Trojan.Win32.Swrort.3_32ae6a225b

by malwarelabrobot on April 26th, 2015 in Malware Descriptions.

Trojan.Win32.Swrort.3.FD, mzpefinder_pcap_file.YR, GenericInjector.YR (Lavasoft MAS)
Behaviour: Trojan

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

Dynamic Analysis

Static Analysis

Network Activity

Map

Strings from Dumps

Removals

MD5: 32ae6a225b45400b5695711fea8b1c8c
SHA1: 7e07dec245f64cec537fe83e0794fc8d3f7f8b19
SHA256: fc69f57199fced98a473bca8ed872cf43586395e8619aacd0804ff2c97c79d9b
SSDeep: 49152:m97yJ6qZP3R5u/VizeIN0Jb5CkfrZva2HK:wWjPa/Vce9b9SsK
Size: 1595642 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: BorlandDelphi30, UPolyXv05_v6
Company: no certificate found
Created at: 1992-06-20 01:22:17
Analyzed on: Windows7Ada SP1 64-bit

Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):

BrowserManager.exe:3544
BrowserManager.exe:3556
BrowserManager.exe:3700
MSI23E3.tmp:2424
MSI23E3.tmp:3192
Yandex.exe:2956
YandexPackSetup.exe:1900
YandexPackSetup.exe:3380
sender.exe:2944
BrowserManagerShow.exe:3668
downloader.exe:612
downloader.exe:2100
rundll32.exe:3188
rundll32.exe:3300
rundll32.exe:1812
setup.exe:1836
MsiExec.exe:3368
MsiExec.exe:2936
MsiExec.exe:2652
MsiExec.exe:2020
MsiExec.exe:3088
MsiExec.exe:1400
MsiExec.exe:2160
MsiExec.exe:1880
elements64.exe:868
elements64.exe:3080
elements64.exe:4016
%original file name%.exe:1372
lite_installer.exe:2368
lite_installer.exe:1996
32ae6a225b45400b5695711fea8b1c8c.tmp:2132
u2-ctrl.exe:2596
u2-ctrl.exe:3616
yupdate-exec.exe:4008
yupdate-exec.exe:3660
yupdate-exec.exe:3376
yupdate-exec.exe:4048
yupdate-exec.exe:3124
yupdate-exec.exe:472
yupdate-exec.exe:3700
yupdate-exec.exe:3312
yupdate-ctrl.exe:2596
{0D136A26-C947-4287-995F-53C965D35271}.exe:2956
clidmgr.exe:3144
ybCF6E.tmp:1688
browser.exe:3612
browser.exe:3392
browser.exe:612
browser.exe:3552
browser.exe:3512
browser.exe:3860
browser.exe:3740
browser.exe:4000
browser.exe:3576
browser.exe:3520
browser.exe:3536
browser.exe:3952
browser.exe:3148

The Trojan injects its code into the following process(es):

plagiatus.exe:2920
browser.exe:308
browser.exe:3212
browser.exe:3500
browser.exe:3692
browser.exe:3120
browser.exe:3732
browser.exe:3316

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process BrowserManager.exe:3544 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3-new.log (815 bytes)

The process BrowserManager.exe:3556 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences (207 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\fe48e668bc070b6eb695bcc951b8d603\browserconfig.properties (111 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3-new.log (40944 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\omni.ja_20150425082807.zip (44854 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\cookies.sqlite (3144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\cookies.sqlite-wal (4026 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\hosts (198 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\key (577 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js_20150425082811.backup (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\scut (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\show-dlg.exe.bcp (2498 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\dlgs (448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\scut-last (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Preferences (1005 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Preferences (1005 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\fe48e668bc070b6eb695bcc951b8d603\region.properties (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\change.list (2867 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\RYEY7BIH.txt (692 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal (6361 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\params (19855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Preferences (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\show-dlg.exe (393 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\prfs (273 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\qs_bcp (1797 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\hp (748 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\features (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\backup00000.reg (3960 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\ui (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Cookies (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\qs (1365 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\seeder.dll (884 bytes)

The process BrowserManager.exe:3700 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3-new.log (1332 bytes)

The process MSI23E3.tmp:2424 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\stat.2424.log (559 bytes)

The process MSI23E3.tmp:3192 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\seed.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\downloader.3192.log (198176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexPackSetup.exe (503 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\info[2].rss (827 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\YandexPackSetup[2].exe (300295 bytes)

The process Yandex.exe:2956 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\yapin\Yandex.website (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\yapin\Yandex.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex.website (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex (2).lnk (1 bytes)

The process plagiatus.exe:2920 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_D3608457E1FE68B6E4E2A2305EEC5297 (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\GFK308WX.txt (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\828298824EA5549947C17DDABF6871F5_4A500E9AA7C5573906560F21D53A5861 (1312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\sprites[1].png (3503 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\JLROZ6MK.txt (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\jquery.min[1].js (71732 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\hit[1].gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\PH1JV527.txt (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\plagiatus[1].htm (2576 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\828298824EA5549947C17DDABF6871F5_4A500E9AA7C5573906560F21D53A5861 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D (1056 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\index_sprites[1].png (5351 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\collect[1].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\130[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\0Y7BFQ69.txt (220 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D (724 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\analytics[1].js (16603 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_D3608457E1FE68B6E4E2A2305EEC5297 (463 bytes)

The process YandexPackSetup.exe:1900 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YandexElementsIE00000.log (232988 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{97DA2459-9AC9-49B0-BE2B-6F1E7E24D829}\YandexElementsIE.msi (41116 bytes)

The process YandexPackSetup.exe:3380 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D84E548583BE1EE7DB5A935821009D26_5B98B6CD6E69202676965CF5B0E2A7A7 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\1033\thm.wxl (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BAEBE581FCB73249406FC21094EA252E_BC0CE803EF41A748738619ED7838EEFC (1520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerPackage (61727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\state.rsm (1360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\1058\thm.wxl (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\wixstdba.dll (2725 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ÃÅ“ÃÂµÃÂ½ÃÂµÃÂ´ÃÂ¶ÃÂµÃ‘â‚¬_ÃÂ±Ã‘â‚¬ÃÂ°Ã‘Æ’ÃÂ·ÃÂµÃ‘â‚¬ÃÂ¾ÃÂ²_20150425082803.log (21372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\1055\thm.wxl (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\logo.png (852 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ÃÅ“ÃÂµÃÂ½ÃÂµÃÂ´ÃÂ¶ÃÂµÃ‘â‚¬_ÃÂ±Ã‘â‚¬ÃÂ°Ã‘Æ’ÃÂ·ÃÂµÃ‘â‚¬ÃÂ¾ÃÂ²_20150425082803_0_BrowserManagerPackage.log (152414 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\1049\thm.wxl (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197} (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\thm.xml (632 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.be\BrowserManagerInstaller.exe (66528 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\thm.wxl (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerInstaller.exe (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D84E548583BE1EE7DB5A935821009D26_5B98B6CD6E69202676965CF5B0E2A7A7 (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\BootstrapperApplicationData.xml (259 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\logoside.png (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BAEBE581FCB73249406FC21094EA252E_BC0CE803EF41A748738619ED7838EEFC (1 bytes)

The process sender.exe:2944 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\statisticsex.log (1006 bytes)

The process BrowserManagerShow.exe:3668 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe:res (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3-ctrl.log (4215 bytes)

The process downloader.exe:612 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_84DF081C52E32C6CC02A8FC17AEFEC2C (1536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\downloader.log612 (2355448 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1504 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\seed.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\info[1].rss (827 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexPackSetup.exe (48009 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\YandexPackSetup[1].exe (3018895 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_84DF081C52E32C6CC02A8FC17AEFEC2C (1 bytes)

The process downloader.exe:2100 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\stat.log2100 (548 bytes)

The process rundll32.exe:3188 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\statistics[1] (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\fastdial\backgrounds.xml (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\cs\icons\yandex-130x52.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\product[8] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\product[1] (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\product[6] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\clckr[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\config[1] (456 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\product[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\ru\fastdial\config.dtd (607 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\clckr[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\applications\vb.json (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\product[7] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\migrate.ver (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\fastdial\backgrounds\earth.jpg (550 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\fastdial\clckr.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\fastdial\config.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\tr\fastdial\config.dtd (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\kk\fastdial\config.dtd (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\product[7] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\about\product.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\be\fastdial\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\search\dictionary.txt (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\cs\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\product[6] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\config[6] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\tr\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\passport\passport.xml (192 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\Install.log (50852 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\kk\about\product.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\be\about\product.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\product[8] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\config[3] (613 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\config[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\product[3] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\uk\fastdial\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\kk\fastdial\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\product[5] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\config[7] (456 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\en\icons\yandex-130x52.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\vb\fav\fav_full.xml (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\product[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\config[2] (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\statistics\statistics.xml (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\domaingroups[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\product[4] (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\product[5] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\uk\about\product.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\en\fastdial\config.dtd (456 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\domaingroups[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\statistics[1] (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\config[4] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\product[2] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\ru\fastdial\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\cs\fastdial\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\tr\icons\yandex-65x26.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\en\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\favorites[1] (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\config[5] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\en\fastdial\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\config[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\cs\icons\yandex-65x26.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\tr\icons\yandex-130x52.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\product[3] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\config[4] (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\product[4] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\ru\about\product.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\config[2] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\uk\fastdial\config.dtd (611 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\migrateFromBar (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\fastdial\backgrounds\wp_almost_white_small.jpeg (781 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\product[4] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\blocked_domains.json (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\config[5] (607 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\fastdial\domaingroups.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\cs\fastdial\config.dtd (607 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\product[3] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\config[3] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\tr\fastdial\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\backgrounds[1] (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\vb\fav\fav_lite.xml (575 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\product[3] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\config[6] (611 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\en\icons\yandex-65x26.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\ie\product.xml (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\backgrounds[1] (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\product[2] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\fastdial\blacklist.xml (702 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\be\fastdial\config.dtd (613 bytes)

The process rundll32.exe:3300 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\Install.log (3966 bytes)

