02:10:28 GMT

Etag: "8f8716cb202c31abc371f834e94b74fe-2"

Expires: Sun, 24 May 2015 02:10:27 GMT

Last-Modified: Sun, 23 Feb 2014 20:25:10 GMT

Server: ECAcc (frf/874B)

Via: 1.0 download.iwin.com

x-amz-id-2: ZuEA6HzpKs3JaH2nCcmC/eUfnXOwxVBZqRA9N1KDwWEEik0x1K8Q19z 4LEDVqji

x-amz-request-id: 0624939194026C51

X-Cache: HIT

Content-Length: 12895120

Connection: close

GET /arcade/rawinfo/85/6898945648087804561 HTTP/1.1

Cache-Control: no-cache

Pragma: no-cache

Accept: */*

User-Agent: NextDM/2.92

Arcade-version: 2.92

OS-Description:  Windows 7 , 64-bit

Host: gm.iwin.com

Connection: close


HTTP/1.1 200 OK

Accept-Ranges: bytes

Age: 0

Cache-Control: no-cache, private, max-age=0, s-max-age=0, must-revalidate

Cache-control: no-cache="set-cookie"

Content-Type: text/plain;charset=utf-8

Date: Fri, 24 Apr 2015 02:10:25 GMT

P3P: CP="NOI CURo ADMo DEVo TAIo OUR NOR IND COM NAV"

Server: nginx/1.1.19

Set-Cookie: AWSELB=3B7F317D1E9786A7B1859B3536CAFEF1380C73778DBDCFB09194C5107B56910187FA09D75311224EEE134A599A5A52D528D356E0315A5144DD52EA2D6D056AD24E9B8BE5BD;PATH=/

Vary: iWin-App

Via: 1.1 varnish

X-Varnish: 107072041

Content-Length: 572

Connection: Close
gameid|85|skuid|6898945648087804561|title|Zuma Deluxe|tryLink|hXXp://d
ownload.iwincdn.com/gg/pf/iwin/85/acd_60m_pogoiwin1/iwin/ZumaDeluxeSet
up.exe|desc|Easy to play, hard to put down! Control the stone frog ido
l of the ancient Zuma in this thrilling action puzzler. Fire balls to 
make sets of three, but don't let them reach the golden skull or you'r
e history! Exciting sound and stunning 3D graphics immerse you in the 
world of Zuma. Don't hesitate, let the addiction begin! Try the free Z
uma trial now!|activation_code||pid||email||price|999|trial_time|60|al
laccess|true..

GET /gm-config HTTP/1.1

Cache-Control: no-cache

Pragma: no-cache

Accept: */*

User-Agent: NextDM/2.92

Host: gm.iwin.com

Connection: close


HTTP/1.1 200 OK

Accept-Ranges: bytes

Age: 3070

Cache-Control: max-age=7200

Cache-control: no-cache="set-cookie"

Content-Type: application/xml;charset=utf-8

Date: Fri, 24 Apr 2015 02:10:17 GMT

Last-Modified: Sun, 17 Aug 292278994 07:12:55 GMT

P3P: CP="NOI CURo ADMo DEVo TAIo OUR NOR IND COM NAV"

Server: nginx/1.1.19

Set-Cookie: AWSELB=3B7F317D1E9786A7B1859B3536CAFEF1380C73778D2107C374749128F2CB2FA13F128EB25A11224EEE134A599A5A52D528D356E0315A5144DD52EA2D6D056AD24E9B8BE5BD;PATH=/

Vary: iWin-App

Via: 1.1 varnish

X-Varnish: 107071684 106920652

Content-Length: 5027

Connection: Close
<?xml version="1.0" encoding="utf-8"?><gm-url-config xmlns="h
ttp://VVV.iwin.com/schemas/catalog"><url-signin>hXXps://gm.iw
in.com/Login.do</url-signin><url-about-icoins>hXXp://gm.iw
in.com/membership</url-about-icoins><url-my-account>https:
//gm.iwin.com/account/icoins</url-my-account><url-signout>
hXXps://gm.iwin.com/Logout.do</url-signout><url-search>htt
p://gm.iwin.com/search?q=</url-search><url-part-rawInfo>/a
rcade/rawinfo/</url-part-rawInfo><url-update-arcade>http:/
/gm.iwin.com/dgu?game=ARCD&ver=</url-update-arcade><url-u
pdate-game>hXXp://gm.iwin.com/dgu?game=</url-update-game><
url-ws-services-slog>hXXp://ws.iwin.com/services/slog?</url-ws-s
ervices-slog><url-ws-services-dlog>hXXp://ws.iwin.com/service
s/dlog?act=</url-ws-services-dlog><url-ws-services-ulog>ht
tp://ws.iwin.com/services/ulog?lid=</url-ws-services-ulog><ur
l-ws-icoins>hXXp://gm.iwi/url-all-access-games><url-new-games
>hXXp://gm.iwin.com/calendar/games/new</url-new-games><url
-dl-toolbar>/hXXp://iwin.ourtoolbar.com/exe</url-dl-toolbar>&
lt;url-membership-page>hXXp://gm.iwin.com/account/icoins</url-me
mbership-page><fb-login-signature>/FB_LOGIN_STUB_TOKEN</fb
-login-signature><url-clubiwin-member>hXXp://gm.iwin.com/acco
unt/clubiwin-safe.xml;jsessionid=%s</url-clubiwin-member><url
-game-menu-z0>hXXp://gm.iwin.com/categories/games/new</url-g<<< skipped >>>

GET /newtab/geoip.php HTTP/1.1

User-Agent: NSIS_DOWNLOAD

Host: search.vmn.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Fri, 24 Apr 2015 03:10:09 GMT

Server: Microsoft-IIS/5.0

Keep-Alive: timeout=2, max=40

Connection: Keep-Alive

Transfer-Encoding: chunked

Content-Type: text/xml
56 ..<?xml version="1.0" encoding="ISO-8859-1"?>.<geaodata>
;.<country id='US'/>.</geaodata>...0..HTTP/1.1 200 OK..Dat
e: Fri, 24 Apr 2015 03:10:09 GMT..Server: Microsoft-IIS/5.0..Keep-Aliv
e: timeout=2, max=40..Connection: Keep-Alive..Transfer-Encoding: chunk
ed..Content-Type: text/xml..56 ..<?xml version="1.0" encoding="ISO-
8859-1"?>.<geaodata>.<country id='US'/>.</geaodata&g
t;...0..

GET /pki/CRL/products/Microsoft Windows Hardware Compatibility PCA(1).crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: VVV.microsoft.com


HTTP/1.1 200 OK

Content-Length: 573

Content-Type: application/pkix-crl

Last-Modified: Fri, 20 Mar 2015 05:01:22 GMT

Accept-Ranges: bytes

ETag: "6fe4de9ca62d01:0"

Server: Microsoft-IIS/8.5

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

VTag: 791480558500000000

X-Powered-By: ASP.NET

X-Powered-By: ARR/2.5

X-Powered-By: ASP.NET

Cache-Control: max-age=543

Date: Fri, 24 Apr 2015 02:11:27 GMT

Connection: keep-alive

X-CCC: PL

X-CID: 2
0..90..!...0...*.H........0..1.0...U....US1.0...U....Washington1.0...U
....Redmond1.0...U....Microsoft Corporation1503..U...,Microsoft Window
s Hardware Compatibility PCA..150319204537Z..150717210537Z.a0_0...U.#.
.0...(..a.|.?.k..".j ..>-0... .....7.........0...U......n0... .....
7......150617205537Z0...*.H.............^...G....1$...=.......L....Ie.
- .....*&$u.z..{.Y.7....C..q=.{.l,.J..2.....iWJ....6\.T:X.iL.).|]Iz.;h
...".>q.......*..hemT...9.....b|.4&..U'=..m...)Q(h{....:...G.....b.
....z...Eu...%UHS..0....U.S_5_D.....2.Ah...H...I.....L. <L.J.I.5...
.......C....v...o2a...HTTP/1.1 200 OK..Content-Length: 573..Content-Ty
pe: application/pkix-crl..Last-Modified: Fri, 20 Mar 2015 05:01:22 GMT
..Accept-Ranges: bytes..ETag: "6fe4de9ca62d01:0"..Server: Microsoft-II
S/8.5..P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TA
I TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"..VTag: 7914805585
00000000..X-Powered-By: ASP.NET..X-Powered-By: ARR/2.5..X-Powered-By: 
ASP.NET..Cache-Control: max-age=543..Date: Fri, 24 Apr 2015 02:11:27 G
MT..Connection: keep-alive..X-CCC: PL..X-CID: 2..0..90..!...0...*.H...
.....0..1.0...U....US1.0...U....Washington1.0...U....Redmond1.0...U...
.Microsoft Corporation1503..U...,Microsoft Windows Hardware Compatibil
ity PCA..150319204537Z..150717210537Z.a0_0...U.#..0...(..a.|.?.k..".j 
..>-0... .....7.........0...U......n0... .....7......150617205537Z0
...*.H.............^...G....1$...=.......L....Ie.- .....*&$u.z..{.Y.7.
...C..q=.{.l,.J..2.....iWJ....6\.T:X.iL.).|]Iz.;h...".>q.......<<< skipped >>>

GET /corp/firstinstall/firstinstall.html HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Accept-Language: en-US

iWin-App: iWinArcade 2.92

iWin-AID: 49

iWin-HardID: 70b3bd0bb03902329dc0233ec50d14d970b3

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Accept-Encoding: gzip, deflate

Host: gm.iwin.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Age: 30686

Cache-Control: max-age=3600, s-maxage=86400, public

Cache-control: no-cache="set-cookie"

Content-Encoding: gzip

Content-Type: text/html

Date: Fri, 24 Apr 2015 02:10:25 GMT

ETag: W/"3599-1399319850000"

Expires: Thu, 23 Apr 2015 17:39:29 GMT

Last-Modified: Mon, 05 May 2014 19:57:30 GMT

Server: nginx/1.1.19

Set-Cookie: AWSELB=3B7F317D1E9786A7B1859B3536CAFEF1380C73778DEE07357AAA469B5F014369427BF99072C601C892B64F9E93D70F685BC31868110EDB082E45DEEE7AF7C602A51DE4944D;PATH=/

Via: 1.1 varnish

X-Varnish: 1256041851 1254283939

Content-Length: 1397

Connection: keep-alive
...........WKs.6..{&.a.C{hI....4.gRYI3..i...S."!.1.0.(Y... i......"...
....f....-.}7.*...}.........'3...g......p....'.WAY#4........U!4.p..n..
...5_...$..$..I.]O.P...IF....d....|eW-...].0.$....D~m.f.f..iB..5.A...L
4.V. 8:.....3(*....6...........>}[email protected],.X.......2....2.
vZ.J...rr5e....J.....p....<....;u..t.H.V..4iak.j...#.d.DZ... ..0X.7
......Q . ..e~.5Z 3.-G.G^T.....0.W`...c..5../89....x.....U].........L.
.G...e...r>(..k}..Ab......n../.j.xW.K....:.1.p.W._n...... ....1....
..<-..EjL.H......ZJ..UNY..Tb( ./.....S...rw............2......x....
.....V.A..2k...w.....7..k.%5.....(....x.....tp;. (..9'JY..jZ....b.5...
!.}v..2Q.....S.E..I..^D...........D..X#[email protected]{...)......a
.0..ZW.4...V.....(...."hM.H).E..x....F..~..(...32....u....X./..`n.....
7..G..n."..].66..f.:..,}..p..b...{...'.O{.&....L&...y0f..?.l%..z6A\.c.
H........*Y..pW..j....;.fKw.`...oFA...g.:g..XU.5.w...}v g1...5...a....
...d.0v.;..L...a...h..X;..t.`. =G6.s..h..I....Y3........iw..1...":.o..
.....D.........1.....e...)........./e....5.h.........5...6.6`.....-.G.
[)/..*..2..b...,...`....|.v..X.....y,.G.S.......Z(.......t.}...]..y...
...a.H..2-.R..S6...f. .Hi:q..(F..g.......c...k.w..c,.&..#W#T...a....h.
..x..sB....t..y.@...[D.R.x..........^.4.UH..*.LF..C|q...s...0.W.2F.U7m
.73...#>d........T.1mp......u.....Q.../.....'..^...G...............
k..v.%.....(vIc....u...(~...I>e..8.^..?.....<..@...........~.O:v
d......G..............
<<< skipped >>>

GET /styles/ui.css HTTP/1.1

Accept: */*

Referer: hXXp://gm.iwin.com/corp/firstinstall/firstinstall.html

Accept-Language: en-US

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Accept-Encoding: gzip, deflate

Host: gm.iwin.com

Connection: Keep-Alive

Cookie: AWSELB=3B7F317D1E9786A7B1859B3536CAFEF1380C73778DEE07357AAA469B5F014369427BF99072C601C892B64F9E93D70F685BC31868110EDB082E45DEEE7AF7C602A51DE4944D


HTTP/1.1 200 OK

Accept-Ranges: bytes

Age: 961

Cache-Control: max-age=3600

Content-Type: text/css

Date: Fri, 24 Apr 2015 02:10:25 GMT

ETag: W/"48066-1399918412000"

Expires: Fri, 24 Apr 2015 02:54:24 GMT

Last-Modified: Mon, 12 May 2014 18:13:32 GMT

Server: nginx/1.1.19

Via: 1.1 varnish

X-Varnish: 1256041857 1255999172

Content-Length: 48066

Connection: keep-alive
html,body,div,p,blockquote{margin:0;padding:0;border:0;outline:0;}.htm
l.wibiya{padding-bottom:30px;}.body{background-color:#BFE7F3;color:bla
ck;font-size:x-small;font-family:Arial,Helvetica,sans-serif;}.body.iwg
m{background:none;}.h1,h2,h3,h4,h5,h6{margin:0;padding:0;border:0;outl
ine:0;font-size:1em;font-style:normal;font-variant:normal;font-weight:
normal;font-family:inherit;}.ol,ul,dl,dt,dd,li{margin:0;padding:0;}.ol
,ul{list-style:none;}.form,fieldset,textarea{margin:0;padding:0;outlin
e:0;}.table,caption,tbody,tfoot,thead,tr,th,td{margin:0;padding:0;bord
er:0;outline:0;font-style:inherit;font-weight:inherit;}.table{border-c
ollapse:collapse;border-spacing:0;}.pre{margin:0;padding:0;border:0;ou
tline:0;font-family:inherit;font-style:inherit;font-weight:inherit;whi
te-space:normal;}.center,dir,menu{display:none;visibility:hidden;}.b,i
,u,tt,big,small,s{border:0;font-size:1em;font-style:normal;font-weight
:normal;text-decoration:none;}.strike{border:0;font-size:1em;font-weig
ht:normal;}.span,abbr,acronym,address,big,cite,code,del,dfn,em,ins,kbd
,q,samp,strong,sub,sup,var{border:0;font-size:1em;font-style:normal;fo
nt-weight:normal;}.q:before,q:after,blockquote:before,blockquote:after
{content:"";}.q,blockquote{quotes:"" "";}.a,a:link,a:visited,a:active,
a:hover{font-family:inherit;font-size:1em;font-style:inherit;font-weig
ht:inherit;}.img,a img{border:0;}.button,label,input,select,option,opt
group,legend{font-family:inherit;font-size:1em;font-style:inherit;font
-weight:inherit;}.applet,iframe,object,embed{margin:0;padding:0;bo<<< skipped >>>

GET /corp/firstinstall/scripts/firstinstall.js HTTP/1.1

Accept: */*

Referer: hXXp://gm.iwin.com/corp/firstinstall/firstinstall.html

Accept-Language: en-US

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Accept-Encoding: gzip, deflate

Host: gm.iwin.com

Connection: Keep-Alive

Cookie: AWSELB=3B7F317D1E9786A7B1859B3536CAFEF1380C73778DEE07357AAA469B5F014369427BF99072C601C892B64F9E93D70F685BC31868110EDB082E45DEEE7AF7C602A51DE4944D


HTTP/1.1 200 OK

Accept-Ranges: bytes

Age: 3036

Cache-Control: max-age=3600

Content-Type: text/javascript

Date: Fri, 24 Apr 2015 02:10:26 GMT

ETag: W/"3552-1399319850000"

Expires: Fri, 24 Apr 2015 02:19:50 GMT

Last-Modified: Mon, 05 May 2014 19:57:30 GMT

Server: nginx/1.1.19

Via: 1.1 varnish

X-Varnish: 1256041878 1255895425

Content-Length: 3552

Connection: keep-alive
.var iwin=window.iwin||{};iwin.firstInstall=iwin.firstInstall||{};iwin
.firstInstall.messages={EMAIL_IS_EMPTY:'Email field is empty',EMAIL_IS
_NOT_VALID:'Email is not in a valid format',FIRST_NAME_IS_EMPTY:'First
 name field is empty',SUCCESS:'<p><br \/><strong>Tha
nk You!<\/strong><\/p><p>An email was sent to the ad
dress you provided. To redeem your free game, please follow the instru
ctions provided in that email and start playing!<\/p><p>En
joy!<\/p><p>The iWin Team<\/p>'};iwin.firstInstall.t
racking=iwin.firstInstall.tracking||{};iwin.firstInstall.tracking.cate
gory='first install screen';iwin.firstInstall.tracking.subscribe=funct
ion(){iwin.tracking.trackEvent(iwin.firstInstall.tracking.category,'su
bscribe newsletter');};iwin.firstInstall.tracking.goToMyGames=function
(){iwin.tracking.trackEvent(iwin.firstInstall.tracking.category,'go to
 my games');};iwin.firstInstall.validate=function(){var elements=iwin.
firstInstall.elements,valid=true;if(elements.errorContent){elements.er
rorContent.html('');}.if(elements.firstName.val().length<1){iwin.fi
rstInstall.showError('FIRST_NAME_IS_EMPTY');valid=false;}.if(elements.
email.val().length>0){if(!iwin.Util.isEmailValid(elements.email.val
())){iwin.firstInstall.showError('EMAIL_IS_NOT_VALID');valid=false;}}e
lse{iwin.firstInstall.showError('EMAIL_IS_EMPTY');valid=false;}.if(val
id){iwin.firstInstall.hideError();}.return valid;};iwin.firstInstall.s
howError=function(key){var elements=iwin.firstInstall.elements;if(<<< skipped >>>

GET /corp/firstinstall/images/iwinshortcut.gif HTTP/1.1

Accept: */*

Referer: hXXp://gm.iwin.com/corp/firstinstall/firstinstall.html

Accept-Language: en-US

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Accept-Encoding: gzip, deflate

Host: gm.iwin.com

Connection: Keep-Alive

Cookie: AWSELB=3B7F317D1E9786A7B1859B3536CAFEF1380C73778DEE07357AAA469B5F014369427BF99072C601C892B64F9E93D70F685BC31868110EDB082E45DEEE7AF7C602A51DE4944D


HTTP/1.1 200 OK

Accept-Ranges: bytes

Age: 30151

Cache-Control: max-age=86400

Content-Type: image/gif

Date: Fri, 24 Apr 2015 02:10:26 GMT

ETag: W/"1378-1399319850000"

Expires: Fri, 24 Apr 2015 17:47:55 GMT

Last-Modified: Mon, 05 May 2014 19:57:30 GMT

Server: nginx/1.1.19

Via: 1.1 varnish

X-Varnish: 1256041882 1254308858

Content-Length: 1378

Connection: keep-alive
GIF89a.............k.R........}..j...c.-#........6..#.....*..........5
............V.'E.(......Y.6f.......$.....................{.V...v.f....
.v#..G.....:...........H.$,......................................b....
...X..........................................N.................!.....
 .............................n........N.........._..m..X....."n.]f...
..3.......................:.............Y........6E..O.CY.E.........^.
[email protected]../..5`.O/..t.J~.H
*.....7..6.....8..........qF.%.....Q.....r.....o..xi.;y.?.........../.
.......................5........'.....)[email protected]..~..
[email protected]....."...M..;.!S.C............
...............w.%...B. .............../........M.E...............w..V
..u..T.....!.......,...............H..... ........#.:q..<x..i `....
...(....n...s...?D .x)....a..x.......z(9. \[email protected]
.J.$...I..^.8Yh.. ..8.....M;5..<..F.....u ....H..........6.P..T.Q[.
[email protected]....*....w$..f.-......]*^<H..P..4l.....@V....'.
..L....!b..S.<p.IE....)&.......9.....O#e.<dp'....D. [email protected].
m.#...p.A.....2].........[l..P..c..p...2.u.K.N......0..$............I.
...A ..4..Y.b.).h0....#..A..C.D.....P#H. 4a..Z.5....c.>dD..........
..3...A..-..?.\...@.....\..7M.9...)../>.1J"..!.' `0..>TA........
X.C.a,?...H<..6eL.El.Y*..$d...7lC..`..*H.. ....0...PQC.C.D...h0..-.
yP@.;....
<<< skipped >>>

GET /corp/firstinstall/images/pause.gif HTTP/1.1

Accept: */*

Referer: hXXp://gm.iwin.com/corp/firstinstall/firstinstall.html

Accept-Language: en-US

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Accept-Encoding: gzip, deflate

Host: gm.iwin.com

Connection: Keep-Alive

Cookie: AWSELB=3B7F317D1E9786A7B1859B3536CAFEF1380C73778DEE07357AAA469B5F014369427BF99072C601C892B64F9E93D70F685BC31868110EDB082E45DEEE7AF7C602A51DE4944D


HTTP/1.1 200 OK

Accept-Ranges: bytes

Age: 30150

Cache-Control: max-age=86400

Content-Type: image/gif

Date: Fri, 24 Apr 2015 02:10:26 GMT

ETag: W/"325-1399319850000"

Expires: Fri, 24 Apr 2015 17:47:56 GMT

Last-Modified: Mon, 05 May 2014 19:57:30 GMT

Server: nginx/1.1.19

Via: 1.1 varnish

X-Varnish: 1256041893 1254308906

Content-Length: 325

Connection: keep-alive
GIF89a.......g.................l...N~....HyJi.Jj..0kS{.m..p.........Hy
q........p...Q..P~W.........0j...............................0j.......
.................................................................!....
...,[email protected]*[email protected]>.T..N.....3X..$.8>'.G
#1^?*v.b..b..E""b.."'..%.%.......!!.....(..EHF.(A.;....


GET /corp/firstinstall/images/stop.gif HTTP/1.1

Accept: */*

Referer: hXXp://gm.iwin.com/corp/firstinstall/firstinstall.html

Accept-Language: en-US

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Accept-Encoding: gzip, deflate

Host: gm.iwin.com

Connection: Keep-Alive

Cookie: AWSELB=3B7F317D1E9786A7B1859B3536CAFEF1380C73778DEE07357AAA469B5F014369427BF99072C601C892B64F9E93D70F685BC31868110EDB082E45DEEE7AF7C602A51DE4944D


HTTP/1.1 200 OK

Accept-Ranges: bytes

Age: 30149

Cache-Control: max-age=86400

Content-Type: image/gif

Date: Fri, 24 Apr 2015 02:10:26 GMT

ETag: W/"345-1399319850000"

Expires: Fri, 24 Apr 2015 17:47:57 GMT

Last-Modified: Mon, 05 May 2014 19:57:30 GMT

Server: nginx/1.1.19

Via: 1.1 varnish

X-Varnish: 1256041899 1254308938

Content-Length: 345

Connection: keep-alive
GIF89a........y{...................}.......Jj.....Hy.......M}.;G......
.Q..........p..g.....h......)8.AK.<G....N}l..X...(8.P....m........q
...ALm.....Rz.q...0=....0=.............0j........../j....0j.........!.
......,..........v..k. .t:..p.P.....I=.(.j..|2..."..j3.N.).<.\o....
......v.I.;5sr3;.<6.14s|2/.6<0.;g.q..<.....9;#..'.!.%8..8.. .
&$HF.-=A.;HTTP/1.1 200 OK..Accept-Ranges: bytes..Age: 30149..Cache-Con
trol: max-age=86400..Content-Type: image/gif..Date: Fri, 24 Apr 2015 0
2:10:26 GMT..ETag: W/"345-1399319850000"..Expires: Fri, 24 Apr 2015 17
:47:57 GMT..Last-Modified: Mon, 05 May 2014 19:57:30 GMT..Server: ngin
x/1.1.19..Via: 1.1 varnish..X-Varnish: 1256041899 1254308938..Content-
Length: 345..Connection: keep-alive..GIF89a........y{.................
..}.......Jj.....Hy.......M}.;G.......Q..........p..g.....h......)8.AK
.<G....N}l..X...(8.P....m........q...ALm.....Rz.q...0=....0=.......
......0j........../j....0j.........!.......,..........v..k. .t:..p.P..
...I=.(.j..|2..."..j3.N.).<.\o..........v.I.;5sr3;.<6.14s|2/.6&l
t;0.;g.q..<.....9;#..'.!.%8..8.. .&$HF.-=A.;....


GET /corp/firstinstall/images/gotomygames-blue-48.gif HTTP/1.1

Accept: */*

Referer: hXXp://gm.iwin.com/corp/firstinstall/firstinstall.html

Accept-Language: en-US

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Accept-Encoding: gzip, deflate

Host: gm.iwin.com

Connection: Keep-Alive

Cookie: AWSELB=3B7F317D1E9786A7B1859B3536CAFEF1380C73778DEE07357AAA469B5F014369427BF99072C601C892B64F9E93D70F685BC31868110EDB082E45DEEE7AF7C602A51DE4944D; iWinCSC=iwinsrc=direct|ts=1429841428050


HTTP/1.1 200 OK

Accept-Ranges: bytes

Age: 30308

Cache-Control: max-age=86400

Content-Type: image/gif

Date: Fri, 24 Apr 2015 02:10:29 GMT

ETag: W/"2948-1399319850000"

Expires: Fri, 24 Apr 2015 17:45:21 GMT

Last-Modified: Mon, 05 May 2014 19:57:30 GMT

Server: nginx/1.1.19

Via: 1.1 varnish

X-Varnish: 1256041997 1254301415

Content-Length: 2948

Connection: keep-alive
GIF89a..0....&..|....._..d..O..?..D..T..9..4..Z..J.....S.....s........
%..4..............D...{....c.........z..w..}..v..t...................v
...........r...........n..j..........................z.....[........].
.....u..?o...............~...Ds....x........x.e.....b.._........P.....
.........L..p..............x..k..Y..B..............v..S.....g........o
.........V....o..i.....{..t......t.`.....6r.....[..........r...g......
..........e..a..F......p..Drj...Ap{......Ft.......|.]...Iv.q.r......t.
......c........n.....{.....`..........................x..S.....O..V...
..u..Y..............=...../.....*..y..i..u..m.."..q...w..{.....~......
..3f..................................................................
......................................................................
...........!.......,......0...............*\......#JL....1~........ C.
.I....(?..#fI.a0c..I....8s......:K...J....H.*].....P..<F....X.j....
..`.r-X....h..].....p..m[p...x.............. [email protected]>...e.f&
#6..T..t4K.%.....S........b......H..\B.g...I...>.v.$.u9FN\v.Kl.....
....k.j^p.......x.^."....p....f.u.p.#J{'.b....G3..}w...}g..]..L..Yf..:
4..c1..G3q...{...].... ~:..^A.....H43.. .....H..,0.XC3).QE....C"0..#.)
.`..j....0..e..PQ..)....'4...][email protected]..;....>B.".T"PP.t.Yg......E..
..z..B3.6...L4....*AI..pbh3-..L.>l....B.h..*A)...Z. ...g......u6..)
..1`.......)X......k...ZB3..@....{....PB...Bm3%0......k-.2{..%...c<
[email protected]....|C3W.|..&.....#l........3.0......&.r@37
.....8...&.\1...@..*....&. q. ?|..$X..%.`<....d..H#...h$m..=..4<<< skipped >>>

GET /corp/firstinstall/images/logo2.gif HTTP/1.1

Accept: */*

Referer: hXXp://gm.iwin.com/corp/firstinstall/firstinstall.html

Accept-Language: en-US

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Accept-Encoding: gzip, deflate

Host: gm.iwin.com

Connection: Keep-Alive

Cookie: AWSELB=3B7F317D1E9786A7B1859B3536CAFEF1380C73778DEE07357AAA469B5F014369427BF99072C601C892B64F9E93D70F685BC31868110EDB082E45DEEE7AF7C602A51DE4944D; iWinCSC=iwinsrc=direct|ts=1429841428050


HTTP/1.1 200 OK

Accept-Ranges: bytes

Age: 30308

Cache-Control: max-age=86400

Content-Type: image/gif

Date: Fri, 24 Apr 2015 02:10:29 GMT

ETag: W/"10410-1399319850000"

Expires: Fri, 24 Apr 2015 17:45:21 GMT

Last-Modified: Mon, 05 May 2014 19:57:30 GMT

Server: nginx/1.1.19

Via: 1.1 varnish

X-Varnish: 1256042006 1254301421

Content-Length: 10410

Connection: keep-alive
GIF89a..7....wf...y..t.pQ..s..............t..................O.b...XC.
..e................r4......wsl......TH9........Z..4Q;...z.|......Q.p0.
..WQK.......}i..UfS.q....L..f.......pZ....x.............OQh...........
q..9...........V.....F.mM.mn.....s.....]phX.zd..k....M2.....D.......RH
..............\...........I..J........wjY...z&%$...d[O........e..`...I
2....................qE.....X........c....zbfTs.k.....r...k..I..`_L..y
...`........t....s......>.Qc.a8........L..............k.....s......
.....>.._.Z=.......V/p\...x...FE[.......3C.....|...........H....|..
.......W..}..w............A;6......}m..l..A7..H..j....................
....q`.......\c......O.aH..~X^t.......................................
..................gp.gY.....u{zc.....]i...............................
.................!.......,......7........H.......[......"J.H..........
....3..Y.....S.\.....#3:.I....8s..y......r.*n.>...*].....P.J.J....M
...JT(8.-..|I6\..gu.[.....ks.D;..D.-."[email protected]...,.....
'jp. .....Z......i.v...XX0...O7.K..A.~5.....P...~~J...m.i]..b...R.....
..=...)...7.......U.y..O.f.....w..._.w......J:......T9.=S.......4....C
.1..CD7..Opp.cE...._..G1.....R......f.P....|..g#]<.xc][email protected]
..H&..O.....MY.......1 .gU.......F..tb.1.&.F....."...d.b......'T...|..
.g..'....E.E..7WL.......W.n.V.ZW..w..P&UD....H%..SL?V..........H.....`
....t..'.J...\P.". X.a'..A..Y...=x...-...'...(....FhjJ&i.l.vJU})......
...F...3'.s.?.....d..M1ZFU..zd!.&...Aul4|........h....0u.?.|...l....vx
...*0.E8...-....g.........n./.[..N....D.......`g.T..gY0@F#&."I...P<<< skipped >>>

GET /data/autoenableFFiwingamestoolbar.txt HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: uninstall.co

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 404 Not Found

Date: Fri, 24 Apr 2015 02:11:11 GMT

Server: Apache/2.2.9 (Debian) PHP/5.2.6-1 lenny8 with Suhosin-Patch

Vary: Accept-Encoding

Content-Length: 350

Keep-Alive: timeout=15, max=40

Connection: Keep-Alive

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>404 Not Found</title>.</head><
body>.<h1>Not Found</h1>.<p>The requested URL /da
ta/autoenableFFiwingamestoolbar.txt was not found on this server.</
p>.<hr>.<address>Apache/2.2.9 (Debian) PHP/5.2.6-1 lenn
y8 with Suhosin-Patch Server at uninstall.co Port 80</address>.&
lt;/body></html>...