The process rundll32.exe:1812 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\locale\uk\yavideo.dtd (936 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_-sn_n.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\friendslocked.png (724 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\birth.png (559 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\accelerators[1] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\rambler[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\facebook_on.png (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\userinfo.dtd (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\tr\branding\yandex\search.dtd (629 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\slovari.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\ovc_-sn.png (534 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\ui.js (1099 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\birth_pin.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\groups.png (708 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\quote\quotelist.dtd (84 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\icons\icon.png (856 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\esync64.dll (809 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\news_feed.png (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_-ra_d.png (798 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\browser\browserconf.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\maps[1] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\quote\currency_down.png (570 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\nointernet\_music-nointernet.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\money.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\mailru.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\webmaster64.dll (2472 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_ ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\ui\now\images\b-wind_arrow.png (179 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\twitter[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\_\4E65815M2vf3ujtn2jbo66SmbWo.gif (872 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.BodyEscHandler.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\style.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\ovc_ ra.png (369 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\2-16.png (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\kk\altsearch.dtd (182 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\accelerators[2] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\be\typesquatting.dtd (683 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\mailru[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\be\altsearch.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_gr.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\mail[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.MainRenderer.js (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\userinfo.dtd (573 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\stardust.dll (458 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\typesquatting.messages.xml (718 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\kk\services.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\ru\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\icons\twitter-fresh.png (720 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\accelerators[3] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\pagetranslator\langs.xml (365 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_d.png (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\ru\slice\js\dtconverter.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\branding\ua\search.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml.zip (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\index.html (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\buttons\images\button-route.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\cs\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\kk\slice\network-error.html (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\maps[2] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\radio.dll (1727 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml.zip (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\mail[4] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\_\51qf_exXMsPx--9srpStfhZ9p3g.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\quote\stock_down.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\ovc_ra.png (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\locale\kk\campaign.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml.zip (13122 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\5-16.png (771 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\maps[2] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\locale\cs\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\locale\be\campaign.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\translator.dtd (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\market[1] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\ovc_ra.png (532 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\uk\slice\js\dtconverter.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\kk\branding\yandex\search.dtd (685 bytes)
%Program Files% (x86)\Yandex\Common\elements.exe (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\offline-19.png (705 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\cut-url.png (367 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\branding\tb\search.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\mc[1] (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\kk\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\ru\typesquatting.dtd (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\lingvo[1] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\toolbar\autoinst.xml (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\cs\logobutton\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\icons\twitter-locked.png (739 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\geolocation.dtd (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\mailru64.dll (1609 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\mail.dtd (633 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\ico-odnoklassniki-32.png (932 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_ts_ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\kk\typesquatting.dtd (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\locale\en\browseroffer.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\ic.dtd (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_ ra_n.png (679 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\brand\uk\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\subscription[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\bg75.png (109 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\uk\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\9-16.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\ru\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\en\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\pagetranslator.xml (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\esync[1] (439 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\noflash\img\b-music-noflash.png (520 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\moikrug.dtd (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_-ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\ui\messages\images\reply.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\_\X31pO5JJJKEifJ7sfvuf3mGeD_8.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\yandex[2] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\pagetranslator.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\main-adapter.js (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\locale\tr\facebook.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\brand\tb\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\locale\kk\vkontakte.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\maps.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bl.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\altsearch.dll (983 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\locale\be\direct.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\market[2] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.Renderer.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\brand\tb\stations.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\avatar-48.png (559 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\radio.xml (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\say-alternate.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\kk\browser\browserconf.dtd (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\ovc_gr.png (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\style.css (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\accelerators[1] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\maps[1] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\odnoklassniki[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\ua\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\campaign.xml (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_ra_d.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\defaults[1] (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\tr\slice\network-error.html (466 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\mail[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\money.dtd (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\gray-16.png (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\ua\translator\extrainfo.dtd (104 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\icons\metrika_16_key.png (698 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\ovc_ ra.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\town\townlist.dtd (82 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_sn_d.svg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\facebook[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\icons\webmaster.png (756 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\newsfeed.png (364 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\index.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\about\product.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\brand\ua\sblinks.dtd (369 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.localization.js (572 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\gmail.settings.dtd (55 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\icons\Direct_locked_2.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\esync.xml (476 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\follow-button-unfollow.png (762 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\locale\en\esync.dtd (335 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\webmaster.dll (551 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\uk\services.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\login.dtd (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\icons\warning.png (514 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\locale\uk\vkontakte.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\suggest-help.png (238 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\locale\kk\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\browserconf[1] (382 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\locale\uk\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\be\smartbox.dtd (836 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml.zip (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\0-16.png (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_ sn_d.png (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_ra_n.png (676 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\money.dtd (340 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\metrika.xml (901 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\skc_d-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\icons\mc\badge\active_hover.png (374 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\skc_d.png (896 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_ra_d.png (807 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\reply.png (255 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_sn_n.png (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\html\nosignal.gif (1138 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\main-logic.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\locale\uk\radio.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\applications\elements.json (168 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\ovc_-sn.png (395 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\html\network-error-cs.html (474 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\search\dictionary.txt (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\tr\mc.dtd (289 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\icons\ramblerlock.png (552 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\follow-button-following.png (747 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\campaign.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\_\w3fZdbIEslxR_9CQRR-ezRNUZ_Q.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\uk\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\tr\altsearch.dtd (142 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\ic.dtd (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\quote[1] (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\geolocation.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\facebook.dll (1805 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\accelerators[4] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\tb\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\translator.dtd (336 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\cs\altsearch.dtd (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\market[2] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\ru\slice\network-error.html (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\uk\altsearch.dtd (199 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\cy.messages.xml (915 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\subscription\add.png (779 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\quote\quotelist.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\en\smartbox.dtd (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\music.dtd (328 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\mail.dtd (482 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\pagetranslator\pagetranslator.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\yandex[1] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\quote.dtd (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\odnoklassniki.messages.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\sblinks.dtd (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\narod.png (739 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\translator.dtd (260 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bl.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\accelerators[2] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\profile[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\webmaster.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bl.png (927 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\campaign[1] (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\translator.dtd (346 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\be\slice\js\dtconverter.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\readability\readability.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\quote\quotelist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\ovc_ sn.png (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\common.dtd (188 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\smartbox64.dll (326 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\quote\export.dtd (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\cs\smartbox.dtd (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\town[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\textonly.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\quote.messages.xml (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\ru\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\main-logic.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\slovari[1] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\4-16.png (721 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\style-authpages.css (499 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\userinfo.dtd (533 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\noteslocked.png (552 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\brand\yandex\extra.dtd (413 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_ ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\brand\ua\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\common[2] (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\music.dtd (487 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\tb\userinfo\passport.dtd (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\vkontakte64.dll (2590 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml.zip (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\gmail.dll (2001 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\say-default.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\follow-button-over.png (819 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\geolocation.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\presets\http://bar.yandex.ru/packages/yandexbar.xml (126 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_ra_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\main_pin.png (795 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\mailru[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\locale\kk\odnoklassniki.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\icons\yavideo_off.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\html\network-error-en.html (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\ui\messages\images\read.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\metrika.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\money.dtd (362 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\icons\site_noauth.png (826 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\locale\en\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\moikrug.dtd (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\icons\reload.png (578 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\market.xml (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\locale\uk\campaign.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_ sn_n.png (671 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\yandex[1] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\kk\smartbox.dtd (812 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\lingvo[4] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\textonly.dtd (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\rambler.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_ sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_-ra_n.png (562 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\tr\gmail.links.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\nointernet\img\b-music-noinet.png (919 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_sn_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.Overlay.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\html\throbber.html (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\icons\rambler.png (428 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\ic\6.png (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\smartbox.png (643 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\be\mc.dtd (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\yandex.ico (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_ ra_d.png (907 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\kk\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\suggest-settings.png (334 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\ic.dtd (567 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\music\music.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\messagesmark.png (597 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\common[1] (570 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\mail\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\.manifest[1] (132 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\pipka.png (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\auth_overlay.png (216 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110\elements.exe (7726 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\twitter64.dll (1727 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\rambler.dll (1687 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\town\geobase.xml (1451 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\gmail.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\route-form\images\form-close.png (273 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_-ra_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\messages-bg-bottom.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\mail[2] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\maps[2] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\subscription\subscription.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\locale\ru\vkontakte.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\tr\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\ui.css (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\quote.dtd (674 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\nointernet\_music-nointernet.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\mailru.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\uk\branding\yandex\search.dtd (683 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\money.png (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\geolocation.dtd (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\tr\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\translator.dtd (274 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\common.dtd (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\friends_requests.png (887 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\market[2] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\uk\logobutton\logoconf.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\buttons\images\button-ball-all.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\ovc_ ra.png (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\games.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_n.png (569 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\be\services.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\friend.png (668 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\en\slice\throbber.html (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\ui\messages\images\mail-logo-uk.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_ sn_d.png (850 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\odnoklassniki[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\maps.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\ru\altsearch.dtd (467 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\audio.png (510 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\icons\browser.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\browseroffer.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\mail.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\direct64.dll (1060 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\slovari.xml (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\fg_n.png (386 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\skc_d.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\town\townlist.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\browseroffer64.dll (1651 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\smartbox.dll (1171 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\town\geobase.xml (747 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\money\money.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\lenta[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\autoinst[1] (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\messageslocked.png (614 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\ovc_ts_ra.png (714 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\mail\mail-menu.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\ObjectParser.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\locale\ru\metrika.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\ic[1] (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\accelerators[4] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\market[2] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\3-16.png (773 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\ui.ie9.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\ovc_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\cs\slice\js\dtconverter.js (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\twitter.messages.xml (742 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\mc.messages.xml (681 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\webmaster[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.MessageComposer.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\fotki[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\locale\ru\direct.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_ ra_d.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\noflash\_music-noflash.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\product[2] (475 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\locale\be\yavideo.dtd (938 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_-sn_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\mail.dtd (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\altsearch.xml (526 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\rambler.png (655 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\status.png (473 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\tr\slice\throbber.html (355 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\kk\mc.dtd (354 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\brand\yandex\sblinks.dtd (596 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\fav-0.png (248 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\brand\ua\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\textonly.xml (405 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\direct.dll (1295 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\sb64.dll (253 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\icons\gmail.png (507 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\kk\logobutton\logoconf.dtd (71 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_ ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\photo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\be\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\addressbox-search.png (592 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\login.xml (511 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\nointernet\music-nointernet.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\quote\quotelist.xml (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\shadow-5-round.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\ovc_-ra.png (470 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\skc_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\profile.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\music[1] (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\icons\off.png (454 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\icons\site_settings.png (707 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\style.css (980 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\altsearch.messages.xml (236 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\uk\typesquatting.dtd (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_ ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\Install.log (355206 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\logo.dtd (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\mail\mail.png (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\ovc_-ra.png (635 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\icons\campaign_locked2.png (831 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\main-ui.js (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\facebook.messages.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\geolocation[1] (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\userinfo[1] (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_ ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\profile.messages.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\style.css (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml.zip (3361 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\yandex.ico (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\uk\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\locale\en\yavideo.dtd (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\buttons\images\button-yellow.png (358 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\kk\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\selected-item.png (235 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\pagetranslator.messages.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\skc_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110\elements64.exe (10177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\radio[1] (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\ru\slice\throbber.html (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_-ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\icons\icon.png (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\locale\kk\radio.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\logo.dtd (140 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\groupsmark.png (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\ua\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\gray-bird-of-sadness.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_sn_d.png (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\lingvo.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\money.dtd (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\userinfo.xml (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\route-form\images\button-route.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\about\logo-ie-small.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\town\geobase.xml (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\moikrug[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\mail.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\lingvo[3] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.depends.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\pagetranslator\injector.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\stations.json (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\ic\3.png (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\avatar-overlay.png (109 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\icons\campaign-off.png (675 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\smartbox.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\dicts.png (562 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\browserconf[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_ra_n.png (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bl.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\quote.dtd (708 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\nointernet\_music-nointernet.ie.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\mail\folder.png (441 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\throbber-small.gif (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\icons\gmail32.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\ru\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\widget\http.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\uk\slice\network-error.html (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\links\links.dtd (268 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\groups.png (626 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\money.dtd (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\notes.png (415 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\traffic\red.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_sn_n.png (662 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\icons\mc\badge\hover.png (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\mail[5] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\statistics\statistics.xml (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\uk\mc.dtd (370 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml.zip (4545 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\AutofillFileds.dat (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\textonly.dtd (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\main-adapter.js (1960 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\pagetranslator.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\icons\loggedout.png (748 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\brand\tb\links\links.dtd (280 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\fotki\fotki.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\uk\slice\throbber.html (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\direct[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\icons\mailru_orange.png (880 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\tr\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\ovc_sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\profilelocked.png (674 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\messages.png (584 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\cs\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.Throbber.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\locale\be\radio.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\music.dtd (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\locale\be\facebook.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_-sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\html\network-error-be.html (530 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\logo.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\en\about\vendorlogo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\update.png (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\ru\services.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\facebook-service.png (367 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\quote\quote_up.png (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_n.png (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\logo[1] (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\main-logic.js (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\logobutton\logoconf.xml (324 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\brand\ua\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\noflash\_music-noflash.ie.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\html\network-error-kk.html (543 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\geobase.xsl (377 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\icons\icon.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\say-active-disabled.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\music\play.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_ sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\ic\1.png (176 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\locale\kk\facebook.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\locale\kk\esync.dtd (435 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\ru\smartbox.dtd (826 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\kk\slice\throbber.html (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\mail[3] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\ovc_sn.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\tr\logobutton\logoconf.dtd (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\brand\tb\sblinks.dtd (377 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bl-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\friends.png (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml.zip (5873 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\quote\quotelist.dtd (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\kk\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\direct.png (567 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\site.intervals.xml (238 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\shadow-pipka.png (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\readability\sprite-readability.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\widget\platform.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\translator[1] (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\locale\ru\site.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar.yandex.ru/packages/yandexbar.zip (26831 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.Message.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\tb\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\tb\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\buttons\images\button-ball-dis.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\uk\yndx_icon.png (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\counters.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\ovc_ts_ra.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\money[1] (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\readability\readability-print.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml.zip (18934 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\html\i\gray-bird-of-sadness.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\ic.dtd (876 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\weather\gray-16.png (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\userinfo.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\town\townlist.dtd (88 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\readability\readability.js (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\skc_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\uk\browser\browserconf.dtd (387 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\notifications_new.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\fg_n.png (681 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\mail.dtd (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\fotki.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\spam.png (798 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\textonly.dtd (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\geolocation.dtd (72 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\mail\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\buttons\images\button-red.png (348 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\radio.messages.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\icons\mailrunewmsg_orange.png (905 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\locale\ru\webmaster.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\slovari[1] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\traffic\yellow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\rambler.xml (899 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_sn_d-inverted.svg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\cs\branding\yandex\search.dtd (642 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\typesquatting.xml (670 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\8-16.png (696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\stardust64.dll (1964 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\tr\slice\js\dtconverter.js (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\ovc.png (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\buttons\images\button-plus.png (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\userinfo.dtd (581 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\yandex[1] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\userinfo.dtd (573 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\photo.png (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\odnoklassniki64.dll (1610 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\fg_n.png (494 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\tr\about\vendorlogo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_-sn_d.png (860 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\follow-button.png (813 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\cs\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\mail[1] (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\icons\mailrureload3.png (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\icons\mc\badge\anim_0.png (254 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\subscriptions.png (779 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\weather.png (633 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\metrics.png (541 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\favorities.png (412 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\quote\quotelist.dtd (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\ovc_gr.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\slovari[2] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\quote\gold_down.png (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_-ra_n.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\be\yndx_icon.png (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\site[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\fg_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml.zip (3361 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\locale\en\mailru.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\quote.xml (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\branding\yandex\search.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\be\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_ sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\maps.xml (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_ sn_n.png (694 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\search-inactive.png (614 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\moikrug.dtd (818 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\lingvo.xml (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\money[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ sn_n-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\ovc_gr.png (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\textonly.dtd (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\widget\xjsont.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\metrika[1] (901 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\smartbox.messages.xml (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\icon16.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\fav-yandex.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\locale\en\facebook.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\rambler64.dll (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\be\slice\network-error.html (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\maps[1] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\locale\en\direct.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\suggest-tab.png (229 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\suggest-ico-x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.xml.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\moikrug.dtd (810 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\addresses.png (636 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\slovari[2] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\altsearch[1] (467 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\locale\be\odnoklassniki.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\locale\ru\mailru.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\en\slice\network-error.html (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\locale\be\mailru.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\passport\passport.xml (181 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\birdie.png (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\market.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\en\logobutton\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\textonly.dtd (180 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\defaults[1] (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\route-form\images\route-a.png (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\kk\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\rt-by.png (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_-sn-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\html\style-authpages.css (444 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\_\8mHn_Rsr7nJcpTqMcpRQLGAlOAM.png (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\moikrug.dtd (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\product[1] (1428 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\locale\ru\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\translator[1] (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\fg_d.png (665 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\town.png (242 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\1-16.png (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\messages_2.png (414 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\icons\on.png (408 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\route-form\images\route-b.png (494 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\skc_n.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\messages_lock.png (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\quote\quotelist.xsl (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\locale\ru\yavideo.dtd (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\lingvo[2] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\html\noflash.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\messages.xml (293 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\locale\tr\yavideo.dtd (773 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\en\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\ru\yndx_icon.png (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\ru\branding\yandex\tutorial.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\accelerators[1] (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\maps[1] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\kk\slice\js\dtconverter.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\skc_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\ru\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_ ra_n.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\ovc.png (473 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\widget\slice-commands.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\locale\ru\campaign.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\ua\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\ovc_sn.png (590 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\webmaster.intervals.xml (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\site.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\brand\ua\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\geolocation[1] (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\vkontakte[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\notif.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\yandex[2] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\icons\typesquatting\icon.png (372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\be\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\streamplayer.exe (315 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_-ra_n.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\smartbox[1] (826 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\mail[3] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\ui\dayparts\images\opacity08.png (158 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\applications.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\esync[1] (476 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\search-icon.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\fg_d.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\en\yndx_icon.png (836 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\town\geobase.xml (1647 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\mail.dtd (735 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\notifications.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\userinfo\passport.dtd (189 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\ovc.png (397 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\ui\header\images\menu-open.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\locale\ru\esync.dtd (439 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\locale\cs\facebook.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\lingvo[1] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\videos.png (836 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\logo.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\ovc_ts_ra.png (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\gmail.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\ic\2.png (215 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\videoslocked.png (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\skc_d.png (802 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\yavideo.dll (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\questions.png (747 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\yandex-65x26.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\translator.dtd (249 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\ovc.png (298 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\facebook.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\1.png (137 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\login.dtd (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\quote\quote.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\textonly.messages.xml (277 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\translator.messages.xml (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\ovc_-ra.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\widget\twitter-api.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\facebook[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_ ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\tr\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\fotki.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\product[1] (953 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\ic\0.png (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_-sn_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\main.png (732 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\direct[1] (739 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\moikrug.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\market.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\mail\logo.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\fg_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\disc.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\be\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.TabController.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\textonly.dtd (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\suggest-button.9.png (301 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\transform\messages.jsont (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\icons\twitter.png (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\readability\ready.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\quote\currency_up.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\music.dtd (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\ovc_gr.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\fg_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\yandex-130x52.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\icons\mailrunewmsg.png (827 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\ESyncHelper.exe (2275 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\about\background-ie.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\altsearch[1] (526 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\schedule.png (774 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_-ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\webmaster.xml (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\facebook64.dll (2354 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\en\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\tab-active-pipka.png (120 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_ ra_d.png (777 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_-sn_d.png (852 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\quote.dtd (845 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\en\icons\yandex.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\userinfo.dtd (522 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\ui\header\images\menu-close.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\_\W5-XqgLHVy5pJiEpB8Add3J6zDk.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\lenta.messages.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_-sn_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\tb\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\lingvo.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\slovari[2] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\mailru.dll (1060 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\cs\services.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\cs\browser\browserconf.dtd (369 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\tr\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\locale\ru\odnoklassniki.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\about\logo-ie-medium.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\readability\applied.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\html\i\throbber.gif (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\uk\smartbox.dtd (858 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\extra.dtd (420 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\curtain.png (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\application.html (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\kk\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\logo.dtd (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\be\browser\browserconf.dtd (381 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\product[1] (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml.zip (7345 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\skc_n.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\be\branding\yandex\search.dtd (669 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_sn_n.png (659 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\locale\uk\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\yavideo.messages.xml (867 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\pagetranslator\loader.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\translator.dtd (350 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\ic.dtd (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\quote[1] (900 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\mail.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_ sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\icons\direct_.png (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\town\townlist.dtd (83 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_n.png (547 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\guest.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\icons\mc\icon.png (628 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\locale\uk\esync.dtd (451 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\be\logobutton\logoconf.dtd (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\fav.png (527 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_sn_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\yandex.xml (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\uk\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\browseroffer[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\cs\typesquatting.dtd (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\site.messages.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\moikrug[1] (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\music.dtd (371 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\locale\tr\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\quote\quotelist.dtd (87 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\tr\yndx_icon.png (836 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\geolocation.dtd (75 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\ovc_ts_ra.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\common.dtd (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\video.png (543 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\traffic\green.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\ui.ie7.css (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\brand\ua\town\townlinks.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\gmail[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\advertising.png (799 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\ui\messages\images\delete.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\tr\smartbox.dtd (700 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\ovc_gr.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\videosmark.png (865 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\locale\cs\esync.dtd (438 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\icons\campaign-outofmoney.png (607 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\textonly[1] (405 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\main_lock.png (792 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\brand\tb\gmail.links.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\cs\slice\network-error.html (470 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\product[2] (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_-ra_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\be\slice\throbber.html (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\cs\yndx_icon.png (836 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\accelerators[3] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\icons\ramblersend.png (366 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\groupslocked.png (707 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\music[1] (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\main-ui.js (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\product.xml (475 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\ic.dtd (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\ovc_ts_ra.png (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\6-16.png (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\fav-1.png (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\noflash\music-noflash.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\d-msg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\fg_d.png (983 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_-ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\main-adapter.js (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\cs\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\slovari.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\transform\overlay.jsont (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\browseroffer[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\friends_lock.png (795 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\uk\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\radio[1] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\town\townlinks.dtd (133 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\nointernet\img\b-music-logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\rambler[1] (899 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\google.png (856 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\icons\campaign-running.png (688 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music.messages.xml (510 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\gmail.settings[1] (55 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\logo.xml (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\locale\en\campaign.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\fotki[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\lenta.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\statistics[1] (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\mail[2] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\login.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\ovc_ ra.png (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\en\typesquatting.dtd (510 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml.zip (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\brand\ua\links\links.dtd (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\town.dtd (911 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\quote\quote_down.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\geobase.xml (2159 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\facebook.png (464 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\moikrug.messages.xml (946 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\webmaster[1] (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_ sn_n.png (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\locale\be\esync.dtd (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\pagetranslator[1] (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\twitter.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\sblinks[1] (596 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\en\branding\yandex\search.dtd (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_-sn_d.png (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\locale\kk\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\ru\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_-ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\cs\about\vendorlogo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\en\slice\js\dtconverter.js (537 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\tb\quote\export.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\moikrug\moikrug.png (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\brand\ua\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_sn_d.png (889 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\msg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\cs\mc.dtd (299 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\typesquatting[1] (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\odnoklassniki.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\logobutton\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\html\network-error-tr.html (467 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\locale\ru\facebook.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\fg_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\locale\cs\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\icons\reload.png (407 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\locale\ru\radio.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\cy[1] (641 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\show_foto.png (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\say-disabled.png (906 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\browseroffer.dll (2630 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\uk\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\translator.xml (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\messages-bg-top.png (794 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\icons\direct.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\trash.png (213 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\facebook_lock.png (775 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\lingvo[4] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\translator\translator.png (636 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\icons\loggedin.png (592 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml.zip (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\cs\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\icons\browser_red_16.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\buttons\images\button-minus.png (237 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\money.messages.xml (519 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\geolocation.xml (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\cy.xml (641 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\locale\en\radio.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\ovc_sn.png (796 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\main-ui.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\cs\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.Search.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\7-16.png (645 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\search.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\en\logobutton\logoconf.dtd (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\notesmark.png (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\profile.png (448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\login[1] (511 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\yandex[2] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_-sn_n.png (880 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\locale\be\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\ovc_-sn.png (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\.manifest.mf (132 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\locale\en\odnoklassniki.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\buttons\images\button-green.png (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\ui\messages\images\spam.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.DiffTimer.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\gmail[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\yavideo.xml (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\addressbox-navigate.png (737 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.Translate.js (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\wall.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\site.setting.xsl (355 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\common.dtd (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\locale\tr\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_gr-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\market[1] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\tb\quote.xml (887 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\locale\tr\radio.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\ui\messages\images\mail-logo-en.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_d.png (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\locale\cs\radio.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\twitter[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\yavideo[1] (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\ovc_-sn.png (709 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\tr\typesquatting.dtd (520 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\en\services.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\icons\gmaillock.png (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\chelper\chelper.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\mc[1] (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\translator\extrainfo.dtd (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\icons\metrika_16.png (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\metrika.intervals.xml (259 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\quote\quotelist.dtd (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\mc.xml (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\yavideo64.dll (1217 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.GetMore.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\quote\gold_up.png (658 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\icons\gmailsend.png (877 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ sn_d-inverted.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\retweet.png (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\yandex.png (577 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\events.png (781 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\calendar.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\site[1] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\en\altsearch.dtd (117 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\ui\messages\images\mail-logo-ru.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\campaign[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\mail[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\ovc_sn.png (691 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\html\network-error-ru.html (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\money.dtd (580 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\locale\uk\odnoklassniki.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\about\logo-ie-large.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\note.png (339 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\wiki.png (534 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\ovc_ sn.png (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\html\noconnection.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\geolocation\geolocation.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\locale\uk\mailru.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\suggest-favorite.png (466 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml.zip (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\twitlink.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\mail.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\town\townlinks.dtd (126 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\pagetranslator[1] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\ru\logobutton\logoconf.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\tb\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\logo.dtd (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\yavideo[1] (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_ sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_-ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\skc_n.png (720 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\photosmark.png (560 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\shadow-5-corner.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_-ra_d.png (857 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\sb.dll (1925 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\locale\be\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.anim.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\iehistory.db (854 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\ovc_ra.png (360 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\tr\services.dtd (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\yandex[1] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\icons\virused.png (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_n.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\services[1] (196 bytes)
%Program Files% (x86)\Yandex\Common\elements64.exe (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\ic.dtd (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\login.dtd (787 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml.zip (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\json.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\icons\error.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\defaults.dtd (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\locale\kk\yavideo.dtd (929 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\ui\menu\images\remove.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\accelerators[5] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\defaults[1] (1200 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\widget\utils.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\cs\icons\yandex.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\kk\yndx_icon.png (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\ui\header\images\mail-create.png (326 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\maps[3] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\photos.png (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\skc_d.png (634 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\icons\error.png (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\lingvo[3] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\accelerators[3] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_-sn_n.png (639 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\accelerators[3] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\tr\icons\yandex.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_-ra_d.png (823 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\ru\mc.dtd (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\profilemark.png (631 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\money.dtd (530 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\10-16.png (706 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\locale\kk\mailru.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\safebrowsing\safebrowsing.xml (251 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\smartbox[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\matches.png (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\locale\ru\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\userinfo.dtd (507 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\esync.messages.xml (567 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\en\mc.dtd (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\image-search.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\del.png (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town.messages.xml (865 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\photoslocked.png (615 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_d.png (786 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\mail.dtd (541 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\slovari[2] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\common[1] (570 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\gmail64.dll (943 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\ovc_-ra.png (542 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\accelerators[2] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\esync.dll (1768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_ra_n.png (603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\lingvo[2] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\messages.png (480 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\common.dtd (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\altsearch64.dll (2042 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\icons\mailru.png (858 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\defaults[2] (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\about\logo-ie-tiny.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\en\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\slovari[1] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\tr\logobutton\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\cs\logobutton\logoconf.dtd (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml.zip (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\town\geobase.xml (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\typesquatting[1] (670 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\tb\town\townlinks.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\mail\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\geolocation.dtd (129 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\fg_d-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\icons\mc\badge\active_press.png (316 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\opinions.png (639 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\events.png (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\say-active.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\locale\be\vkontakte.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\en\browser\browserconf.dtd (339 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\textonly[1] (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\friends.png (743 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\logo.dtd (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\share.png (753 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\icons\yavideo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\quote\stock_up.png (587 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\logo.messages.xml (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\ui.ie8.css (1294 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\market[1] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\logo[1] (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\about\vendorlogo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\accelerators[1] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\ovc_ sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\skc_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\brand\tb\gmail.settings.dtd (54 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\icons\yavideo_on.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\radio64.dll (2041 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\quote.dtd (900 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\music\pause.png (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_ts_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\ua\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\odnoklassniki.dll (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\cards.png (782 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\route-form\images\form-close-hover.png (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\login[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\icons\site.png (707 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\throbber.gif (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\fg_d.png (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\ua\town\townlinks.dtd (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\iehistory.db-journal (14816 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\ovc_ ra.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\locale\tr\esync.dtd (325 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\ovc_ sn.png (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\ru\browser\browserconf.dtd (382 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\mail.dtd (715 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\locale\uk\direct.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\locale\kk\direct.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\friendsmark.png (678 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\ru\branding\yandex\search.dtd (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\no-more.png (491 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\html\network-error-uk.html (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\market[1] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\direct.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\noflash\img\b-music-logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\skc_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\noflash\_music-noflash.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\town\townlist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\login\auth.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\icons\Direct_locked_2_.png (748 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_ sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\metrika[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\direct.xml (739 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\_\ZNKOGssGTwI6nNaZaFsAmYawp4M.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\twitter.dll (2393 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\en\twitter.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\ic\4.png (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\logo\logo.png (409 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\search-icon-big.png (442 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\quote.dtd (666 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\tr\browser\browserconf.dtd (343 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_ sn_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\images\mail_128.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\yandex[2] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\be\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\slovari[1] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\widget\_debug.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\ovc_ra.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\locale\en\vkontakte.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\ovc_ sn.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_ ra_n.png (986 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\notifications_lock.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_-ra_n.png (846 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\accelerators[2] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\ic\5.png (213 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\browseroffer.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\cs\slice\throbber.html (352 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\fotki.dtd (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\town[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\quote.dtd (859 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\tab-active.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\be\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\vkontakte.dll (2080 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music.xml (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\readability\hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\en\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\locale\uk\facebook.dtd (196 bytes)

The process setup.exe:1836 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\replace (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Extensions\external_extensions.json (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\19.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\5.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\8.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\7.jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\es.pak (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\pins\browser (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\15.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\tr.pak (266 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\browser.exe (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe (15068 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\11.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\icudtl.dat (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\en-US.pak (229 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\browser.dll (28403 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\18.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\pins\browser\yandex.website (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\9.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\7.jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\brand_skins.json (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\19.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\clidmgr.exe (151 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\15.jpg (789 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\xinput1_3.dll (81 bytes)
C:\Users\"%CurrentUserName%"\Desktop\Yandex.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\zh-TW.pak (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\pt-BR.pak (264 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\translator (992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\cs.pak (274 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Extensions\yandex_mail.crx (98 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\34.jpg (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\16.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\translator (992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\30.jpg (1011 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\gopnelejddjjkamjfblkcijjikkinnec\brand_settings.json (156 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\p2c-phone-schemes (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\18.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\nacl_irt_x86_32.nexe (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\plugins\npswf32_16_0_0_305.dll (793 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\browser.7z (323778 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\2.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\plugins\plugin.vch (372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\browser_elf.dll (133 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win1.jpg (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\smartback (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win2.jpg (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\nacl_irt_x86_64.nexe (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\de.pak (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\17.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\morphology\dictionary-ru-RU.mrf.sig (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\master_preferences (330 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\13.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\safebrowsing\download.png (437 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\pins\browser\16_32.en.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\31.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\master_preferences (330 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\yapdf.dll (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\partner-package.cab (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\yapr.dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\morphology\dictionary-ru-RU.mrf (17626 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\ffmpegsumo.dll (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\pins\fb\fb.ico (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\morphology\stop-words-ru-RU.list (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\33.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\extensions\antishock-prod.crx (13773 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\partner_config (122 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\pt-PT.pak (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\setup.exe (7345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\minwhite (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\pins\browser\Yandex.exe (103 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win3.jpg (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\bgeakjmfknncppbmgkkfbglnodccdecp\brand_settings.json (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\service_update.exe (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\10.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\33.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\10.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\extensions\yahelper.crx (1667 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\minwhite (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\libglesv2.dll (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\morphology\dictionary-ru-RU.mrf.sig (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\20.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\resources.pak (14999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\brand_config (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\14.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\Test\test-com (608 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\chua_list (896 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\brand_skins.json (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\3.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\3.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win2.jpg (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Extensions\yahelper.crx (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\wow_helper.exe (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\elokbjeafkcggjfjkakpchmcmhkhaofn\brand_settings.json (289 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\31.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\20.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\chua_list (896 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\ru.pak (417 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\yawp.dll (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\ja.pak (340 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\p2c-phone-schemes (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\9.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\registry (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\extensions\ihhcdinmaceokcdmbddlclfejhadgpgg.json (70 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\Test\test-com (608 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\yandex_browser_installer.log (409264 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\4.jpg (198 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\smartback (475 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\brand_settings.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\replace (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\14.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\bgeakjmfknncppbmgkkfbglnodccdecp\brand_settings.json (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\fr.pak (296 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\fcgfaidpicddcilhjhafmmcgfodijhjd\brand_settings.json (226 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\morphology\stop-words-ru-RU.list (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\morphology (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\kk.pak (319 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\5.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win1.jpg (799 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Extensions\plmneencfmbjfgbkfiinjelmngigejjh.json (76 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\yupdate-exec.exe (492 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\32.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\winrt_helper.dll (209 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\libegl.dll (211 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\rewrite_list (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\uk.pak (418 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\elokbjeafkcggjfjkakpchmcmhkhaofn\brand_settings.json (289 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\40.0.2214.3645.manifest (229 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\13.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\browser_child.dll (36738 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\plugins\npmedia_plugin.dll (907 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\fcgfaidpicddcilhjhafmmcgfodijhjd\brand_settings.json (226 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\crash_service.exe (454 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\12.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\6.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\d3dcompiler_46.dll (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\brand-package.cab (10815 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\dllyupdate.dll (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\6.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\11.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\libexif.dll (310 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\morphology\dictionary-ru-RU.mrf (7547 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\pins\fb\FBPinLauncher.exe (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Extensions\ihhcdinmaceokcdmbddlclfejhadgpgg.json (70 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Yandex\Yandex.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\8.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\gopnelejddjjkamjfblkcijjikkinnec\brand_settings.json (156 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\nacl64.exe (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\17.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\12.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\check_whitelist (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\brand_settings.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\extensions (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\4.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\it.pak (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\2.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\clids-yabrowser.xml (267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\partner_config (122 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win3.jpg (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\30.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\32.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\registry (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Yandex.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\pins\browser\16_32.ru.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\extensions\plmneencfmbjfgbkfiinjelmngigejjh.json (76 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\safebrowsing\download.png (437 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\rewrite_list (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\suspend_api_check.exe (244 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Extensions\antishock-prod.crx (5873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\browser_200_percent.pak (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\browser_100_percent.pak (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\16.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\show-dlg.exe (389 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\34.jpg (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\brand_config (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\check_whitelist (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\zh-CN.pak (220 bytes)

The process MsiExec.exe:3368 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Windows\Installer\MSI182C.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (1506 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences (33 bytes)

The process MsiExec.exe:2936 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[7] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[6] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[8] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[5] (475 bytes)
%Program Files% (x86)\Yandex\Elements\bartab64.dll (1018 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Yandex\Toolbar\Install.log (8186 bytes)
%Program Files% (x86)\Yandex\Elements\barshims64.dll (126 bytes)

The process MsiExec.exe:2652 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Yandex\Toolbar\Install.log (9208 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[4] (1 bytes)
%Program Files% (x86)\Yandex\Elements\barshims.dll (106 bytes)
%Program Files% (x86)\Yandex\Elements\bartab.dll (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[3] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[2] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[1] (475 bytes)

The process MsiExec.exe:2020 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\WinReg.jsm (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\installer.js (3808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\manifest.mf (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\AddonManager.jsm (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\promise.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_13.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\netutils.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\config.js (887 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Top Sites (1932 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\vendorCookie.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\presets\http://bar.yandex.ru/presets/ua.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\nsIYaSearch.xpt (120 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-auth\pwdmng.jsm (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\direct.zip (21288 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\backup.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\fileutils.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\brand_prov.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonStatus.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\integration.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\misc.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_IGPqT9zFkZqBmb8 (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\compapi.js (3560 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\workers\barnavig.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\screenshotsGrabber.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\colors.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-7_8_0.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\WindowListener.jsm (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\branding.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\smartbox.zip (109915 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-advertisement.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\History (4588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\zigbert.rsa (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\ui (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\dayuse.js (2600 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\install.js (127 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\internalStructure.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\strutils.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\statistics.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\frontendHelper.js (3 bytes)
C:\Windows\Installer\MSIC6B6.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\chromeappsstore.sqlite-journal (3302 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\urlRewrite.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\workers\barnavig.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Web Data (24431 bytes)
C:\Windows\Installer\MSIB1D7.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\barplugin.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Local Storage\chrome-extension_pchfckkccldkbclgdepkaonamkignanh_0.localstorage (1187 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\promise.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Bookmarks (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\install.rdf (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vendor00000.xml (2510 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\Yandex.website (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\strutils.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Bookmarks (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\mailru.zip (24984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\backgroundImages.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native_comps.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\chromeappsstore.sqlite (59 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\autoinst.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\database.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\History-journal (18998 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\auth.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Web Data-journal (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\sb.zip (60968 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\fastdial.js (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\barnavig.js (4592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Log4Moz.jsm (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\syncPinned.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\ycookie.js (196 bytes)
C:\Users\"%CurrentUserName%"\Favorites\Links\Mail.url (286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Bookmarks_20150425082735.backup (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\AddonManager.jsm (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\cachedres.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\strbundle.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_3.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\patterns.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\vendor\vendor.xml (998 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Local State (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Web Data (609 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\dayuse.js (2600 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonmgr.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\async.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Favicons-journal (32780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\database.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\zigbert.rsa (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\searchSuggest.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\async.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\DataURI.jsm (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\browseroffer.zip (52224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\databaseMigration.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\install.rdf (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_16.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\presets\http://bar.yandex.ru/presets/default-partner.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-auth\auth-manager.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\package-12111827.zip (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\safebrowsing.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_14.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\region.properties (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\strbundle.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\integration.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\manifest.mf (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Top Sites-journal (5062 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\lite_installer.exe (179 bytes)
C:\Windows\Installer\MSI24B0.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\Favorites\Links\Yandex.url (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\SimpleHTMLParser.jsm (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\compsusage.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_3_0.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\webmaster.zip (31120 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\vendor\vendor.xml (924 bytes)
C:\Windows\Installer\MSIC666.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Web Data (609 bytes)
C:\Windows\Installer\MSI225B.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\rambler.zip (21288 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Preferences_20150425082734.backup (67 bytes)
C:\Windows\Installer\MSIB119.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Bookmarks_20150425082734.backup (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\sysutils.js (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\nsYaSearch.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\dataprovider.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\chrome.manifest (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Stemmer.jsm (18672 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonfs.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\blacklist.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_kwedpkzQ1VhvkrS (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonmgr.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Foundation.jsm (938 bytes)
C:\Windows\Installer\MSIC677.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\legacy.js (3 bytes)
C:\Windows\Installer\MSIB1A6.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\xmlutils.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences_20150425082734.backup (33 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Preferences (340 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\statistics\downloads.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\preferences\yasearch.js (585 bytes)
C:\Windows\Installer\MSID8F4.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\package.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonfs.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\package.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\History (12611 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\presets\http://bar.yandex.ru/presets/tb.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\mailruStat.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\dynamic-preferences\brand\ua\safebrowsing.js (915 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\clids.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\patterns.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_12.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\authAdapter.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\ecustom.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\SimpleProtocol.jsm (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\safeBrowsing.js (2 bytes)
C:\Windows\Installer\MSIC6D6.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Preferences (932 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\unit.js (680 bytes)
C:\Windows\Installer\MSIB487.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\WindowListener.jsm (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\contentEnvironment.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\presets\http://bar.yandex.ru/presets/default.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\zigbert.sf (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\defender.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Web Data-journal (7534 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pchfckkccldkbclgdepkaonamkignanh_0.localstorage-journal (14083 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Top Sites (1151 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\aboutSupport.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\app.js (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\clids-barie.xml (501 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\places.sqlite (9176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\ncparser.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\browserTheme.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150425082737.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\clids-yabrowser.xml (281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Favicons (5572 bytes)
C:\Windows\Installer\MSIB2F1.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\preset.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\gmail.zip (28224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150425082735.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Preferences_20150425082734.backup (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\npwidget.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_7_0.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\core.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\barnavig.js (4592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\misc.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\incoming.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\browserUsage.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\alarms.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\overlay_prov.js (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\ycookie.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal (5380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\task.js (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\WinReg.jsm (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Favicons (5137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\notifications.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\searchplugins\yandex.com-082735.xml (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\zigbert.sf (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\thumbsSuggest.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\fileutils.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Bookmarks (785 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\netutils.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Stemmer.jsm (18672 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\chrome\yasearch.jar (363925 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-7_6_0.js (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\stdout.log (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\altsearch.zip (41656 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\advertisement.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\favorites.db-journal (5062 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\pacman.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\install.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Favicons (4725 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Preferences.jsm (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\screenshots.js (392 bytes)
C:\Windows\Installer\MSIB1B7.tmp (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150425082736.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\odnoklassniki.zip (35448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\core.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-7_8_1.js (609 bytes)
C:\Windows\Installer\MSIB4B7.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-6_4_0.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Log4Moz.jsm (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\layout.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\slices.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\update.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (326 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\protocolSupport.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\browserconfig.properties (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\DataURI.jsm (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\History-journal (14544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\omni.ja_20150425082733.zip (44854 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\aboutSupport.js (3 bytes)
C:\Windows\Installer\MSI11C4.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\distribution.js (266 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Favicons-journal (32780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\xb.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\statistics.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\ecustom.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal (37022 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\sender.exe (308 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonStatus.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-auth\utils.jsm (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\favicons.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\clids-bm.xml (171 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\xbProtocol.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\backup00000.reg (2196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_6_0.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\branding.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\syncTopHistory.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Preferences (238 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Mozilla\Firefox\Profiles\zwvbr04l.default\thumbnails\05976510b5af1634c781955b205a201f.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\clids-vbie.xml (501 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_5_0.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Foundation.jsm (903 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_ncFyBZg7cNx6We2 (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js_20150425082735.backup (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\config.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_0.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\places.sqlite-wal (19187 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Favicons (5137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\chrome.manifest (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\nsSearchSuggestions.js (1928 bytes)
C:\Windows\Installer\MSIC6E7.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\usageHistory.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\sysutils.js (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\searchExample.js (196 bytes)
C:\Windows\Installer\MSI23E4.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\bookmarks.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Local Storage\chrome-extension_pchfckkccldkbclgdepkaonamkignanh_0.localstorage-journal (14083 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\thumbs.js (4056 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\cloudsource.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\passport.js (3 bytes)
C:\Windows\Installer\MSIFB94.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\radio.zip (42472 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\metrika.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\brandsvc.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\manifest.js (3 bytes)
C:\Windows\Installer\MSIB5F0.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\#Bar4IE.cab (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\bar.js (3560 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex.website (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\bookmarksStat.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Favicons-journal (32780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\sliceapi.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-5_2_0.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-utils.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\mail.yandex.com_20150425082737.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\dynamic-preferences\safebrowsing.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\clids.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\default.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\chrome\yandex-vb.jar (64481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\preset-with-manifest.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\vkontakte.zip (36616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\twitter.zip (38624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Web Data-journal (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\sync.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\facebook.zip (28496 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-7_0_0.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pchfckkccldkbclgdepkaonamkignanh_0.localstorage (1187 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Preferences.jsm (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\installer.js (3808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\task.js (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\yavideo.zip (41488 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\xmlutils.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (60926 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\First Run (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\dlqueue.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_9.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\favorites.db (523 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\SimpleProtocol.jsm (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_0_0.js (943 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\favorites.db (523 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\widgetlib.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\favorites.db-journal (5062 bytes)
C:\Windows\Installer\MSIC655.tmp (221 bytes)
C:\Windows\Installer\MSI217F.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\esync.zip (160193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Bookmarks (785 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\anonymousStatistic.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-auth\authdefs.jsm (242 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_1_0.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected] (1 bytes)
C:\Windows\Installer\MSIFB16.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (7147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\preferences\yandex-vb.js (778 bytes)
C:\Windows\Installer\MSIC830.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Preferences_20150425082734.backup (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\SimpleHTMLParser.jsm (196 bytes)