GET /images/product/85/tn_feat.jpg HTTP/1.1

User-Agent: iWin GameInfo Installer Helper

Host: img.iwin.com


HTTP/1.1 200 OK

Accept-Ranges: bytes

Age: 54778

Cache-Control: max-age=86400, s-maxage=2592000

Content-Type: image/jpeg

Date: Fri, 24 Apr 2015 02:09:55 GMT

ETag: "3f01000fe3974044a23f9687bf05151c"

Last-Modified: Thu, 01 May 2014 17:22:37 GMT

Server: AmazonS3

Via: 1.1 img.iwin.com

Via: 1.1 varnish

x-amz-id-2: en1rItp8mLruVuDMLt1wnknapUVVLXSmpCSceYP8ZKDApL0F7i6hDJmGnjoNEwhEey9B7nT4wOw=

x-amz-request-id: DFACC8CBD95C649F

X-Varnish: 31096646 30402312

Content-Length: 1582

Connection: keep-alive
......JFIF.....d.d......Ducky.......F......Adobe.d....................
......................................................................
.......................................................(.(............
......................................................................
......!.A.1Q".aq2....RS.........................!Q..1Aa...."....2Bbr3.
.$...R...#cs.CST.............?.p........q..q.v.h...P^[email protected]$.R.z...0V^
.......bv.M.N..(..8....s8S|.......q[...{,..Z. :..J.V:m.u5....8R.Y..j..
T..L.a].`z.....(......T.>...>h.s..........#.i........*...&..N.[b
\.q.~...?...G......:...9...d......N.p6....O.B...wA......eX.Rll...b.=L.
..q..q5.......f.3"...fx..;.x=-.z.O..QO.....W..:Y..o4...Z%.Y.....2T..|.
K_..<........;....d.*.[.$..*...~qEK&-....S...&Rd.?.L8.,:..RT...u...
.H..<1.%!V...K.....V.*jU.;j.!.Qm....H.P:.r.8.J*.1..........H.v...HT
.6E...J...D...k.*..`O....4.....A}......d..4....x..........u....4d..FO.
...Y......lY.h..V..)..hqB[o....*.Uk.....i..:D0.J.VN.4.*..n....... .D..
I.Q)>.zT...m.F.l?T.........wq.H#...!!M..%N.....L.>^.......YF..z5
}Slb7X...V..6<..............[.......?.....o........m4.P.4....f5....
.....?.......%......q. .............qSAJ.z..b..Q........H..I.E.~...4..
s......~.H..l.~e...%6-.... ."!-.......9r...D...*..q.Cl..i.f.jH...[..e.
.0..g......-.D.u..R.(.'}...Ky.-#....}1&.....@...`~{._0...[`q....q.(O%F
u.......I..)M.uV..mY......1...f$.f..w..h..\;7}\...'n.].....vN5..~L...n
;%.:..).I$...X.R.la..b..Ko.....GWG];./.y.52-U.In..=..........F...@.>
;Z=.7...o3../..-I..j..Mhj6............t`..z:..x.'..|4....<.....<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=548733, public, no-transform, must-revalidate

Last-Modified: Thu, 23 Apr 2015 10:40:21 GMT

Expires: Thu, 30 Apr 2015 10:40:21 GMT

Date: Fri, 24 Apr 2015 02:14:48 GMT

Connection: keep-alive
0..........0..... .....0......0...0......'.V.8.F.V....H....JW..2015042
3104021Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
.A..2.....:...:......20150423104021Z....20150430104021Z0...*.H........
..........o.}"^O8.[....i...8..o4.....|..aJ.J...U..E[.../...\ .%.o..;.,
r~.0....xgZ...8..K..V.CQ..U...F1..D1..VwQ....<h~.*#........ [email protected]..
.-.6Y,Be...l*[email protected]......*.0.`U.U4...?_......>r..H.......q
...f..0.BD.w.m..-.f.@.%...LH.7..{........AV5......E.%.c.....#0...0...0
..........r..?.*......y"..0...*.H........0..1.0...U....US1.0...U....Ve
riSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use a
t hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code S
igning 2009-2 CA0...150226000000Z..150527235959Z0..1.0...U....US1.0...
U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms o
f use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Clas
s 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0.......
......m5*R........2....>...yU4..L.. ...........u..Hez..Pn.....d...n
z(...V7.}^...d!RX...bl..[..a...L.. .~..Ij......%..%p.-...u..:..i..F*].
..*....{NH..|0...gHX.Q.r....S..........._.9.(w...suC...N..s.....&."...
:.C.Q.i~rl..<..krS..8.B..o][email protected]...
U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.veri
sign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS inco
rp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U..
......0... .....0......0"..U....0...0.1.0...U....TGV-B-32010...*.H<<< skipped >>>

GET /pki/crl/products/microsoftrootcert.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Tue, 24 Mar 2015 05:02:25 GMT

If-None-Match: "a1132b8ef65d01:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 304 Not Modified

Content-Type: application/pkix-crl

Last-Modified: Tue, 24 Mar 2015 05:02:25 GMT

ETag: "a1132b8ef65d01:0"

Cache-Control: max-age=900

Date: Fri, 24 Apr 2015 02:11:59 GMT

Connection: keep-alive

....

GET /pki/crl/products/WinPCA.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Sat, 07 Mar 2015 06:01:44 GMT

If-None-Match: "dde36a309c58d01:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 304 Not Modified

Content-Type: application/pkix-crl

Last-Modified: Sat, 07 Mar 2015 06:01:44 GMT

ETag: "dde36a309c58d01:0"

Cache-Control: max-age=900

Date: Fri, 24 Apr 2015 02:11:59 GMT

Connection: keep-alive

....

GET /pki/crl/products/MicrosoftTimeStampPCA.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Thu, 05 Mar 2015 06:01:35 GMT

If-None-Match: "cf2633d6957d01:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 304 Not Modified

Content-Type: application/pkix-crl

Last-Modified: Thu, 05 Mar 2015 06:01:35 GMT

ETag: "cf2633d6957d01:0"

Cache-Control: max-age=900

Date: Fri, 24 Apr 2015 02:11:59 GMT

Connection: keep-alive

HTTP/1.1 304 Not Modified..Content-Type: application/pkix-crl..Last-Mo
dified: Thu, 05 Mar 2015 06:01:35 GMT..ETag: "cf2633d6957d01:0"..Cache
-Control: max-age=900..Date: Fri, 24 Apr 2015 02:11:59 GMT..Connection
: keep-alive..

HEAD /arcade/rawinfo/85/6898945648087804561 HTTP/1.1

Cache-Control: no-cache

Pragma: no-cache

Accept: */*

User-Agent: NextDM/2.92

Arcade-version: 2.92

OS-Description:  Windows 7 , 64-bit

Host: gm.iwin.com

Connection: close


HTTP/1.1 200 OK

Accept-Ranges: bytes

Age: 0

Cache-Control: no-cache, private, max-age=0, s-max-age=0, must-revalidate

Cache-control: no-cache="set-cookie"

Content-Length: 572

Content-Type: text/plain;charset=utf-8

Date: Fri, 24 Apr 2015 02:10:25 GMT

P3P: CP="NOI CURo ADMo DEVo TAIo OUR NOR IND COM NAV"

Server: nginx/1.1.19

Set-Cookie: AWSELB=3B7F317D1E9786A7B1859B3536CAFEF1380C73778DEE07357AAA469B5F014369427BF99072C601C892B64F9E93D70F685BC31868110EDB082E45DEEE7AF7C602A51DE4944D;PATH=/

Vary: iWin-App

Via: 1.1 varnish

X-Varnish: 1256041842

Connection: Close

GET /pki/crl/products/MicCodSigPCA_08-31-2010.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Tue, 14 Apr 2015 05:02:07 GMT

Accept-Ranges: bytes

ETag: "2711f7277076d01:0"

Server: Microsoft-IIS/8.0

VTag: 279356841900000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 554

Cache-Control: max-age=900

Date: Fri, 24 Apr 2015 02:14:45 GMT

Connection: keep-alive

0..&0......0...*.H........0y1.0...U....US1.0...U....Washington1.0...U.
...Redmond1.0...U....Microsoft Corporation1#0!..U....Microsoft Code Si
gning PCA..150413163223Z..150713045223Z.a0_0...U.#..0..........X..7.3.
..L...0... .....7.........0...U......Z0... .....7......150712164223Z0.
..*.H.............WK....e.\.-.n......./......."]..E!.. //=...[....w...
 ..........#...[.l.J..f|..... .s......w...J._.......3.[..#.z....ko.I..
Q{....e.nV......F..d}..rF\H.jlH]dQ.E....x......W............j....&L. 2
.$.?...X?.#.(.....pK.v.......y..r....t......=.AW......K.G.gJD.b...

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAKQll6RM0DNpmNM7zH3/Qc= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=541306, public, no-transform, must-revalidate

Last-Modified: Thu, 23 Apr 2015 08:35:12 GMT

Expires: Thu, 30 Apr 2015 08:35:12 GMT

Date: Fri, 24 Apr 2015 02:15:00 GMT

Connection: keep-alive
0..........0..... .....0......0...0......'.V.8.F.V....H....JW..2015042
3083512Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
....^[email protected]...*.H........
......_J.r.R......~..^'r...w..H-C3.].Y....1.X.j .........Dd..........z
.*.B/...V....WB.q..9....mY.<.$...]........r.D'.....mm.....lHp......
[email protected]>.......R..'.!.........i..^......h...AB.....IJI
.......).8~...dC*7*.?....l.....C.'Lb...,...N....;../W.......#0...0...0
..........r..?.*......y"..0...*.H........0..1.0...U....US1.0...U....Ve
riSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use a
t hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code S
igning 2009-2 CA0...150226000000Z..150527235959Z0..1.0...U....US1.0...
U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms o
f use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Clas
s 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0.......
......m5*R........2....>...yU4..L.. ...........u..Hez..Pn.....d...n
z(...V7.}^...d!RX...bl..[..a...L.. .~..Ij......%..%p.-...u..:..i..F*].
..*....{NH..|0...gHX.Q.r....S..........._.9.(w...suC...N..s.....&."...
:.C.Q.i~rl..<..krS..8.B..o][email protected]...
U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.veri
sign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS inco
rp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U..
......0... .....0......0"..U....0...0.1.0...U....TGV-B-32010...*.H<<< skipped >>>

GET /ThawtePremiumServerCA.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.thawte.com


HTTP/1.1 200 OK

Server: Apache

ETag: "e5ef0b5401fcc3e52be50c3e6696a262:1429823443"

Last-Modified: Thu, 23 Apr 2015 21:10:43 GMT

Date: Fri, 24 Apr 2015 02:14:38 GMT

Content-Length: 7587

Connection: keep-alive

Content-Type: application/pkix-crl
0...0...0...*.H........0..1.0...U....ZA1.0...U....Western Cape1.0...U.
...Cape Town1.0...U....Thawte Consulting cc1(0&..U....Certification Se
rvices Division1!0...U....Thawte Premium Server CA1(0&..*.H........pre
[email protected]!....T..W...p
.[..%...100322161038Z0!....hx.....k...7....130919164724Z0!...!P..6{.lS
[email protected]!...Da\v..........%..130920062728Z0!...>.e..-
...s[.2I...140418142220Z0!....dU...(...=...*..140801114607Z0!........d
.{#E..9`...130926061856Z0!....6..q.'tT..1.Q...130926062249Z0!.........
...>..i....130528164218Z0!..........#.P.......130716072254Z0!.....%
.......R......100801221434Z0!.....M..HK.....x....130926060355Z0!....k.
"..z......64..130919082450Z0!...W..._....%..I....130926063253Z0!..._._
~gq.I.)[email protected]!.....=X>...][email protected]!...
 .(........n.S...130923202627Z0!.....:...B..=]Hsx_..130920011556Z0!...
.>.ITt.Aw%*I.....130918091937Z0!....-.U.BC{#...x....120301162056Z0!
...U...z7.....UK.n..150330151829Z0!..........1S..Pp....130925105017Z0!
.......x.G.....=....130926064912Z0!....d....... ..=....130911111649Z0!
.....|...x._....wH..100510135256Z0!.....f.....F."E.....100527143439Z0!
.......B...Y..;..S..130925185558Z0!..........G.1.......100624153158Z0!
...3...$o~...w.t3...140304192649Z0!...=.;...........`..130924105544Z0!
....e..8..3...h1[|..130905162920Z0!...d.[,tpLq..o.; ...100528183707Z0!
...c.$.?.._..4..O...130905193529Z0!......V..T].Y..:|...130304224528Z0!
....Xy..MnW.G..f.t..130810133109Z0!.....c.8..vX....ue..13093018594<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECECsZtUu3q+4aJiMRHAKa9Ek= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.thawte.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1396

content-transfer-encoding: binary

Cache-Control: max-age=551098, public, no-transform, must-revalidate

Last-Modified: Thu, 23 Apr 2015 11:20:03 GMT

Expires: Thu, 30 Apr 2015 11:20:03 GMT

Date: Fri, 24 Apr 2015 02:15:05 GMT

Connection: keep-alive
0..p......i0..e.. .....0.....V0..R0......Qw.}`[email protected]
3112003Z0s0q0I0... ........l....r.vdv0..*.~Y..X....e?z.4..G.L.......q.
. ..K....&#.....I....20150423112003Z....20150430112003Z0...*.H........
.....h.R.....;.L.......J=]*....B..e:3....#.........,(.\.[.....v.N.=gq.
.y....G.m=.....^KB./....P$h....r.^..n.7...ce.".=-.9...1..A._.n..&.....
.| ..x.Cyb..n..Y.V..>...8. ..o\..........@eZiv[.......u....-@..!..|
....z.1a:..0.R.|.c/.r.3.rz..7..*..HW........}$......(.....0...0...0..y
.......^..........N...)0...*.H........0J1.0...U....US1.0...U....Thawte
, Inc.1$0"..U....Thawte Code Signing CA - G20...150303000000Z..1506012
35959Z0Y1.0...U....US1.0...U....Thawte, Inc.1301..U...*Thawte Code Sig
ning CA - G2 OCSP Responder0.."0...*.H.............0............).Z...
....O.~.l...,\.3.".'.'W .ih./..}OA...K...HJd....K^..<.....-.rWJ.j.U
.._......W.../.6....J.y.u-.\...2..U.52B.>...=F...RbR.y.zm.......{b.
bj....Y..J..m...*=.^......V.}p......rmA......9.L ...{?.g.-Y...........
.8...k.$.:.5..6#4..F.#....t.B.8.O)'F.p).........d0b0...U....0.0...U.%.
.0... .......0...U........0... .....0......0"..U....0...0.1.0...U....T
GV-B-32450...*.H..............C.....8.Aw.{....`...y1N...W4M..M.J.3~..7
#}..X..:x..5....$...Z^%.?6..e...}I.)....... .A.w......_...B..j.T..Yu.o
.....g....H....q.Ju.SA`K.....~..O_.....S....I>..O.X..E.......]...y.
.L..F....K......../...._XSk6.:a};.?`...:^.....p....4Z.3L;.......t....&
gt;.....j....<<< skipped >>>

GET /toolbar/iWinToolbarLauncher.exe HTTP/1.0

Host: p.iwin.com

User-Agent: NSISDL/1.2 (Mozilla)

Accept: */*


HTTP/1.1 200 OK

Content-Type: application/x-msdos-program

Date: Fri, 24 Apr 2015 02:10:57 GMT

ETag: "f0274e323fab9a7282b33dc805de8f5e"

Last-Modified: Mon, 05 May 2014 23:45:52 GMT

Server: AmazonS3

Via: 1.1 p.iwin.com

x-amz-id-2: HHV3Db9nw0FjaOToq46WR14sNZhBUceq2h9Wm6R70MbG5 A 3xbz6ltA4rhLUXHG

x-amz-request-id: BE1A57D05DCBF472

Content-Length: 105592

Connection: Close
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L.....
.Q.................^...........1.......p....@.........................
.0.......0.......................................t...........p........
..X... ............................................................p..
.............................text....].......^.................. ..`.r
data.......p.......b..............@[email protected]....\...........v..........
....@....ndata...................................rsrc....p.......p...z
..............@..@....................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u....r@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Tp@[email protected]
....E..9}[email protected].}.j.W.E......E.......@[email protected]..
[email protected]<[email protected] [email protected]...\r@._
^3.[.....L$....B...Si.....VW.T.....tO.q.3.;5..B.sB..i......D.......t.G
.....t...O..t .....u...3....3...F.....;5..B.r._^[...U..QQ.U.SV..i.<<< skipped >>>

GET /toolbar/iWinGamesToolbar.exe HTTP/1.0

Host: p.iwin.com

User-Agent: NSISDL/1.2 (Mozilla)

Accept: */*


HTTP/1.1 200 OK

Content-Type: application/x-msdos-program

Date: Fri, 24 Apr 2015 02:11:01 GMT

ETag: "e76bd1946175651d77879b14123dc783"

Last-Modified: Mon, 05 May 2014 23:45:52 GMT

Server: AmazonS3

Via: 1.1 p.iwin.com

x-amz-id-2: vou7Bqj5k2P6M4f39w1x9gubVbiSDEE37hdfBziQsQZIQz1k3VhvwqdU7g2niTQw

x-amz-request-id: 786F0D9702E58BE9

Content-Length: 2101008

Connection: Close
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
....................................................................s.
...... ...q...........................................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@[email protected]........
[email protected][email protected]
rc....q... ...r...v..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>[email protected].>[email protected].
P.u...Pr@..}[email protected]... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
[email protected]}[email protected].}.j.W.E......E.......P
[email protected]@[email protected] [email protected]..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..<<< skipped >>>

GET /msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?09fe029732e128a1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Tue, 24 Mar 2015 16:17:41 GMT

If-None-Match: "804047d4e66d01:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com


HTTP/1.1 304 Not Modified

Content-Type: application/octet-stream

Last-Modified: Tue, 24 Mar 2015 16:17:41 GMT

ETag: "804047d4e66d01:0"

Cache-Control: max-age=86400

Date: Fri, 24 Apr 2015 02:11:25 GMT

Connection: keep-alive

HTTP/1.1 304 Not Modified..Content-Type: application/octet-stream..Las
t-Modified: Tue, 24 Mar 2015 16:17:41 GMT..ETag: "804047d4e66d01:0"..C
ache-Control: max-age=86400..Date: Fri, 24 Apr 2015 02:11:25 GMT..Conn
ection: keep-alive..

GET /corp/firstinstall/styles/firstinstall.css HTTP/1.1

Accept: */*

Referer: hXXp://gm.iwin.com/corp/firstinstall/firstinstall.html

Accept-Language: en-US

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Accept-Encoding: gzip, deflate

Host: gm.iwin.com

Connection: Keep-Alive

Cookie: AWSELB=3B7F317D1E9786A7B1859B3536CAFEF1380C73778DEE07357AAA469B5F014369427BF99072C601C892B64F9E93D70F685BC31868110EDB082E45DEEE7AF7C602A51DE4944D


HTTP/1.1 200 OK

Accept-Ranges: bytes

Age: 3569

Cache-Control: max-age=3600

Content-Type: text/css

Date: Fri, 24 Apr 2015 02:10:25 GMT

ETag: W/"2070-1399319850000"

Expires: Fri, 24 Apr 2015 02:10:56 GMT

Last-Modified: Mon, 05 May 2014 19:57:30 GMT

Server: nginx/1.1.19

Via: 1.1 varnish

X-Varnish: 1256041860 1255865998

Content-Length: 2070

Connection: keep-alive
html,body {...font-family: verdana, arial, helvetica, sans-serif;...ba
ckground: #fff none !important;..}..#content {...width: 968px;...margi
n: 0 auto;...font-size: 1.2em;...overflow: hidden;...line-height: norm
al;..}..#content h2 {...font-family: arial, helvetica, sans-serif;...p
adding: 30px 0 3px;...margin: 0 0 14px;...font-size: 1.5em;..}..#conte
nt p {...padding-right: 30px;...margin: 0 0 14px;..}..#content div.sec
tion {...float: left;...width: 300px;...padding: 0 6px 0 0;..}..#conte
nt div.section.alt {...padding: 0 6px;...border: 1px solid #dbe6ee;...
border-width: 0 1px;...height: 310px;..}..#content div.section.alt2 {.
..width: 330px;...padding: 0 0 0 18px;..}..#content a.myGames {...back
ground: url(../images/gotomygames-blue-48.gif) 0 0 no-repeat;...displa
y: block;...height: 24px;...width: 132px;...text-decoration: none;..}.
.#content a:hover .myGames {...background-position: 0 -24px;..}..#cont
ent h2.downloadQueue {...background: #e6e8e9 url(../images/up.gif) 0 0
 no-repeat;...width: 260px;...padding-left: 12px;...margin: 0 auto;..}
..#content div.downloadQueue {...margin: 0 auto;...width: 258px;...bor
der: 1px solid #7e9bb4;...border-top-width: 0;...background-color: #ed
f8fc;...padding: 14px 0 0 12px;..}..#content div.section ul li {...lis
t-style-type: none;...padding: 3px;..}..#content h2.getFreeGame {...ba
ckground: url(../images/logo2.gif) right bottom no-repeat;...width: 33
0px;...padding-left: 12px;...margin: 0 auto;..}..#content div.getFreeG
ame {...margin: 0 auto;...width: 330px;...background-color: #edf8f<<< skipped >>>

GET /scripts/core-standard.js HTTP/1.1

Accept: */*

Referer: hXXp://gm.iwin.com/corp/firstinstall/firstinstall.html

Accept-Language: en-US

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Accept-Encoding: gzip, deflate

Host: gm.iwin.com

Connection: Keep-Alive

Cookie: AWSELB=3B7F317D1E9786A7B1859B3536CAFEF1380C73778DEE07357AAA469B5F014369427BF99072C601C892B64F9E93D70F685BC31868110EDB082E45DEEE7AF7C602A51DE4944D


HTTP/1.1 200 OK

Accept-Ranges: bytes

Age: 3569

Cache-Control: max-age=3600

Content-Type: text/javascript

Date: Fri, 24 Apr 2015 02:10:25 GMT

ETag: W/"538555-1399918412000"

Expires: Fri, 24 Apr 2015 02:10:56 GMT

Last-Modified: Mon, 12 May 2014 18:13:32 GMT

Server: nginx/1.1.19

Via: 1.1 varnish

X-Varnish: 1256041868 1255866009

Content-Length: 538555

Connection: keep-alive
.function Arcfour(){this.i=0;this.j=0;this.S=new Array}function ARC4in
it(key){var i,j,t;for(i=0;i<256;  i)this.S[i]=i;j=0;for(i=0;i<25
6;  i){j=j this.S[i] key[i%key.length]&255;t=this.S[i];this.S[i]=this.
S[j];this.S[j]=t}this.i=0;this.j=0}function ARC4next(){var t;this.i=th
is.i 1&255;this.j=this.j this.S[this.i]&255;t=this.S[this.i];this.S[th
is.i]=this.S[this.j];this.S[this.j]=t;return this.S[t this.S[this.i]&2
55]}Arcfour.prototype.init=ARC4init;Arcfour.prototype.next=ARC4next;.f
unction prng_newstate(){return new Arcfour}var rng_psize=256;.var rng_
state;var rng_pool;var rng_pptr;function rng_seed_int(x){rng_pool[rng_
pptr  ]^=x&255;rng_pool[rng_pptr  ]^=x>>8&255;rng_pool[rng_pptr 
 ]^=x>>16&255;rng_pool[rng_pptr  ]^=x>>24&255;if(rng_pptr&
gt;=rng_psize)rng_pptr-=rng_psize}function rng_seed_time(){rng_seed_in
t((new Date).getTime())}.if(rng_pool==null){rng_pool=new Array;rng_ppt
r=0;var t;if(navigator.appName=="Netscape"&&navigator.appVersion<"5
"&&window.crypto){var z=window.crypto.random(32);for(t=0;t<z.length
;  t)rng_pool[rng_pptr  ]=z.charCodeAt(t)&255}while(rng_pptr<rng_ps
ize){t=Math.floor(65536*Math.random());rng_pool[rng_pptr  ]=t>>&
gt;8;rng_pool[rng_pptr  ]=t&255}rng_pptr=0;rng_seed_time()}.function r
ng_get_byte(){if(rng_state==null){rng_seed_time();rng_state=prng_newst
ate();rng_state.init(rng_pool);for(rng_pptr=0;rng_pptr<rng_pool.len
gth;  rng_pptr)rng_pool[rng_pptr]=0;rng_pptr=0}return rng_state.next()
}function rng_get_bytes(ba){var i;for(i=0;i<ba.length;  i)ba[i]<<< skipped >>>

GET /corp/firstinstall/images/submit-blue-22.gif HTTP/1.1

Accept: */*

Referer: hXXp://gm.iwin.com/corp/firstinstall/firstinstall.html

Accept-Language: en-US

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Accept-Encoding: gzip, deflate

Host: gm.iwin.com

Connection: Keep-Alive

Cookie: AWSELB=3B7F317D1E9786A7B1859B3536CAFEF1380C73778DEE07357AAA469B5F014369427BF99072C601C892B64F9E93D70F685BC31868110EDB082E45DEEE7AF7C602A51DE4944D; iWinCSC=iwinsrc=direct|ts=1429841428050


HTTP/1.1 200 OK

Accept-Ranges: bytes

Age: 30308

Cache-Control: max-age=86400

Content-Type: image/gif

Date: Fri, 24 Apr 2015 02:10:28 GMT

ETag: W/"1367-1399319850000"

Expires: Fri, 24 Apr 2015 17:45:20 GMT

Last-Modified: Mon, 05 May 2014 19:57:30 GMT

Server: nginx/1.1.19

Via: 1.1 varnish

X-Varnish: 1256041994 1254301388

Content-Length: 1367

Connection: keep-alive
GIF89a8......F..:..4..M.....S.......................o..s.....Y........
|.....p....._.....w.....e...:oj......9o.8o....w.......O..6r...........
.........Cr.:k...G...........Y......9o...a......;of.....J..k..u......;
o.Lyj...........T..............$Q}.U..:o...t..c.........V....v.....X..
...s........q.....k..B..............n..............R..y........n..o...
}.......t..@.._..Y..{........x..)..o..t.....$..e..j......3f...........
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....8.......#T.2......*\.........q.....3j......QZ.
.C....(S.\....A}[email protected]...@H.*].....O...D....X.j..Uj..`
..!"HP./a.....m.-D..a....Av....#G^3.....B......@......#G..%...C.y(....
....(p"..A.~X.D....e[K..x......A0...A..O@!H...E.......%.h x2..........
;. e.... (...2.lW#...$.....A.......... :..(`... ...8@...$`@.......$@..
.@ !...(....(b.......(p. .....!.."....@.!..B.%.qc.:.(....`..G20E..t...
`...........@%.T"a$..4)H..x...H"I$.l..f...%..l.P........,....<...|.
.. [email protected]..&.{D*...Vj...b.. .t.....*...................4...y.j........
[email protected]@...;....
<<< skipped >>>

GET /corp/firstinstall/images/up.gif HTTP/1.1

Accept: */*

Referer: hXXp://gm.iwin.com/corp/firstinstall/firstinstall.html

Accept-Language: en-US

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Accept-Encoding: gzip, deflate

Host: gm.iwin.com

Connection: Keep-Alive

Cookie: AWSELB=3B7F317D1E9786A7B1859B3536CAFEF1380C73778DEE07357AAA469B5F014369427BF99072C601C892B64F9E93D70F685BC31868110EDB082E45DEEE7AF7C602A51DE4944D; iWinCSC=iwinsrc=direct|ts=1429841428050


HTTP/1.1 200 OK

Accept-Ranges: bytes

Age: 30308

Cache-Control: max-age=86400

Content-Type: image/gif

Date: Fri, 24 Apr 2015 02:10:29 GMT

ETag: W/"1097-1399319850000"

Expires: Fri, 24 Apr 2015 17:45:21 GMT

Last-Modified: Mon, 05 May 2014 19:57:30 GMT

Server: nginx/1.1.19

Via: 1.1 varnish

X-Varnish: 1256042002 1254301412

Content-Length: 1097

Connection: keep-alive

GIF89a..9....~........................................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................!.......,......9.....Z.
..............  .............QR44RQ...........SN1FF1NS..............V[
..V..................................................7>..,. ......P
.q.......8.............. C...CG..-2.4..C..< ..Is..!T.....gF.#.P....
...v<......P3".."...H.j-.....W`D......&<....f..%..`!K.'.$%XTi...
..J...K..."J.......b.l....F.g..kv.M.7.....Gn.iO......,={.N..$.E...s.E.
........0..E....p1.....q4!........ ..H...M....H.......>|c.L...O....
.u....>...m.....h...&. .......".`..j.`n.T..>..... ..!k...I......
,....0.(..4.Hc.6....<.h#...)..D..\.F&....L*.d.PF)..d=I..Xf...Zv...G
....d....f....h....]....t6)g.x....z..'.b.)....I....dh..2.h....h...9i..
.yi....i....i..j9j..Nyj..2.j....j...7k.."wk....k....h..f.k...tl....@ .
;..