The process MsiExec.exe:3088 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_opera.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-button_theme_grey-no-transparent-l.ie.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-input.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_google-chrome.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-popupa_theme_ffffff.png (782 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hosts.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-restart-info.png (434 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_yandex-chrome.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-checkbox_theme_grey-l.png (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_type_hint.png (244 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\La6qi18Z8LwgnZdsAr1qy1GwCwo.gif (43 bytes)
C:\Windows\Installer\MSI323A.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-informer-close.png (527 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp_qs2.html (3 bytes)
C:\Windows\Installer\MSI3925.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-yandex-browser__icon.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_common.ie6.css (7288 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_common.ie8.css (6984 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\ff.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\uk_dlg_install_error.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\u2-ctrl.exe (495 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-yandex-browser__icon.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\tr_dlg_before_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\locale.xml (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_opt.html (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\jquery.min.js (7192 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vendor00000.xml (209 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_opera-new.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-alert.png (152 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-switch_theme_toggle-s-grey.ie9.png (127 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\common.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_yandex-internet.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\ch.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_common.ie9.css (5952 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-switch_theme_toggle-m-grey.ie9.png (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\tr_dlg_install_error.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\ie.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\upd.zip (189 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-yandex-logo_lang_en.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\_common.js (14864 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp_qs2_guard.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\br_opt.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\uk_sizes.xml (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-alert.png (152 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\bad_ie.xml (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hosts.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_common.ie8.css (6776 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\tr_sizes.xml (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-select-grey-fade.ie.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\show.js (1 bytes)
C:\Windows\Installer\MSI351B.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-popupa__close.png (376 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hosts.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\rc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-popupa__close.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp_qs2_guard.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\dlg_before_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_opt.html (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-checkbox_theme_grey-tick.gif (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_opt.html (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\scut.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-tool-name.png (501 bytes)
C:\Windows\Installer\MSI34FA.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp_qs_guard.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_yandex-browser.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_browser_opera.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-yandex-logo_lang_ru.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\version.rss (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\qs2.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-button_theme_grey-l.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\dlg_install_error.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp2.html (3 bytes)
C:\Windows\Installer\MSI3701.tmp (167 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-yandex-logo_lang_en.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-checkbox_theme_grey-tick.gif (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-tool-name.png (501 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\hp_qs2.js (821 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_yandex.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_comodo-dragon.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_internet-mailru.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\opt.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\sf.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hosts.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_type_hint.ie6.png (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\mc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_common.css (4592 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\oc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_ie.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\about.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\tr_dlg_after_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_browser_yandex.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-alert__icon.png (452 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-button_theme_grey-no-transparent-l.ie.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-button_theme_grey-l.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\dc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\gc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-popupa_theme_ffffff.png (782 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-restart-info.png (434 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-informer-close.png (527 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\logo.png (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\sizes.xml (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\yupdate-exec.exe (495 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-select-grey-fade.ie.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-yandex-browser__cancel.png (376 bytes)
C:\Windows\Installer\MSI321A.tmp (151 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\popup.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-input.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\dlg_after_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-switch_theme_toggle-m-grey.ie9.png (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\uk_dlg_after_install.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-yandex-browser__cancel.png (376 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_browser_fx.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\uk_dlg_before_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\clids-bm.xml (188 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\_common.js (15336 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp_qs_guard.html (3 bytes)
C:\Windows\Installer\MSI3392.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\dlg_after_install.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_chromium.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_qs2.html (3 bytes)
C:\Windows\Installer\MSI31BB.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_fx.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_opt.html (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_common.ie7.css (6776 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_common.css (5856 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_opt.html (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\hp2.js (1 bytes)
C:\Windows\Installer\MSI3AB0.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_common.ie9.css (4592 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_opt.html (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_rambler-nichrome.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\cpy.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlgs.zip (459 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\logo_big.png (848 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\logo_big.png (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hosts.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\tr_dlg_after_install.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-select-grey-selected.ie.png (465 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-checkbox_theme_grey-l.png (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-select-grey-selected.ie.png (465 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_safari.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_type_hint.ie6.png (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\ico_def.ico (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\uk_dlg_after_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\op.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_browser_ie.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\jquery.min.js (7192 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_common.ie7.css (6984 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp_qs.html (3 bytes)
C:\Windows\Installer\MSI3945.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-alert__icon.png (452 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\yc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_common.ie6.css (6888 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\hp_qs.js (820 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_type_hint.png (244 bytes)
C:\Windows\Installer\MSI3878.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-yandex-logo_lang_ru.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\La6qi18Z8LwgnZdsAr1qy1GwCwo.gif (43 bytes)
C:\Windows\Installer\MSI39B5.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hosts.html (3 bytes)

The process MsiExec.exe:1400 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files% (x86)\Yandex\FastDial\fastdial64.dll (146 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Yandex\VB\Install.log (3990 bytes)

The process MsiExec.exe:2160 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files% (x86)\Yandex\FastDial\fastdial.dll (146 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Yandex\VB\Install.log (3852 bytes)

The process MsiExec.exe:1880 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\Install.log (1442 bytes)

The process elements64.exe:868 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\skc_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_-sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\10-16.png (706 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\favicon.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_sn_n.png (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\skc_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\.manifest.mf (132 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\readability (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\style.css (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\icons\logindialog\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_-sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\quote\quotelist.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\quote\quotelist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_ ra.png (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\vLV2RFKX8s67kUoFpg2qwLkBEIk.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\currency_down.png (570 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\30UGBquvFO2YEoZdzUGiTFKarLU.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\8mM517Xu-xUh_e_5YdDztnBFfxY.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\skc_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\q3xr3wR_Yg_zr9sfIINzZLCTdwE.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\town\townlist.dtd (88 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\U0h5laCla0RWhXA2HIlO7izWrgg.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\mail-logo-en.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-ui\b-spinner\images\20.gif.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialshims.dll.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\pX_YaGn4Yr_lAhpb7JdMwBPIaAY.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\ic\1.png (176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\login\auth.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\fg_d-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\noflash\img\b-music-noflash.png (520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ts_ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\mail\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\messages\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet\music-nointernet.html.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\town\townlist.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialframe.dll.patch (511 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19 (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\main-adapter.js (1960 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\geolocation.dtd (129 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music.xml (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_sn_n.png (662 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialframe.dll (924 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\index.html.patch (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\geobase.xml (2159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\geolocation.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_sn.png (590 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\route-form\images\button-route.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_-ra_d.png (857 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\require-config.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_ sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\_1tfIBlbbO-sFZX3BSjgbsFLIaE.png (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\translator\translator.png (636 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\moikrug.dtd (810 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-libs\polyfills.js.patch (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\LnyndjXnnnf0-TBiILsn2xomtFE.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_-sn-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialframe64.dll.patch (1728 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_ra_n.png (676 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\stardust.dll.patch (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\4-16.png (721 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\main-adapter.js (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\ic.dtd (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\textonly.dtd (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\bbQ1jlb4T8Jy-s_k1Nz6W3nWt7g.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\RlCxSpz6nMOlD7d9slWYf-6j8Jw.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\town\townlinks.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-green.png (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_ sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\userinfo.dtd (507 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\login.dtd (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\6FdgwygQ_TzvldBXoorX_18X3OI.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\fg_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\mail.dtd (541 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\translator.dtd (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_ sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\translator.messages.xml (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bl.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_ts_ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\fotki.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\geolocation.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_common.ie7.css.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\pagetranslator\pagetranslator.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_ra.png (532 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_-ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_ sn_n.png (671 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\moikrug.dtd (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_ ra.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\f7-fSnZIoEUNKpSJWJW98kU5x9U.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\main-logic.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\temporary-files\{906CE4F9-3BFD-45CB-823E-5C2AC28D8230} (26786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_ sn_d.png (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\userinfo.dtd (467 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_-sn_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\OJF8v3B9B1iuTlzjl4Upnf3NpuQ.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\LYWMGttYOnp54g3peDbHFvecIZg.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\ui\dayparts\images\opacity08.png (158 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\geobase.xml (2159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\moikrug.messages.xml (946 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\readability\readability.js (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_-ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\fg_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-ui\b-spinner\images\45.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\chelper\chelper.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\messages.xml (293 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\pCHi2EbFGprgWW3mMpMtDX54NQM.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\require-config.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\login.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\header\images\mail-create.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\money.dtd (530 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\ua\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bl.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\nointernet\_music-nointernet.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\readability\readability.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\0.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\skc_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\quote\gold_down.png (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet\_music-nointernet.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\ua\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_-ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\ovc_-sn.png (709 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barframe.dll.patch (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-libs\require.min.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\logo.dtd (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\subscription\add.png (779 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\town\geobase.xml (1451 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\ic\2.png (215 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\route-form\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\music\pause.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\7akVtjosFy0SIZK5kndXmRwXc6k.png (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\9-16.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\common.dtd (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\main-adapter.js (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\moikrug\moikrug.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\zO38-_sA_u6ACecTf3a7S276UCQ.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\buttons\images\button-green.png (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\6qtB0Q9FVAmOWwOK3V5JVI5ojcI.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\translator.dtd (260 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\quote\export.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\brand\ua\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_-sn.png (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-ui\b-spinner\images\20.gif.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\8-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_-ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\YCbcsQcGggriiKTU5E8gjUWGekA.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\30UGBquvFO2YEoZdzUGiTFKarLU.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\ovc_-sn.png (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\skc_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_ ra_d.png (907 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\main-adapter.js (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\ic.dtd (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-ra_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\_music-noflash.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_-ra_n.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\f7-fSnZIoEUNKpSJWJW98kU5x9U.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\OEjMVquR-FlJrxPp3R2w3SiSo3I.png (272 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\readability\sprite-readability.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\QzU0ufhPTrD0S8e0bpVNvGRkS7s.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\J7daNOyAa24zy3Ir-wWKTeQNeuo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\userinfo.dtd (573 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\town.dtd (911 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_d.png (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\HuoOcff43SvB1OVXDmTAAXmFs0g.png (782 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\buttons\images\button-yellow.png (358 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\quote.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\gold_down.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\town.png (242 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\ovc_ sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\fg_n.png (681 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\music.dtd (371 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\brand\ua\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\LYWMGttYOnp54g3peDbHFvecIZg.svg (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\ic\0.png (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\music\play.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\money.messages.xml (519 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\userinfo\passport.dtd.patch (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bl.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_ sn.png (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\7-16.png (645 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\img\b-music-noflash.png (520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_ ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_ sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc.png (473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\FIg7sp49R7Bbg3paJlGfzrP03rE.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\branding.zip (786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\quote (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-ui\b-spinner\images\20-dark.gif.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bl-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\Vyyv32J6Ora9svqZCYF-XSVU4Zc.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_ sn_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\main-ui.js (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\fg_d.png (665 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc.png (298 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_-ra_d.png (823 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\textonly.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\cXyECx_vgE9llIxJCsRweD2uMuc.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\logo.dtd (140 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_-ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\2-16.png (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\ic.dtd (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_ ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\header\images\menu-open.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ra_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\t1Xoc_X9L745EI77VThFTlLoR9I.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\vLV2RFKX8s67kUoFpg2qwLkBEIk.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\mail.dtd (633 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\fg_n.png (386 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\style.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\4-16.png (721 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_-ra_n.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Common\elements.exe.patch (1764 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\translator.dtd (249 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\ovc_gr.png (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\money.dtd (340 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\music (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\5BIrw26AROzc9J3IurJFbak0Jro.gif.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\brand\ua\town\townlinks.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bl.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\common.dtd (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\main-ui.js (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_ (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\lALn2ERV0sQzCaiJB-rdgHrL2JI.png (643 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\userinfo\userinfolinks.dtd (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_ sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\WhpZGK4ilmcwDg2k1xoCV1INn1M.png (173 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\geolocation.dtd (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\login.dtd (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\2.png (215 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\skc_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_gr.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\moikrug.messages.xml (946 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\music\pause.png (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\textonly.dtd (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\OEjMVquR-FlJrxPp3R2w3SiSo3I.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\brand\ua\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\town\townlist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\money.dtd (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_ ra.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\pDyNDX-HZwcZsvKc7CchzqPMfjU.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\B2U5JTSkrM1iy2QyFZIn43s5WIw.svg (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_-ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-ui\b-spinner\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\ovc_ ra.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\defaults.dtd (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\readability\hover.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_ ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\town\townlinks.dtd (126 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\tb\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\textonly.dtd (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\skc_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\style.css.patch (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\epVOh1xBimDwi8BSMFWMEy7gE6E.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\style.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-ui\b-spinner\images\b-spinner.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\bGTLQ3lgAfg8aeK6thx3QUyAaP4.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_-ra_n.png (846 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\pagetranslator.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\Common\elements.exe (441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\tb\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\HuoOcff43SvB1OVXDmTAAXmFs0g.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_ sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\RVzdJ9OJh0AWiuUZ2gi5Dwus4aw.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\quote.xml (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\quote.dtd (666 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\fotki\fotki.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\translator.messages.xml (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\messages.xml (293 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_sn_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-yellow.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\mail.dtd (482 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\town (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\newtab.html.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet\_music-nointernet.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\FzWyVFQkBJObPTziVE3nwUX-sFE.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\fotki.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bl.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-ui\b-spinner\images\b-spinner.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\geobase.xsl (377 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-ra_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\YDmSge45ykmToGfqY4MTD1rQ3bw.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\ovc_-ra.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\8Tybci2Ic-b9EusnAqnwjdWOCYU.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\town\geobase.xml (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ra-inverted.svg.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\ovc_ts_ra.png (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\8rm3VzQm1-ENXVTt0z7lr0UyMfI.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ sn_n-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\mail\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\basepackage.zip.patch (1295 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\textonly.dtd (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\route-form\images\form-close.png (273 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\music\music.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\userinfo.xml (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\cy.messages.xml (915 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\bartab64.dll.patch (449 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\translator\extrainfo.dtd (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\OYPSMBgQcfcSMrYzBPOaVjHEDcE.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\img (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\Z89ijsO17istBi7uzfluWEm_lBs.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\QZwxmXJnFKgedMKrAEej8n07z5k.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\newtab.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-ui\b-spinner\images\b-spinner.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\town\townlinks.dtd (133 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_ sn_n.png (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\messages\images\read.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_n.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\B_GHi1n15TIonEBlfjSOiyj2Km4.svg (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\readability\readability-print.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\FzWyVFQkBJObPTziVE3nwUX-sFE.svg (148 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\header\images\menu-close.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_sn_d.png (889 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_sn_n.png (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\buttons\images\button-minus.png (237 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_common.css.patch (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-ball-dis.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_common.css (902 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_-ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\images\mail_128.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\quote_down.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_-sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\mail.dtd (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\hCvqPleRwNIKexdlpUBO-I_8Toc.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\fg_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\ovc_ra.png (532 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music.messages.xml (510 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_gr.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\mLXSAWhA--vCjoHGBhYVNaCqDLg.svg (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\YCbcsQcGggriiKTU5E8gjUWGekA.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-libs (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\quote\currency_down.png (570 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\fg_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\pagetranslator\pagetranslator.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\quote\quotelist.dtd (87 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_ sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\main-ui.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\textonly.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_ ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_-ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\town (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\readability\hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\moikrug.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\skc_d-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\HHaZUbXWoxJcOwRCNSx4RcMW1wM.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\skc_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barframe.dll (409 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\skc_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\B_GHi1n15TIonEBlfjSOiyj2Km4.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\money\money.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\2DXe1pPd42HjUa8oyCJHpO9dZ64.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\quote.xml (887 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\B2U5JTSkrM1iy2QyFZIn43s5WIw.svg (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\tb\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\skc_n.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\HHaZUbXWoxJcOwRCNSx4RcMW1wM.svg.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\ui.js (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\route-form\images\button-route.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\bbQ1jlb4T8Jy-s_k1Nz6W3nWt7g.png (839 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\read.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_-ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\gDhz2dKv8qVaZ-NZ4RtfpEiqP2w.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\9-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\ovc.png (473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\town\geobase.xml (1451 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialshims.dll (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_d.png (786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\userinfo\userinfolinks.dtd (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\sSvtvw1vSraqkkgdSjmCcyf7Nwo.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\cy.messages.xml (915 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\ovc_ra.png (360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\nointernet\music-nointernet.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-ui\b-spinner\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_ sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\translator.dtd (260 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\town\townlinks.dtd (133 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\mOgNznzQgwqm21KZjo3hk5YUGWU.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\6.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\town\townlinks.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\route-form\images\route-b.png (494 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\currency_up.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\pagetranslator.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barshims64.dll (1138 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\town\geobase.xml (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16 (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\userinfo\userinfolinks.dtd (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_ sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\logo.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_ ra_d.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_gr.png (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\LYWMGttYOnp54g3peDbHFvecIZg.svg (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\auth_overlay.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_ts_ra.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\readability\ready.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_ ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\quote\quote_up.png (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_ra_n.png (603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\fg_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\money.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\mail\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\vLV2RFKX8s67kUoFpg2qwLkBEIk.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\IeJDy6oBct5hJLx8v2axIJnqgJg.png (388 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_ (600 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\readability\hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_-ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\3.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_-sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\fg_n.png (681 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\route-form\images\route-a.png (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\skc_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\main-logic.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\textonly.dtd (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\common.dtd (188 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\RVzdJ9OJh0AWiuUZ2gi5Dwus4aw.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\translator\extrainfo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\userinfo.dtd (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\D_bdPNqv6HJlssMZjqrlv7FqetY.png (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_-sn_n.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\icons\logindialog\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\4.png (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\logo.messages.xml (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\logo.dtd (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\ui\now\images\b-wind_arrow.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\mail\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\OJF8v3B9B1iuTlzjl4Upnf3NpuQ.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\logo.xml (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\8DjdBETc_zk-FtrdVtsq91CY0kU.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ sn_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\quote.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\ic.dtd (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_-ra_n.png (562 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\index.html.patch (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\ovc_ra.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\psDFj5dDAgXPPU-mVe-RPid0mc0.png (715 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\u6UuL0myn5QAc_jBy_VOr6h-fe4.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-ui\b-spinner\images\28.gif (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\bGTLQ3lgAfg8aeK6thx3QUyAaP4.png (972 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\style.css.patch (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\noflash\_music-noflash.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_ra_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\login.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet\img\b-music-noinet.png (919 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\5BIrw26AROzc9J3IurJFbak0Jro.gif (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\WPY8f52_KOx1hza1XbGCi6umItk.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\fg_d-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\defaults.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\ovc_ts_ra.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\pagetranslator\langs.xml (365 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\ic.dtd (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ra_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\skc_n.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\5.png (213 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\quote\quotelist.dtd (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_ ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\delete.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\pagetranslator.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\quote_up.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\stock_down.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\favicon.png (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\userinfo.dtd (515 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\textonly.dtd (180 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\quote\quotelist.xml (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\img\b-music-logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\login.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\PudDxssXdb8JdlcekuwRV8FSHVM.png (465 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\blank.gif (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\money.dtd (580 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\mail-logo-uk.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_ sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\u6UuL0myn5QAc_jBy_VOr6h-fe4.svg (529 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_ sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\quote\quotelist.xsl.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\OYPSMBgQcfcSMrYzBPOaVjHEDcE.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_d.png (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_-sn_d.png (860 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\quote (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\userinfo\userinfolinks.dtd (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\hmwMDVFmRjsNKU_RJNONzYBQsUQ.png (216 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\brand\ua (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\money.messages.xml (519 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\quote.dtd (859 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\XMoIiA5FZyikn3LZNNAeV9CQDxk.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bl-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\quote\export.dtd (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\stardust.dll (458 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\main-logic.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bl.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_ ra_d.png (777 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\N8KgL5vlefdSVZld4rrAZOv6td0.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\mail.dtd (633 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_ ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\geolocation.dtd (129 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\YDmSge45ykmToGfqY4MTD1rQ3bw.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\IeJDy6oBct5hJLx8v2axIJnqgJg.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\elements-ru.8.9.1.5100.x64.delta.8.7.0.3110[1].zip (40293 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\XMoIiA5FZyikn3LZNNAeV9CQDxk.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\textonly.messages.xml (277 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\SgutBd0LU4K_hlDET4mn_5dBTcw.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\Z89ijsO17istBi7uzfluWEm_lBs.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_ sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\quote.dtd (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\town.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\buttons\images\button-red.png (348 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\music\play.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\logo.dtd (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\fotki.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_ ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\mail\mail-menu.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\noflash\img\b-music-logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\style.css (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_ ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\6FdgwygQ_TzvldBXoorX_18X3OI.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_ra_n.png (603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\pagetranslator.xml (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\ic.dtd (876 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\mail\maillinks.dtd.patch (34 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-green.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\header\images\mail-create.png (326 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\fake.xml (608 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\3mHjWkgL_5EBDiCqQNBYtJ0gdTk.png (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\pagetranslator (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-route.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-ui\b-spinner\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\images\mail_128.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\header\images\menu-open.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\QZwxmXJnFKgedMKrAEej8n07z5k.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\quote\currency_up.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\blank.gif (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\town\townlist.dtd (82 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\mail-logo-en.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_sn_d.png (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-minus.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\userinfo.dtd (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\subscription\subscription.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\mLXSAWhA--vCjoHGBhYVNaCqDLg.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\userinfo\userinfolinks.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\nointernet (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\Ueu6ImmUtuXnUg1yF2XdPlHBjl4.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\style.css (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\Ueu6ImmUtuXnUg1yF2XdPlHBjl4.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\fg_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\readability (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\n1rMK7Xj0goEMV7ryTTbeIMFKJo.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\readability\readability-print.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\ovc_sn.png (590 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\quote\quotelist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_gr.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\textonly.dtd (180 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_ts_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\attach-ico.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\q3xr3wR_Yg_zr9sfIINzZLCTdwE.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\ic.dtd (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\newtab.html.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\La6qi18Z8LwgnZdsAr1qy1GwCwo.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\login.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\money.dtd (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\noflash (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\town\townlist.dtd (88 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_-sn-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\ic.dtd (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_ sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_ts_ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\n1rMK7Xj0goEMV7ryTTbeIMFKJo.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\ua\town\townlinks.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\fg_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdial.zip (983 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\tb\userinfo\passport.dtd (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\geolocation.xml (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-libs\polyfills.js.patch (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\smJm5iFAtam9l7LrZUH-DhaLQH0.png (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_ sn_d.png (850 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Common\elements.exe (441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\bbQ1jlb4T8Jy-s_k1Nz6W3nWt7g.png (839 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16 (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\userinfo\userinfolinks.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\town\townlist.dtd (83 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\quote\quotelist.dtd (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\1-16.png (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-plus.png (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\logo.dtd (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\quote\quotelist.dtd (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\skc_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\logo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\mail\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_ sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\oL9859A-5vIMHo11ArMir5KkeLc.png (316 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\OJF8v3B9B1iuTlzjl4Upnf3NpuQ.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\hCvqPleRwNIKexdlpUBO-I_8Toc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\geolocation.dtd (72 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\rEDlHGGyFWrULyWdRTFs5UTS1PA.png (976 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\9-16.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\brand\ua\translator\extrainfo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\tb (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\quote_up.png (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\psDFj5dDAgXPPU-mVe-RPid0mc0.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\translator.xml (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\readability\ready.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\Cs5BseJ6glqWdmXvSRCGh7Wzjo.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\Ueu6ImmUtuXnUg1yF2XdPlHBjl4.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_sn_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\translator.dtd (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\gold_up.png (658 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\skc_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\_music-noflash.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_-sn_d.png (852 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\KPnz247WBDVCwXmztn7XWxi1dqI.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-ball-all.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_gr.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\M0l9QwOFqrxbai_uKwym7mnjg7s.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\translator.dtd (346 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_ra_d.png (807 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\textonly.messages.xml (277 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\skc_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet\_music-nointernet.ie.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-ui\b-spinner\images\45.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\h1oQ0mYlczivIuzRfLNbU7TkmWM.png (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\town\geobase.xml (1647 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\N8KgL5vlefdSVZld4rrAZOv6td0.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\ovc_ sn.png (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\buttons\images\button-plus.png (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_gr-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barframe64.dll (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\jgFkBCE-RZAAZ9yPtanIQikHjO0.svg.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\fg_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\skc_d.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialframe64.dll (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\noflash\_music-noflash.ie.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\jquery.js (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\mail.dtd (482 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\.manifest.mf (132 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\WHjFOxvA2An3CNqNgdI31oAB0sk.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\favorites.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\userinfo\userinfolinks.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\rQyMR-dTD-QwlKU1_uHVI_6jnXw.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\skc_d.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\town.dtd (911 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\pCHi2EbFGprgWW3mMpMtDX54NQM.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\buttons\images\button-route.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-libs\sizzle.js.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\readability\ready.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\textonly.xml (405 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\psDFj5dDAgXPPU-mVe-RPid0mc0.png (715 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\auth_overlay.png (216 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\moikrug.dtd (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\skc_d.png (634 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\q3xr3wR_Yg_zr9sfIINzZLCTdwE.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-sn_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\tb\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\OEjMVquR-FlJrxPp3R2w3SiSo3I.png (272 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\nointernet\_music-nointernet.ie.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\skc_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_gr.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\YCbcsQcGggriiKTU5E8gjUWGekA.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\mail (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\6FdgwygQ_TzvldBXoorX_18X3OI.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19 (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_ sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\ic\5.png (213 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\J7daNOyAa24zy3Ir-wWKTeQNeuo.png (576 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\translator.messages.xml.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\weather\gray-16.png (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdial64.dll (1350 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_ ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\fg_d.png (983 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_ sn.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_sn.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\cy.xml (641 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\7-16.png (645 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-sn_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\geolocation.dtd (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\skc_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\HtlgdvpTqGiTOfnycOmfS0aD8So.png (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_ ra_n.png (679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\quote.dtd (900 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\RlCxSpz6nMOlD7d9slWYf-6j8Jw.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\money.dtd (530 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\geolocation\geolocation.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\sSvtvw1vSraqkkgdSjmCcyf7Nwo.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\tb\quote.xml (887 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_ ra_n.png (986 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_ ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_ ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\town (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\images\mail_128.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bl.png (927 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\route-form\images\form-close-hover.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-libs\sizzle.js.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\newtab.html (101 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\MaIoSE198uzo6p3SmzgF9C5DwGQ.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\quote\quotelist.dtd (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\fotki\fotki.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet\_music-nointernet.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_-sn_n.png (639 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\readability\applied.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\defaults.dtd (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_ sn_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-ui\b-spinner\images\45.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\FOLu1ETT62D1LNcU-3sIz9N1IeQ.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\ua (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\messages\images\spam.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\translator.dtd (350 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\town\townlist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\FwRhzXrrYgJtsGITD_YiU0Dtuk0.png (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\quote\gold_up.png (658 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_-sn_d.png (852 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\fg_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_ ra_n.png (986 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\KPnz247WBDVCwXmztn7XWxi1dqI.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\town\townlist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\moikrug.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\spam.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_-ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_-sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\skc_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\U0h5laCla0RWhXA2HIlO7izWrgg.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\userinfo\passport.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\fn7tv3d9HtkFU7iJjQKO1ayPMJo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\index.html.patch (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\chelper\chelper.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\0-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\RVzdJ9OJh0AWiuUZ2gi5Dwus4aw.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\6-16.png (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\vb-ru.2.18.0.5151.x64.delta.2.16.0.3147[1].zip (12433 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\La6qi18Z8LwgnZdsAr1qy1GwCwo.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\translator.dtd (336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\smJm5iFAtam9l7LrZUH-DhaLQH0.png (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\readability\sprite-readability.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\8mM517Xu-xUh_e_5YdDztnBFfxY.png (982 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\vb-ru[1].xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_gr.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\stardust64.dll (1964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\music.dtd (487 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\noflash\_music-noflash.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\jgFkBCE-RZAAZ9yPtanIQikHjO0.svg (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_ sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\A_A_8kwnWdRuEKSsINIh1KKRTPU.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\logo\logo.png (409 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-plus.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\mail\mail-menu.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\login.dtd (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\brand\ua\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\mail-logo-uk.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_ sn_d.png (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\7akVtjosFy0SIZK5kndXmRwXc6k.png.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\HHaZUbXWoxJcOwRCNSx4RcMW1wM.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_-ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\u6UuL0myn5QAc_jBy_VOr6h-fe4.svg (529 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\0.png (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\fg_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_ts_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_ra_n.png (676 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_-ra_n.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\menu\images\remove.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_common.ie9.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\7akVtjosFy0SIZK5kndXmRwXc6k.png (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\6qtB0Q9FVAmOWwOK3V5JVI5ojcI.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\SgutBd0LU4K_hlDET4mn_5dBTcw.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_d.png (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-ui\b-spinner\images\20-dark.gif.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\readability\applied.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\userinfo.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\elements-ru[1].xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\index.html (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\translator.dtd (350 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\yadisk.zip (900 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\money.dtd (362 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\Cs5BseJ6glqWdmXvSRCGh7Wzjo.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_n.png (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\M0l9QwOFqrxbai_uKwym7mnjg7s.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_gr.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\logo.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\lenta.messages.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\d38awltCX2VgnCb75FuAk7ypnNk.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\pagetranslator\loader.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\logo.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\5_YBT2TOn0eJAO4VlPA2e644YEY.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\money.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\readability (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_-sn_d.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\rZ9cub6wgvpWuc-F5gKU_pYGEfg.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\FIg7sp49R7Bbg3paJlGfzrP03rE.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_gr.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\translator.dtd (274 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_sn_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\0-16.png (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\mOgNznzQgwqm21KZjo3hk5YUGWU.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\spam.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\town\townlist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\skc_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_-sn.png (709 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\town\geobase.xml (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\fg_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\login.dtd (787 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\style.css (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\town\townlist.