GET /games/iWinInstallOptions.exe HTTP/1.0

Host: dl.iwin.com

User-Agent: NSISDL/1.2 (Mozilla)

Accept: */*


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=14400

Content-Type: application/x-msdos-program

Date: Fri, 24 Apr 2015 02:10:52 GMT

Expires: Fri, 24 Apr 2015 06:10:52 GMT

Last-Modified: Wed, 22 Apr 2015 17:39:15 GMT

Server: Apache/2.2.22 (Ubuntu) mod_perl/2.0.5 Perl/v5.14.2

Content-Length: 78752

Connection: Close
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................Z...........0.......p....@.........
.................0...............................................s....
.......m..............................................................
.............p...............................text....X.......Z........
.......... ..`.rdata.......p.......^..............@[email protected].......
[email protected][email protected].
...m.......n...t..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
..>[email protected].>[email protected]
...Pr@..}[email protected]... M.......M....3.....FQ.....NU..
M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u...
[email protected]}[email protected].}.j.W.E......E.......Pp@.
[email protected]@.W...E..E.h [email protected]...\r
@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i......D.
......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[...U.<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTEemCaVgs8Tuh2B9fGVE0pKKNyzgQUTF+nNhcF4oZhIkk5jLmo40rgOBoCEC6utoKGY/7ZdVX4/iTzOxo= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1552

content-transfer-encoding: binary

Cache-Control: max-age=546368, public, no-transform, must-revalidate

Last-Modified: Thu, 23 Apr 2015 10:00:09 GMT

Expires: Thu, 30 Apr 2015 10:00:09 GMT

Date: Fri, 24 Apr 2015 02:15:07 GMT

Connection: keep-alive
0..........0..... [email protected]
3100009Z0s0q0I0... .........z`.V.<N.v...TM)(.r...L_.6....a"I9....J.
8........c..uU..$.;.....20150423100009Z....20150430100009Z0...*.H.....
.........{...M...p.....?.T.}....;.. .....P...}....b.Q.)6.{....`;......
..23.P|9.S....C.......B.....?....k..N>........B..t6.$.o...([email protected].=..
....P...I.lm.J.M.}[`[email protected]#5.6si..M]...m.9....m.0.0..Tkf...
..t...hx...\...Q.#...YE.p....W. .4.7-.k...g..b..\.k..0.N....50..10..-0
..........y.P}~.EY....T]. 0...*.H........0..1.0...U....US1.0...U....Ve
riSign, Inc.1<0:..U...3Class 3 Public Primary Certification Authori
ty - G21:08..U...1(c) 1998 VeriSign, Inc. - For authorized use only1.0
...U....VeriSign Trust Network0...141202000000Z..151216235959Z0..1.0..
.U....US1.0...U....Symantec Corporation1.0...U....Symantec Trust Netwo
rk1?0=..U...6Symantec Class 3 PCA - G2 OCSP Responder Certificate 30..
"0...*.H.............0..........6..]......w';.r........I..c..4.... ...
......TyW......hd_.....!C.k......SE<?o.H.. .me.c..9N.&....e.^-..a..
...i\:..*."..u...|....".Nf3.~.L...QW...p.....-]UV8U...J&.<./.G.....
I...4.T....#I*.i.E0\..~q$.I.......X?G....f.t......v.l.U.Ld.I...B.....=
...Sf...H.s.........0..0...U....0.0l..U. .e0c0a..`.H...E....0R0&.. ...
......hXXp://VVV.symauth.com/cps0(.. .......0...hXXp://VVV.symauth.com
/rpa0...U.%..0... .......0...U........0... .....0......0!..U....0...0.
1.0...U....TGV-B-2740...*.H............1.`...i.....H.C.i.9~.i..Z.r.*$.
.(./.ag9.....J.Q.~.`.$?b..C....<.h.........d&....3.kV.....f...3<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRODEXefhs/UZFum2o8YfzOFwceMwQUkz5j3yJ0BOBkhDHd2yOfDq+2TZMCEA89qsgV9niZmSI6gIO0S/U= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1725

content-transfer-encoding: binary

Cache-Control: max-age=348066, public, no-transform, must-revalidate

Last-Modified: Tue, 21 Apr 2015 02:54:53 GMT

Expires: Tue, 28 Apr 2015 02:54:53 GMT

Date: Fri, 24 Apr 2015 02:15:07 GMT

Connection: keep-alive
0..........0..... .....0......0...0......%bn.$..5.......?'4....2015042
1025453Z0s0q0I0... ........N.E.~.?Q.n.j<a.....3...>c."t..d.1..#.
...M....=....x..":...K.....20150421025453Z....20150428025453Z0...*.H..
...........l8.....GU. . .=g.....O..t.z ..b..{...C[.?o.>....A..!5.c.
......(...:.....J.Z....8..<..F.&......N1.......!.........n].....{..
z.e..T.@..}.......[......?-.1......3......i%.I..&........d....S<H_^
]j..?.8}.G..............I..K_,...B....[{Y.2.d.:.$.. .C.i.'.@.\...V....
0...0...0..........7.R.~|..r."....#0...*.H........0..1.0...U....US1.0.
..U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms
 of use at hXXps://VVV.verisign.com/rpa (c)091.0,..U...%VeriSign Class
 3 Code Signing 2009 CA0...150401000000Z..150630235959Z0..1.0...U....U
S1.0...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1
VeriSign Class 3 Code Signing 2009 OCSP Responder0.."0...*.H..........
...0..........z..|..>.....5.Z ...2.C MWIH.5......M.\.... ...eW..`.B
=..`:..R. ...Z.k.Y.....p@.(3.c....a.;..[E....J:'...`...B....M..&......
{. (........%......^[v[....m....*.T.o&4..3.....3.........G...e)...'?.K
..2s..8=?..z.:..T..-.8R..8wv7*U.K..c...<s...]{.........6.?_........
...0...0...U....0.0....U. ...0..0....`.H...E....0..0(.. .........https
://VVV.verisign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign
's CPS incorp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... ...
....0...U........0... .....0......0"..U....0...0.1.0...U....TGV-B-3492
0...*.H.............,..-......q3a........z....t;B.z.h...]...#}.6.,<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECECVRccvD8Qb29B4D63fPT+k= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.thawte.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1396

content-transfer-encoding: binary

Cache-Control: max-age=515699, public, no-transform, must-revalidate

Last-Modified: Thu, 23 Apr 2015 01:25:24 GMT

Expires: Thu, 30 Apr 2015 01:25:24 GMT

Date: Fri, 24 Apr 2015 02:14:40 GMT

Connection: keep-alive
0..p......i0..e.. .....0.....V0..R0......Qw.}`[email protected]
3012524Z0s0q0I0... ........l....r.vdv0..*.~Y..X....e?z.4..G.L.......q.
.%Qq.........w.O.....20150423012524Z....20150430012524Z0...*.H........
.....d.]....V..5.W...ywL0a~.....M.*..ef!h ...L.....h.z.A......!U...e@.
.=..,.R.,.....%....U.......p'.qO.:.....w...-....'7`f......\Qy....N0.&.
=z4L..&.}..^.ha.J.jU...WY|....l.i.'.t.d..%V.5..U:..0....>....%.....
..S.c$..f3...F......D`.I.<.LT...P..)...v...N...../?yU.....0...0...0
..y.......^..........N...)0...*.H........0J1.0...U....US1.0...U....Tha
wte, Inc.1$0"..U....Thawte Code Signing CA - G20...150303000000Z..1506
01235959Z0Y1.0...U....US1.0...U....Thawte, Inc.1301..U...*Thawte Code 
Signing CA - G2 OCSP Responder0.."0...*.H.............0............).Z
.......O.~.l...,\.3.".'.'W .ih./..}OA...K...HJd....K^..<.....-.rWJ.
j.U.._......W.../.6....J.y.u-.\...2..U.52B.>...=F...RbR.y.zm.......
{b.bj....Y..J..m...*=.^......V.}p......rmA......9.L ...{?.g.-Y........
....8...k.$.:.5..6#4..F.#....t.B.8.O)'F.p).........d0b0...U....0.0...U
.%..0... .......0...U........0... .....0......0"..U....0...0.1.0...U..
..TGV-B-32450...*.H..............C.....8.Aw.{....`...y1N...W4M..M.J.3~
..7#}..X..:x..5....$...Z^%.?6..e...}I.)....... .A.w......_...B..j.T..Y
u.o.....g....H....q.Ju.SA`K.....~..O_.....S....I>..O.X..E.......]..
.y..L..F....K......../...._XSk6.:a};.?`...:^.....p....4Z.3L;.......t..
..>.....j....<<< skipped >>>

GET /gg/pf/iwin/85/acd_60m_pogoiwin1/iwin/ZumaDeluxeSetup.exe HTTP/1.1

Cache-Control: no-cache

Pragma: no-cache

Accept: */*

User-Agent: NextDM/2.92

Arcade-version: 2.92

OS-Description:  Windows 7 , 64-bit

Host: download.iwincdn.com

Connection: close


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=2592000

Content-Type: application/x-msdos-program

Date: Fri, 24 Apr 2015 02:10:31 GMT

Etag: "8f8716cb202c31abc371f834e94b74fe-2"

Expires: Sun, 24 May 2015 02:10:30 GMT

Last-Modified: Sun, 23 Feb 2014 20:25:10 GMT

Server: ECAcc (frf/874B)

Via: 1.0 download.iwin.com

x-amz-id-2: ZuEA6HzpKs3JaH2nCcmC/eUfnXOwxVBZqRA9N1KDwWEEik0x1K8Q19z 4LEDVqji

x-amz-request-id: 0624939194026C51

X-Cache: HIT

Content-Length: 12895120

Connection: close
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................Z...........0.......p....@.........
.................p...............................................s....
......xn..........0...`...............................................
.............p...............................text....X.......Z........
.......... ..`.rdata.......p.......^..............@[email protected].......
[email protected][email protected].
..xn.......p...t..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
..>[email protected].>[email protected]
...Pr@..}[email protected]... M.......M....3.....FQ.....NU..
M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u...
[email protected]}[email protected].}.j.W.E......E.......Pp@.
[email protected]@.W...E..E.h [email protected]...\r
@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i......D.
......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[...U.<<< skipped >>>

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab?0e79683a6ca82184 HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Tue, 24 Feb 2015 00:37:01 GMT

If-None-Match: "80b4d90ca4fd01:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com


HTTP/1.1 304 Not Modified

Content-Type: application/octet-stream

Last-Modified: Tue, 24 Feb 2015 00:37:01 GMT

ETag: "80b4d90ca4fd01:0"

Cache-Control: max-age=604800

Date: Fri, 24 Apr 2015 02:12:01 GMT

Connection: keep-alive

HTTP/1.1 304 Not Modified..Content-Type: application/octet-stream..Las
t-Modified: Tue, 24 Feb 2015 00:37:01 GMT..ETag: "80b4d90ca4fd01:0"..C
ache-Control: max-age=604800..Date: Fri, 24 Apr 2015 02:12:01 GMT..Con
nection: keep-alive..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS+zcBkvzl4= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.thawte.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1503

content-transfer-encoding: binary

Cache-Control: max-age=412285, public, no-transform, must-revalidate

Last-Modified: Tue, 21 Apr 2015 20:44:51 GMT

Expires: Tue, 28 Apr 2015 20:44:51 GMT

Date: Fri, 24 Apr 2015 02:14:25 GMT

Connection: keep-alive
0..........0..... .....0......0...0......&Km...."....}....,.c..2015042
1204451Z0s0q0I0... ........0..k....&..p..^.X.....{[E....z.1..j..F.WHP.
.G.Mxs..../.p./.^....20150421204451Z....20150428204451Z0...*.H........
......Z..FU.O...=.p..;.......<..(h..a....V.......Q.a...6...........
...c...(NZ.......lH... ."........ ..8....(.V......r.v.C.....E4BU.t..I.
s..r..%.m:.....V..:....~.k....<..".um.....C\.M u.......1....j...$..
T.Z.]=......!...E.%..UJ._.CFel....Y...u.Tt..6.zO..y.n........0...0...0
............I...*....^n...0...*.H........0..1.0...U....US1.0...U....th
awte, Inc.1(0&..U....Certification Services Division1806..U.../(c) 200
6 thawte, Inc. - For authorized use only1.0...U....thawte Primary Root
 CA0...141202000000Z..151216235959Z0_1.0...U....US1.0...U....thawte, I
nc.1907..U...0thawte Primary Root OCSP Responder Certificate 30.."0...
*.H.............0.........x...F83..,.D.,2D.;JGc.|_.k.....B.7.....G}.M.
s.....S.i.Uu.h.Aq..v...4:l..U.......T7l...~vl...r....{*..........V.o..
8|.B..^.a.. ...z....x..s...\[Y....<....'> ..YC..7.zVk.$...o3..ka
o]c...>C./bPX.......I..Oc.....NN......g.....,/..]......qN.....V!<
;.3.)...y#.........i0g0...U.%..0... .......0... .....0......0...U.....
..0.0...U...........0!..U....0...0.1.0...U....TGV-B-2770...*.H........
........lt..\..z. ..N.f.!.S5d?J.&....r...D........L.`.s.p...HC.L.8f...
 .........GA7......P..Z.%.../............z.n.6~I...].).....W...W\|.uya
..:...^...hW..7.Z.uc.'....:.xL...HS.....>.........5......%....3S...
.h........U....o.C.\.t.....G.._.C0(l.E9..6UTxg.gF ..;.....
<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECECxELMMsQejE6tpxhn5zqHA= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.thawte.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1396

content-transfer-encoding: binary

Cache-Control: max-age=405952, public, no-transform, must-revalidate

Last-Modified: Tue, 21 Apr 2015 19:00:18 GMT

Expires: Tue, 28 Apr 2015 19:00:18 GMT

Date: Fri, 24 Apr 2015 02:14:26 GMT

Connection: keep-alive
0..p......i0..e.. .....0.....V0..R0......Qw.}`[email protected]
1190018Z0s0q0I0... ........l....r.vdv0..*.~Y..X....e?z.4..G.L.......q.
.,D,.,A....q.~s.p....20150421190018Z....20150428190018Z0...*.H........
......W=..3.z/....Jm`-./......H.....o$.Z.8i....2pd.|r....R%;.c....TR^z
J.I,.VX.....\o..f.x4z.......|....K..5........W.....Bu8..`...".A......T
..0!.O..r.....w.(.r.}..-........H......]LY.....G.-....}Z f.......Fp..j
..vBp.6<.^.p$D...']..Mvv.F4o....9.a....z...Yf..:.......0...0...0..y
.......^..........N...)0...*.H........0J1.0...U....US1.0...U....Thawte
, Inc.1$0"..U....Thawte Code Signing CA - G20...150303000000Z..1506012
35959Z0Y1.0...U....US1.0...U....Thawte, Inc.1301..U...*Thawte Code Sig
ning CA - G2 OCSP Responder0.."0...*.H.............0............).Z...
....O.~.l...,\.3.".'.'W .ih./..}OA...K...HJd....K^..<.....-.rWJ.j.U
.._......W.../.6....J.y.u-.\...2..U.52B.>...=F...RbR.y.zm.......{b.
bj....Y..J..m...*=.^......V.}p......rmA......9.L ...{?.g.-Y...........
.8...k.$.:.5..6#4..F.#....t.B.8.O)'F.p).........d0b0...U....0.0...U.%.
.0... .......0...U........0... .....0......0"..U....0...0.1.0...U....T
GV-B-32450...*.H..............C.....8.Aw.{....`...y1N...W4M..M.J.3~..7
#}..X..:x..5....$...Z^%.?6..e...}I.)....... .A.w......_...B..j.T..Yu.o
.....g....H....q.Ju.SA`K.....~..O_.....S....I>..O.X..E.......]...y.
.L..F....K......../...._XSk6.:a};.?`...:^.....p....4Z.3L;.......t....&
gt;.....j....<<< skipped >>>

GET /games/iWinGamesSetup.exe HTTP/1.0

Host: dl.iwin.com

User-Agent: NSISDL/1.2 (Mozilla)

Accept: */*


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=14400

Content-Type: application/x-msdos-program

Date: Fri, 24 Apr 2015 02:09:47 GMT

Expires: Fri, 24 Apr 2015 06:09:47 GMT

Last-Modified: Thu, 06 Nov 2014 18:49:18 GMT

Server: Apache/2.2.22 (Ubuntu) mod_perl/2.0.5 Perl/v5.14.2

Content-Length: 4793400

Connection: Close
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................Z...........0.......p....@.........
.................`.......hI......................................s....
......0S............I.`...............................................
.............p...............................text....X.......Z........
.......... ..`.rdata.......p.......^..............@[email protected].......
[email protected][email protected].
..0S.......T...t..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
..>[email protected].>[email protected]
...Pr@..}[email protected]... M.......M....3.....FQ.....NU..
M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u...
[email protected]}[email protected].}.j.W.E......E.......Pp@.
[email protected]@.W...E..E.h [email protected]...\r
@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i......D.
......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[...U.<<< skipped >>>

GET /images/site-brand/default/styles/brand-styles.css HTTP/1.1

Accept: */*

Referer: hXXp://gm.iwin.com/corp/firstinstall/firstinstall.html

Accept-Language: en-US

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Accept-Encoding: gzip, deflate

Host: static.iwincdn.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Encoding: gzip

Accept-Ranges: bytes

Age: 177

Cache-Control: max-age=3600

Content-Type: text/css

Date: Fri, 24 Apr 2015 02:10:27 GMT

Etag: "c82d354bceaace882b81c6246ec45d93"

Expires: Fri, 24 Apr 2015 03:07:30 GMT

Last-Modified: Wed, 22 Apr 2015 16:35:09 GMT

Server: AmazonS3

Vary: Accept-Encoding

Vary: Accept-Encoding

Via: 1.1 origin.iwincdn.com

Via: 1.1 varnish

x-amz-id-2: EH t10vQER9lTNfRR3bZhkfO/kkdosGWe1BZjMUmOL1d C2/91ugnl6KyhcjCBPZ jlKUcJF8mw=

x-amz-request-id: 75271DADE49DBCD2

X-Cache: HIT

X-Varnish: 31097010 31095012

Content-Length: 1120
...........VMo.6...WL.C......E.."..A.....C..DI\K.JRq......>..vZ J`[
.p...7C.....t..J..(...[J.....]%].:G^.M%...NU.)M..$....*,P.d...ickQU;..
6^f.U.$..J..t#....1.CX...X.........&....U:JM}..2. ..2..}...:.~...SZ..0
....KaA.....Z....T.%!..S....Z.=......x..".Xr..<..U~.....Q.-h...!.t.
...P....1...`...b#..'-j...~.{....i.&.E.......Z....nSS....B..|.p. ..T.*
...T..!g...c...p.zMP......Z.{......s'......B$.2...F_.....Y.H.....6RgJ.
.J.:PxceN.P.h.G....P...1.#...........o./.c.....G0.[[email protected]
,~.B.u.B......M...DR.....>-.......Q..'`[email protected].).Fp..G..g
]...dZ.. qgr.............1ATO"[email protected].....:...b...........%....1.
d.}Z..._f.....EQ..00....z.[W.h...n^B.|/.'...........A..=.S.]q"A...*.V(
........:` .Y.3..2.....b....BtP.Gy.....Rd4...0.w'...Y....{.t.*.S|=....
......vQ.-O..A.....p!...t.A.)..._..O..h...;.D.......4..ZX..  ...x..g\.
.(\...9.#.R.......\.snM,........9.\4.DB...y...$z.e..@|i...x...%0Uv....
.gWrx.e..c....(.t..T.....a.3qwz..kgh.o....;.Y...U./W..O..$UJU....k...Q
......|.L.......>.:v........Re.H.  ux=.u...U7.z.....\..v...o....:'.
[email protected].$. .....<l...K..D..........V..y.....(8..t.<....'.s....9
..D.vv.O..../.......<<< skipped >>>

GET /services/dlog?act=complete&gid=85&sid=6898945648087804561&hid=70b3bd0bb03902329dc0233ec50d14d970b3&lid=13&aid=49&ft=1 HTTP/1.1

Cache-Control: no-cache

Pragma: no-cache

Accept: */*

User-Agent: NextDM/2.92

Arcade-version: 2.92

OS-Description:  Windows 7 , 64-bit

Host: ws.iwin.com

Connection: close


HTTP/1.1 200 OK

Accept-Ranges: bytes

Age: 0

Cache-control: no-cache="set-cookie"

Date: Fri, 24 Apr 2015 02:10:50 GMT

Server: nginx/1.1.19

Set-Cookie: AWSELB=3B7F317D1E9786A7B1859B3536CAFEF1380C73778DBDCFB09194C5107B56910187FA09D75311224EEE134A599A5A52D528D356E0315A5144DD52EA2D6D056AD24E9B8BE5BD;PATH=/

Via: 1.1 varnish

X-Varnish: 107072979

Content-Length: 2

Connection: Close

OK..

GET /dgu?game=ARCD&ver=2.92&dist=iwin HTTP/1.1

Cache-Control: no-cache

Pragma: no-cache

Accept: */*

User-Agent: NextDM/2.92

Arcade-version: 2.92

OS-Description:  Windows 7 , 64-bit

Host: gm.iwin.com

Connection: close


HTTP/1.1 200 OK

Accept-Ranges: bytes

Age: 3058

Cache-Control: s-maxage=7200

Cache-control: no-cache="set-cookie"

Content-Type: text/plain;charset=iso-8859-1

Date: Fri, 24 Apr 2015 02:10:18 GMT

P3P: CP="NOI CURo ADMo DEVo TAIo OUR NOR IND COM NAV"

Server: nginx/1.1.19

Set-Cookie: AWSELB=3B7F317D1E9786A7B1859B3536CAFEF1380C73778DA41F2EE799E6D42CF0550C849D0D79ED96315C1958D0BFF14CBF88A4FBA3C0E156F7445DC60619A1752CFB9D00EC4AF7;PATH=/

Vary: iWin-App

Via: 1.1 varnish

X-Varnish: 1939045523 1938897038

Content-Length: 6

Connection: Close

DGU*ok..