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_-ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\translator\translator.png (636 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\smJm5iFAtam9l7LrZUH-DhaLQH0.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\v6iQMoknRy8vcEf3ugJmQ-5wUIQ.png (192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\moikrug.dtd (810 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\RlCxSpz6nMOlD7d9slWYf-6j8Jw.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\login.dtd (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\readability\readability.js (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_-ra_d.png (798 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_sn_d-inverted.svg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\ggWlFuB9d-Zuqq9zOjCpTGRJxCM.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_-ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\sovetnik.zip (2513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\logo.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_-ra_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\h1oQ0mYlczivIuzRfLNbU7TkmWM.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\rZ9cub6wgvpWuc-F5gKU_pYGEfg.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\ic.dtd (876 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\ovc_gr.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\tb\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_ ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\8mM517Xu-xUh_e_5YdDztnBFfxY.png (982 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_common.ie9.css.patch (67 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\read.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\favicon.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_n.png (547 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\gold_down.png (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\lALn2ERV0sQzCaiJB-rdgHrL2JI.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\music.dtd (371 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\logo.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\5BIrw26AROzc9J3IurJFbak0Jro.gif (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_-ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\skc_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\login.xml (511 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_-ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\skc_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\geolocation.dtd (75 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\quote.dtd (708 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\O1O9BufqLBgcOuBVjcTEsQxoej0.png (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\ovc.png (397 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\dN3Z8lWVPQSY91sGfjNPrnMqwaE.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_ sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\geolocation.dtd (75 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_-sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\textonly.xml (405 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\userinfo.messages.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\skc_d.png (802 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\IeJDy6oBct5hJLx8v2axIJnqgJg.png (388 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\main-adapter.js (1960 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_-sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\bartab.dll.patch (551 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\mail\folder.png (441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\ovc_ ra.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\music.dtd (328 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\stock_up.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\quote\quotelist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\1.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\userinfo.dtd (581 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\moikrug.dtd (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\ui.js.patch (1176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\dN3Z8lWVPQSY91sGfjNPrnMqwaE.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\ua\translator\extrainfo.dtd (104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\ovc_ts_ra.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\geobase.xsl (377 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_d.png (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-libs\require.min.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-ra_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\1-16.png (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\mail.dtd (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\header\images\menu-open.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\town\geobase.xml (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_-sn_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_-sn_n.png (880 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\10-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\tb\town\townlinks.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_ ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_d.png (786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\ggWlFuB9d-Zuqq9zOjCpTGRJxCM.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\gray-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_ts_ra.png (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\ic\6.png (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\geolocation.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\4.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_ ra.png (369 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_sn_d.png (889 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\logo.dtd (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_ts_ra.png (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\pCHi2EbFGprgWW3mMpMtDX54NQM.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\geolocation.xml (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\Common\elements.exe.patch (1764 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\readability\sprite-readability.png.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\logo.messages.xml (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet\img\b-music-logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\town\townlist.dtd (83 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\userinfo\passport.dtd (189 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\mail\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_ra_d.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\textonly.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_-ra_d.png (823 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\chelper\chelper.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\ic.dtd (567 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\main-logic.js (706 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_sn_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\money.dtd (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\money\money.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\reply.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\skc_d-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\weather\gray-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\town\townlist.dtd (82 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\town\townlinks.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\n1rMK7Xj0goEMV7ryTTbeIMFKJo.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\cy.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\translator.xml (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\ovc_ ra.png (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\qC_PdL0Ak0WR8_18wFtdA2FwOf4.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\music.dtd (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\quote\export.dtd (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\header\images\menu-close.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_-ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\logo.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\translator.dtd (336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\ui\dayparts\images\opacity08.png (158 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\quote\quotelist.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\sSvtvw1vSraqkkgdSjmCcyf7Nwo.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\userinfo.dtd (519 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_ sn_n.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\music\music.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\pDyNDX-HZwcZsvKc7CchzqPMfjU.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_ts_ra.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\FwRhzXrrYgJtsGITD_YiU0Dtuk0.png (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\lALn2ERV0sQzCaiJB-rdgHrL2JI.png (643 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\town\townlist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\fg_n.png (494 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\messages\images\mail-logo-ru.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\currency_up.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\main-ui.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\translator\translator.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\quote.xml.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\FOLu1ETT62D1LNcU-3sIz9N1IeQ.png (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_ sn_d.png (850 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\ui\dayparts\images\opacity08.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\Vyyv32J6Ora9svqZCYF-XSVU4Zc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\M0l9QwOFqrxbai_uKwym7mnjg7s.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\mail\folder.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\D_bdPNqv6HJlssMZjqrlv7FqetY.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\common.dtd (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\SdPm0jvigN6hcrCoZYxpZ0cZ9JY.png (218 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\brand\ua\town\townlinks.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_gr.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\pagetranslator.xml (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_ra.png (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\geolocation.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\login.xml (511 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\quote_down.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_ra_n.png (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\translator.dtd (274 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ ra_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\music\play.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_ ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\login\auth.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\moikrug.dtd (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bl.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\pagetranslator.messages.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\quote.dtd (708 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\gDhz2dKv8qVaZ-NZ4RtfpEiqP2w.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\readability\readability.js.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\mail\mail-menu.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\fg_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\QZwxmXJnFKgedMKrAEej8n07z5k.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\FOLu1ETT62D1LNcU-3sIz9N1IeQ.png (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bl.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\MaIoSE198uzo6p3SmzgF9C5DwGQ.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\nointernet\img\b-music-logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_-ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\ovc_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\buttons\images\button-ball-dis.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\logindialog\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\quote.messages.xml (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\money.dtd (340 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\skc_n.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\mkfxKG5Ahs_33yt9pgsBXKbtnUo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\gray-16.png (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\offline-19.png (705 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_gr.png (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\pagetranslator\loader.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\J7daNOyAa24zy3Ir-wWKTeQNeuo.png (576 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\logo.dtd (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\buttons\images\button-ball-all.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\quote\quotelist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\ic.dtd (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\textonly.xml.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\bartab64.dll (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\readability\readability.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\favorites.xml (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\route-form\images\route-b.png (494 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\iG8q08OxQz2nkkl6BRGGlXFWtjU.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\route-form\images\route-a.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_ ra_n.png (679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\mail.dtd (715 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\yWSEQKZzite-8MoQ6YKWdObUP4E.png (151 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\main-logic.js (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\mjAIUH_QW6TPQtFga9ZLNIEY0lg.svg (719 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\pDyNDX-HZwcZsvKc7CchzqPMfjU.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\favicon.png (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\textonly.dtd (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\stardust64.dll (1858 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\7-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\ic\4.png (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\skc_d.png (896 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\userinfo.dtd (522 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\userinfo\passport.dtd (173 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\LnyndjXnnnf0-TBiILsn2xomtFE.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\A_A_8kwnWdRuEKSsINIh1KKRTPU.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\ovc_ sn.png (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\XMoIiA5FZyikn3LZNNAeV9CQDxk.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ sn_d-inverted.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\pX_YaGn4Yr_lAhpb7JdMwBPIaAY.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\3.png (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_-sn_n.png (639 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_ sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\common.dtd (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\ic\3.png (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\moikrug.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\quote\quotelist.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\skc_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\10-16.png (706 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\fg_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_ ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\fotki.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\route-form\images\form-close-hover.png (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\data.zip.patch (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\Cs5BseJ6glqWdmXvSRCGh7Wzjo.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\fg_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\quote.dtd (666 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\mail.dtd (735 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\_music-noflash.css.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\iFjn01ugU1GyG0iHwFsofKRnDeM.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\_music-noflash.ie.css.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\mail-logo-ru.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\nointernet\img\b-music-noinet.png (919 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_-ra_n.png (562 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\skc_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_-ra.png (635 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\fotki.dtd (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\userinfo.dtd (460 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\logo.dtd (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\data.zip (128885 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\_music-noflash.ie.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\tdmsMBtcvKXyb9p8ym5lfO3DXkQ.png (199 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\translator.dtd (249 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\favorites.xml (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_-sn_d.png (860 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\translator\extrainfo.dtd (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\userinfo.dtd (573 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\money.dtd (362 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\pagetranslator\langs.xml (365 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\stock_up.png (587 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\textonly.dtd (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barframe64.dll.patch (1412 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_ sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\ovc_gr.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\lenta.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\logo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\quote.dtd (900 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\mLXSAWhA--vCjoHGBhYVNaCqDLg.svg (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\mail\logo.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\MaIoSE198uzo6p3SmzgF9C5DwGQ.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\logo.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\town\geobase.xml (747 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_sn_d.svg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\style.css.patch (106 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\readability\readability-print.css.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\ua\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_ ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\3-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\2.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\8Tybci2Ic-b9EusnAqnwjdWOCYU.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\music.dtd (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet\img\b-music-noinet.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc.png (397 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\skc_d.png (634 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_n.png (569 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-sn_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_common.ie7.css (980 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\quote\quote.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_-sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\6.png (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\moikrug\moikrug.png (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\5-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\stock_down.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\rQyMR-dTD-QwlKU1_uHVI_6jnXw.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_ra_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\ovc_ sn.png (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\town.png (242 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\index.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\quote\quotelist.dtd (84 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\WHjFOxvA2An3CNqNgdI31oAB0sk.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\main-adapter.js.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\ic.dtd (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\OYPSMBgQcfcSMrYzBPOaVjHEDcE.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\geolocation.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\common.dtd (188 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\geobase.xsl.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\fg_n.png (386 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\ovc_ ra.png (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-ra_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_ ra_n.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ sn_d-inverted.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\SgutBd0LU4K_hlDET4mn_5dBTcw.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdial.dll.patch (2196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\Common\elements64.exe (1163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\geolocation.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_-sn_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_ sn.png (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\town (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\5.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_ sn_n.png (694 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\geolocation.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_ sn_n.png (671 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\ovc_ts_ra.png (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\basepackage.zip (800114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_n.png (547 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_ sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\8rm3VzQm1-ENXVTt0z7lr0UyMfI.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_-ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\WPY8f52_KOx1hza1XbGCi6umItk.png (376 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\mail\mail.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_ sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_ ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\ggWlFuB9d-Zuqq9zOjCpTGRJxCM.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\newtab.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-red.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\5_YBT2TOn0eJAO4VlPA2e644YEY.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\quote.dtd (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\messages\images\mail-logo-en.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_ts_ra.png (714 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\mv7_d3S--K8m-52iWzjEsPZHaA4.svg (986 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\readability\readability.css.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_-sn.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_ sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\quote\quotelist.dtd.patch (34 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\FzWyVFQkBJObPTziVE3nwUX-sFE.svg (148 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\Vyyv32J6Ora9svqZCYF-XSVU4Zc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\N8KgL5vlefdSVZld4rrAZOv6td0.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\hCvqPleRwNIKexdlpUBO-I_8Toc.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\cy.xml (641 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\offline-19.png (705 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\brand\ua\town\townlinks.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\jquery.js (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-libs\polyfills.js.patch (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\HtlgdvpTqGiTOfnycOmfS0aD8So.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\rQyMR-dTD-QwlKU1_uHVI_6jnXw.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\geolocation\geolocation.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\8DjdBETc_zk-FtrdVtsq91CY0kU.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_ ra_n.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\index.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\ua\translator\extrainfo.dtd (104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\pagetranslator.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_ ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\0-16.png (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ts_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\favicon.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\pagetranslator.messages.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\mail\mail.png (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\money.dtd (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_gr.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet\music-nointernet.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\cXyECx_vgE9llIxJCsRweD2uMuc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\skc_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\skc_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\userinfo\userinfolinks.dtd (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_ ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\moikrug.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\8DjdBETc_zk-FtrdVtsq91CY0kU.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\geolocation.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-ui\b-spinner\images\28.gif (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\ui\now\images\b-wind_arrow.png (179 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\pagetranslator\injector.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_-ra.png (470 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\weather\gray-16.png (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_-ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\money.dtd (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\D_bdPNqv6HJlssMZjqrlv7FqetY.png (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\ovc_-ra.png (470 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\route-form\images\route-b.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\iG8q08OxQz2nkkl6BRGGlXFWtjU.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\fg_d.png (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_common.css (1098 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\mail\mail.png (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\main-adapter.js.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_-sn.png (534 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\fg_d.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\PudDxssXdb8JdlcekuwRV8FSHVM.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\ui\now\images\b-wind_arrow.png (179 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_-ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\skc_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\userinfo.xml (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ sn_n-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\logo.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\B_GHi1n15TIonEBlfjSOiyj2Km4.svg (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\geolocation.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16 (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_n.png (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\quote\quotelist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\_1tfIBlbbO-sFZX3BSjgbsFLIaE.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\fg_d.png (665 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\main-ui.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\main-ui.js.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\qPLYva7Gqc4z8eRTw-G50C80M5w.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\1-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\skc_d.png (802 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_-ra_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_-ra.png (542 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\offline-19.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\translator.dtd (346 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\moikrug.dtd (818 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\ovc_ ra.png (369 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\newtab.html (101 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\ovc_-sn.png (395 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_-sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\skc_n.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\quote\quotelist.dtd (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\quote.dtd (674 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\town.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdial64.dll.patch (1923 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_-sn_n.png (880 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\cXyECx_vgE9llIxJCsRweD2uMuc.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\ua\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\KPnz247WBDVCwXmztn7XWxi1dqI.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\ui.js (472 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\fg_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\FEj0besueLlZr3fanjXLNpNvecA.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_-sn_d.png (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\index.html (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\textonly.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_ sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\ovc_sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barshims.dll (1961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\5-16.png (771 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\music\pause.png (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc.png (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\main-logic.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\money.dtd (580 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bl.png (927 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\header\images\mail-create.png (326 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\ua\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_ts_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\img\b-music-noflash.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\tb\quote\export.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\logo.dtd (140 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\fg_n.png (494 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\userinfo.dtd (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet\_music-nointernet.ie.css.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bl.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_-sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\main-ui.js (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\fg_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\menu\images\remove.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_-ra_d.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\login.dtd (787 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\pX_YaGn4Yr_lAhpb7JdMwBPIaAY.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-yellow.png (358 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\.manifest.mf.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\music.dtd (328 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\h1oQ0mYlczivIuzRfLNbU7TkmWM.png (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\geolocation.dtd (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_ ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\route-form\images\form-close.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_n.png (569 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\ovc_gr.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_-ra-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_-ra_n.png (846 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\YDmSge45ykmToGfqY4MTD1rQ3bw.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\mail-logo-ru.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\ic.dtd (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\buttons\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_ ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\ovc.png (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\common.dtd (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_-ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\.update.xml (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\fotki.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\PudDxssXdb8JdlcekuwRV8FSHVM.png (465 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\skc_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\noflash\music-noflash.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_ ra.png (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\town\townlist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\ic.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\mail\logo.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-ui\b-spinner\images\20.gif.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_-ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\J_kxuf5tD5_oT3zFsj_RdNpltno.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\oL9859A-5vIMHo11ArMir5KkeLc.png (316 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\money\money.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\geolocation.dtd (72 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bl.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet\_music-nointernet.css.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\cy.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\logo.xml (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_n.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\ic.dtd (567 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\main-adapter.js.patch (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bl.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\main-logic.js.patch (1176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\reply.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_ ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bl.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\require-config.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\WPY8f52_KOx1hza1XbGCi6umItk.png (376 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\mOgNznzQgwqm21KZjo3hk5YUGWU.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_ sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\quote\stock_up.png (587 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\A_A_8kwnWdRuEKSsINIh1KKRTPU.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_-sn_n.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\j6jpzsnwlO6IPc-YfB0sgdOJ3sE.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\money.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\logo\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\fg_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-ball-all.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\userinfo.dtd (533 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\route-form\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_sn.png (691 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\stardust64.dll.patch (903 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\quote.dtd (845 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\main-ui.js.patch (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ra.svg.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\favicon.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\pagetranslator\injector.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\gray-16.png (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet\img\b-music-logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\geolocation\geolocation.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_gr.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music.messages.xml (510 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\epVOh1xBimDwi8BSMFWMEy7gE6E.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\music.dtd (487 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\ovc_ sn.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\route-form\images\form-close-hover.png (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\pagetranslator\loader.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\pagetranslator\pagetranslator.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_-sn.png (395 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\3-16.png (773 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-libs\require.min.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_sn_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\money.dtd (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\rZ9cub6wgvpWuc-F5gKU_pYGEfg.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-libs\sizzle.js.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\mail.dtd (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\route-form\images\route-a.png (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\userinfo\passport.dtd.patch (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_-sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-red.png (348 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_sn_n.png (659 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\jgFkBCE-RZAAZ9yPtanIQikHjO0.svg (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\logo.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\quote\quotelist.xsl (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\auth_overlay.png (216 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\ua\mail\maillinks.dtd.patch (34 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\quote\stock_down.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\textonly.dtd (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\B2U5JTSkrM1iy2QyFZIn43s5WIw.svg.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_-ra.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\mail.dtd (735 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\skc_n.png (720 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\8-16.png (696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\quote\quotelist.dtd (84 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\geolocation.dtd (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\userinfo.dtd (515 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\translator\extrainfo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\quote\quotelist.xml (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\mail\folder.png (441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_ra_d.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\main-logic.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\town\geobase.xml (1647 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\RzYvI7d3s99rTwAZUd4u2BoyF-8.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music.xml (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\geolocation.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\music-noflash.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\fg_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\brand\ua\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-libs (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\ovc_gr.png (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ ra_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\moikrug.dtd (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\music.dtd (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_ra_n.png (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\fg_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\5_YBT2TOn0eJAO4VlPA2e644YEY.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\skc_d.png (896 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\FIg7sp49R7Bbg3paJlGfzrP03rE.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_-sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_-sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_-sn-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\logo.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\logo.dtd (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_common.ie9.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_-ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet\img (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\brand\ua\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\textonly.dtd (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\login\auth.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\main-logic.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\brand\ua\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\3-16.png (773 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\fotki\fotki.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\messages\images\reply.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\HAaHli8IySZ-JG5GCu6d1e_EhHY.png (180 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\ovc_ts_ra.png (714 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\quote.dtd (845 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_ra.png (360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\messages\images\mail-logo-uk.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\gold_up.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\common.dtd (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\temporary-files\{6AD73966-35A9-402E-8875-473DED2279F9} (76377 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_ ra_d.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\brand\ua\userinfo\userinfolinks.dtd (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\ovc_sn.png (691 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\ovc.png (298 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_ts_ra.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_ra_d.png (807 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_-sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\route-form\images\form-close.png (273 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\header\images\menu-close.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-ball-dis.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\6-16.png (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\pagetranslator\injector.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_ sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\favicon.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-ui\b-spinner\images\28.gif (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\ua\translator\extrainfo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_ sn.png (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_gr-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_-ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_ ra_d.png (777 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\ovc_-sn.png (534 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\pagetranslator.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_common.ie7.css (980 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\mail.dtd (715 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\ua\town\townlinks.dtd (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\quote.messages.xml (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\ovc_-ra.png (635 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\main-adapter.js (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialshims64.dll (1098 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\icons\logindialog\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\jquery.js.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_sn_d-inverted.svg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\userinfo\userinfolinks.dtd (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\bartab.dll (1047 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_ts_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\quote.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ sn_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\favicon.ico.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\fg_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\stardust.dll (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\common.dtd (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\Common\elements64.exe.patch (1843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\quote.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\main-ui.js (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_ra.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\route-form\images\button-route.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\fg_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\Z89ijsO17istBi7uzfluWEm_lBs.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_sn_n.png (662 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\town\geobase.xml (747 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\translator.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\quote.dtd (859 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\1.png (176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialshims64.dll.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\bGTLQ3lgAfg8aeK6thx3QUyAaP4.png (972 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\skc_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\30UGBquvFO2YEoZdzUGiTFKarLU.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\ua\userinfo\userinfolinks.dtd (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\quote\quotelist.dtd (87 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\ovc_sn.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\4-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\8rm3VzQm1-ENXVTt0z7lr0UyMfI.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\GYMNZu4TKhloYL739B8cACsR7AQ.svg (986 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_-ra_d.png (857 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\ovc_-ra.png (542 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\gDhz2dKv8qVaZ-NZ4RtfpEiqP2w.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\3y0kod-qSv8niHqiuf1Y0IxgVlU.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\J_kxuf5tD5_oT3zFsj_RdNpltno.svg (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\nointernet\_music-nointernet.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdial.dll (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\epVOh1xBimDwi8BSMFWMEy7gE6E.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ ra-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-sn_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\HtlgdvpTqGiTOfnycOmfS0aD8So.png (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_-sn_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\HuoOcff43SvB1OVXDmTAAXmFs0g.png (782 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_sn_d.svg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_sn.png (796 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\oL9859A-5vIMHo11ArMir5KkeLc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_sn_d.png (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town.messages.xml (865 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-route.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\header\images\mail-refresh.png (944 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\quote.xml (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-ui\b-spinner\images\20-dark.gif.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\music-noflash.html.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\skc_n.png (720 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\userinfo.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\userinfo.dtd.patch (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\money.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\messages\images\delete.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\iG8q08OxQz2nkkl6BRGGlXFWtjU.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\geolocation.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_ sn_n.png (694 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\logo.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\default.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\6-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\menu\images\remove.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\brand\ua\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\RMgCqWYYpM8hT-lQBStHX86s-sQ.png (929 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\ovc_ra.png (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\fg_d.png (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\quote.dtd (674 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\logo\logo.png (409 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\mail.dtd (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_sn-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\userinfo\userinfolinks.dtd (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\userinfo.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ts_ra-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\6qtB0Q9FVAmOWwOK3V5JVI5ojcI.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Common\elements64.exe.patch (1843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Common\elements64.exe (1163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\fg_d.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\_music-noflash.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\5-16.png (771 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_ ra_d.png (907 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\ovc_sn.png (796 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\moikrug.dtd (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\readability\applied.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\ua\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\music\music.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_-sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\ua\town\townlinks.dtd (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\town\townlinks.dtd (126 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\tUcYJofZiuqIDLQCePK0a5EQQbM.png (152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_-ra_n.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\8-16.png (696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_-sn_d.png (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\pagetranslator.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\textonly.dtd (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town.messages.xml (865 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-libs (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\fotki.dtd (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\moikrug\moikrug.png (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_sn_n.png (659 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\.update.xml (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\fg_d.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\currency_down.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\moikrug.dtd (818 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ sn-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\mail.dtd (541 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\common.dtd (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\RMgCqWYYpM8hT-lQBStHX86s-sQ.png (929 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\fotki.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\RMgCqWYYpM8hT-lQBStHX86s-sQ.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\header\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\quote\quote_down.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_ ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\fg_d.png (983 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\J_kxuf5tD5_oT3zFsj_RdNpltno.svg (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\f7-fSnZIoEUNKpSJWJW98kU5x9U.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\dN3Z8lWVPQSY91sGfjNPrnMqwaE.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\_1tfIBlbbO-sFZX3BSjgbsFLIaE.png (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\WHjFOxvA2An3CNqNgdI31oAB0sk.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\userinfo\userinfolinks.dtd (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\LnyndjXnnnf0-TBiILsn2xomtFE.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\translator\extrainfo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_gr-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\quote\quotelist.xsl (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_ ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\favicon.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\tfgMYzMit9gnbrINme1tVATR_Hw.png (158 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-minus.png (237 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\U0h5laCla0RWhXA2HIlO7izWrgg.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\quote\quotelist.dtd (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_-ra_d.png (798 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_-sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\pagetranslator\langs.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\8Tybci2Ic-b9EusnAqnwjdWOCYU.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\music.dtd (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\2-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\delete.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bl-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\FwRhzXrrYgJtsGITD_YiU0Dtuk0.png.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\ua\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\img\b-music-logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_ sn_n.png (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ts_ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\geolocation.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_sn_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\2-16.png (740 bytes)

The process %original file name%.exe:1372 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-AAB01.tmp\32ae6a225b45400b5695711fea8b1c8c.tmp (1609 bytes)

The process lite_installer.exe:2368 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{0D136A26-C947-4287-995F-53C965D35271}.exe (28086 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\lite_installer.exe.log (693 bytes)

The process lite_installer.exe:1996 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\lite_installer.exe.log (509 bytes)

The process 32ae6a225b45400b5695711fea8b1c8c.tmp:2132 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-8MR7L.tmp\_isetup\_shfoldr.dll (47 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advego Plagiatus\Advego Plagiatus.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-8MR7L.tmp\_isetup\_setup64.tmp (6 bytes)
%Program Files% (x86)\Advego Plagiatus\unins000.exe (819 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advego Plagiatus\Ãƒâ€žÃƒÂ¥ÃƒÂ¨ÃƒÂÃƒÂ±ÃƒÂ²ÃƒÂ ÃƒÂ«ÃƒÂ«ÃƒÂ¨ÃƒÂ°ÃƒÂ®ÃƒÂ¢ÃƒÂ ÃƒÂ²ÃƒÂ¼ Advego Plagiatus.lnk (1 bytes)
%Program Files% (x86)\Advego Plagiatus\unins000.dat (6768 bytes)
%Program Files% (x86)\Advego Plagiatus\plagiatus.exe (291 bytes)
%Program Files% (x86)\Advego Plagiatus\is-THL29.tmp (24822 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advego Plagiatus\Ãƒâ€˜ÃƒÂ ÃƒÂ©ÃƒÂ² Advego Plagiatus ÃƒÂ¢ ÃƒË†ÃƒÂÃƒÂ²ÃƒÂ¥ÃƒÂ°ÃƒÂÃƒÂ¥ÃƒÂ²ÃƒÂ¥.url (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-8MR7L.tmp\downloader.exe (673 bytes)
%Program Files% (x86)\Advego Plagiatus\is-6M45N.tmp (29529 bytes)

The process u2-ctrl.exe:2596 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\u2-ctrl.log (3869 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\bm\in_work_0.xml (795 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\bm\statistics.xml (6665 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\bm\appinfo.xml (11758 bytes)

The process u2-ctrl.exe:3616 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\u2-ctrl.log (1529 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\res (1 bytes)

The process yupdate-exec.exe:4008 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yabrowser\statistics.xml (278 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yupdate-exec-statistic.log (2445 bytes)

The process yupdate-exec.exe:3660 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\u2-exec-bm.log (5214 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\bm\appinfo.xml (2964 bytes)

The process yupdate-exec.exe:3376 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yupdate-exec-yabrowser.log (2845 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yabrowser\appinfo.xml (3492 bytes)

The process yupdate-exec.exe:4048 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yupdate-exec.log (11791 bytes)

The process yupdate-exec.exe:3124 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\u2-exec-statistic.log (2050 bytes)

The process yupdate-exec.exe:472 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\u2-exec-statistic.log (1309 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\bm\statistics.xml (278 bytes)

The process yupdate-exec.exe:3700 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yupdate-exec-statistic.log (9420 bytes)

The process yupdate-exec.exe:3312 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\u2-exec.log (1776 bytes)

The process yupdate-ctrl.exe:2596 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\praetorian\appinfo.xml (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\barie\statistics.xml (1095 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yupdate-ctrl.log (131958 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\vbie\statistics.xml (310 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\vbie\appinfo.xml (1622 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\barie\appinfo.xml (1997 bytes)

The process {0D136A26-C947-4287-995F-53C965D35271}.exe:2956 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BE432C2EE45E016635C9B13C029DA7E7 (391 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\clids.xml (267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\master_preferences (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Tar214.tmp (2712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BrandFile (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ybCF6E.tmp (87080 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Cab213.tmp (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 (656 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BE432C2EE45E016635C9B13C029DA7E7 (744 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\PartnerFile (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\lite_installer.log (24770 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\install[1].txt (4 bytes)

The process clidmgr.exe:3144 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\clids-yabrowser.xml (281 bytes)

The process ybCF6E.tmp:1688 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_D4D20.tmp\BRAND_YANDEX (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_D4D20.tmp\BRAND_UA-UK (691 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_D4D20.tmp\setup.exe (17754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_D4D20.tmp\BRAND_KZ (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_D4D20.tmp\BRAND_TB (435 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_D4D20.tmp\BRAND_INT (322 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_D4D20.tmp\SETUP.EX_ (396 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_D4D20.tmp\BRAND_BY (787 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_D4D20.tmp\BROWSER.PACKED.7Z (61755 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_D4D20.tmp\BRAND_UA-RU (811 bytes)

The process browser.exe:612 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\workers\workersConfigData.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\get_cookies.js (716 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\utils\logger.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\force_update_workers.js (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\workers\storage.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\messages\baseListener.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\messages\workersListener.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\messages\messagesHub.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\update_workers.js (669 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\watch_cookies.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\get_homepage_url.js (654 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\browser.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\utils\url.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\get_cookie.js (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\third_party\lodash.min.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\messages\RequestMessage.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\remove_cache_entry.js (713 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\messages\MessageSource.js (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\workers\config.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\utils\network.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\get_config_data.js (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\DECODED_MESSAGE_CATALOGS (348 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\main.js (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\messages\tabsListener.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\watch_idle.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\messages\Message.js (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\workers\supervisor.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\get_idle.js (638 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\messages\ResponseMessage.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\yandex.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\restart_worker.js (809 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\add_cache_entry.js (719 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\DECODED_IMAGES (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\manifest.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\utils\filesystem.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\messages\Notification.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\workers\storageUpdater.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\_locales\ru\messages.json (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\base\define.js (318 bytes)

The process browser.exe:3552 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\debug.log (121 bytes)

The process browser.exe:3212 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-48.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_frFHjzexYbcyeAv (1045 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\data_0 (845660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\data_1 (216464 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\data_2 (110200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\data_3 (15776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\.usage (1400 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\E4F6.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network Action Predictor (3946 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Tablo Cache\data_0 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Tablo Cache\data_1 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Tablo Cache\data_2 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Tablo Cache\data_3 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\24B3.tmp (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\ihhcdinmaceokcdmbddlclfejhadgpgg\0.2.1_0 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_aH06YhVV4RRPvWv (524 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\94AF.tmp (94 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Visited Links (3608 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\000003.log (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\000003.log (101527 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Extension Blacklist_new (11876 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\6EE2.tmp (5621 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000004 (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000005 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000006 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000007 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000000 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000001 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000002 (698 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000003 (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000008 (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network Action Predictor-journal (12878 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\000003.log (15446 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\000003.log (94 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\6B96.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Images_new (204 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\lhbpmoijjppjnkgelgdemkidbedaijhp\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\MANIFEST-000001 (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cookies-journal (22682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\FF55.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\MANIFEST-000002 (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\lhbpmoijjppjnkgelgdemkidbedaijhp\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\ja\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_RvyDWzKrvFYbw2h (75 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Cookies-journal (2799 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\XR9GAIZH4G5OW72YWOVT.temp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\plmneencfmbjfgbkfiinjelmngigejjh\0.8.9_0\main\platform\chrome\icons (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\000003.log (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Cookies (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\000003.log (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\000003.log (2054 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\index (368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Storage\chrome-extension_emghafiiokbjdgphaofindndbcicinae_0.localstorage-journal (28992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-64.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000017 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_vYAHAnaPLgrT6NR (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000015 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000014 (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Top Sites (1952 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000011 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\ja\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000019 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000018 (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_iVXU4gPTUdQfXC8 (140 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\6C81.tmp (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\cs\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\QuotaManager (6924 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\D097.tmp (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000027 (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000024 (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000022 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000023 (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000020 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000021 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\6F42.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Login Data (734 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_SSJp2l1JsDUhJCH (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\es\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Bloom_new (139868 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\manifest.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_GUXtrAN584oXg9W (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000016 (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\fr\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\pt_BR\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Yandex Download_new (204 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\37A7.tmp (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\6F41.tmp (106623 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Tablo Cache\index (368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000008 (37 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Resources\extension\bgeakjmfknncppbmgkkfbglnodccdecp\settings.json (1706 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_2NDRZ8OaOlNmUcq (465 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000013 (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000012 (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\ihhcdinmaceokcdmbddlclfejhadgpgg\0.2.1_0\scripts\app\handlers (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\22D1.tmp (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yabrowser\statistics.xml (2521 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000010 (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_JgileEHod7EdS7h (11965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\zh_CN\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Data (14121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\7D51.tmp (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\O8MGLTQXIW2RSBYNZ4KL.temp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Login Data-journal (576 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-48.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\00\00000001 (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\GPUCache\index (368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\README (166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\000003.log (96340 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\en\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\antishock-prod.crx (5873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\FBB.tmp (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\clids-yabrowser.xml (270 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\5862.tmp (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\History-journal (25708 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\tr\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\2541.tmp (80 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cookies (3666 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\000003.log (497 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Shortcuts (304 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-64.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_Jhc34ejLwish7wO (985 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\FF25.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\DD10.tmp (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\9F8A.tmp (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\000003.log (5068 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\6F41.tmp (6841 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Fraud_new (12236 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\de\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\zh_CN\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\DCDA.tmp (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_GefAsl1WJcBursj (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\pt_BR\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000028 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_HsvafBIbL5F34P2 (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\4E9A.tmp (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_xZStiLq9zKTvAWe (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000026 (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000003 (94 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\en\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\A2A6.tmp (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_bEOdf9gS7XvwsNo (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\plmneencfmbjfgbkfiinjelmngigejjh\0.8.9_0\_locales (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000025 (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\C319.tmp (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-128.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\AC6E.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\6037.tmp (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Favicons (4294 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\000003.log (21210 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Current Tabs (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\uk\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\4FFC.tmp (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yabrowser\appinfo.xml (9074 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\000003.log (621 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\plmneencfmbjfgbkfiinjelmngigejjh\0.8.9_0\main\platform\chrome (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\_locales\ru\messages.json (306 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\fr\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\zh_TW\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\pt\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Current Session (2084 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\History (20114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-128.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-16.png (375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\88AD.tmp (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\8C2.tmp (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\ru\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\00\00000000 (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000001 (32 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000009 (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\2540.tmp (152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\EDC2.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\4F5C.tmp (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\3E6E.tmp (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\_locales\ru\messages.json (306 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\C821.tmp (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\000003.log (41779 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Resources\extension\emghafiiokbjdgphaofindndbcicinae\skins.json (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Data-journal (6950 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\2ADD.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\History Provider Cache (486 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Storage\https_browser.yandex.ua_0.localstorage-journal (9647 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\manifest.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\tr\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\ihhcdinmaceokcdmbddlclfejhadgpgg\0.2.1_0\scripts\app\messages (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\000003.log (36797 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 (656 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Download_new (123036 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\1E36.tmp (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\.usage (5016 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-16.png (375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\2E9A.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\QuotaManager-journal (63725 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yupdate-exec-yabrowser.log (2913 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\lhbpmoijjppjnkgelgdemkidbedaijhp\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\000F7F8FAB2D96E6F8CBD5C9A3B4EC90 (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Top Sites-journal (6616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Storage\chrome-extension_emghafiiokbjdgphaofindndbcicinae_0.localstorage (7057 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\9433.tmp (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yabrowser\in_work_0.xml (504 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\GPUCache\data_3 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\GPUCache\data_2 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\GPUCache\data_1 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\GPUCache\data_0 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\zh_TW\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Bloom Prefix Set (1812 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\databases\Databases.db (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\plmneencfmbjfgbkfiinjelmngigejjh\0.8.9_0\main\platform\chrome\pages (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\.usage (24 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\lhbpmoijjppjnkgelgdemkidbedaijhp\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\lhbpmoijjppjnkgelgdemkidbedaijhp\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Shortcuts-journal (576 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\000F7F8FAB2D96E6F8CBD5C9A3B4EC90 (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_m9knxMytmGNSZCX (748 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Permanent State (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\de\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Resources\extension\emghafiiokbjdgphaofindndbcicinae\settings.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Favicons-journal (16064 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\databases\Databases.db-journal (576 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000002 (60 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\First Run (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\Yahelper.crx (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000006 (68 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000007 (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000004 (98 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000005 (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\pt\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\FF94.tmp (375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\2E0.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\es\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\6EE2.tmp (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_pQq8LwH2qaflhxj (530 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\72EB.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\it\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\cs\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Storage\https_browser.yandex.ua_0.localstorage (231 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_hEDDsgvUjTwDiWl (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\plmneencfmbjfgbkfiinjelmngigejjh\0.8.9_0 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\it\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\plmneencfmbjfgbkfiinjelmngigejjh\0.8.9_0\main\antishock\ui (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\F7B.tmp (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_acizRwikDl0bGvI (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\manifest.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\uk\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\9B7C.tmp (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\ru\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\manifest.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\MANIFEST-000002 (69 bytes)