GET /arcade/rawinfo/85/6898945648087804561 HTTP/1.1

User-Agent: iWin GameInfo Installer Helper

Host: VVV.iwin.com


HTTP/1.1 200 OK

Accept-Ranges: bytes

Age: 0

Cache-Control: no-cache, private, max-age=0, s-max-age=0, must-revalidate

Cache-control: no-cache="set-cookie"

Content-Type: text/plain;charset=utf-8

Date: Fri, 24 Apr 2015 02:09:52 GMT

P3P: CP="NOI CURo ADMo DEVo TAIo OUR NOR IND COM NAV"

Server: nginx/1.1.19

Set-Cookie: AWSELB=3B7F317D1E9786A7B1859B3536CAFEF1380C73778DEE07357AAA469B5F014369427BF9907296315C1958D0BFF14CBF88A4FBA3C0E156F7445DC60619A1752CFB9D00EC4AF7;PATH=/

Vary: iWin-App

Via: 1.1 varnish

X-Varnish: 1939044529

Content-Length: 572

Connection: keep-alive
gameid|85|skuid|6898945648087804561|title|Zuma Deluxe|tryLink|hXXp://d
ownload.iwincdn.com/gg/pf/iwin/85/acd_60m_pogoiwin1/iwin/ZumaDeluxeSet
up.exe|desc|Easy to play, hard to put down! Control the stone frog ido
l of the ancient Zuma in this thrilling action puzzler. Fire balls to 
make sets of three, but don't let them reach the golden skull or you'r
e history! Exciting sound and stunning 3D graphics immerse you in the 
world of Zuma. Don't hesitate, let the addiction begin! Try the free Z
uma trial now!|activation_code||pid||email||price|999|trial_time|60|al
laccess|trueHTTP/1.1 200 OK..Accept-Ranges: bytes..Age: 0..Cache-Contr
ol: no-cache, private, max-age=0, s-max-age=0, must-revalidate..Cache-
control: no-cache="set-cookie"..Content-Type: text/plain;charset=utf-8
..Date: Fri, 24 Apr 2015 02:09:52 GMT..P3P: CP="NOI CURo ADMo DEVo TAI
o OUR NOR IND COM NAV"..Server: nginx/1.1.19..Set-Cookie: AWSELB=3B7F3
17D1E9786A7B1859B3536CAFEF1380C73778DEE07357AAA469B5F014369427BF990729
6315C1958D0BFF14CBF88A4FBA3C0E156F7445DC60619A1752CFB9D00EC4AF7;PATH=/
..Vary: iWin-App..Via: 1.1 varnish..X-Varnish: 1939044529..Content-Len
gth: 572..Connection: keep-alive..gameid|85|skuid|6898945648087804561|
title|Zuma Deluxe|tryLink|hXXp://download.iwincdn.com/gg/pf/iwin/85/ac
d_60m_pogoiwin1/iwin/ZumaDeluxeSetup.exe|desc|Easy to play, hard to pu
t down! Control the stone frog idol of the ancient Zuma in this thrill
ing action puzzler. Fire balls to make sets of three, but don't let th
em reach the golden skull or you're history! Exciting sound and st<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1453

content-transfer-encoding: binary

Cache-Control: max-age=357479, public, no-transform, must-revalidate

Last-Modified: Tue, 21 Apr 2015 05:29:46 GMT

Expires: Tue, 28 Apr 2015 05:29:46 GMT

Date: Fri, 24 Apr 2015 02:14:34 GMT

Connection: keep-alive
0..........0..... .....0......0...0......T3t.%..O.E..~..F.=....2015042
1052946Z0s0q0I0... ........H.dI.....3..^B...d6Q....ZL%."..1.m..._)..a.
.eR&.....Y.)..".\....20150421052946Z....20150428052946Z0...*.H........
.........>...H...8W<.n.?.{[email protected].=.*.......U;I#...z
8=....F......7....YN.@.......<..}..*....4.m....9V%..'...R.T..|.:wr.
.........wzM..#.@.......}2._ .1,%..M.......t%...^$%...,....g...J....9.
.|L.)..a...*.(i.8A..ax..x..1..5V.`!.j8g..a..[U..E].......O......0...0.
..0..3......./...b.v..-....l}0...*.H........0_1.0...U....US1.0...U....
VeriSign, Inc.1705..U....Class 3 Public Primary Certification Authorit
y0...141202000000Z..151216235959Z0..1.0...U....US1.0...U....Symantec C
orporation1.0...U....Symantec Trust Network1?0=..U...6Symantec Class 3
 PCA - G1 OCSP Responder Certificate 30.."0...*.H.............0.......
...'......Y..x.3B1.7..Q..`..d.. ....s..t.$a.....j2R.{ ,*..c{.3.....H..
3-; ).....0._...*..9M..V...... ...{m...-.......)..tR..{D....~...M...T.
.pS.p..^|o....S..v.).)[email protected]#qh...u1T.].G0.]E..
.=._...... ........TE...Sa.s4........r...3.............0..0...U....0.0
l..U. .e0c0a..`.H...E....0R0&.. .........hXXp://VVV.symauth.com/cps0(.
. .......0...hXXp://VVV.symauth.com/rpa0...U.%..0... .......0...U.....
...0... .....0......0!..U....0...0.1.0...U....TGV-B-2730...*.H........
.....$..H......oU....Y!.z{*.V.M..u.._z..3>.. 0....3..m.....e.......
a..D...........e..F6:.y.....di.......<y.Z.......x}..q.2....UZ1 :,font>....<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=416079, public, no-transform, must-revalidate

Last-Modified: Tue, 21 Apr 2015 21:45:16 GMT

Expires: Tue, 28 Apr 2015 21:45:16 GMT

Date: Fri, 24 Apr 2015 02:14:34 GMT

Connection: keep-alive
0..........0..... .....0......0...0......'.V.8.F.V....H....JW..2015042
1214516Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
..M.s.Q~...@?j.......20150421214516Z....20150428214516Z0...*.H........
........ @H.L.D.Um......v9...Q..Xijo.....;&..W.....q...0..(`I.e.H7..:.
..ENLn.pM..........i.`w.&2*..6]`!P._ .zj3..'6.fS...W8W...X.uV./P...\.j
r......lo....G.&#...;Xb.....D.D.......q!.t..dB.H....yB../..^.U..Hm.0@k
P\X|...........Lu9..s.....?.VeC.kdmd...j..h..k..C4<...#0...0...0...
.......r..?.*......y"..0...*.H........0..1.0...U....US1.0...U....VeriS
ign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use at h
ttps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code Sign
ing 2009-2 CA0...150226000000Z..150527235959Z0..1.0...U....US1.0...U..
..VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of u
se at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Class 3
 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0..........
...m5*R........2....>...yU4..L.. ...........u..Hez..Pn.....d...nz(.
..V7.}^...d!RX...bl..[..a...L.. .~..Ij......%..%p.-...u..:..i..F*]...*
....{NH..|0...gHX.Q.r....S..........._.9.(w...suC...N..s.....&."...:.C
.Q.i~rl..<..krS..8.B..o][email protected]..
..0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.verisig
n.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS incorp.
 by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U.....
...0... .....0......0"..U....0...0.1.0...U....TGV-B-32010...*.H...<<< skipped >>>

The Trojan connects to the servers at the folowing location(s):

iWinGames.exe_296:

.text

`.rdata

@.data

.rsrc

PSSSSSSh

 |$$ \$(

D$ PSSh8

FXtCp

EXtCp

SSSSh

D$\PSSh

 \$, |$0

t'SShl

u$SShe

vSSSh

FTPjK

FtPj;

C.PjRV

tGHt.Ht&

)|$ )|$$

FtPVj

u$

T$0RSSh

E SSh1

|$09|$4}

\$< \$4

u$

|$49|$,}

RpSShRw

SSSQSSh

RpSSh3u

RpSSh5w

RpSSh6w

 \$@ |$<

)|$()\$,

RpSShQw

 |$< \$@ |$4 \$8

RpSShdu

RpSSheu

RpSSh

RpSShfu

RpSShgu

RpSSh2u

j%UQP

F SSh

L$$PQj%S

|$, |$< |$

 |$  \$$

Tu.AUu

SOFTWARE\Microsoft\Windows\CurrentVersion

.stdat

gameExe

buyNowURL

glcfg.dat

stdat.dat

%d,%d,%d,%d,%d,%d

service:TestInstall C:/Work/Sandbox/NSIS_env/TestScript/TestProgram.exe

Code: WSAECONNRESET - The virtual circuit was reset by the remote side executing a hard or abortive close. For UPD sockets, the remote host was unable to deliver a previously sent UDP datagram and responded with a "Port Unreachable" ICMP packet. The application should close the socket as it is no longer usable.

Code: WSAEMSGSIZE - The socket is message oriented, and the message is larger than the maximum supported by the underlying transport.

Code: WSAEOPNOTSUPP - MSG_OOB was specified, but the socket is not stream-style such as type SOCK_STREAM, OOB data is not supported in the communication domain associated with this socket, or the socket is unidirectional and supports only receive operations.

Code: WSAENETRESET - The connection has been broken due to the keep-alive activity detecting a failure while the operation was in progress.

Code: WSAEADDRINUSE - The socket's local address is already in use and the socket was not marked to allow address reuse with SO_REUSEADDR. This error usually occurs when executing bind, but could be delayed until this function if the bind was to a partially wildcard address (involving ADDR_ANY) and if a specific address needs to be committed at the time of this function.

Code: WSAESOCKTNOSUPPORT - The specified socket type is not supported in this address family.

Code: WSAEPROTONOSUPPORT - The specified protocol is not supported.

Code: WSAEAFNOSUPPORT - The specified address family is not supported.

Code: WSAEINTR - A blocking Windows Socket 1.1 call was canceled through WSACancelBlockingCall.

Code: WSAEINPROGRESS - A blocking Windows Sockets 1.1 call is in progress, or the service provider is still processing a callback function.

PTF://

hXXps://

hXXp://

%sddddd%d.unk

XXXXXX

.unk_unstamp

*.unk

HTTP/1.1

hXXp://

BuildHttpGetHeader closeConnection %d rangeFrom %d rangeTo %d

Error: HTTPDSTATE_CONNECT, ioctlsocket(

Connected to %s [%s: %s]

Error: HTTPDSTATE_CONNECT, connect(

Error: HTTPDSTATE_CONNECT, socket(

getaddrinfo error: %s

Proxy enabled: %s:%d

Error: HTTPDSTATE_SENDGETHEAD, send(

Error: HTTPDSTATE_RECEIVINGHEADER, can't compile new location from URL:

HTTP:

Error: HTTPDSTATE_RECEIVINGHEADER, server reported error on file

Unable to init HTTP download from URL:

Cache cleaned up for url:

Download added. Url:

Error: Can't initialize new download. URL:

Error: Can't allocate memory for new download. URL:

AnalyzeHttpResourceHeader<<<<<<<<<<<<<<<<<<<<<<

AnalyzeHttpResourceHeader>>>>>>>>>>>>>>>>>>>>>>

from URL

Error: HTTPDSTATE_RECEIVINGHEADER, recv(

Error: HTTPDSTATE_RECEIVINGHEADER Connection closed while were receiving header, recv(

Download completed. Id: %s Id2: %s Filesize: %d

Download attempt %d max %d

Error: HTTPDSTATE_SENDGETFILE, send(

Error: HTTPDSTATE_SENDGETFILE, fopen(

_httpHeader._acceptRanges %s

cache file found %s

Error: HTTPDSTATE_SENDGETFILE, unique file name generator failed.

cache file not found %s

Do_SendGetFile _httpHeader._contentLength: %d

MbP?Error: HTTPDSTATE_RECIEVINGFILE, recv(

Error on InternetReadFile. GetLastError()=%d

Error on HttpSendRequest. GetLastError()=%d

Make %srequest to %s:%d/%s

GLWorker.exe

gas_util.dll

hXXp://gm.iwin.com/ous-legacy/

hXXp://gm.iwin.com/

gm.iwin.com

Unable to set the key. Key/Name pair is invalid.

Key has been set.

Unable to set the key. No config loaded.

Try to set iAccess key

link://cancelkeyenter

%d.%d

ACDCMD=

urls=%s

domain=%s

host.cfg

ftdownload.dat

user32.dll

Can't create parameter file for passing URL.

cmd line sent to instance

cmd line :

GetProcessHeap

ntdll.dll

ClosePopupWindows : m_iePopupDlgs[ i ]->DestroyWindow()

ClosePopupWindows : m_iePopupDlgs[ i ]->OnClose()

ClosePopupWindows

hXXp://gm.iwin.com/account/clubiwin-safe.xml;jsessionid=%s

d:d

d-d-d d:d:d

This is not a first time startup. Regkey was opened. Ignoring first time startup parameter.

This is first time startup. Regkey created

hXXp://gm.iwin.com/user/session/credentials

LOGIN

hXXps://gm.iwin.com

hXXp://gm.iwin.com

JSESSIONID=%s

IACCESSKEY

Adding iAccess key downloads

Result http header:

keyword

1.0.5

DesktopAlerts.exe

Debug: starting the AdminWorker.exe with Service [

\\.\mailslot\iwgm\gas\mailslot

cache.dat

pages/blank.html

pages/blank2.html

pages/offline.html

pages/error.html

pages/maintenance.html

On login cookie:

Uninstall.exe

Debug: starting the AdminWorker.exe [

Error: Installer start when another one is still in progress! Exepath:

stdat.dat file in game folder:

No stdat.dat file in the game folder!

glcfg.dat file in game folder:

No glcfg.dat file in the game folder!

Game DRM exe:

Game exe:

Report for game with ID

Failed to open error page! URL:

error.html

offline.html

Got HTTP 401. Navigation canceled.

Register trusted service: %s

Result: %d

Error calling AuthUI_Login_show() function.

FB_LOGIN_STUB_TOKEN

facebook.com/

VVV.iwin.com

ACDCMD=BN

ACDCMD=PF

ACDCMD=NAV

Command line is empty. Ignoring cmdLine param download.

*.lnk

webupdate

Call for game list update from: UrlInterceptHandler

Navigation URL added to the history:

iWinTrusted.exe

Software\Microsoft\Windows\CurrentVersion\Internet Settings

System32\EbAdServingT20.dll

EbAdServingT20.dll

Malformed url

Total: %d(bytes) Current: %d(bytes)

joincommand=yes&server=

link://join

URL rewrite in

https:

HTMLBodyGetSize - l:%d t:%d w:%d h:%d scL:%d scT:%d scW:%d scH:%d

DISPID : %d

Intercepted url:

%d %s

&harpaxo=%d

%s=%s

Risk.cfg.new

Risk.cfg

pfAuthLogin call result code:

OPAL game finished execution.

d.d.M / d:d:d

%u.%u

%u.%u.%u.%u

Windows 2000

Windows XP

Web Edition

Windows Server 2003,

Windows XP x64

Windows Home Server

Windows Storage Server 2003

Windows Server 2008 R2

Windows 7

Windows Server 2008

Windows Vista

kernel32.dll

FWindows XP

Windows 2000

URL_GAMEMENU_Z25

url-game-menu-z25

URL_GAMEMENU_Z24

url-game-menu-z24

URL_GAMEMENU_Z23

url-game-menu-z23

URL_GAMEMENU_Z22

url-game-menu-z22

URL_GAMEMENU_Z21

url-game-menu-z21

URL_GAMEMENU_Z20

url-game-menu-z20

URL_GAMEMENU_Z19

url-game-menu-z19

URL_GAMEMENU_Z18

url-game-menu-z18

URL_GAMEMENU_Z17

url-game-menu-z17

URL_GAMEMENU_Z16

url-game-menu-z16

URL_GAMEMENU_Z15

url-game-menu-z15

URL_GAMEMENU_Z14

url-game-menu-z14

URL_GAMEMENU_Z13

url-game-menu-z13

URL_GAMEMENU_Z12

url-game-menu-z12

URL_GAMEMENU_Z11

url-game-menu-z11

URL_GAMEMENU_Z10

url-game-menu-z10

URL_GAMEMENU_Z9

url-game-menu-z9

URL_GAMEMENU_Z8

url-game-menu-z8

URL_GAMEMENU_Z7

url-game-menu-z7

URL_GAMEMENU_Z6

url-game-menu-z6

URL_GAMEMENU_Z5

url-game-menu-z5

URL_GAMEMENU_Z4

url-game-menu-z4

URL_GAMEMENU_Z3

url-game-menu-z3

URL_GAMEMENU_Z2

url-game-menu-z2

URL_GAMEMENU_Z1

url-game-menu-z1

URL_GAMEMENU_Z0

url-game-menu-z0

URL_CLUBIWIN_MEMBER

url-clubiwin-member

FB_LOGIN_SIGNATURE

fb-login-signature

URL_MEMBERSHIP_PAGE

url-membership-page

URL_DLTOOLBAR

url-dl-toolbar

URL_NEWGAMES

url-new-games

URL_ALLACCESSGAMES

url-all-access-games

URL_GAME_INFO

url-game-info

URL_PURCHASE_ONLY_GAMES

url-purchase-only-games

URL_CURRENT_USER_PART

url-current-user-part

URL_IACCESS_KEY_PART

url-iaccess-key-part

URL_IACCESS_STATE_PART

url-iaccess-state-part

URL_USERINFO

url-user-info

URL_ICOINSHISTORY

url-icoins-history

URL_PAYINFO

url-pay-info

URL_MYINFO

url-my-info

URL_WEBSERVER

url-web-server

URL_OICOINS

url-o-icoins

URL_OSTEELDEAL

url-o-steal-deal

URL_OFREEGAMES

url-o-free-game

URL_HELPARCADE

url-help-arcade

URL_UPDATE_HELP

url-update-help

URL_ONLINE_CHECK

url-online-check

URL_WEB

url-web

URL_PART_AD2

url-part-ad2

URL_PART_AD1

url-part-ad1

URL_PART_TOPGAMES

url-part-top-game

URL_PART_MOREGAMES

url-part-more-game

URL_UPDATE_GAS_GAME

url-update-gas-game

URL_WS_ICOINS

url-ws-icoins

URL_DA_DOWNLOAD

url-da-download

URL_WS_SERVICES_PP

url-ws-services-pp

URL_WS_SERVICES_ULOG

url-ws-services-ulog

URL_WS_SERVICES_DLOG

url-ws-services-dlog

URL_WS_SERVICES_SLOG

url-ws-services-slog

URL_UPDATE_GAME

url-update-game

URL_UPDATE_ARACDE

url-update-arcade

URL_PART_RAWINFO

url-part-rawInfo

URL_SEARCH

url-search

URL_SIGNOUT

url-signout

URL_MYACCOUNT

url-my-account

URL_ABOUTICOINS

url-about-icoins

URL_SIGNIN

url-signin

>>>>>>>>>>>>>>>>>>>>>>URL>>>>>>>>>>>>>>>>>>>>>>>

URLS_CONFIG

hXXp://gm.iwin.com/gm-config

hXXp://gm.iwin.com/games/

hXXp://gm.iwin.com/categories/games/purchase-only.xml

account/current.xml;jsessionid=

hXXp://ws.iwin.com/services/confirmAward?

hXXp://update.iwin.com/dgu?game=gas_

hXXps://gm.iwin.com/account/online-party

hXXps://gm.iwin.com/icoins/transactions

hXXps://gm.iwin.com/orders/games

hXXps://gm.iwin.com/account/current

hXXp://gm.iwin.com/categories/games/allaccess

hXXp://gm.iwin.com/top/games/new

hXXp://gm.iwin.com/categories/games/premium

hXXp://gm.iwin.com/categories/games/card/casino

hXXp://gm.iwin.com/categories/games/card/solitaire

hXXp://gm.iwin.com/categories/games/card/mahjong

hXXp://gm.iwin.com/categories/games/kids

hXXp://gm.iwin.com/categories/games

hXXp://gm.iwin.com/categories/games/word

hXXp://gm.iwin.com/categories/games/card

hXXp://gm.iwin.com/categories/games/action/tycoon

hXXp://gm.iwin.com/categories/games/action/brick

hXXp://gm.iwin.com/categories/games/action/platformer

hXXp://gm.iwin.com/categories/games/action/marble

hXXp://gm.iwin.com/categories/games/action/adventure

hXXp://gm.iwin.com/categories/games/action/arcade

hXXp://gm.iwin.com/categories/games/action

hXXp://gm.iwin.com/categories/games/puzzle/jigsaw

hXXp://gm.iwin.com/categories/games/puzzle/logic

hXXp://gm.iwin.com/categories/games/puzzle/match3

hXXp://gm.iwin.com/categories/games/puzzle

hXXp://gm.iwin.com/categories/games/time

hXXp://gm.iwin.com/categories/games/hidden

hXXp://gm.iwin.com/calendar/games/new

hXXp://gm.iwin.com/categories/games/online-party

hXXp://gm.iwin.com/categories/games/deals

hXXp://gm.iwin.com/categories/games/free

hXXp://support.iwin.com/ics/support/default.asp?deptID=5419

hXXp://gm.iwin.com/arcade/updatehelp

hXXp://gm.iwin.com/corp/firstinstall/firstinstall.html

hXXp://update.iwin.com/dgu?game=DesktopAlerts&ver=1.00&dist=iwin

hXXp://cdownload.iwin.com/premium/iwings/opal/download/win32/iwincom/EbAdServingT20.dll

hXXp://cdownload.iwin.com/premium/iwings/opal/download/win32/iwincom/opal_

hXXp://ws.iwin.com/services/dlog?act=

hXXp://ws.iwin.com/services/slog?

hXXp://update.iwin.com/dgu?game=

hXXp://update.iwin.com/dgu?game=ARCD&ver=

hXXp://gm.iwin.com/forums/

hXXp://gm.iwin.com/account/online-party-safe.xml;jsessionid=%s

hXXp://gm.iwin.com/account/icoins-safe.xml;jsessionid=%s

hXXp://gm.iwin.com/hotel/

hXXp://gm.iwin.com/hotel/roombrowser/

hXXp://s-img.iwin.com/images/avatars/

hXXp://gm.iwin.com/profiles/users/%s

hXXp://ws.iwin.com/services/ulog?lid=

URL=hXXp://VVV.iwin.com/corp/iwgm/iwgm.html

hXXp://gm.iwin.com/search?q=

hXXps://gm.iwin.com/op/dispatchEditProfile.do?method=myprofile

hXXps://gm.iwin.com/Logout.do

hXXp://gm.iwin.com/membership

hXXps://gm.iwin.com/account/icoins

hXXps://gm.iwin.com/ec/Subscribe.do

hXXps://gm.iwin.com/Login.do

hXXps://gm.iwin.com/ec/OPSubscribe.do?method=selectSubscriptionPaymentMethod&downloadGameId=

URL_WS_SERVICES_AWARD

URL_OPARTY

URL_WELCOME

URL_EB_DOWNLOAD

URL_OPAL_DOWNLOAD

URL_FORUMS

URL_WS_SUBSCRIPTIONS

URL_HOTEL_ROOM

URL_HOTEL_HOME

URL_AVATAR_VIEW

URL_URLDOWLOAD

URL_PUBLIC_PROFILE

URL_SUBSCRREG

URL_SUBSCRIBE

*.dta

SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

Shell32.dll

urlmon.dll

%s %s

()<>@,;:\"[]

0123456789

GasSessionCollector::CreateMailslot failed with %d

GasSessionCollector::ReadFile failed with %d

GasSessionCollector::GetMailslotInfo failed with %d

GasSessionCollector::CreateEvent failed with %d

Could not set proxy blanket. Error code = %x

Could not connect. Error code = %x

Failed to create IWbemLocator object. Err code = %x

Query for operating system name failed. Error code = %x

1.2.3

deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly

inflate 1.2.3 Copyright 1995-2005 Mark Adler

unzip 1.01 Copyright 1998-2004 Gilles Vollant - hXXp://VVV.winimage.com/zLibDll

zip 1.01 Copyright 1998-2004 Gilles Vollant - hXXp://VVV.winimage.com/zLibDll

0123456789ABCDEFlibpng error: %s

libpng warning: %s

NULL row buffer for row %ld, pass %d

gx=%f, gy=%f, bx=%f, by=%f

wx=%f, wy=%f, rx=%f, ry=%f

gamma=%f

Unknown zTXt compression type %d

%s :%ld:%ld [%ld] %s

hXXp://iwin.ourtoolbar.com/exe

CNotSupportedException

hhctrl.ocx

%s (%s:%d)

f:\rtm\vctools\vc7libs\ship\atlmfc\include\afxwin2.inl

Afx:%p:%x:%p:%p:%p

Afx:%p:%x

commctrl_DragListMsg

GDI32.DLL

CCmdTarget

comctl32.dll

comdlg32.dll

MSWHEEL_ROLLMSG

CMDIChildWnd

CMDIFrameWnd

f:\rtm\vctools\vc7libs\ship\atlmfc\src\mfc\filecore.cpp

Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Software\Microsoft\Windows\CurrentVersion\Policies\Network

Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32

%s.dll

f:\rtm\vctools\vc7libs\ship\atlmfc\src\mfc\olestrm.cpp

mfcm80.dll

ole32.dll

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

Broken pipe

Inappropriate I/O control operation

Operation not permitted

?#%X.y

operator

GetProcessWindowStation

USER32.DLL

portuguese-brazilian

COMCTL32.DLL

UxTheme.dll

dwmapi.dll

\shellstyle.dll

msimg32.dll

%s v.%lu.%lu (build %lu) %s

Windows

Windows NT

Windows Vista

CExtPaintManager::g_nMsgPaintInheritedBackground

Manage opened document windows

More Windows

Document "%s"

&%d %s

Recent file %d ("%s")

Recent file %d

%d&%d %s

CExtPopupMenuWnd::g_nMsgPrepareMenu

CExtPopupMenuWnd::g_nMsgPrepareOneMenuLevel

CExtPopupMenuWnd::g_nMsgPrepareDesktopBk

CExtPopupMenuWnd::g_nMsgPopupNext

CExtPopupMenuWnd::g_nMsgPopupPrev

CExtPopupMenuWnd::g_nMsgNotifyMenuExpanded

CExtPopupMenuWnd::g_nMsgNotifyMenuClosed

CExtPopupMenuWnd::g_nMsgPopupDrawItem

CExtPopupMenuWnd::g_nMsgPopupDrawLeftArea

CExtPopupMenuWnd::g_nMsgPopupDrawBackground

CExtPopupMenuWnd::g_nMsgCreateInplaceEdit

CExtPopupBaseWnd::g_nMsgTranslateKeyboardEvent

CExtPopupBaseWnd::g_nMsgTranslateMouseClickEvent

CExtPopupBaseWnd::g_nMsgTranslateMouseMoveEvent

CExtPopupBaseWnd::g_nMsgTranslateMouseWheelEvent

CExtPopupMenuWnd::g_nMsgRibbonFileMenuButtonInvocation

CExtPopupMenuWnd::g_nMsgRibbonFileMenuButtonQuery

CExtPopupMenuWnd::g_nMsgItemCoveringNotification

CExtPopupMenuWnd::g_nMsgTearOff

CExtPopupMenuWnd::g_nMsgCustomFloatPos

CExtPopupColorMenuWnd::g_nMsgNotifyColorChanged

CExtPopupColorMenuWnd::g_nMsgNotifyColorChangedFinally

CExtPopupColorMenuWnd::g_nMsgNotifyCustColor

CExtPopupMenuWnd::CInPlaceEditWnd::g_nMsgDeleteSelection

CExtPopupMenuWnd::CInPlaceEditWnd::g_nMsgSelectAll

%d%c%d%c%d%c%d

Software\%s\%s\%s\%s\%s\%s

Prof-UIS (v. %s) command profile

%sX X X X

Prof-UIS v. %s registry archiver

Toolbar #X

CExtToolControlBar::g_nMsgTrackButtonMenu

CExtToolControlBar::g_nMsgContinueTrackMenu

CExtDynamicMDIChildWnd

CExtControlBar::g_nMsgQueryFocusChangingEnabled

CExtControlBar::g_nMsgQueryRepositionCalcEffect

CExtControlBar::g_nMsgQueryIcon

CExtControlBar::g_nMsgPutToPopupMenu

CExtControlBar::g_nMsgConstructPopupMenu

CExtControlBar::g_nMsgCreateTabbedBar

CExtControlBar::g_nMsgDrawTrackedArea

CExtControlBar::g_nMsgCustomNcAreaQuery

CExtDynamicBarSite::g_nMsgFindDynamicBarSite

hXXp:////

Unknown Error (%d=0x%X) occurred.

CExtGridCellPassword

OLEAUT32.DLL

%d.%d.%d.%d

%s; %i pt

All Files (*.*)|*.*||

%d%sd:d:d

%s %d

%s %d%%

%s %%

%% %s

Burlywood

XXXX

%s%s %d

%d%s %d%s %d%s %d

XXX

%d%s %d%s %d

~`!@#$%^&*()_- ={}[]:;"'|\<,>.?/

Supported Image Files (*.ico)|*.ico|All Files (*.*)|*.*||

%%.Þ

CExtNcFrameImpl::g_nMsgFindExtNcFrameImpl

CExtCustomizePageKeyboard

CExtCustomizeHotKeyWnd

CExtCustomizeCmdTreeNode

Reset changes made to '%s' toolbar?

Prof-UIS (v. %s) customization subsystem state

Are you sure you want to delete the '%s' toolbar?

Are you sure you want to reset the key assignments?

CExtCustomizeSite::g_nMsgQueryCustomizeSite

CExtCustomizeSite::g_nMsgAssignAccelTable

CExtCustomizeSite::g_nMsgSyncAccelTable

CExtCustomizeSite::g_nMsgSyncContent

CExtCustomizeSite::g_nMsgDelayCustomization

CExtMenuControlBar::g_nMsgPrepareSystemMenu

CExtReportGridWnd

CExtReportGridDataProvider

CExtReportGridGroupAreaWnd

CExtReportGridSortOrder

CExtReportGridColumnChooserWnd

CExtReportGridColumnChooserMiniFrameWnd

CExtReportGridCategoryComboBox

CExtReportGridItem

CExtReportGridColumn

ProfUIS-ReportGroupArea

Prof-UIS-Report-Grid-%p

%s : %s

You cannot group items by more than %d fields.

Sort by: %s

You cannot sort items by the "%s" column.

You cannot group items by the "%s" column.

%s Tab

Undo %d Actions

CExtPopupControlMenuWnd::g_nMsgControlInputRetranslate

CExtPopupInplaceListBox::g_nMsgPopupListBoxInitContent

CExtPopupInplaceListBox::g_nMsgPopupListBoxItemMeasure

CExtPopupInplaceListBox::g_nMsgPopupListBoxItemDraw

CExtPopupInplaceListBox::g_nMsgPopupListBoxSelEndOK

CExtPopupInplaceListBox::g_nMsgPopupListBoxSelEndCancel

CExtPopupInplaceListBox::g_nMsgPopupListBoxSelChange

CExtPopupInplaceListBox::g_nMsgPopupListBoxItemClick

CExtPopupInplaceDatePicker::g_nMsgPopupDatePickerInitContent

CExtDatePickerWnd::g_nMsgSelectionNotification

CExtDurationWnd::g_nMsgChangingNotification

CExtDateTimeWnd::g_nMsgChangingNotification

CExtContentExpandWnd::g_nMsgPaintItemContent

%d,%ld,%ld,%ld,%ld,%ld,%ld,%ld,%ld,%ld,%ld,%ld,%ld,%ld,%ld,%ld

#XXX

PTF://VVV.

hXXp://VVV.

CExtColorCtrl::g_nMsgColorChanged

(%d/%d)

<!--%s-->

&#xX;

</%s>

%s='%s'

%s="%s"

<![CDATA[%s]]>

standalone="%s"

encoding="%s"

version="%s"

OLEACC.dll

windows

f:\rtm\vctools\vc7libs\ship\atlmfc\src\mfc\oledrop2.cpp

KERNEL32.DLL

MSH_SCROLL_LINES_MSG

MSH_WHEELSUPPORT_MSG

WS2_32.dll

WINMM.dll

MSIMG32.dll

SHLWAPI.dll

GetWindowsDirectoryA

GetCPInfo

GetConsoleOutputCP

KERNEL32.dll

GetKeyState

EnumWindows

EnumChildWindows

UnhookWindowsHookEx

SetWindowsHookExA

CreateDialogIndirectParamA

GetKeyNameTextA

MapVirtualKeyA

USER32.dll

GetViewportOrgEx

GetViewportExtEx

SetViewportOrgEx

OffsetViewportOrgEx

SetViewportExtEx

ScaleViewportExtEx

GDI32.dll

COMDLG32.dll

WINSPOOL.DRV

RegCreateKeyExA

RegCreateKeyExW

RegDeleteKeyA

RegDeleteKeyW

RegOpenKeyA

RegOpenKeyW

RegEnumKeyA

RegEnumKeyW

RegOpenKeyExA

RegOpenKeyExW

RegCloseKey

RegEnumKeyExA

ADVAPI32.dll

ShellExecuteA

ShellExecuteW

ShellExecuteExA

ShellExecuteExW

SHFileOperationA

SHELL32.dll

oledlg.dll

OLEAUT32.dll

HttpQueryInfoA

HttpSendRequestA

HttpAddRequestHeadersA

HttpOpenRequestA

FindNextUrlCacheEntryA

DeleteUrlCacheEntry

FindFirstUrlCacheEntryA

DeleteUrlCacheGroup

FindNextUrlCacheGroup

FindFirstUrlCacheGroup

WININET.dll

pdh.dll

VERSION.dll

WinExec

GetAsyncKeyState

GetKeyboardLayout

GetKeyboardState

MapVirtualKeyExA

RegQueryInfoKeyA

COMCTL32.dll

.?AVCCmdTarget@@

.?AVCAutoLoginDlg@@

.?AVCURLEditDlg@@

.?AVHttpDownload@@

.PAVCOleException@@

.PAVCException@@

.PAVCObject@@

.PAVCMemoryException@@

.PAVCSimpleException@@

.PAVCNotSupportedException@@

.PAVCInvalidArgException@@

.?AVCNotSupportedException@@

.?AVCTestCmdUI@@

.?AVCCmdUI@@

.PAVCUserException@@

.PAVCResourceException@@

.PAVCOleDispatchException@@

.?AVCMDIFrameWnd@@

.?AVCMDIChildWnd@@

.PAVCArchiveException@@

.?AVCStatusCmdUI@@

.?AV?$CFixedStringT@V?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@$0BAA@@ATL@@

.?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@

.PAVCFileException@@

zcÁ

.?AVCExtPopupMenuCmdUI@CExtPopupMenuWnd@@

.?AVCExtCmdItemUI@@

.?AUFAKE_PROPPAGEFONTINFO@?1??stat_GetPropSheetFont@CExtResPP@@SAHAAV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AAGH@Z@

.?AV?$CMap@IIPAVCExtCmdItem@@PAV1@@@

.?AV?$CArray@PAVCExtCmdIcon@@PAV1@@@

.?AV?$CMap@PAUHWND__@@PAU1@PAVCExtCmdProfile@@AAPAV2@@@

.?AVCExtCmdItem@@

.?AVCExtCmdProfile@@

.?AVCExtCmdManager@@

.?AVCExtCmdIcon@@

.?AVCExtToolControlBarCmdUI@CExtToolControlBar@@

.?AV?$CTypedPtrArray@VCPtrArray@@PAVCExtCmdIcon@@@@

.?AVCExtGridCellPassword@@

.?AVCCmdDropTarget@CExtCustomizeSite@@

.?AVCCmdDropSource@CExtCustomizeSite@@

.?AV?$CTypedPtrArray@VCPtrArray@@PAVCExtCustomizeCmdTreeNode@@@@

.?AVCExtCustomizeHotKeyWnd@@

.?AVCInternalHotKeyWnd@CExtCustomizePageKeyboard@@

.?AV?$CArray@VCCmdKeyInfo@CExtCustomizeSite@@V12@@@

.?AV?$CMap@IIVCCmdKeySet@CExtCustomizeSite@@V12@@@

.?AVCMapKey2Cmd@CExtCustomizeSite@@

.?AVCCmdKeySet@CExtCustomizeSite@@

.?AVCExtCustomizeCmdTreeNode@@

.?AVCExtCustomizePageKeyboard@@

.?AVCMapCmd2KeySet@CExtCustomizeSite@@

.?AVCExtReportGridCategoryComboBox@@

.?AVCExtReportGridColumnChooserMiniFrameWnd@@

.?AVCExtReportGridColumnChooserWnd@@

.?AV?$CTypedPtrArray@VCPtrArray@@PAVCExtReportGridColumn@@@@

.?AVCExtReportGridGroupAreaWnd@@

.?AV?$_CTypedPtrList@VCPtrList@@PAVCExtReportGridItem@@@@

.?AVCExtReportGridSortOrder@@

.?AVCExtReportGridItem@@

.?AV?$CTypedPtrList@VCPtrList@@PAVCExtReportGridItem@@@@

.?AVCExtReportGridDataProvider@@

.?AVCExtReportGridWnd@@

.?AVCExtReportGridColumn@@

C:\ProgramData\iWin Games\drm\data\

_Zuma.ifn.stdat

HTTP/1.1 200 OK

Server: nginx/1.1.19

s.ZM!f

Thawte Certification1

hXXp://ocsp.thawte.com0

.hXXp://crl.thawte.com/ThawteTimestampingCA.crl0

*hXXp://cs-g2-crl.thawte.com/ThawteCSG2.crl0

Certification Services Division1806

#hXXp://crl.thawte.com/ThawtePCA.crl0

hXXp://ts-ocsp.ws.symantec.com07

 hXXp://ts-aia.ws.symantec.com/tss-ca-g2.cer0<

 hXXp://ts-crl.ws.symantec.com/tss-ca-g2.crl0(

.jhLU

y.wP0

z.ah0l

~4.Hx

=6*.Lj

kz).rt

qY H8i,.Iq

.iG4,

6%uh:

`%FqV>

IE.Qk

az.zm

M&.UrM*#

.SeR-f

W%DRT

d.exe

iwin.com

%Program Files% (x86)\iWin Games\iWinGames.exe

}}~}}~}}~}}~}}~}}~}}~}}~}}~}}~

(%'9><:;9

%f}2w

"%"%%%%`

<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>

Msounds/animationBack.wav

sounds/animation.wav

sounds/button_click.wav

d:d %s

??:?? %s

(%2.1f %s)

](%.1f %s)

autoLoginOnStart

iWin.com\

Flash8.ocx

Flash.ocx

FlashPlayerControl.dll

debugExecs

subscrTrial=no

subscrKeyWord=&

subscrTrial=

subscrKeyWord=

pass=

login=

MainMenu.swf

joincommand=no

subscrTrial=yes

logintoken=

GetOpalLoginToken

GetOpalLogin

No arguments passed for saveData function.

The key is locked

Invalid key type

System is using a Portable Key

No key installed

Invalid URL

gamepage/buynow.html

dgamepage/expired.html

gamepage/open.html

dgamepage/end.html

gamepage/operationfailed.html

/glcfg.date

\gas_game.zip

\gas_shared.zip

gas.dll

riWin Games\ftstart.dat

iWin Desktop Alerts.lnk

DGameLauncher.exe

glcfg.date

\ipconfig.log

cmd.exe /c ipconfig /all >>

\tracert.log

cmd.exe /c tracert gm.iwin.com >>

\netstat.log

cmd.exe /c netstat

iWinGames\downloadslist_backup.dat

iWinGames\passedurl.txt

GetOusUrl

SetLoginFailed

GetGameReport

SetLoginInfo

<sounds/slidebackin.wav

sounds/slideout.wav

sounds/download_completed.wav

WebUpdater.exe

AdminWorker.exe

Uninstall.exe

%substrial

%username

%sessionid

%logintoken

sessions_onlogin

\iWinTrusted.exe

.AuthUI_Login_show

iWin-App: iWinArcade %s

iWin-AID: %s

iWin-HardID: %s

.*.lnk

GameExe

opal_logintoken

opal_login

Incorrect call of SetLoginInfo. Invalid parameters specified.

iWinArcade %s

sounds/start.wav

SpiderSolitaire.exe

Solitaire.exe

PurblePlace.exe

Minesweeper.exe

Mahjong.exe

InkBall.exe

HoldEm.exe

Hearts.exe

FreeCell.exe

chess.exe

shvlzm.exe

Rvsezm.exe

hrtzzm.exe

chkrzm.exe

bckgzm.exe

%SystemRoot%\system32\dllcache\

spider.exe

mshearts.exe

freecell.exe

pinball.exe

PINBALL.EXE

%ProgramFiles%\Windows NT\Pinball\

sol.exe

winmine.exe

%SystemRoot%\system32\

4Join

Join Hotel iWin Today

Win %s more Opals to reach the %d%s floor

A new version of iWin Games Manager is available. Since this new version includes important fixes and enhancements, this upgrade is required to keep playing iWin games.

A new FREE ad-supported version of this game is available for you to play!

Search iWin.com

Please close all game windows

Try again or contact customer support.

Please try again or contact customer support.

%s game now?

pfAuthLogin

sounds/coins.wav

user_passid_s

user_passid

opal.ver

<.dll

Subscribe now to join the fun!

GUrls config file set but not found

iWin.Games.Manager

iWinGames.exe

GamesManager_%s.log

GamesManager*.log

errorUrl

accKeyboardShortcut

ekernel32.dll

mscoree.dll

luna.msstyles

drm_85_Zuma.ifn.stdat

ocal\Temp\iWinGames\Downloads\file_501005030115520091.unk

<GameDefinition gameID="{D5F5C21E-26EC-11DF-97B4-D49755D89593}">

<VersionFile path="iWinGames.exe" />

<Developer URI="hXXp://VVV.iwin.com/">iWin, inc.</Developer>

<Publisher URI="hXXp://VVV.iwin.com/">iWin, inc.</Publisher>

Hidden browser windows

New URL navigating

New URL:

Create a shortcut in Game Explorer(Windows Vista Only)

When connecting, login automatically

(re-login when starting iWin Games Manager)

All Files (*.*)

No error message is available.#Attempted an unsupported operation.$A required resource was unavailable.

Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.

Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else.1Encountered an unexpected error while reading %1.1Encountered an unexpected error while writing %1.

#Unable to load mail system support.

iWinGames.exe_296_rwx_0117B000_00002000:

2.5.29.15

v2.5.29.19

v2.5.29.32

v2.5.29.3

v2.5.29.35

v2.5.29.14

v2.5.29.17

v2.5.29.18

v2.5.29.21

v2.5.29.31

v2.5.29.37

v2.5.29.20

v2.5.29.27

v2.5.29.28

v2.5.29.46

v2.5.29.30

v2.5.29.33

v2.5.29.5

v2.5.29.36

v2.5.29.54

v1.3.14.3.2.7

v1.3.6.1.4.1.311.10.11.85

v1.3.6.1.5.5.7.1.12

v1.3.6.1.5.5.7.1.2

v1.2.840.10045.4.3

v1.2.840.10045.2.1

v1.2.840.113549.1.1.10

v1.2.840.113549.1.1.7

v1.2.840.113549.3.7

v1.2.840.113549.3.2

v1.2.840.113549.3.4

v1.2.840.113549.1.1.1

CertDllVerifyCertificateChainPolicy

CryptMsgDllCNGGenContentEncryptKey

CryptMsgDllCNGImportContentEncryptKey

C:\Users\"%CurrentUserName%"\Desktop

ie9props.propdesc

iWinGames.exe_296_rwx_03610000_002EE000:

.text

`.rdata

@.data

.rsrc

@.reloc

t.Ht$

<%uNG

SPSSh

SSSSSh

t0SSSSSh|

t.OOt&

>%u83

.FFGGf

8%u2P

SSSSSSh

PSShx

t?WSSh

FTPQ

SSSShtQ{

SSSSh

YSSh4G|

iSSSSh

SSSSSShS

SSSSShLG|

SSSSSh<C{

SSSSSShf

SSSSSh8e|

SSSSShLe|

SSSSShte|

SSSSSSh&

SSSSSShO

SSSSSSh4

SSSSSSh@

SSSSSShA

SSSSSSh3

SSSSSSh2

SSSSSSh"

SSSSSShN

>%u93

SSSShD

SSSShd

SSSSht

SSSSSShg

SSSSSSh>

SSSShl

Dz%SSj

SSSSShp;}

SSSSSh|;}

SSSSSSh\

SSSSSSh8

SSSSSShT

SSSSSShB

SSSSSShC

SSSSSShD

SSSSSShE

SSSSSShF

SSSSSShG

SSSSSShH

SSSSSShI

SSSSShDg}

SSSSShPg}

SSSSShhg}

SSSSShtg}

SSSSSShL

SSSSSSh^

88888888

8888888888

88888888888888

8888888888888

!"#$%&'()* ,

-./01234456

%UUUU

flash.filters.DropShadowFilter

@flash.filters.GlowFilter

flash.filters.BlurFilter

flash.filters.BevelFilter

flash.filters.ConvolutionFilter

flash.filters.DisplacementMapFilter

flash.filters.GradientGlowFilter

flash.filters.GradientBevelFilter

flash.filters.ColorMatrixFilter

macromedia.com

application/x-www-form-urlencoded

flash.geom.Rectangle

flash.geom.Point

flash.geom.Transform

portrait

flash.display.BitmapData

flash.geom.Matrix

flash.geom.ColorTransform

ProductDownloadBaseUrl

CodeSignRootCert

AutoUpdateVersionUrl

.macromedia.com

hXXp://

.macromedia.com/support/flashplayer/sys/

hXXps://

mms.cfg

hXXp://VVV.macromedia.com

hXXps://VVV.macromedia.com/support/flashplayer/sys/

FlashAuthor.cfg

%3 %3 %d %2:%2:%2 GMT%c%2%2 %d

0 1 2 3 4 5 6 7

!%),.?]}

for (var i=0; i<obj.length; i  ) {

for (var i=index; i<obj.length; i  ) {

return s.replace(/&/g, "&").replace(/</g, "<").replace(/>/g, ">").replace(/"/g, """).replace(/'/g, "'");

return "<date>"   value.getTime()   "</date>";

return eval(instance.CallFunction("<invoke name=\"" name "\" returntype=\"javascript\">"   __flash__argumentsToXML(arguments,0)   "</invoke>"));

Client.Header.MustUnderstand

Client.Data.UnderFlow

NetConnection.Call.BadVersion

_global.System

flash.net.FileReference

.macromedia.com/

%s?product=%s&signed=true&%s

%s&product=%s&signed=true&%s

hXXps://VVV.macromedia.com/bin/flashdownload.cgi

VVV.macromedia.com

Download.Complete

Download.Cancelled

Download.Failed

https:

>1.2.3

Webdings

Curlz MT

[email protected]

.scroll

PTF://

http:

A=%b&SA=%b&SV=%b&EV=%b&MP3=%b&AE=%b&VE=%b&ACC=%b&PR=%b&SP=%b&SB=%b&DEB=%b&V=%s%s&PT=%s&AVD=%b&LFD=%b&WD=%b&TLS=%b

hXXp://%s/

/crossdomain.xml

to-ports

NetConnection.Call.Failed

HTTP:

onKeyUp

onKeyDown

url_stream_port

url_stream_host

url_stream_path

NetConnection.Call.Prohibited

url_request_target

url_request

password

vnd.ms.wmhtml:

URLNotFound

hXXp://settingsmanager.adobe.com

hXXp://VVV.adobe.com

hXXp://VVV.macromedia.com/support/flashplayer/sys/

onHTTPStatus

iso_646.irv:1991

windows-936

tcp01140

webcdic-fi-278 euro

webcdic-se-278 euro

%cp037

%csibm037

Tcp852

iso_646.irv:1983

csshiftjis

jwindows-874

windows-1250

windows-1251

windows-1252

windows-1253

windows-1254

windows-1255

windows-1256

windows-1257

windows-1258

windows-31j

cswindows31j

.jpeg

9,0,28,0

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

HKEY_PERFORMANCE_DATA

HKEY_USERS

HKEY_LOCAL_MACHINE

HKEY_CURRENT_USER

HKEY_CLASSES_ROOT

{00020424-0000-0000-C000-000000000046}

{FAF199D2-BFA7-4394-A4DE-044A08E59B32}

CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32

MacromediaFlashPaper.MacromediaFlashPaper\DefaultIcon

MacromediaFlashPaper.MacromediaFlashPaper\shell

MacromediaFlashPaper.MacromediaFlashPaper\shell\open

MacromediaFlashPaper.MacromediaFlashPaper\shell\open\command

flash.ocx

FlashUtil9b.exe

FlashUtil.exe

Flash.pdb

Flash.ocx

{1B655094-FE2A-433c-A877-FF9793445069}

COMCTL32.DLL

imm32.dll

System.IME

_win_ax.xml

iexplore.exe

hXXp://VVV.macromedia.com/software/flash/fl4about

User32.dll

kernel32.dll

hXXp://fpdownload.macromedia.com/get/flashplayer/update/current/xml/version_

user32.dll

RegDeleteKeyW

RegOpenKeyExW

RegCreateKeyExW

advapi32.dll

version.dll

ShellExecuteExW

shell32.dll

ieframe.dll

Windows 95

Windows 98/ME

Windows NT

Windows 2000

Windows XP

Windows Vista

Windows

Adobe Windows

Macromedia Windows

testUpdate.txt

atl.dll

HTTP/1.0

/get/flashplayer/update/current/install/version.xml

fpdownload.macromedia.com

&M=%s&R=%dx%d&DP=%d&COL=%s&AR=%s&OS=%s&L=%s&IME=%b

*.exe

*.swf

W@\\?\

).mdmp

player_crash_log_(*).mdmp

dbghelp.dll

z>https

onHTTPError

&Macromedia Flash Certificate Authority1

[email protected]

Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

Software\Microsoft\Windows\CurrentVersion\RunOnce

VerifyMessage : Second CertVerifySubjectCertificateContext() failed.

VerifyMessage : CertVerifySubjectCertificateContext() failed.

VerifyMessage : Certificate chain is too long.

VerifyMessage : CertCreateCertificateContext() failed.

VerifyMessage : CryptGetMessageCertificates() failed.

VerifyMessage : Unable to read external root certificate specified in MMS.CFG by CodeSignRootCert.

\\?\UNC\

%d.%d.%d.%d

WinHttpGetIEProxyConfigForCurrentUser

WinHttpGetProxyForUrl

WinHttpDetectAutoProxyConfigUrl

WinHttpGetDefaultProxyConfiguration

WinHttpCloseHandle

WinHttpOpen

winhttp.dll

URLDownloadToFileA

urlmon.dll

Ws2_32.dll

jsproxy.dll

DetectAutoProxyUrl

wininet.dll

Secur32.dll

Security.dll

CertCloseStore

CertOpenSystemStoreW

CertFreeCertificateContext

CertFreeCertificateChain

CertVerifyCertificateChainPolicy

CertGetCertificateChain

crypt32.dll

keyFrameInterval

tag=%s;timestamp=%d;zone=%d;uri=%s

NetConnection.Connect.CertificateAPIError

NetConnection.Connect.CertificateInvalid

NetConnection.Connect.CertificateRevoked

NetConnection.Connect.CertificateUntrustedSigner

NetConnection.Connect.CertificatePrincipalMismatch

NetConnection.Connect.CertificateExpired

NetConnection.Connect.SSLHandshakeFailed

NetConnection.Connect.SSLNotAvailable

NetConnection.Connect.ProxyAuthFailed

CONNECT %s:%d HTTP/1.1

127.0.0.1

fpadPort

.Unmuted

.Muted

Camera.Unmuted

Camera.Muted

Microphone.Unmuted

Microphone.Muted

/bin/flashhelp.cgi

[[IMPORT]]/

~&\;:"',<>? #

/support/flashplayer/sys/

SharedObject.Failed

SharedObject.Flush.Failed

SharedObject.Flush.Success

hXXp://%s

hXXp://a.

SharedObject.BadPersistence

SharedObject.UriMismatch

NetConnection.Connect.Failed

NetConnection.Connect.Success

NetConnection.Connect.Closed

port

pageUrl

tcUrl

swfUrl

HTTPS

@NetStream.Buffer.Flush

NetStream.Buffer.Full

NetStream.Buffer.Empty

NetStream.Play.Stop

NetStream.Seek.Notify

NetStream.Seek.InvalidTime

NetStream.Play.StreamNotFound

NetStream.Play.Start

NetStream.Publish.BadName

NetStream.Play.Failed

HttpEndRequestA

HttpSendRequestExA

HttpAddRequestHeadersA

HttpSendRequestA

HttpOpenRequestA

SwSupport.dll

FileReference.upload

FileReference.download

FileReference.browse

FileReferenceList.browse

BitmapData.draw

Operation

operationStr

Loader.content

LoaderContext.checkPolicyFile

LoaderContext.securityDomain

Loader.load

LoaderInfo.loader

LoaderInfo.content

LocalConnection.send

LocalConnection.connect

NetConnection.connect

NetStream.play

keyDown

keyFocusChange

keyUp

httpStatus

navigateToURL

sendToURL

<arg key="

hXXp://VVV.adobe.com/2006/actionscript/flash/proxy

SharedObject.getLocal

SharedObject.getRemote

.connect

Sound.load

Sound.id3

@SoundMixer.computeSpectrum

Stage.removeChildAt

Stage.swapChildrenAt

flash.text

URLStream.load

OleAut32.dll

q.CUN3C

4294967295

@wKA%3 %3 %d %d

%2:%2:%2 GMT%c%2%2

%3 %3 %d %d %2:%2:%2 %cM

%2:%2:%2 %cM

%3 %3 %d %2:%2:%2 %d UTC

support for \P, \p, and \X has not been compiled

PCRE does not support \L, \l, \N, \U, or \u

this version of PCRE is not compiled with PCRE_UTF8 support

POSIX collating elements are not supported

erroffset passed as NULL

POSIX named classes are supported only within a class

operand of unlimited repeat could match the empty string

-2147483648

hXXp://VVV.w3.org/XML/1998/namespace

mscoree.dll

- This application cannot run using the active version of the Microsoft .NET Runtime

Please contact the application's support team for more information.

internal state. The program cannot safely continue execution and must

continue execution and must now be terminated.

GetProcessWindowStation

e:\flashfarm\depot\main\player\branches\FlashPlayer\FlashPlayer9_DotReleases\platform\win32\ActiveX\ReleaseMinSize\Flash.pdb

winmm.dll

httpsendrequesta

httpopenrequesta

httpqueryinfoa

certclosestore

certfreecertificatecontext

certverifysubjectcertificatecontext

certfindcertificateinstore

certcreatecertificatecontext

cryptgetmessagecertificates

rpcrt4.dll

OLEAUT32.dll

getcpinfo

getprocessheap

enumwindows

getkeyboardlayout

getkeystate

mapvirtualkeya

msgwaitformultipleobjects

setviewportorgex

gdi32.dll

comdlg32.dll

regdeletekeya

regclosekey

regcreatekeyexa

regopenkeyexa

regqueryinfokeya

regenumkeyexa

regcreatekeya

ole32.dll

shdeletekeya

shlwapi.dll

createurlmoniker

WSOCK32.dll

.VA)D

J$%f;Q

[b*%c

V%u[wG

flash.utils

flash.debugger

adobe.utils

MMExecute

flash.profiler

flash.net

URLRequest

sendToURL"flash.errors:IllegalOperationError

flash.errors

IllegalOperationError

flash.errors:IOError

flash.errors:MemoryError

flash.errors:StackOverflowError

flash.errors:ScriptTimeoutError

flash.errors:InvalidSWFError

flash.errors:EOFError

flash_errors.as$1

flash.text:CSMSettings

CSMSettings.as$3

CSMSettings flash.net:IDynamicPropertyOutput

IDynamicPropertyOutput flash.net:IDynamicPropertyWriter

flash.utils:IExternalizable

flash.display

IBitmapDrawable!flash.accessibility:Accessibility

flash.accessibility

Accessibility.as$12/flash.accessibility:AccessibilityImplementation

stub!AccessibilityImplementation.as$13

flash.geom

ExcludeClass flash.accessibility:AccessibilityProperties

AccessibilityProperties.as$14

flash.system:ApplicationDomain

flash.system

ApplicationDomain.as$16

flash.geom:ColorTransform

ColorTransform.as$23

concat flash.ui:ContextMenuBuiltInItems

flash.ui

ContextMenuBuiltinItems.as$26

adobe.utils:CustomActions

CustomActions.as$29

flash.utils:Endian

Endian.as$32

flash.utils:IDataInput

flash.utils:IDataOutput

writeObject'flash.filters:DisplacementMapFilterMode

flash.filters

DisplacementMapFilterMode.as$37

flash.display:BlendMode

BlendMode.as$39

flash.events:Event

flash.events

Event.as$43

flash.events:EventPhase

EventPhase.as$44 flash.external:ExternalInterface

ExternalInterface.as$46

flash.external

.SetReturnValue(

; } catch (e) { .SetReturnValue("<undefined/>");

FSCommand.as$47

flash.system:FSCommand

flash.net:FileFilter

FileFilter.as$48

flash.text:Font

Font.as$52

flash.text:FontType

FontType.as$53

flash.display:Graphics

Graphics.as$58

flash.display:GradientType

GradientType.as$59

flash.display:SpreadMethod

SpreadMethod.as$60!flash.display:InterpolationMethod

InterpolationMethod.as$61

flash.display:LineScaleMode

LineScaleMode.as$62

flash.display:CapsStyle

CapsStyle.as$63

flash.display:JointStyle

JointStyle

JointStyle.as$64

flash.events:IEventDispatcher

flash.display:BitmapDataChannel

BitmapDataChannel.as$69

flash.filters:BitmapFilter

BitmapFilter.as$70

flash.filters:BitmapFilterType

BitmapFilterType.as$71!flash.filters:BitmapFilterQuality

BitmapFilterQuality.as$72

flash.display:PixelSnapping

PixelSnapping.as$74

flash.ui:Keyboard

Keyboard

Keyboard.as$77

flash.ui:KeyLocation

KeyLocation

KeyLocation.as$78

flash.text:TextLineMetrics

TextLineMetrics.as$80

flash.system:SecurityDomain

SecurityDomain.as$83

flash.system:LoaderContext

LoaderContext.as$84

flash.geom:Matrix

Matrix.as$87

flash.ui:Mouse

Mouse.as$91

flash.display:Scene

Scene.as$94

flash.display:FrameLabel

FrameLabel.as$95

flash.net:ObjectEncoding

ObjectEncoding.as$101

flash.geom:Point

Point.as$102

flash.printing:PrintJobOptions

PrintJobOptions.as$104

flash.printing

PrintJobOptions"flash.printing:PrintJobOrientation

PORTRAIT

PrintJobOrientation.as$105

flash.display:SWFVersion

SWFVersion.as$106!flash.display:ActionScriptVersion

ActionScriptVersion.as$107

flash.utils:Proxy

Proxy.as$1112hXXp://VVV.adobe.com/2006/actionscript/flash/proxy

flash.geom:Rectangle

Rectangle.as$112

flash.net:Responder

Responder.as$113

flash.system:Security

Security.as$114

flash.system:SecurityPanel

SecurityPanel.as$115

flash.media:ID3Info

flash.media

ID3Info.as$121

flash.media:SoundLoaderContext

SoundLoaderContext.as$122

flash.media:SoundTransform

SoundTransform.as$124

flash.media:SoundMixer

SoundMixer.as$125

flash.display:StageAlign

StageAlign.as$127

flash.display:StageDisplayState

StageDisplayState.as$128

flash.display:StageQuality

StageQuality.as$129

flash.display:StageScaleMode

StageScaleMode.as$130

flash.system:System

System.as$135

flash.system:Capabilities

Capabilities.as$136

flash.system:IMEConversionMode

IMEConversionMode.as$138

flash.text:TextExtent

TextExtent.as$139

flash.text:TextFieldAutoSize

TextFieldAutoSize.as$141

flash.text:TextFieldType

TextFieldType.as$142

flash.text:TextFormat

TextFormat.as$143

flash.text:TextFormatDisplay

TextFormatDisplay.as$144

flash.text:TextFormatAlign

TextFormatAlign.as$145

flash.text:TextRenderer

TextRenderer.as$146

flash.text:AntiAliasType

AntiAliasType.as$147!flash.net:SharedObjectFlushStatus

SharedObjectFlushStatus.as$148

flash.text:GridFitType

GridFitType.as$149

flash.text:TextColorType

TextColorType.as$150

flash.text:TextDisplayMode

TextDisplayMode.as$151

flash.text:FontStyle

FontStyle.as$152

flash.text:TextRun

TextRun.as$153

flash.text:TextSnapshot

TextSnapshot.as$154

flash.geom:Transform

Transform.as$158

flash.net:URLLoaderDataFormat

URLLoaderDataFormat

URLLoaderDataFormat.as$160

flash.net:URLRequest

URLRequest.as$161

flash.net:URLRequestHeader

URLRequestHeader.as$162

URLRequestHeader

flash.net:URLRequestMethod

URLRequestMethod

URLRequestMethod.as$163

flash.net:URLVariables

URLVariables.as$165

URLVariables

flash.xml:XMLNode

flash.xml

XMLNode.as$167

flash.xml:XMLNodeType

XMLNodeType.as$168

flash.xml:XMLParser

XMLParser.as$170

flash.xml:XMLTag

XMLTag.as$172

adobe.utils:XMLUI

XMLUI.as$173

flash.utils:Dictionary

Dictionary.as$174

flash.net:DynamicPropertyOutput

DynamicPropertyOutput.as$7

flash.display:BitmapData

BitmapData.as$68

flash.utils:ObjectInput

ObjectInput.as$5

flash.utils:ObjectOutput

ObjectOutput.as$4

flash.utils:ByteArray

ByteArray.as$20

flash.events:ActivityEvent

ActivityEvent.as$15

flash.events:TextEvent

TextEvent.as$30

flash.events:FocusEvent

KEY_FOCUS_CHANGE

FocusEvent.as$51

m_shiftKey

m_keyCode

shiftKey

keyCode

flash.events:HTTPStatusEvent

HTTP_STATUS

HTTPStatusEvent.as$65

HTTPStatusEvent

flash.events:KeyboardEvent

KEY_DOWN

KEY_UP

KeyboardEvent.as$79

m_keyLocation

m_ctrlKey

m_altKey

KeyboardEvent

keyLocation

ctrlKey

altKey

flash.events:ContextMenuEvent

ContextMenuEvent.as$88

flash.events:MouseEvent

MouseEvent.as$92

flash.events:NetStatusEvent

NetStatusEvent.as$98

flash.events:NetFilterEvent

NetFilterEvent.as$100

flash.events:ProgressEvent

ProgressEvent.as$110

flash.events:StatusEvent

StatusEvent.as$132

flash.events:SyncEvent

SyncEvent.as$134

flash.events:TimerEvent

TimerEvent.as$157

flash.events:WeakMethodClosure

WeakMethodClosure flash.events:WeakFunctionClosure

flash.events:EventDispatcher

EventDispatcher.as$45

flash.filters:BevelFilter

BevelFilter.as$17

flash.filters:BlurFilter

BlurFilter.as$18

flash.filters:ColorMatrixFilter

ColorMatrixFilter.as$22

flash.filters:ConvolutionFilter

ConvolutionFilter.as$28

ConvolutionFilter#flash.filters:DisplacementMapFilter

DisplacementMapFilter.as$36

flash.filters:DropShadowFilter

DropShadowFilter.as$40

flash.filters:GlowFilter

GlowFilter.as$55

GlowFilter!flash.filters:GradientBevelFilter

GradientBevelFilter.as$56

GradientBevelFilter flash.filters:GradientGlowFilter

GradientGlowFilter.as$57

flash.xml:XMLDocument

XMLDocument.as$169

flash.events:FullScreenEvent

FullScreenEvent.as$54

flash.events:DataEvent

DataEvent.as$31

flash.events:ErrorEvent

ErrorEvent.as$42

flash.events:IMEEvent

ImeEvent.as$75

flash.media:Camera

setKeyFrameInterval

Camera.as$21

flash.events.StatusEvent

flash.events.ActivityEvent

flash.ui:ContextMenu

ContextMenu.as$25

flash.events.ContextMenuEvent

flash.ui:ContextMenuItem

ContextMenuItem.as$27

flash.display:DisplayObject

DisplayObject.as$38

flash.events.Event

flash.net:FileReference

FileReference.as$49

flash.events.DataEvent

flash.events.HTTPStatusEvent

flash.events.SecurityErrorEvent

flash.events.ProgressEvent

flash.events.IOErrorEvent

flash.net:FileReferenceList

FileReferenceList.as$50

flash.display:LoaderInfo

LoaderInfo.as$82

loaderURL

flash.net:LocalConnection

LocalConnection.as$85

flash.events.AsyncErrorEvent

flash.media:Microphone

Microphone.as$89

flash.net:NetConnection

NetConnection.as$97

flash.events.NetStatusEvent

flash.net:NetStream

NetStream.as$99

flash.printing:PrintJob

PrintJob.as$103

adobe.utils:ProductManager

ProductManager.as$108

flash.events.ErrorEvent

flash.net:SharedObject

SharedObject.as$118

flash.events.SyncEvent

flash.net:Socket

Socket.as$119

flash.media:Sound

Sound.as$120

flash.media:SoundChannel

leftPeak

SoundChannel.as$123

flash.text:StyleSheet

StyleSheet.as$133

flash.system:IME

IME.as$137

flash.events.IMEEvent

flash.utils:Timer

Timer.as$155

flash.events.TimerEvent

flash.net:URLLoader

URLLoader.as$159

URLStream

URLLoader

flash.net:URLStream

URLStream.as$164

flash.net:XMLSocket

XMLSocket.as$171

flash.events:AsyncErrorEvent

AsyncErrorEvent.as$41

flash.events:IOErrorEvent

IOErrorEvent.as$67

flash.events:SecurityErrorEvent

SecurityErrorEvent.as$116

flash.display:AVM1Movie

AVM1Movie.as$11

flash.display:IBitmapDrawable

flash.display:Bitmap

Bitmap.as$73

flash.display:InteractiveObject

InteractiveObject.as$76

flash.events.KeyboardEvent

flash.events.MouseEvent

flash.events.FocusEvent

flash.display:MorphShape

MorphShape.as$90

flash.display:Shape

Shape.as$117

flash.text:StaticText

StaticText.as$131

flash.media:Video

Video.as$166

SetIntervalTimer.as$156

flash.utils:SetIntervalTimer

flash.display:SimpleButton

SimpleButton.as$19

SimpleButton$flash.display:DisplayObjectContainer

DisplayObjectContainer.as$24

flash.text:TextField

TextField.as$140

alwaysShowSelection

displayAsPassword

flash.events.TextEvent

flash.display:Loader

Loader.as$81

flash.display:Sprite

Sprite.as$93

flash.display:Stage

Stage.as$126

flash.events.FullScreenEvent

flash.display:MovieClip

MovieClip.as$96

,-./0123456789:;<=>

f$,&a%dl

f$,)a%dl

f$, a%dl

f$,3a%dl

f$,-a%dl

f$,/a%dl

builtin.as$0

hasOwnProperty!hXXp://adobe.com/AS3/2006/builtin

Boolean.prototype.toString

Boolean.prototype.valueOf

Number.prototype.toString

Number.prototype.valueOf

int.prototype.toString

int.prototype.valueOf

uint.prototype.toString

uint.prototype.valueOf

String.prototype.toString

String.prototype.valueOf

RETURNINDEXEDARRAY

join

_join

builtin.as$0:MethodClosure

Math.as$1

Error.as$2

RegExp.as$3

Date.as$4

XML.as$5

QName.prototype.toString

&!&!*! !.!.!

((('&%$#"!

zcÁ

5Iw%Program Files% (x86)\iWin Games\iWinGames.exe

MacromediaFlashPaper.MacromediaFlashPaper = s 'Macromedia Flash Paper'

CLSID = s '{D27CDB6E-AE6D-11cf-96B8-444553540000}'

FlashFactory.FlashFactory.1 = s 'Macromedia Flash Factory Object'

CLSID = s '{D27CDB70-AE6D-11cf-96B8-444553540000}'

ShockwaveFlash.ShockwaveFlash.1 = s 'Shockwave Flash Object'

FlashFactory.FlashFactory = s 'Macromedia Flash Factory Object'

CurVer = s 'FlashFactory.FlashFactory.1'

ShockwaveFlash.ShockwaveFlash.3 = s 'Shockwave Flash Object'

ShockwaveFlash.ShockwaveFlash.4 = s 'Shockwave Flash Object'

ShockwaveFlash.ShockwaveFlash.5 = s 'Shockwave Flash Object'

ShockwaveFlash.ShockwaveFlash.6 = s 'Shockwave Flash Object'

ShockwaveFlash.ShockwaveFlash.7 = s 'Shockwave Flash Object'

ShockwaveFlash.ShockwaveFlash.8 = s 'Shockwave Flash Object'

ShockwaveFlash.ShockwaveFlash.9 = s 'Shockwave Flash Object'

ShockwaveFlash.ShockwaveFlash = s 'Shockwave Flash Object'

CurVer = s 'ShockwaveFlash.ShockwaveFlash.9'

ForceRemove {D27CDB6E-AE6D-11cf-96B8-444553540000} = s 'Shockwave Flash Object'

ProgID = s 'ShockwaveFlash.ShockwaveFlash.9'

VersionIndependentProgID = s 'ShockwaveFlash.ShockwaveFlash'

'TypeLib' = s '{D27CDB6B-AE6D-11cf-96B8-444553540000}'

'.spl'

'.swf'

'.mfp'

'{7DD95802-9882-11CF-9FA9-00AA006C42C4}'

'{7DD95801-9882-11CF-9FA9-00AA006C42C4}'

ForceRemove {D27CDB70-AE6D-11cf-96B8-444553540000} = s 'Macromedia Flash Factory Object'

ProgID = s 'FlashFactory.FlashFactory.1'

VersionIndependentProgID = s 'FlashFactory.FlashFactory'

'.spl' = s 'ShockwaveFlash.ShockwaveFlash'

'.swf' = s 'ShockwaveFlash.ShockwaveFlash'

'.mfp' = s 'MacromediaFlashPaper.MacromediaFlashPaper'

'.sol'

'.sor'

NoRemove val Extension = s '.spl'

val CLSID = s '{D27CDB6E-AE6D-11cf-96B8-444553540000}'

NoRemove val Extension = s '.swf'

FlashProp.FlashProp.1 = s 'FlashProp Class'

CLSID = s '{1171A62F-05D2-11D1-83FC-00A0C9089C5A}'

FlashProp.FlashProp = s 'FlashProp Class'

CurVer = s 'FlashProp.FlashProp.1'

ForceRemove {1171A62F-05D2-11D1-83FC-00A0C9089C5A} = s 'FlashProp Class'

stdole2.tlbWWW

urlW

ProfilePortW

property ProfilePortWW

Created by MIDL version 6.00.0361 at Fri Aug 11 11:24:05 2006

.FlashAccessibilityWW

Created by MIDL version 6.00.0361 at Thu Oct 27 17:54:40 2005

7#7'7 7/737

4M4

<)=0=7=>=

3M4[4

7#7'7 7/73777

6-7A7}7

; <9<<=^=

3 7$8(8,8084888<8@8

1 1$1(1,1

;!<<<[<{<

?"?(?,?2?6?<?@?

6.7Œ8

5#5*515@5

= =$=(=4=8=<=@=

< <$<(<,<0<4<

? ?$?(?,?0?4?

7 7$7(7,7

; ;$;(;,;0;4;

9 :$:(:,:0:4:8:<:

< <$<(<,<0<4<8<<<

: :$:(:,:0:4:8:

1 1$1(1,1014181<1

0 0$0(0,0004080

8 8$8(8,8084888<8@8

!),.:;?]}

ProfilePort

\VVV.macromedia.com

\Logs\codesign.txt

WinHTTP AutoProxy Test

control.tlb

&Movie URL

&Base URL

URL(&M)

URL(&B)

&Film-URL

&Basis-URL

&URL de l'animation

URL de &base

URL &filmato

URL di &base

&URL de pel

URL &base

URL(&M)

URL(&B)

Help File Name%Configuraci

Adobe Flash Player has stopped a potentially unsafe operation.

Adobe Flash Player ha interrotto un'operazione potenzialmente pericolosa.

Adobe Flash Player ha detenido una operaci

Zuma.ifn_1004:

.text

`.rdata

@.data

.text1

.adata

.data1

.pdata

.rsrc

N`SSh

NdSSh

NhSSh1

NlSSh;

t.Ht/

u.ht9P

hTCP

t-hTCP

V\SSQRSSh

PhtTP

t.SVW

.uf@;

!"#$%&'(,,)*

SSSSSSh

SSSSSSSSh

SSSSSSSh

%UUUU

.tgPV

FTp3S

FTPjK

FtPj;

C.PjRVj

u.VV3

userdata/user%d.dat

p_%s_%d_%d

%s/%s.png

dist%d

D.dat

LeVeL %d-%d

LVL %d-%d

%s %d

NewLevel: %d

CHAIN BONUS x%d

COMBO x%d

?BONUS  %d

Nick

userdata/highscores.dat

userdata/users.dat

settings%d

diffi%d

stage%d

%d LIVES LEFT

STAGE %d

-:d:d

%d:d

userdata/%s%d.sav

Nick Newhard

YOU HAVE %d FREE PLAYS REMAINING!

YOU HAVE %d MINUTES LEFT IN THIS TRIAL!

Your video card may not fully support this feature.

Not Supported

Press the 's' key to toggle star scrolling.

There is only one corner of the universe you can be certain of improving and that is your own self.

music/zuma.mo3

No levels defined in levels.xml

levels/levels.xml

MaxExecutions

. For your convenience, this URL has already been copied to your clipboard.

Please open the following URL in your browser

hXXp://VVV.popcap.com/win32updatecheck2.php?prod=

This will permanently remove '%s' from the player roster!

%s (%s)

Score: %d

%s: %s

A4R4G4B4 and A8R8G8B8 texture formats not supported.

A8R8G8B8 texture format not supported.

SetCooperativeLevel

Unsupported video card.

Alpha blend Not Supported

Additive blend not supported.

AlphaAdd blend not supported.

AlphaModulated blend not supported.

SetCooperativeLevel FullScreen

Line %d:

Resource Loading Time: %d

%s (d:d:d)

Avg FPS = %d

Screen Blt = %d

Draw Time = %d

Draw Count = %d

Update Count = %d

Sleep Count = %d

Count = %d

TimesExecuted

popcinfo.dat

hXXp://VVV.popcap.com/register.php?theGame=

RegistryKey

d:d:d

FPS: %d

properties\resources.xml

?DESTROYED HWND: %d

temp\tpld.html

temp\tpl*.html

This application requires DirectX to run. You can get DirectX at hXXp://VVV.microsoft.com/directx

properties\partner.xml

BuildDate: %s

BuildNum: %d

Product: %s

RLAdditive<BR>%s

RLAlpha<BR>%s

NativeAlpha<BR>%s

Texture<BR>%s

DDSurface<BR>%s

Palletized<BR>%s

mBits<BR>%s

%d x %d<BR>%s bytes

thumbd.jpg

imgd.png

_dump\imagelist.html

Palette8: %d - %s KB

R5G6B5: %d - %s KB

A4R4G4B4: %d - %s KB

A8R8G8B8: %d - %s KB

Texture Memory: %s KB

Video Memory: %s/%s KB

3D-Mode %s (3D is %s on this system)

Unsupported

Supported

3D-Mode: %s

register.tpl

popcap.dmo

There is an update available for this product. Would you like to visit the web site to download it?

Contacting PopCap.com to determine if there are any updates available for this product ...

user32.dll

dsound.dll

ddraw.dll

version.dll

Float Invalid Operation

Float Denormal Operand

IMAGEHLP.DLL

should be reported to [email protected].

Password

%s (%d calls, %%%.2f time): %.2f (%.2f avg)

%d.%d

Windows Ver:

hXXp://

D3DERR_UNSUPPORTEDTEXTUREFILTER

D3DERR_UNSUPPORTEDFACTORVALUE

D3DERR_TOOMANYOPERATIONS

D3DERR_UNSUPPORTEDALPHAARG

D3DERR_UNSUPPORTEDCOLOROPERATION

D3DERR_UNSUPPORTEDCOLORARG

D3DERR_UNSUPPORTEDALPHAOPERATION

D3DERR_COLORKEYATTACHED

D3DERR_NOCURRENTVIEWPORT

D3DERR_VIEWPORTDATANOTSET

D3DERR_VIEWPORTHASNODEVICE

D3DERR_NOVIEWPORTS

D3DERR_TEXTURE_NO_SUPPORT

D3DERR_SETVIEWPORTDATA_FAILED

D3DERR_LIGHTNOTINTHISVIEWPORT

D3DERR_LIGHTHASVIEWPORT

D3DERR_INVALIDCURRENTVIEWPORT

DDERR_UNSUPPORTEDMODE

DDERR_UNSUPPORTEDMASK

DDERR_UNSUPPORTEDFORMAT

DDERR_OVERLAYCOLORKEYONLYONEACTIVE

DDERR_COLORKEYNOTSET

DDERR_NODIRECTDRAWSUPPORT

DDERR_NOCOOPERATIVELEVELSET

DDERR_NOCOLORKEYHW

DDERR_NOCOLORKEY

DDERR_UNSUPPORTED

Login

PopCap Beta Login...

LoginWindow

GridAlphaImage size mismatch between %s and %s

Failed to load image: %s

AlphaImage size mismatch between %s and %s

Failed to load sound: %s

Failed to load font: %s

Image resource not found: %s

Sound resource not found: %s

Font resource not found: %s

X X X:X %s

StackWalk failed (error %d)

Params: X X X X

X X X:X %s

X X %hs %X

more %s %s |

popup %d %d |

crash.txt

HTTP/1.

%s line %d  0x%X

 0x%X

*.map

HTTP/1.0

User-Agent: Mozilla/4.0 (compatible; popcap)

The password you supplied did not match this account.

Invalid Password!

Invalid Password

result.txt

:COMMENTURL

:UPDATEURL

&pass=

hXXp://VVV.popcap.com/beta_validate.php?prod=

VVV.popcap.com

Content-Disposition: form-data; name="demofile"; filename="popcap.dmo"

Host: VVV.popcap.com

POST /deluxe_error.php HTTP/1.1

AdFile: %s

Submitting Report

adlist.txt

Send Report

An unexpected error has occured! Pressing 'Send Report' will send us helpful debugging information that may help us resolve this issue in the future.

You can also contact us directly at [email protected].

Exception: %s (code 0x%x) at address X in thread %X

Flags:X

CS:X SS:X DS:X ES:X FS:X GS:X

EIP:X ESP:X EBP:X

EAX:X EBX:X ECX:X EDX:X ESI:X EDI:X

Exception at X:X

Logical Address: X:X

Unknown exception: (code 0x%x) at address X in thread %X

1.0.5

%s function not found in bass.dll

Can't find bass.dll.

bass.dll

%s function not found in fmod.dll

Can't find fmod.dll.

fmod.dll

1.1.3

NULL row buffer for row %ld, pass %d

Corrupt JPEG data: found marker 0xx instead of RST%d

Warning: unknown JFIF revision number %d.d

Corrupt JPEG data: %u extraneous bytes before marker 0xx

Inconsistent progression sequence for component %d coefficient %d

Unknown Adobe color transform code %d

Obtained XMS handle %u

Freed XMS handle %u

Unrecognized component IDs %d %d %d, assuming YCbCr

JFIF extension marker: RGB thumbnail image, length %u

JFIF extension marker: palette thumbnail image, length %u

JFIF extension marker: JPEG-compressed thumbnail image, length %u

Opened temporary file %s

Closed temporary file %s

Ss=%d, Se=%d, Ah=%d, Al=%d

Component %d: dc=%d ac=%d

Start Of Scan: %d components

Component %d: %dhx%dv q=%d

Start Of Frame 0xx: width=%u, height=%u, components=%d

Smoothing not supported with nonstandard sampling ratios

RST%d

At marker 0xx, recovery action %d

Selected %d colors for quantization

Quantizing to %d colors

Quantizing to %d = %d*%d*%d colors

%4u %4u %4u %4u %4u %4u %4u %4u

Unexpected marker 0xx

Miscellaneous marker 0xx, length %u

with %d x %d thumbnail image

JFIF extension marker: type 0xx, length %u

Warning: thumbnail image size does not match data length %u

JFIF APP0 marker: version %d.d, density %dx%d %d

= = = = = = = =

Obtained EMS handle %u

Freed EMS handle %u

Define Restart Interval %u

Define Quantization Table %d precision %d

Define Huffman Table 0xx

Define Arithmetic Table 0xx: 0xx

Unknown APP14 marker (not Adobe), length %u

Unknown APP0 marker (not JFIF), length %u

Adobe APP14 marker: version %d, flags 0xx 0xx, transform %d

Unsupported marker type 0xx

Failed to create temporary file %s

Unsupported JPEG process: SOF type 0xx

Cannot quantize to more than %d colors

Cannot quantize to fewer than %d colors

Cannot quantize more than %d color components

Insufficient memory (case %d)

Not a JPEG file: starts with 0xx 0xx

Quantization table 0xx was not defined

Huffman table 0xx was not defined

Backing store not supported

Cannot transcode due to multiple use of quantization table %d

Maximum supported image dimension is %u pixels

Empty JPEG image (DNL not supported)

Bogus DQT index %d

Bogus DHT index %d

Bogus DAC value 0x%x

Bogus DAC index %d

Unsupported color conversion request

Too many color components: %d, max %d

Buffer passed to JPEG library is too small

JPEG parameter struct mismatch: library thinks size is %u, caller expects %u

Improper call to JPEG library in state %d

Invalid scan script at entry %d

Invalid progressive parameters at scan script entry %d

Invalid progressive parameters Ss=%d Se=%d Ah=%d Al=%d

Unsupported JPEG data precision %d

Invalid memory pool code %d

Wrong JPEG library version: library is %d, caller expects %d

IDCT output block size %d not supported

Invalid component ID %d in SOS

Bogus message code %d

0123456789ABCDEFlibpng error: %s

libpng warning: %s

gx=%f, gy=%f, bx=%f, by=%f

wx=%f, wy=%f, rx=%f, ry=%f

gamma=%f

Unknown zTXt compression type %d

%ld%c

keyword length must be 1 - 79 characters

zero length keyword

leading spaces removed from keyword

trailing spaces removed from keyword

invalid keyword character 0xX

Empty keyword in tEXt chunk

Empty keyword in zTXt chunk

deflate 1.1.3 Copyright 1995-1998 Jean-loup Gailly

.Qo.'

.SxEwix

%XQQbvQ

.%z9|.zw

ou{.Yy{"@}{

inflate 1.1.3 Copyright 1995-1998 Mark Adler

w.HA/

z:\R%

mscoree.dll

internal state. The program cannot safely continue execution and must

continue execution and must now be terminated.

Please contact the application's support team for more information.

?#%X.y

kernel32.dll

portuguese-brazilian

GetProcessWindowStation

KERNEL32.dll

WINMM.dll

WSOCK32.dll

USER32.dll

GDI32.dll

ADVAPI32.dll

SHELL32.dll

ole32.dll

OLEAUT32.dll

.?AVHTTPTransfer@Sexy@@

.?AVBetaSupport@Sexy@@

zcÁ

C:\Games\iWin.com\Zuma Deluxe\Zuma.ifn

aSSSh

C.PjRV

]@ ]( ]8

tGHt.Ht&

FTPQ

.?AVunsupported_thread_option@boost@@

SetProcessShutdownParameters

COMCTL32.DLL

boost::too_few_args: format-string referred to more arguments than were passed

boost::too_many_args: format-string referred to less arguments than were passed

Required USB Key not found

Failed to execute target process

Cannot find import; DLL may be missing, corrupt, or wrong version

File "%s", function "%s"

File "%s", ordinal %d

File "%s", error %d

(Error code %d)

%X:DAF

(Location XEB, error code %d)

_PAD%d

RNX

%X::DAX

KERNEL32.DLL

GetWindowsDirectoryW

CreateDialogIndirectParamW

Kernel32.dll

User32.dll

ComDlg32.dll

.DbgLog

1.2.3

EXCEPTION_FLT_INVALID_OPERATION

EXCEPTION_FLT_DENORMAL_OPERAND

boost::unsupported_thread_option

Visual C   CRT: Not enough memory to complete call to strerror.

.mixcrt

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

ADVAPI32.DLL

Broken pipe

Inappropriate I/O control operation

Operation not permitted

operator

USER32.DLL

deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly

inflate 1.2.3 Copyright 1995-2005 Mark Adler

C:\Games\iWin.com\Zuma Deluxe\Zuma-2.DbgLog

GetWindowsDirectoryA

EnumThreadWindows

EnumWindows

CreateDialogIndirectParamA

GetAsyncKeyState

comdlg32.dll

GetProcessHeap

GetCPInfo

GetConsoleOutputCP

{.Rim

M}Y%UM

|>"y.QD

,|.Fi

#CMd*

.Tegg&j

m.giB

0Ú&

3%CP1-

Vu.vY

%FMO.m

d.nv5u

99b%s

O\.DFv

q.tK~

:-.zp

'^.fB

_J.eL

c>%C(

-I}gN

Lq.SO

*<-.Fv

m%x[i

i.JWX

LJ.pR

.Lwp!:

SSH9y}

.Uj;/

%FV_qW

.udg]

C.pn6

Lz.FyA?

-q5j}/

YV.mjg'

.QN;V

}.Vr9

cMd}G

.vB#SP

.VMTs4

.IC92

,i6i.Zn

%Fh`{

Ur.zi

kkM%u

.xm2{

.SfN[

*q=.eb

"p>.mh'

r.wWd

 ESlV-4}

üVsN

b-dE2%s|

%XrL*

%X7l#9

c:\y ) S

*..qE

kX%DI

w%SBe

%-.Ek

/o)%fs

z%u9AM

%u9Ce2-

p.BbT

vLx%s

.nb{H[

O%SXV

*.XpW2j2

%FPTH{

bFS.il

a[FPC4%x)

%c, F

%u'z@yd

.NCV}

LK.yu

t.Cq[

i~{.mt

Ak.UX

{c.GQTAA~g

j4Vqb.MK

FIØ

={#$ J%S

pa|qÈ

V%cS#

kA='.cq

a.ic2

=L

A%X5@

X.szan

.sV$:w^

@"54222-2

99<=:877

huc.hcbeeebb_e_bbbya3-`b_e%

l/p.Lwcffef`bbcbbb1``1bbe_,

iWin.com\Zuma Deluxe\Zuma.ifn

1, 0, 0, 1

Zuma.exe

Zuma.ifn_1004_rwx_10001000_00055000:

%UUUU3

=N.T.tk=M.K.td=M!K!t]=FLT4tV=CD81u

Ht.Ht

Range: bytes=%d-

REST %d

dsound.dll

\\.%s

\\.\sysaudio

FtpCommandA

FtpOpenFileA

FtpFindFirstFileA

FtpSetCurrentDirectoryA

HttpQueryInfoA

HttpSendRequestA

HttpOpenRequestA

InternetCrackUrlA

wininet.dll

;5?!]1?|

|?(;|?:]|?

q.CUN3C

2FL?~\3F

$.Gk7.G

SG;%SG

MSG;bSG

%dGc:dG

iGM.iG%CiG

.zG&DzG]YzG

~|?(;|?1

WINMM.dll

MSACM32.dll

KERNEL32.dll

USER32.dll

ole32.dll

MSVCRT.dll

BASS_GetCPU

BASS_StreamCreateURL

BASS.dll

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):

iWinGames - Zuma Deluxe.exe:1832
iWinGamesToolbar.exe:704
iWinGamesSetup.exe:1812
InstGameInfoHelper.exe:824
iWinInstallOptions.exe:1744
Dwm.exe:940
iWinToolbarLauncher.exe:992
AdminWorker.exe:1776
AdminWorker.exe:1292
regsvr32.exe:2620
regsvr32.exe:2612
regsvr32.exe:2436
%original file name%.exe:816
GLWorker.exe:2588
GLWorker.exe:2296
GLWorker.exe:2160
iWinTrusted.exe:1460
Delete the original Trojan file.
Delete or disinfect the following files created/modified by the Trojan:

C:\Games\iWin.com\Zuma Deluxe\sounds\jewelappear.ogg (16 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmMOREGAMESBUTTON.jpg (19 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\tunnellevel\Thumbs.db (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor1C.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baAccuracyPurple.gif (716 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor2C.gif (882 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\gemvanishes.ogg (15 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_fireball1.wav (2647 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\chime1.ogg (13 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\triangle\Thumbs.db (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\spiral.jpg (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_grayplosion.gif (422 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\ballclick1.ogg (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntDoor1.jpg (14 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_rolling.wav (3920 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\Blackswirley\Thumbs.db (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\cursor_dragging.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\cursor_text.gif (956 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\slidertrack.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\overunder.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor2B.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\inversespiral\inversespiral.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\triangle\triangle.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor4C.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_ballsdestroyed4.wav (6332 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\serpents\serpents-2.dat (10 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\gauntsky.jpg (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\warshak.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\spiral\spiral.dat (11 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\tunnellevel\tunnellevel.dat (14 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntSUNGEM.gif (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baSlowRed.gif (721 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baAccuracyYellow.gif (723 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\claw\Thumbs.db (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\LoaderBar.gif (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\groovefest\_Groovefest02.gif (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmGAUNTLETBUTTON.gif (815 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\squaresville\squaresville.dat (14 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\serpents\_serpentsT.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\Uninstall.exe (5990 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advsky.jpg (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBallBlue.gif (891 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmeyeleft.gif (274 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\cached_thumbnails\claw.png (5632 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\Hole.gif (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\NativeAlienExtended16.txt (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_bombexplode.wav (7632 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\ballsdestroyed4.ogg (337 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_chant14.wav (7380 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\cursor_hand.gif (501 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\Blackswirley\BlackSwirley-1.dat (10 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBackwardsRed.gif (723 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\NativeAlienExtended16.gif (15 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor2B.jpg (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmsun.gif (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\GLWorker.exe (33556 bytes)
C:\Games\iWin.com\Zuma Deluxe\properties\resources.xml (12 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_gauntpracticebutton.gif (896 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\Cancun12.txt (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor2A.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_earthquake.wav (10167 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\snakepit\Snakepit.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_warning1.wav (2910 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\MoreGamesButton.gif (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntMainMenuButton.jpg (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\NativeAlien48.gif (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBombRed.gif (679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE697.tmp\System.dll (23 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmOPTIONSBUTTON.jpg (19 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\cursor_pointer_.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_baLight.gif (120 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_Menubar.gif (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\_CancunOUTLINE10.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor1B.jpg (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\readme.html (10 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\reverse1.ogg (196 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_button2.wav (20 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\chant2.ogg (1541 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\riverbed\Thumbs.db (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\coaster\_tunnel02.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advtemple3.jpg (15 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_ufo1.wav (11686 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\warshak\warshak.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\button2.ogg (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_coingrab.wav (2235 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntHighscore.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_pop.wav (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\gauntscreen.jpg (604 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBackwardsGreen.gif (696 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\happyending.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_lighttrail2.wav (2204 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_Dialogbutton.gif (991 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntBackButton.gif (536 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_MoreGamesScreen.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_checkboxsliver.gif (52 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advback.gif (9 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\targetglyph\Thumbs.db (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\extralife.ogg (10 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_chain1.wav (7985 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\_CancunFAT8.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\COIN.gif (15 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\longrange.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntTitle.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\coaster.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\chant5.ogg (585 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntEagleGem.gif (818 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_chant4.wav (4555 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\grayplosion.gif (16 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GodHead.gif (15 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advtemple2.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\chant8.ogg (1778 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBackwardsWhite.gif (557 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baSlowWhite.gif (706 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\warning1.ogg (9 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\snakepit.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBallPurple.gif (415 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBallGreen.gif (606 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advtemple2.jpg (440 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\claw\claw.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GodHead.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\Cancun8.txt (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\ballsdestroyed3.ogg (641 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_baBomb.gif (206 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\Explosion.gif (1270 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor3B.jpg (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advmainmenubutton.gif (604 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor3C.jpg (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advstage.gif (714 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntDoor4.jpg (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmeyeleft.gif (135 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_chant5.wav (5438 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\cached_thumbnails\blackswirley.png (5870 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_accuracy3.wav (3397 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\serpents\serpents.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\cached_thumbnails\Thumbs.db (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\checkboxsliver.gif (67 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\tiltspiral\Thumbs.db (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntEagleGem.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_chant3.wav (6185 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\warshak\warshak.dat (12 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_jewelappear.wav (7057 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_ballsdestroyed3.wav (5794 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\chant6.ogg (567 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\_NativeAlien48.gif (18 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\riverbed\_Riverbed01.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\tut_mouse_r.jpg (969 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBackwardsYellow.gif (702 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\turnaround\Thumbs.db (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\spaceinvaders.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\tiltspiral\tiltspiral.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\Cancun13.txt (949 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_ballclick2.wav (2016 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\longrange\Thumbs.db (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baLightRed.gif (144 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\gauntpracticebutton.jpg (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\pitcover.gif (9 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBombWhite.gif (723 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE697.tmp\iWinInstallOptions.exe (6929 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\cursor_dragging_.gif (485 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntDoor4.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\riverbed\_Riverbed04.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\spiral\Spiral.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\pop.ogg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\lighttrail2.ogg (10 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor1A.jpg (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\inversespiral.jpg (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_ballsdestroyed1.wav (3341 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\tunnellevel\_tunnel1.gif (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baLightPurple.gif (143 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBombGreen.gif (677 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\squaresville\Thumbs.db (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\space\space.dat (17 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\serpents.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\glcfg.date (665 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor1C.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmhat.jpg (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baSlowGreen.gif (704 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\turnaround\turnaround.dat (11 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\serpents\_quake02.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\CancunFloat14.txt (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\underover\underover.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\targetglyph\Targetglyph.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\_Cancun8.gif (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntJaguarGem.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\MoreGamesScreen.jpg (1001 bytes)
C:\Games\iWin.com\Zuma Deluxe\properties\partner.xml (258 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\EYEBLINK.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\inversespiral\_tunnel.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\gaugegreen.gif (453 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_ballsdestroyed2.wav (3760 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advtemple4.jpg (25 bytes)
C:\Games\iWin.com\Zuma Deluxe\Zuma.ifn (59827 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\groovefest\Thumbs.db (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor4C.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\underover\_left.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\serpents\_quake03.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\groovefest.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baLightBlue.gif (148 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\underover\underover.dat (11 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_chant6.wav (4210 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\_Cancun10.gif (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_endoflevelpop1.wav (2746 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\chant3.ogg (17 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\cursor_pointer.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\NativeAlienExtended18.txt (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\coaster\coaster.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor1B.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor2A.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\underover\Thumbs.db (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\_NativeAlienExtended18.gif (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntDoor2.jpg (10 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\riverbed\_Riverbed03.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\chain1.ogg (14 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\fireball1.ogg (12 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\loopy\loopy.dat (11 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBombPurple.gif (703 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\serpents\serpents-1.dat (10 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advtemple1.jpg (2026 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor1A.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\license.txt (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_baAccuracyLight.gif (233 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\_Cancun13.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmeyemask.gif (829 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_hatchback.gif (363 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\snakepit\snakepit-1.dat (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmhat.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmOPTIONSBUTTON.gif (915 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\riverbed\_Riverbed02.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor4B.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_chime1.wav (3953 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\snakepit\Thumbs.db (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\cached_thumbnails\targetglyph.png (7372 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmARCADEBUTTON.jpg (494 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\serpents\_quake04.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\groovefest\_Groovefest03.gif (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_ballsdestroyed5.wav (3751 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\ufo1.ogg (1292 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\endoflevelpop1.ogg (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_SliderThumb.gif (167 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\Thumbs.db (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\tut_mouse_r_.jpg (805 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\ToadLives.gif (463 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_chant2.wav (8866 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\ballsdestroyed1.ogg (11 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\nebula1.jpg (1624 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\loopy\Thumbs.db (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBombYellow.gif (676 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\NativeAlien48.txt (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmeyeright.gif (198 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advmiddle.gif (12 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\loopy.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\accuracy3.ogg (12 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_ballclick1.wav (688 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\waitbar.gif (159 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\earthquake.ogg (1863 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntPlayButton.jpg (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advback.jpg (1497 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\targetglyph\targetglyph.dat (14 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\triangle.jpg (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\gauntsurvivalbutton.jpg (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBallRed.gif (990 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\riverbed\Riverbed.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBombBlue.gif (667 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\riverbed.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\CancunFloat14.gif (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntJaguarGem.gif (538 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\_CancunFloat14.gif (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmsunglow.jpg (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBallWhite.gif (844 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\chant1.ogg (1573 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_ballalpha.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\checkBUtton.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\Zuma.ifn.lnk (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_COIN.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\Blackswirley\BlackSwirley-2.dat (10 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\overunder\overunder.dat (15 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntDoor2.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\_NativeAlienExtended16.gif (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_dialogbox.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advHighscore.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntScreen.gif (9 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntDoor3.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntDoor3.jpg (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor3B.gif (996 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\loopy\_tunnel.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\coaster\_tunnel01.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baSlowBlue.gif (693 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\cached_thumbnails\spiral.png (2712 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\riverbed\riverbed.dat (12 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\Thumbs.db (24 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntTitle.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntMainMenuButton.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_checkBUtton.gif (567 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\gapbonus1.ogg (16 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\DialogButton.jpg (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\NativeAlienExtended18.gif (11 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\underover\_right.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\tunnellevel\tunnellevel.jpg (1181 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\warshak\Thumbs.db (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_chant1.wav (15399 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\coingrab.ogg (14 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_LoaderBar.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advmainmenubutton.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_Tongue.gif (263 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\helpback.jpg (14 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advplaybutton.jpg (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\button1.ogg (9 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\checkboxcap.gif (88 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\loopy\loopy.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baAccuracyWhite.gif (726 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\Cancun10.txt (9 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_gauntsurvivalbutton.gif (601 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor4B.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\tunnellevel\_tunnel2.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baSlowPurple.gif (704 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmMOREGAMESBUTTON.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\groovefest\Groovefest.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_toadlives.gif (357 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\underover.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advtemple4.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntHighscore.gif (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advtitle.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\Blackswirley\BlackSwirley.jpg (2503 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_gauge.gif (242 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\cached_thumbnails\riverbed.png (6624 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor3A.jpg (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntDoor1.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_gemvanishes.wav (2226 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baDotz.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\spaceinvaders\spaceinvaders.jpg (1444 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE697.tmp\NSISdl.dll (30 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmQUITBUTTON.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\overunder\_tunnel02.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\loadingscreen.jpg (2104 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\squaresville.jpg (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\tiltspiral\tiltspiral.dat (12 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\targetglyph.jpg (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advtemple1.gif (11 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\_Arial12Bold.gif (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmscreen.jpg (2104 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\sparkle.gif (800 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baAccuracyBlue.gif (684 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baSlowYellow.gif (682 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\squaresville\squaresville.jpg (2841 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\coaster\Thumbs.db (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\spiral\Thumbs.db (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\slowdown1.ogg (416 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\claw.jpg (12 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\turnaround\turnaround.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_ballshadow.gif (417 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\levels.xml (23 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advplaybutton.gif (449 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\triangle\triangle.dat (12 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advtemple3v.jpg (18 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntBackButton.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\overunder\Thumbs.db (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\chant4.ogg (784 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advtemple3v.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor3C.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_chant8.wav (13566 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\choral1.ogg (1770 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\longrange\longrange.dat (14 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advmiddle.jpg (15 bytes)
C:\Games\iWin.com\Zuma Deluxe\icon.ico (25 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advTitle.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_Hole.gif (719 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\spaceinvaders\_tunnel.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\spaceinvaders\spaceinvaders.dat (12 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmUFO.gif (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_SMALLFROGonPAD.gif (560 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\snakepit\snakepit-2.dat (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advtemple3.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\helpfront.jpg (1358 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\MenuButton.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\chant14.ogg (693 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baAccuracyGreen.gif (713 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\SliderThumb.gif (457 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_gapbonus1.wav (6134 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\claw\claw.dat (11 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\serpents\_serpentsB.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\rolling.ogg (330 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_extralife.wav (4191 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBallYellow.gif (1061 bytes)
C:\Games\iWin.com\Zuma Deluxe\properties\partner.xml.sig (24 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_choral1.wav (5405 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\tiltspiral.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\Arial12Bold.txt (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\frogland2.ogg (2536 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\inversespiral\Thumbs.db (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\music\zuma.mo3 (8449 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\GauntNextButton.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_slowdown1.wav (13329 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmARCADEBUTTON.gif (846 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmeyeright.gif (115 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\ballclick2.ogg (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\ballsdestroyed2.ogg (15 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\coaster\coaster.dat (15 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor3A.gif (914 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_reverse1.wav (14954 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\spaceinvaders\Thumbs.db (6 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\serpents\Thumbs.db (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\inversespiral\inversespiral.dat (14 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_checkboxcap.gif (81 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\ballsdestroyed5.ogg (687 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntSUNGEM.gif (815 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_Menubutton.gif (483 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_baSlowLight.gif (251 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\turnaround.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\fonts\_Cancun12.gif (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baLightWhite.gif (138 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advHighscore.gif (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\Tongue.gif (663 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\groovefest\Groovefest.dat (13 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_slidertrack.gif (414 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\gauge.gif (468 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmsun.gif (800 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\riverbed\_Riverbed05.gif (852 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\overunder\_tunnel01.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advtemple2v.jpg (434 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\groovefest\_Groovefest01.gif (3 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_GauntNextButton.gif (520 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBackwardsPurple.gif (704 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\tunnellevel.jpg (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\bombexplode.ogg (1637 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\Thumbs.db (14464 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_mmscreen.gif (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\stdat.dat (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmsky.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baBackwardsBlue.gif (697 bytes)
C:\Games\iWin.com\Zuma Deluxe\Zuma_Deluxe_EULA.txt (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baLightGreen.gif (142 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\cursor_hand_.gif (533 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\serpents\_serpentsM.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advtemple2v.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\SMALLFROGonPAD.gif (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_pitcover.gif (5 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmQUITBUTTON.jpg (655 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\dialogbox.jpg (7 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\serpents\_quake01.gif (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\overunder\overunder.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\bass.dll (4430 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmGAUNTLETBUTTON.jpg (19 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baLightYellow.gif (145 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_advdoor4A.gif (1 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor4A.jpg (4 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\advdoor2C.jpg (2 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\longrange\longrange.jpg (1568 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_baBackwardsLight.gif (280 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\Menubar.jpg (13 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_frogland2.wav (5656 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\mmUFO.jpg (12 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\_helpfront.gif (8 bytes)
C:\Games\iWin.com\Zuma Deluxe\sounds\cached_button1.wav (1454 bytes)
C:\Games\iWin.com\Zuma Deluxe\images\baAccuracyRed.gif (722 bytes)
C:\Games\iWin.com\Zuma Deluxe\levels\perm_thumbnails\blackswirley.jpg (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\footer.htm (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rank1.png (451 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\bg-pnl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\newtab\newtab.html (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-close-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_20.png (287 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\tab-off-l.png (205 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\text-ellipsis.xml (423 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\searchboxlite_end.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\loadingMid.gif (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\widgets-square-24px.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\downloadcom.png (972 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\highlight_blue.png (309 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\TRUSTe_about.png (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\youtube.png (608 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\btn_slider.png (763 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-pref-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\about_logo.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-calendar.png (566 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\imap.png (278 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\menu_separator_white.png (133 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphna.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\css\ie-only.css (153 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\about.xml (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\tab-off-l.png (205 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\categories-bg-gradient-grid.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\wmpstreamer.html (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\data\rss\rss.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\notifylabel-left.png (274 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rank3_5.png (639 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\scrollbar-handle.png (155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\comcast.png (421 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png (313 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\css\panels.css (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\menuitemleft.png (323 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_02.png (248 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\ico-playstation.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\options-weather.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\shadow-leftmenu.png (963 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\searchboxlite.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\iwingamestoolbar\setupCfg.xml (561 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\hotmail.png (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-dark-middle22-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\js\jquery.tinyscrollbar.min.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-box-next.png (791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\lock.png (316 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_08.png (328 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\template.html (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\sprite-dropdown.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\newtab\images\powered_by_yahoo.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-dark-right22-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\apps-bg-gradient-grid.png (995 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-dark-left22.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\ttlbar-left.png (266 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\bg-pnl520x390.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\orange.gif (260 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\css\popupAbout.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\downloadcom.png (972 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-options-design.png (704 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\apps-hover.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\throbber.gif (825 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\js\jquery.qtip.min.js (1552 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png (683 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rename.gif (223 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\ico-playstation-down.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\vmn.css (9 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\rsspreview.html (241 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\games.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\movetarget.png (507 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\gripper.png (308 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\skin-orange.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\tab-on-r.png (278 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.pinterest\widget.jsw (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome.manifest (236 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\js\default.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\found.png (902 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-options-design.png (704 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-add.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_09.png (288 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\notifylabel-right.png (267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\images\default.png (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.googlemap\widget.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rankna.png (771 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\icons\na-s.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\mailcom.png (254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\search.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\toolbar.htm (718 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\titlebar-left.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-dollar.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rss-feed.png (498 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\tab-on-r.png (278 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\slider.png (329 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rank4_5.png (718 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\neterror.xhtml (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\default.png (867 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\css\popupWidgets.css (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\btn-close-grey.png (263 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\btn-close-grey.png (263 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\css\slider.css (540 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\toolbar.htm (718 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\ca.png (763 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\add.png (653 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\ttlbar-right.png (286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\searchbar\searchbar-background-middle.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\dtx-test.css (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\add.png (653 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\btn-close.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\bg-btn-end.png (232 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\websiteinspector-norating.gif (904 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\titlebar-middle.png (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\notifylabel_ff.png (210 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\over-blue.png (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\ico-playstation-down.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png (431 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\websiteinspector-highrisk.gif (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-launch.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rank5.png (708 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\star_x_orange.png (367 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\dtxtransparentwin.xul (657 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\icons\cond999.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-mdl-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\dtxpanel.xul (573 bytes)
%Program Files% (x86)\iwingamestoolbar\partner.xml (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.youtubeshortcut\widget.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\searchbox_end.png (458 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\win-right-bottomglow.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\arrow-up.gif (46 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphred0.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphred5.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\left-menu-hover.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\vmncode.js (14 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\like_over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\searchbox-pnlbtm.png (532 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\scroll-topwin.png (951 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rssback.gif (469 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\menuitemleft-vista.png (307 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\win-left-topglow.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rank5.png (708 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.wikipediashortcut\widget.jsw (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\external.js (26688 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-dark-middle22.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\images\bg.gif (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\typevalue.xml (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\iwingamestoolbar\setupCfg.xml (561 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\arrow-up.gif (46 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-dark-left22-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\btn-wide-close.png (857 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-dark-middle22-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\highlight_lime.png (300 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\fg.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-close.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\facebook.png (235 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\win-top-middleglow.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\new-games.png (518 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_04.png (293 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\tb_icon.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.gmailshortcut\widget.jsw (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\highlight.png (811 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rank4.png (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\icon-Add.png (228 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\websiteinspector-verified.gif (120 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\titlebar-right.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\loadingMid.gif (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\images.png (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\gamecategory.xsl (704 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\dtx-test.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\separator.png (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\btn-widgets-over.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-close-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\skin-lichen.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rss-folder.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\external.js (26688 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-try-left.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\btn_slider.png (763 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\arrow-sml.png (211 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\highlight_blue.png (309 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\scroll-bg-206.png (663 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\gmail.png (741 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rss.png (772 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\scripts\defscript.js (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\highlight_lime.png (300 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\dictionary.png (746 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\view-thumb-over.png (380 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\icons\icons.xml (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png (532 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\bg-btn-start.png (236 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphred3_5.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\widget_version.txt (32 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\win-bottom-middleglow.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\ico-check.png (248 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\btn-close-greyover.png (444 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\images\btn-wide-close.png (857 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\websiteinspector-verifying.gif (180 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\skin-bluesky.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rss-found.png (677 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-addtoolbar-right.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.gmailshortcut\widget.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\newsitem.gif (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\star_x_orange.png (367 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\data\weather\icons.xml (6 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\skin-yellow.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\images\Thumbs.db (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rss-reload.png (384 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\highlight_magenta.png (302 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\iwingamestoolbar\geoip.xml (423 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btndark-right.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\scripts\defscript.js (408 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-volume-2.png (721 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-play.png (248 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\arrow-right.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.yahooshortcut\widget.jsw (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\dtxprefwin.xul (307 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\search.png (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-back.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png (532 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\win-btm-left.png (204 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\components\dtTransparency.dll (2392 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\yahoosearch.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\btn-close-grey.png (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\modify.png (708 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\highlight_cyan.png (299 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_06.png (316 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\CountryLocaleXML.xml (86 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\zoom.png (732 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-eq-warning.png (969 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_12.png (173 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-facebook.png (413 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\divider.png (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.pinterest\widget.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\shopping.png (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.youtubeshortcut\widget.jsw (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\ttlbar-mdl.png (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-eq-busy.gif (769 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\searchbar\searchbar-background-middle.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\scrollt-disable.png (832 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\aol.png (648 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\throbber.gif (825 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\logo.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\options-search.png (4 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\menul-bgover.png (168 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\titlebar-left.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\transparent.gif (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\titlebar-middle.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\wmpstreamer.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\newtab\images\btn_search.gif (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lichen.gif (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\popupRSS.html (4 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\options-main.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-eq-off.png (824 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\comcast.png (421 bytes)
%Program Files% (x86)\iwingamestoolbar\uninstall.exe (10035 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\btnright-down-vista.png (289 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\arrow-sml.png (211 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\data\search\search.xsl (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\remove.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\css\ie-only.css (153 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rank0.png (387 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\default.png (867 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\mygames.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\embarq.png (253 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\win-btm-mdl.png (118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\button-splitter-vista.png (264 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\pixsy.png (690 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-news24.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\launchers.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\shopping.png (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\btnleft-down-vista.png (310 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\scrollt-over.png (892 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-btn-play-on.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-back.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\css\popupWidgets.css (11 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rss-expand.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\music.png (570 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\options-weather.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\menuitemback-down-vista.png (202 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-next-over.png (442 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-dark-right22-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\btnleft-down-vista.png (310 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-close-grey.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rss-folder-remove.png (540 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\websiteinspector-lowrisk.gif (174 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\RSSLogo.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\btn-search.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\win-left.png (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\toolbarsplitter.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\play-games.png (676 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\scroll-right.png (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\websiteinspector-verified-user.gif (120 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\pop.png (543 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\popupWeather.html (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rsstopback.gif (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\websiteinspector-lowrisk.gif (174 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\btnright-vista.png (309 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\ico-playstation-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\wframe.html (562 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\options\options-main.png (4 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\translate.png (633 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-add-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\dtxpaneltransparent.xul (653 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\Thumbs.db (6 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\wikipedia.png (586 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-eq-busy.gif (769 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\btnright-vista.png (309 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\settings.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\bg-scrollbar-track-y.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\arrow-right.gif (46 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\win-right.png (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\images\transparent.gif (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\ioSpecial.ini (26 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\js\kendo.all.min.js (11344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_19.png (299 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\minus.gif (152 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\email.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rss-folder-remove.png (540 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\orange.gif (260 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-volume-mute.png (788 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\ico-shield.png (740 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\lastsearch-thumb-back.gif (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\websiteinspector-highrisk-user.gif (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_15.png (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\nsProcess.dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\collapsed_button.gif (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.youtubeshortcut\widget.jsw (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png (313 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\throbber.gif (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\modify.png (724 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-info-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\bg-btnover.png (179 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\widgets.png (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\dtuser.exe (16944 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\images\win-btm-mdl.png (1552 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\highlight_cyan.png (299 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-volume-0.png (614 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-btn-play-on.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE0.tmp (144829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\separator.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\reload.png (905 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\menu_separator_bar.png (129 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\menuitemright-down-vista.png (252 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\css\dialog.css (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\btn-close-grey.png (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\win-right-middleglow.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\siteinfo.png (792 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\main.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\scroll-bg.png (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\footer-short-middle.png (968 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-btn-pause-on.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png (607 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\menuitemleft-down-vista.png (289 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\images\Thumbs.db (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\dtxlogo.png (867 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\text-ellipsis.xml (423 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\transparent_1px.gif (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\about.xml (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\neterror.xhtml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\grey.gif (158 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\bg-btnover-start.png (306 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\icons\na-s.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btndark-left.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\edit-back.png (214 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png (649 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-joystick24.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.wikipediashortcut\widget.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-add-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-close-grey-over.png (457 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\glass.png (360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\neterror.xhtml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\magnifier.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-try-left-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\arrow-left.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\apps-bg-gradient-grid.png (995 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\menuitemback-down-vista.png (202 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-volume-3.png (793 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-eq-buffer.gif (755 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\arrow-right-disabled.gif (46 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rename.gif (223 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\data\dynamicElements\vmntoolbar.xsl (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\nsisFirewall.dll (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\css\popupGames.css (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\managerpanel.html (10 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\facebook.png (235 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-options.png (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\scrollb-disable.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\alexabutton.css (632 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\vmncode.js (14 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\images\win-btm-right.png (1552 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rss.png (832 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\scrollbar-track.png (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rankna.png (771 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\modify.png (708 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\search-go.png (840 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\scrollt.png (893 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\email_on.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\modify-save.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\protect-id.png (737 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\highlight_yellow.png (309 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\notifylabel-middle.png (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\menu_bg-basic.png (446 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\scroll-left.png (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\menuitem-splitter.png (136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\TRUSTe_about.png (6 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\modules\datastore.jsm (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\throbber.gif (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-install.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\pop.png (543 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\icons\weather.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\btn-wide-close-over.png (873 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\arrowr-bluew5.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\bg-btnover-end.png (424 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\searchbox_end.png (458 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-add.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rank0_5.png (451 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\vmncode.js (14 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\skin-bluelite.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\btn-close-over.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\dictionary.png (746 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphred5.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\bg-btnover-mdl_ff.png (179 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.hotmailshortcut\widget.jsw (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\music-note.png (775 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\sprite.png (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png (460 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\titlebar-right.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\button-splitter-down-vista.png (261 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-facebook.png (413 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-btn-pause.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\rsswin.xsl (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\widget.jsw (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-eq-bg.png (691 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\data\search\engines.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\panel-botm-noscroll.png (448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\logo-separator.png (582 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_03.png (218 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\pixsy.png (690 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\xml.dll (812 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-options-on.png (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphred0.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\titlebar-left.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\btn-settings-over.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\scrollt.png (893 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.googlemap\widget.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\dislike.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\win-right-bottomglow.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\bg-btn-mdl.png (134 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\initHTML.html (481 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\searchbar\searchbar-background-right.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rank0_5.png (451 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\css\dialog.css (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\win-left-bottomglow.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\vmn.css (9 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rank2_5.png (587 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\bullet-orange.gif (43 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\ico-check.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\btn-close.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\iwingamestoolbar\geoip.xml (423 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\view-detailed-over.png (451 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\scrollb-down.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\titlebar-right.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png (643 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-drag.png (486 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\btn-close.png (290 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\plus.gif (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-dark-right22.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\btnback-down-vista.png (207 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\bg-btnover-end.png (424 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\bg.gif (8 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\view-detailed-on.png (496 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\scripts\defscript.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\fg.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\movetarget.png (507 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.hotmailshortcut\widget.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\notifylabel-left.png (274 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\btnleft-vista.png (307 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\paneltemplate.html (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\tb_icon.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rss-folder-rename.png (621 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_10.png (250 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rss-found.png (677 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\menul-bgover.png (168 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\sprite-dropdown.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-info.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\initHTML.html (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rsstabdivider.gif (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\ico-shield.png (740 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\box-check.png (174 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rssback.gif (469 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-drag.png (486 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-right-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\win-btm-right.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png (336 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\icon-shop.png (233 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\arrow-sml-drop.png (188 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_16.png (278 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\searchbox.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\grey.gif (158 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\components\windowmediator.js (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\relatedlinks.png (691 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rss.png (772 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphred3.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\template.xml (810 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\debugbar\debug.html (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\icon-play.png (290 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\dtxlogo.png (867 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\notifylabel-right.png (267 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\search.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-user-monitor.png (853 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\ca.png (763 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-volume-mute.png (788 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\btn-close-greyover.png (444 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.yahooshortcut\widget.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-search-pnlbtm.png (916 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\aol.png (648 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\iwin_logo.png (8 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\js\jquery.qtip-1.0.0-rc3.min.js (1552 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\vmnrsswin.xml (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\sortby_bg.png (583 bytes)
%Program Files% (x86)\iwingamestoolbar\install.ico (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\yahoo.png (244 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\js\jquery.qtip-1.0.0-rc3.min.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.pandora\widget.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\bg-btnover-mdl.png (197 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_12.png (173 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.pinterest\widget.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\ttlbar-mdl.png (146 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-next-over.png (442 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ajax-loader.gif (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\options\options-main.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\templateFF.html (6 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\icons\na-t.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\websiteinspector-norating.gif (904 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png (643 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\btn-widgets.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\websiteinspector-highrisk.gif (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.pinterest\widget.jsw (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\win-right-middleglow.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\toolbar.xul (27504 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\zoom.png (732 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\vmncode.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\images\win-btm-right.png (1552 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\searchboxlite.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\data\rss\rss.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\bg-btn-mdl_ff.png (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\icons\icons.xml (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\logo.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\highlight_magenta.png (302 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rank3.png (580 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-eq-warning.png (969 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rss-expand.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_06.png (316 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.ymailshortcut\widget.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png (649 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\over-orange.png (169 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-btn-play.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\arrowr-bluew5.png (205 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rank1_5.png (526 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\news.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rank4_5.png (718 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\popupHTML.html (802 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\alexabutton.css (632 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\about.gif (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\btn-close-greyover.png (444 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\btnback-vista.png (207 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\new-games.png (518 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\css\manager.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\protect-id.png (737 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_08.png (328 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\bg-btnover-start.png (306 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-options-design-on.png (701 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ajax-loader.gif (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\technorati.png (493 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\css\popupRSS.css (6 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\blank.gif (55 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-joystick24.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\like_over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\encyclopediabritannicagamesbar64.dll (27704 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.youtubeshortcut\widget.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\main.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\js\jquery-ui.js (6584 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\scroll-right.png (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\js\jquery.js (3312 bytes)
%Program Files% (x86)\iwingamestoolbar\dtuser.exe (33888 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\toolbar.xul (27504 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\arrow-left.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\scrollt-down.png (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-close-greyover.png (457 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.ymailshortcut\widget.jsw (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\main.html (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\move.gif (58 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-addtoolbar-right.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\transparent_1px.gif (45 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-twitter.png (525 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\js\jquery.uniform.min.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\icon-download.png (251 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\js\kendo.all.min.js (11344 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-mdl-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\bg-aboutbox.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\widget.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\bluelite.gif (160 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\iwingamestoolbar\guid.dat (38 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\technorati.png (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.yahooshortcut\widget.jsw (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\searchbar\searchbar-background-right.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\button-splitter-down-vista.png (261 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\music-note.png (775 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\separator.png (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iwingamestoolbar-manifest.xml (9 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_21.png (300 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rss-subscribe.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\managerpanel.html (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\toolbarsplitter.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-close-grey.png (283 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\css\popupGames.css (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\menuitem-splitter.png (136 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\fast.png (949 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\logo-about.png (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\css\popupAbout.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\win-bottom-middleglow.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\arrow-down-white.png (982 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\arrow-sml-drop.png (188 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\email.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\view-detailed-on.png (496 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-options-on.png (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\popupGames.html (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\components\IdtTransparency.xpt (156 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-addtoolbar-left.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\menu_bg-basic.png (446 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\websearch.png (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\proxy.html (354 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-close-greyover.png (457 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\options-search.png (4 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphred2_5.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-install.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\bluesky.gif (160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\track.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\preferences.xml (663 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\bg-btn-start.png (236 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btndark-left-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rank3.png (580 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\arrow-dn.gif (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\iwingamestoolbar\guid.dat (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\remove.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-btn-pause.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\view-thumb-on.png (402 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\widgets-square-16px.png (690 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\loadingMid.gif (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\translate.png (633 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-previous-over.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\apps-hover.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iwingamestoolbar_Install_Log.txt (1465 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\ico-radio.png (879 bytes)
%Program Files% (x86)\iwingamestoolbar\encyclopediabritannicagamesbar.dll (19096 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\dislike.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\collapse.png (264 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\data\search\engines.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\images\win-btm-right-resize.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\ttlbar-right.png (286 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-volume-3.png (793 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\yellow.gif (260 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\win-btm-right-resize.png (214 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\gamethumb-on.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btndark-right-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\volumeslider.html (4 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\widget_version.txt (32 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\toolbarsplitter.gif (76 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-try-left.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\gameList.xsl (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\scroll.png (455 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\proxy.html (354 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\gotd.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\gripper.png (308 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-eq-off.png (824 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\UAC.dll (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_18.png (312 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\gamecategory.xsl (704 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\imap.png (278 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\newsitem.gif (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\icon-play.png (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.pandora\widget.jsw (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-launch.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-addtoolbar-left-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rank1.png (451 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\dtx.css (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\track.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\volumeslider.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\bg-btnover-divider.png (240 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\win-left-bottomglow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\RSSLogo.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\resize-box.gif (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_10.png (250 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-moredetails.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-launch-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\newtab\images\field_bg.gif (389 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rsstopback.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\LogEx.dll (1597 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\chevron.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\sprite.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphred3.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\modify-save.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rank2.png (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\menul-bgon.png (179 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\scroll-bg-206.png (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\template.xml (810 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\star_blank.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\images.png (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\p_yahoo.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_02.png (248 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\thumb-up.png (754 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\neterror.xhtml (344 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\btn-wide-close.png (857 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-btn-play.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\throbber.gif (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\options\options-weather.png (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.ymailshortcut\widget.jsw (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\about.gif (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rss-subscribe.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\ico-check.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_07.png (254 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio.png (355 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\widgets.png (447 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\options\options-weather.png (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\btnright-down-vista.png (289 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\searchbar\searchbar-background-left.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\skin.xml (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\topbar-inside-gradient.png (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\featured-games.png (656 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphna.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\search-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\footer-short-middle.png (968 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\ico-playstation-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-previous.png (476 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\mygames.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\menuitemright-vista.png (309 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png (205 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\paneltemplate.html (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphred1.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\dtxpanelwin.xul (407 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\arrow-dn.gif (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\btn-widgets-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\footer-short-left.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\js\jquery.qtip.min.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\arrow-dn.gif (46 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\logo-separator.png (636 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-next.png (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-eq-buffer.gif (755 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\vmn.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\tab-on-l.png (167 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_15.png (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\checkmark.png (309 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\win-left-topglow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png (196 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\lock.png (316 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\popupWidgets.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\yahoosearch.png (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphred4.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\settings.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rss-collapse.png (187 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\games.xsl (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\newtab\newtab.html (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png (431 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-right-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\resize-box.gif (92 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.googlemap\widget.jsw (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\js\jquery.url.js (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-user-monitor.png (853 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\mail.png (543 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\dislike_over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\logo-separator.png (582 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\options-main.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\modules\datastore.jsm (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\close-normal.png (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\InetLoad.dll (804 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\scrollb.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.wikipediashortcut\widget.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\modify.png (724 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rank1_5.png (526 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rss-delete.png (511 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\music.png (570 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\menuseparatorback.gif (165 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-pref-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\ppcbully.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\categories-bg-gradient-grid.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\search-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\logo-about.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\template.html (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.pandora\widget.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\games.xsl (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\win-right-topglow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphred1.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\gameList.xsl (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\data\dynamicElements\vmntoolbar.xsl (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-play-left.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\close-normal.png (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\scrollt-over.png (892 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\expand.png (303 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_13.png (277 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\footer-short-middle.png (968 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\gotd.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rank2.png (531 bytes)
%Program Files% (x86)\iwingamestoolbar\components\windowmediator.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png (683 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\data\weather\icons.xml (6 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\TRUSTe_about.png (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\gameData.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphred0_5.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\images\win-btm-left.png (1552 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\footer-short-left.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\bg-btnover-mdl.png (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\wikipedia.png (586 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\arrow-up.gif (46 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\emailnotifierproviders.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-pref.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\popupWidgets.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\websiteinspector-highrisk-user.gif (110 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\dtxpanel.xul (573 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-volume-1.png (668 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\scrollb-disable.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-dark-middle22.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\help.png (652 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\scroll.png (455 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\newtab\images\powered_by_yahoo.gif (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-box-next.png (791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-download.png (692 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rsschannelback.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\options\options-widgets.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.gmailshortcut\widget.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\logo-separator.png (636 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphred4_5.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\websearch.png (853 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-close.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-next.png (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\embarq.png (253 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\menuitemleft-down-vista.png (289 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\bluesky.gif (160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.hotmailshortcut\widget.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-search-pnlbtm.png (916 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\like.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\ico-radio.png (879 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\bg-pnl520x390.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\search.png (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-addtoolbar-left.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\gameData.js (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\btnback-down-vista.png (207 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\found.png (902 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\slider.png (329 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\titlebar-middle.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\transparent.gif (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\titlebar-middle.png (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lichen.gif (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\button-splitter.png (264 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\scroll-topwin.png (951 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\rsspreview.html (241 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\icons\weather.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\sortby_bg.png (583 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\collapse.png (264 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\js\jquery.js (3312 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\titlebar-left.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\skin-bluesky.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\bg-scrollbar-trackend-y.png (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\bg-pnl.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-play-left.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\btn_settings.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-options-design-on.png (701 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\win-left-middleglow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\modifyhot.png (149 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\tab-off-r.png (312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\dtx.css (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\images\btn-wide-close-over.png (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_16.png (278 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\throbber.gif (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\scrollb.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\rsswin.xml (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_18.png (312 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\skin-lichen.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\win-right.png (114 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rank4.png (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\arrow-down-white.png (982 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\btnback-vista.png (207 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphred2.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\bg-btnover-mdl_ff.png (179 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\skin.xml (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.hotmailshortcut\widget.jsw (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\bullet-orange.gif (43 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\bg-scrollbar-trackend-y.png (964 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\js\jquery-ui.js (6584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\newtab\images\bullet.gif (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_20.png (287 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\arrow-right-disabled.gif (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.gmailshortcut\widget.jsw (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png (460 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rank3_5.png (639 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\scrollt-down.png (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\footer.htm (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\topbar-inside-gradient.png (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\ttlbar-left.png (266 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\highlight_yellow.png (309 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\menuseparatorback.gif (165 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\skin-bluelite.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\btn-search-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\win-btm-left.png (204 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rank0.png (387 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\bg-btn-mdl.png (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-mdl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\icons\na.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_13.png (277 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rank2_5.png (587 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\btn-close.png (290 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\magnifier.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\popupRSS.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\logo-over.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\footer-short-right.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\gamethumb2-over.png (574 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-eq-on.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\bg-btn-divider.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-previous.png (476 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\modifyhot.png (149 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\websiteinspector-verified-user.gif (120 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btndark-left.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_14.png (270 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-btn-pause-on.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\scroll-bg.png (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\dislike_over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.yahooshortcut\widget.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_11.png (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\relatedlinks.png (691 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\dtxpanelwin.xul (407 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\over-blue.png (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\plus.gif (157 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphred0_5.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\menuitemright-down-vista.png (252 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\bg-scrollbar-thumb-y.png (966 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\siteinfo.png (792 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-addtoolbar-left-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\geoip[1].xml (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\arrow-right.gif (46 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\win-right-topglow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\icons\cond999.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-play-left-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\win-left.png (114 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\button-splitter-vista.png (264 bytes)
%Program Files% (x86)\iwingamestoolbar\toolbar.xml (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\gametype.xsl (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\gamethumb-on.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\images\win-btm-right-resize.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\js\default.js (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\featured-games.png (656 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-launch-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\yellow.gif (260 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\footer-short-right.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\footer-short-left.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\data\search\search.xsl (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\skin-yellow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\js\jquery.tinyscrollbar.js (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\newtab\images\bullet.gif (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\btnleft-vista.png (307 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\icon-Add.png (228 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\btn-search.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\btn-widgets.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\footer-short-middle.png (968 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\star.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\install.rdf (838 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\images\win-btm-left.png (1552 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-tags.png (209 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\arrow-right.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\scrollb-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\icons\na.png (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\options\options-widgets.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\rss-delete.png (511 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\win-btm-right-resize.png (214 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\modules\nsDragAndDrop.js (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\ico-playstation.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\footer-short-right.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\btn-settings.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.wikipediashortcut\widget.jsw (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\css\panels.css (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\appsfeatured-bg-gradient-grid.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\images\win-btm-mdl.png (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\games.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\menuitemright-vista.png (309 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\divider.png (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\dtxprefwin.xul (307 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\js\jquery.tinyscrollbar.min.js (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\skin-grey.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\bg.gif (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\inetc.dll (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\slideron.png (386 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\featured-bg-btm-gradient.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\popupWeather.css (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.pandora\widget.jsw (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\gamethumb2-over.png (574 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-volume-1.png (668 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\menu_separator_bar.png (129 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\win-btm-right.png (205 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\scrollb-down.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphredna.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\images\default.png (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\win-btm-mdl.png (118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\blank.gif (55 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\slideron.png (386 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-info.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\scripts\defscript.js (408 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-dollar.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-mdl.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\widget.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.googlemap\widget.jsw (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\chevron.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\featured-bg-btm-gradient.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\css\ie7-only.css (136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_09.png (288 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png (607 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\btn-close-greyover.png (444 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\logo-over.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\thumb-up.png (754 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\templateFF.html (6 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\css\dialog.css (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\vmnrsswin.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\ppcbully.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\star_x_grey.png (328 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\bg-btn-divider.png (205 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\icon-Info.png (218 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-dark-left22-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphred4.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\box-check.png (174 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\expanded_button.gif (181 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\js\jquery.url.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_21.png (300 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\js\jquery.uniform.min.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphred2_5.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\menuitemback-vista.png (209 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphred1_5.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\searchbar\searchbar-background-left.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\btn-search-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\minus.gif (152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\help.png (652 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\star_x_grey.png (328 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\toolbarsplitter.gif (76 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\menuitemleft-vista.png (307 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\expanded_button.gif (181 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\AccessControl.dll (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\dtxpaneltransparent.xul (653 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\graphred1_5.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphred2.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-twitter.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\highlight.png (811 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_19.png (299 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\skin-orange.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\bg-aboutbox.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\icon-download.png (251 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-dark-left22.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\mailcom.png (254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\close-hot.png (579 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\btn-settings.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\notifylabel-middle.png (203 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\dtxtransparentwin.xul (657 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-eq-bg.png (691 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\images\btn-wide-close-over.png (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\news.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rss-collapse.png (187 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\star.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\btn_settings.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\searchbox.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\typevalue.xml (31 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rss-folder-rename.png (621 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\js\jquery.tinyscrollbar.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\icon-shop.png (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\throbber.gif (825 bytes)
%Program Files% (x86)\iwingamestoolbar\manifest.xml (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\appsfeatured-bg-gradient-grid.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\btn-wide-close-over.png (873 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_04.png (293 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_14.png (270 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\freegame.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\iwin_logo.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\css\dialog.css (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\css\jquery.qtip.css (13 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\options\options-search.png (4 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-calendar.png (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\edit-back.png (214 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\newtab\images\field_bg.gif (389 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rss-reload.png (384 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\bg-scrollbar-track-y.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\arrow-up.gif (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\options\options-weather.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\footer-short-right.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\hotmail.png (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-tags.png (209 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\win-left-middleglow.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\bg-scrollbar-thumb-y.png (966 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\fast.png (949 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\play-games.png (676 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\TRUSTe_about.png (6 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png (160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\shadow-leftmenu.png (963 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\menuitemleft.png (323 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\options\options-search.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\scroll-left.png (257 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-info-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\images\bg.gif (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\websiteinspector-verified.gif (120 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\web.png (575 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\css\jquery.qtip.css (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png (4 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\popupGames.html (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\skin\images\btn-wide-close.png (857 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\like.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\dtxwin.xul (387 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\css\manager.css (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\separator.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rss-folder.png (630 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\preferences.xml (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\rsswin.xml (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\freegame.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\edit-back-hot.png (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst1FE1.tmp\System.dll (23 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-options.png (493 bytes)
%Program Files% (x86)\iwingamestoolbar\encyclopediabritannicagamesbarX.dll (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\manifest.xml (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\icons\na-t.png (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\checkmark.png (309 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-volume-2.png (721 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-close-grey-over.png (457 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\scrollbar-track.png (92 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-previous-over.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\menuitemback-vista.png (209 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\bg-btn-end.png (232 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\view-detailed-over.png (451 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\email_on.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphred3_5.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\notifylabel_ff.png (210 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\button-splitter.png (264 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\widgets-square-24px.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\searchboxlite_end.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphredna.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\bg-btn-mdl_ff.png (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btndark-right.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\about_logo.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\tab-off-r.png (312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\youtube.png (608 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\newtab\images\btn_search.gif (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\star_blank.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png (160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\btn-widgets.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-play-left-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\css\ie7-only.css (136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\radio-eq-on.gif (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-pref.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\menu_separator_white.png (133 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\popupWeather.css (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btndark-right-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\expand.png (303 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\vmn.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\search-go.png (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\babylon_logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\websiteinspector-verifying.gif (180 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-try-left-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\titlebar-right.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\skin\images\transparent.gif (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rsschannelback.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\loadingMid.gif (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\btn-search.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\view-thumb-over.png (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-news24.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\add.png (653 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\searchbox-pnlbtm.png (532 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\lib\dtxwin.xul (387 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\images\scrollbar-handle.png (155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio.png (355 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\images\tab-on-l.png (167 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\move.gif (58 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btndark-left-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\collapsed_button.gif (184 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\arrow-dn.gif (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\popupWeather.html (784 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\btn-search.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\gametype.xsl (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\btn-widgets.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png (336 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\scrollb-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\p_yahoo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png (7 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\options\options-weather.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\throbber.gif (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\ico-play.png (248 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\bg-btnover-divider.png (240 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\footer-short-left.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\btn-moredetails.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\yahoo.png (244 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\widgets\net.vmn.www.USAToday\widget.jsw (5 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\rss-feed.png (498 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\lastsearch-thumb-back.gif (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\glass.png (360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\bg-btnover.png (179 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm-over.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\web.png (575 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\debugbar\debug.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\widgets-square-16px.png (690 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\btn-widgets-over.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\menul-bgon.png (179 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\over-orange.png (169 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.ymailshortcut\widget.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\default\images\btn-close-over.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\edit-back-hot.png (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\weatherbutton\panels\images\ico-check.png (248 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\gmail.png (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\rss.png (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\widgets\net.vmn.www.USAToday\Thumbs.db (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\default\main.html (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_11.png (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\icon-Info.png (218 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\border_07.png (254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\view-thumb-on.png (402 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\radio\css\slider.css (540 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\radio\images\radio-volume-0.png (614 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\panel-botm-noscroll.png (448 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\babylon_logo.png (3 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\win-top-middleglow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\launchers.css (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\btn-widgets-over.png (2 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\uwa\close-hot.png (579 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\weatherbutton.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\emailnotifierproviders.xml (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\rsstabdivider.gif (85 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\btn-settings-over.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\popupHTML.html (802 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\css\popupRSS.css (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\reload.png (905 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\bluelite.gif (160 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\ico-download.png (692 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\content\modules\nsDragAndDrop.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\content\lib\rsswin.xsl (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\wframe.html (562 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\panels\images\scrollt-disable.png (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\uwa\border_03.png (218 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\btn-dark-right22.png (1 bytes)
%Program Files% (x86)\iwingamestoolbar\chrome\skin\lib\panels\images\left-menu-hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\mail.png (543 bytes)
%Program Files% (x86)\iwingamestoolbar\encyclopediabritannicagamesbarX64.dll (5064 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\graphred4_5.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\lib\add.png (653 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{c29f28ce-1c64-483d-80cc-05ab2aff3e5c}\chrome\skin\skin-grey.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Play iWin Games.lnk (1 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\product\feature.jpg (10 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\ous\ous-promo-banner.jpg (3166 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iWin Games\Play iWin Games.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\arrow.bmp (4232 bytes)
C:\ProgramData\Microsoft\Windows\GameExplorer\{79665D30-8B94-4767-B4F1-AB583F1DF566}\PlayTasks\0\Play.lnk (1 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\buttons\continue-orange-132.gif (4 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\common\header-bg.gif (371 bytes)
C:\ProgramData\iWin Games\opal\FlashPlayerControl.dll (9175 bytes)
%Program Files% (x86)\iWin Games\ftdownload.dat (512 bytes)
%Program Files% (x86)\iWin Games\pages\alert32x32.gif (1 bytes)
C:\ProgramData\iWin Games\opal\Flash.ocx (45652 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\leftimg.bmp (4907 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\ous\hotel-iwin.gif (2 bytes)
%Program Files% (x86)\iWin Games\pages\offline_tag.gif (9 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\buttons\close-blue-28.gif (1 bytes)
C:\ProgramData\iWin Games\opal\opal.ver (5 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\buttons\yesiwantabackupcd-orange-197.gif (7 bytes)
C:\ProgramData\Microsoft\Windows\GameExplorer\{79665D30-8B94-4767-B4F1-AB583F1DF566}\SupportTasks\0\Home Page.lnk (322 bytes)
%Program Files% (x86)\iWin Games\iWinGames.exe (149370 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\common\header-small-bg.gif (243 bytes)
%Program Files% (x86)\iWin Games\gamepage\success.html (1 bytes)
%Program Files% (x86)\iWin Games\pages\arcadeCheck.js (929 bytes)
%Program Files% (x86)\iWin Games\sounds\slidebackin.wav (1561 bytes)
%Program Files% (x86)\iWin Games\sounds\slideout.wav (833 bytes)
%Program Files% (x86)\iWin Games\gamepage\styles\base.css (3 bytes)
%Program Files% (x86)\iWin Games\gamepage\scripts\disconnected-upsell.js (7 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\misc\blue-bottom-triangle.gif (171 bytes)
%Program Files% (x86)\iWin Games\pages\login.html (256 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\ous\opalbox.jpg (23 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\ous\opal.gif (1 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\global\logo.gif (3 bytes)
C:\Users\Public\Desktop\Play iWin Games.lnk (1 bytes)
%Program Files% (x86)\iWin Games\gamepage\css\offline.css (1 bytes)
%Program Files% (x86)\iWin Games\gamepage\operationfailed.html (2 bytes)
%Program Files% (x86)\iWin Games\pages\offline.jpg (648 bytes)
C:\ProgramData\Microsoft\Windows\GameExplorer\{79665D30-8B94-4767-B4F1-AB583F1DF566}\SupportTasks\1\Support.lnk (322 bytes)
%Program Files% (x86)\iWin Games\gamepage\styles\shoppingcart.css (2 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\ous\eus.jpg (15120 bytes)
%Program Files% (x86)\iWin Games\gamepage\scripts\popups.js (5 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Play iWin Games.lnk (238 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\nsExec.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\InstGameInfoHelper.exe (3611 bytes)
%Program Files% (x86)\iWin Games\gamepage\scripts\prototype-1.6.js (2697 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\global\page-bg.gif (3 bytes)
%Program Files% (x86)\iWin Games\WebUpdater.exe (6381 bytes)
%Program Files% (x86)\iWin Games\pages\offline.html (781 bytes)
%Program Files% (x86)\iWin Games\sounds\download_completed.wav (1053 bytes)
%Program Files% (x86)\iWin Games\gamepage\styles\disconnected-upsell.css (14 bytes)
%Program Files% (x86)\iWin Games\pages\error.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\ftdownload.dat (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\btmimg.bmp (4590 bytes)
%Program Files% (x86)\iWin Games\sounds\start.wav (1975 bytes)
%Program Files% (x86)\iWin Games\Uninstall.exe (9661 bytes)
%Program Files% (x86)\iWin Games\gamepage\end.html (6 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\global\logo-invis.gif (13 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\plans\plan2.gif (5 bytes)
%Program Files% (x86)\iWin Games\host.cfg (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\header.bmp (4150 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\common\loading.gif (1 bytes)
%Program Files% (x86)\iWin Games\pages\terrie404.gif (940 bytes)
%Program Files% (x86)\iWin Games\pages\blank2.html (74 bytes)
%Program Files% (x86)\iWin Games\sounds\button_click.wav (8 bytes)
%Program Files% (x86)\iWin Games\gamepage\disconnected-upsell.html (6 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\plans\plan3.gif (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\BgImage.dll (15 bytes)
%Program Files% (x86)\iWin Games\gamepage\open.html (256 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\ous\hotel-bg.gif (732 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\bg_header.gif (503 bytes)
%Program Files% (x86)\iWin Games\AdminWorker.exe (7092 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\System.dll (23 bytes)
%Program Files% (x86)\iWin Games\pages\offline.css (417 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\ous\divider.gif (172 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\desktop_bottom.bmp (10448 bytes)
%Program Files% (x86)\iWin Games\iWinTrusted.exe (5258 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\continuefreetrial-32.gif (2 bytes)
%Program Files% (x86)\iWin Games\sounds\animationBack.wav (488 bytes)
%Program Files% (x86)\iWin Games\sounds\coins.wav (3458 bytes)
%Program Files% (x86)\iWin Games\pages\maintenance.html (567 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\global\page-header-small-bg.jpg (10 bytes)
%Program Files% (x86)\iWin Games\pages\orange-im-connected-60.gif (7 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\plans\plan1.gif (6 bytes)
%Program Files% (x86)\iWin Games\pages\error404.css (745 bytes)
%Program Files% (x86)\iWin Games\sounds\animation.wav (2366 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\desktop_top.bmp (8368 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\logo.jpg (13 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\misc\information.gif (582 bytes)
%Program Files% (x86)\iWin Games\gamepage\expired.html (1 bytes)
%Program Files% (x86)\iWin Games\gamepage\buynow.html (3 bytes)
%Program Files% (x86)\iWin Games\pages\offlineBg.gif (960 bytes)
%Program Files% (x86)\iWin Games\pages\iwin_logo.gif (5 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\global\page-bg-swirly.gif (8 bytes)
%Program Files% (x86)\iWin Games\pages\test.html (718 bytes)
%Program Files% (x86)\iWin Games\pages\blank.html (251 bytes)
%Program Files% (x86)\iWin Games\gamepage\common.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\GameuxInstallHelper.dll (3207 bytes)
%Program Files% (x86)\iWin Games\gamepage\images\alert32x32.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\iwintoolbar.ini (6 bytes)
%Program Files% (x86)\iWin Games\WebUpdater.bmp (1485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\tn_feat[1].jpg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\tn_feat.bmp (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\6898945648087804561[1].txt (572 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\tn_feat.jpg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc3D7.tmp\gametitle.txt (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFBDC.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFBDC.tmp\iWinToolbarLauncher.exe (7631 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFBDC.tmp\NSISdl.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsyB47.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsyB47.tmp\modern-header.bmp (769 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsyB47.tmp\iWinGamesToolbar.exe (142566 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsyB47.tmp\iwintoolbar.ini (8581 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsyB47.tmp\InstallOptions.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js (2281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsyB47.tmp\nsisdl.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iWinGames\Downloads\iWinGames - Zuma Deluxe.exe (3638 bytes)
C:\Users\Public\Desktop\Zuma Deluxe.lnk (1 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iWin Games\Uninstall Games\Uninstall Zuma Deluxe.lnk (1 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iWin Games\Games\Launch Zuma Deluxe.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\iwingamestoolbar\dtx.ini (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssEE45.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssEE45.tmp\ftdownload.dat (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssEE45.tmp\NSISdl.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssEE45.tmp\iWinGamesSetup.exe (326691 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iWinGames\Downloads\file_161005030115486598.unk (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\brand-styles[1].css (609 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\gotomygames-blue-48[1].gif (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\ui[1].css (30833 bytes)
C:\ProgramData\iWin Games\drm\drm_85_Zuma.ifn.stdat (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iWinGames\downloadslist_backup.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iWinGames\Downloads\file_181005030115487924.unk (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\pause[1].gif (325 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iWinGames\Downloads\cache.dat (437 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\firstinstall[1].htm (971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\up[1].gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iWinGames\Downloads\file_501005030115520091.unk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\submit-blue-22[1].gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\TLIGZU3J.txt (100 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iWinGames\Downloads\file_311005030115501012.unk (164189 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\stop[1].gif (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iWinGames\Downloads\file_251005030115495349.unk (572 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\XWGPWGI6FHRCV26GXOQ3.temp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\logo2[1].gif (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iWinGames\Downloads\file_301005030115500763.unk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Sun\Java\Deployment\deployment.properties (640 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\iwinshortcut[1].gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\firstinstall[1].css (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5FPBC2M2SAY7GERZNK0Q.temp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\firstinstall[1].js (145 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\iWinGames\GamesManager_15_04_24.log (55094 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\core-standard[1].js (259677 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E48DDEA3BF68DF580551FA0F27950B54 (573 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E48DDEA3BF68DF580551FA0F27950B54 (1320 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 (680 bytes)
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.