The process browser.exe:3576 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\pages\log.html (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\pages\promo.html (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\background.js (17904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\manifest.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\es\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\.DS_Store (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\PromoPage\img\red_cross.png (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\common\defaults.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\PromoPage\img\trash.png (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\ListEditor\list_editor.xml (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\assessorContent.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\OptionsPage\options_page.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\content.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\pt_BR\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\assessorContent.css (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\fr\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\third_party\requirejs\require.js (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\ListEditor\img\remove.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\OptionsPage\options_page.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\DECODED_IMAGES (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\zh_CN\messages.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\en\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\ListEditor\list_editor.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\.DS_Store (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\PromoPage\promo_page.css (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\.DS_Store (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\third_party\.DS_Store (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\third_party\requirejs\.bower.json (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\PageOverlay\page_overlay.css (954 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\PromoPage\img\smile.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\pages\promo.js (6984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\de\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\pages\options.js (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\DECODED_MESSAGE_CATALOGS (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\LogPage\log_page.css (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\pages\options.html (459 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\pt\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-64.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\zh_TW\messages.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\PromoPage\img\notebook.png (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-16.png (292 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\updaterWorker.js (15904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\PageOverlay\page_overlay.xml (273 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\icons\complain-ad-16.png (214 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\it\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\PromoPage\img\layout.png (20800 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\PromoPage\promo_page.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\pages\log.js (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\cs\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\uk\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-48.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\ja\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\background.html (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\OptionsPage\img\logo-128.png (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\tr\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\ru\messages.json (4 bytes)

The process browser.exe:3520 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\utils\logger.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\DECODED_MESSAGE_CATALOGS (348 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\watch_cookies.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\messages\MessageSource.js (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\get_cookies.js (716 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\messages\baseListener.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\messages\Message.js (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\restart_worker.js (809 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\utils\url.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\manifest.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\yandex.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\_locales\ru\messages.json (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\utils\filesystem.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\workers\storage.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\force_update_workers.js (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\base\define.js (318 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\get_homepage_url.js (654 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\get_config_data.js (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\utils\network.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\add_cache_entry.js (719 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\remove_cache_entry.js (713 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\messages\RequestMessage.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\messages\messagesHub.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\messages\Notification.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\workers\workersConfigData.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\update_workers.js (669 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\workers\supervisor.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\third_party\lodash.min.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\messages\workersListener.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\messages\tabsListener.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\workers\config.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\main.js (305 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\get_idle.js (638 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\browser.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\messages\ResponseMessage.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\DECODED_IMAGES (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\get_cookie.js (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\watch_idle.js (1 bytes)

The process browser.exe:3536 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\PromoPage\img\trash.png (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-48.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\assessorContent.css (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\cs\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\PromoPage\img\layout.png (20800 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\OptionsPage\options_page.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\third_party\requirejs\.bower.json (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\tr\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\OptionsPage\img\logo-128.png (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\es\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-16.png (292 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\zh_CN\messages.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\pages\options.html (459 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\.DS_Store (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\pt_BR\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\third_party\requirejs\require.js (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\PromoPage\img\smile.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\DECODED_IMAGES (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\PageOverlay\page_overlay.xml (273 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\zh_TW\messages.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\pages\options.js (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\PageOverlay\page_overlay.css (954 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\pages\promo.html (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\assessorContent.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\background.js (17904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\pages\promo.js (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\ListEditor\list_editor.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\uk\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\ja\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\en\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\common\defaults.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\PromoPage\promo_page.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\de\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\fr\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\pt\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\pages\log.js (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-64.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\content.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\it\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\ListEditor\img\remove.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\ListEditor\list_editor.xml (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\ru\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\PromoPage\img\notebook.png (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\pages\log.html (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\background.html (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\DECODED_MESSAGE_CATALOGS (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\OptionsPage\options_page.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\manifest.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\PromoPage\promo_page.css (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\PromoPage\img\red_cross.png (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\icons\complain-ad-16.png (214 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\LogPage\log_page.css (217 bytes)

The process browser.exe:3316 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\FAP24DE.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#yastatic.net\settings.sxx (199 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\NCFMWW34\yastatic.net\yb.sxx (88 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx (10576 bytes)

Registry activity

The process BrowserManager.exe:3556 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories\{56FFCC30-D398-11D0-B2AE-00A0C908FA49}\Enum]
"Implementing" = "1C 00 00 00 01 00 00 00 DF 07 04 00 06 00 19 00"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"Browser Manager" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManager.exe"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process MSI23E3.tmp:3192 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "9E 5E CB 91 18 7F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@%SystemRoot%\system32]
"dnsapi.dll,-103" = "Domain Name System (DNS) Server Trust"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@%SystemRoot%\system32]
"p2pcollab.dll,-8042" = "Peer to Peer Trust"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 47 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process Yandex.exe:2956 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@%Program Files%\Common Files\Microsoft Shared\Ink]
"mip.exe,-291" = "Math Input Panel"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@%Program Files%\Windows Sidebar]
"sidebar.exe,-1005" = "Desktop Gadget Gallery"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"Favorites" = "00 7C 01 00 00 14 00 1F 80 C8 27 34 1F 10 5C 10"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@C:\Windows\system32]
"mblctr.exe,-1008" = "Windows Mobility Center"
"msinfo32.exe,-100" = "System Information"
"SNTSearch.dll,-505" = "Sticky Notes"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@%Program Files%\Common Files\Microsoft Shared\Ink]
"TipTsf.dll,-80" = "Tablet PC Input Panel"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@C:\Windows\system32\Speech\SpeechUX]
"sapi.cpl,-5555" = "Windows Speech Recognition"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@C:\Windows\system32]
"MdSched.exe,-4001" = "Windows Memory Diagnostic"
"WindowsAnytimeUpgradeUI.exe,-1" = "Windows Anytime Upgrade"
"msconfig.exe,-126" = "System Configuration"
"recdisc.exe,-2000" = "Create a System Repair Disc"
"SoundRecorder.exe,-100" = "Sound Recorder"
"odbcint.dll,-1310" = "Data Sources (ODBC)"
"wdc.dll,-10030" = "Resource Monitor"
"miguiresource.dll,-101" = "Event Viewer"
"FXSRESM.dll,-114" = "Windows Fax and Scan"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesVersion" = "2"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@C:\Windows\system32]
"mycomput.dll,-300" = "Computer Management"
"dfrgui.exe,-103" = "Disk Defragmenter"
"ie4uinit.exe,-737" = "Internet Explorer (No Add-ons)"
"sud.dll,-1" = "Default Programs"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@C:\Windows\system32\migwiz]
"wet.dll,-591" = "Windows Easy Transfer Reports"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@C:\Windows\system32]
"NetProjW.dll,-501" = "Connect to a Network Projector"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@%Program Files%\Common Files\Microsoft Shared\Ink]
"ShapeCollector.exe,-298" = "Personalize Handwriting Recognition"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@C:\Windows\system32]
"comres.dll,-3410" = "Component Services"
"AccessibilityCpl.dll,-10" = "Ease of Access Center"
"OobeFldr.dll,-33056" = "Getting Started"
"AuthFWGP.dll,-20" = "Windows Firewall with Advanced Security"
"XpsRchVw.exe,-102" = "XPS Viewer"
"filemgmt.dll,-2204" = "Services"
"wsecedit.dll,-718" = "Local Security Policy"
"mstsc.exe,-4000" = "Remote Desktop Connection"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@C:\Windows\system32\WindowsPowerShell\v1.0]
"powershell.exe,-101" = "Windows PowerShell ISE"
"powershell.exe,-102" = "Windows PowerShell ISE (x86)"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@C:\Windows\system32]
"gameux.dll,-10082" = "Games Explorer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesChanges" = "9"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@C:\Windows\system32]
"SnippingTool.exe,-15051" = "Snipping Tool"
"iscsicpl.dll,-5001" = "iSCSI Initiator"
"rstrui.exe,-100" = "System Restore"
"msra.exe,-100" = "Windows Remote Assistance"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@%Program Files%\Windows Journal]
"Journal.exe,-3074" = "Windows Journal"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesResolve" = "CC 02 00 00 4C 00 00 00 01 14 02 00 00 00 00 00"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@C:\Windows\system32]
"wdc.dll,-10021" = "Performance Monitor"
"pmcsnap.dll,-700" = "Print Management"
"sdcpl.dll,-101" = "Backup and Restore"
"miguiresource.dll,-201" = "Task Scheduler"
"displayswitch.exe,-320" = "Connect to a Projector"
"wucltux.dll,-1" = "Windows Update"
"SyncCenter.dll,-3000" = "Sync Center"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@C:\Windows\system32\migwiz]
"wet.dll,-588" = "Windows Easy Transfer"

The process plagiatus.exe:2920 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "25 CC 85 1E BF 72 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"
"WpadDecisionTime" = "CD BB 95 86 18 7F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 44 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Advego\Plagiatus\1.3]
"TempFileName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process YandexPackSetup.exe:1900 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer]
"GlobalAssocChangedCounter" = "35"

The process YandexPackSetup.exe:3380 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{12f34aee-538c-44d5-b33a-12213b7e0197}]
"EstimatedSize" = "13557"
"BundleVersion" = "2.1.2.577"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{12f34aee-538c-44d5-b33a-12213b7e0197}]
"DisplayIcon" = "C:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerInstaller.exe,0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer]
"GlobalAssocChangedCounter" = "39"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{12f34aee-538c-44d5-b33a-12213b7e0197}]
"HelpLink" = "http://help.yandex.ru/bm/"

"BundleAddonCode" = "Type: REG_MULTI_SZ, Length: 0"
"EngineVersion" = "3.8.2029.0"
"DisplayVersion" = "2.1.2.577"
"URLInfoAbout" = "bm.yandex.ru"
"ModifyPath" = "C:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerInstaller.exe /modify"
"Publisher" = "ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â"
"QuietUninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerInstaller.exe /uninstall /quiet"

[HKCU\Software\Classes\Installer\Dependencies\{12f34aee-538c-44d5-b33a-12213b7e0197}]
"Version" = "2.1.2.577"
"(Default)" = "{12f34aee-538c-44d5-b33a-12213b7e0197}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{12f34aee-538c-44d5-b33a-12213b7e0197}]
"NoElevateOnModify" = "1"
"BundleCachePath" = "C:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerInstaller.exe"
"BundleProviderKey" = "{12f34aee-538c-44d5-b33a-12213b7e0197}"
"BundleUpgradeCode" = "{CEADE967-2D56-4D80-A02E-CD3D762C0A3D}"
"DisplayName" = "ÃÅ“ÃÂµÃÂ½ÃÂµÃÂ´ÃÂ¶ÃÂµÃ‘â‚¬ ÃÂ±Ã‘â‚¬ÃÂ°Ã‘Æ’ÃÂ·ÃÂµÃ‘â‚¬ÃÂ¾ÃÂ²"
"Resume" = "1"
"URLUpdateInfo" = "bm.yandex.ru"
"Installed" = "1"
"BundleDetectCode" = "Type: REG_MULTI_SZ, Length: 0"
"BundlePatchCode" = "Type: REG_MULTI_SZ, Length: 0"
"BundleTag" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Classes\Installer\Dependencies\{FD5B5C38-B794-4459-9333-875A9987DA66}]
"Version" = "2.1.2.577"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{12f34aee-538c-44d5-b33a-12213b7e0197}]
"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerInstaller.exe /uninstall"

[HKCU\Software\Classes\Installer\Dependencies\{FD5B5C38-B794-4459-9333-875A9987DA66}]
"DisplayName" = "ÃÅ“ÃÂµÃÂ½ÃÂµÃÂ´ÃÂ¶ÃÂµÃ‘â‚¬ ÃÂ±Ã‘â‚¬ÃÂ°Ã‘Æ’ÃÂ·ÃÂµÃ‘â‚¬ÃÂ¾ÃÂ²"

[HKCU\Software\Classes\Installer\Dependencies\{12f34aee-538c-44d5-b33a-12213b7e0197}]
"DisplayName" = "ÃÅ“ÃÂµÃÂ½ÃÂµÃÂ´ÃÂ¶ÃÂµÃ‘â‚¬ ÃÂ±Ã‘â‚¬ÃÂ°Ã‘Æ’ÃÂ·ÃÂµÃ‘â‚¬ÃÂ¾ÃÂ²"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"{12f34aee-538c-44d5-b33a-12213b7e0197}" = "C:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerInstaller.exe /quiet /burn.log.append C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ÃÅ“ÃÂµÃÂ½ÃÂµÃÂ´ÃÂ¶ÃÂµÃ‘â‚¬_ÃÂ±Ã‘â‚¬ÃÂ°Ã‘Æ’ÃÂ·ÃÂµÃ‘â‚¬ÃÂ¾ÃÂ²_20150425082803.log /burn.runonce"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Classes\Installer\Dependencies\{FD5B5C38-B794-4459-9333-875A9987DA66}\Dependents\{12f34aee-538c-44d5-b33a-12213b7e0197}]
"MaxVersion"

"MinVersion"

[HKCU\Software\Classes\Installer\Dependencies\{12f34aee-538c-44d5-b33a-12213b7e0197}\Dependents\{12f34aee-538c-44d5-b33a-12213b7e0197}]
"MinVersion"
"MaxVersion"

The Trojan disables automatic startup of the application by deleting the following autorun value:

[HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"{12f34aee-538c-44d5-b33a-12213b7e0197}"

The process BrowserManagerShow.exe:3668 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3A8F03C1-E21D-49A9-A108-F708477EFB7B}]
"Policy" = "3"

[HKCU\Software\Classes\Wow6432Node\Interface\{CCF7256C-B9E9-4632-8DB8-EC44D7CE8BB8}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\m3com.CoBrowser\CurVer]
"(Default)" = "m3com.CoBrowser.1"

[HKCR\m3com.CoChange.1\CLSID]
"(Default)" = "{92FDEF05-B35E-4806-B87F-8B66AB649997}"

[HKCR\AppID\{9989EAE6-D057-4072-8BD2-1C33DED64A34}]
"(Default)" = "m3com"

[HKCU\Software\Classes\Wow6432Node\Interface\{1332C988-6548-4F21-B4A3-A6F7BA47F57E}]
"(Default)" = "IExtension"

[HKCR\m3com.YandexBrowser\CLSID]
"(Default)" = "{AD4409E5-23C2-412B-849D-8FC0635B4073}"

[HKCU\Software\Classes\Interface\{4649205D-F063-454D-A508-64757E93CE16}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\TypeLib\{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}\1.0\HELPDIR]
"(Default)" = ""

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3A8F03C1-E21D-49A9-A108-F708477EFB7B}]
"AppName" = "BrowserManagerShow.exe"

[HKCU\Software\Classes\Wow6432Node\Interface\{09DEC95B-ED9E-4448-AE54-35D0F758464E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\m3com.CoCtrl.1\CLSID]
"(Default)" = "{DD20920E-515A-4342-85E3-FC9A9FDA55C2}"

[HKCR\m3com.YandexBrowser.1\CLSID]
"(Default)" = "{AD4409E5-23C2-412B-849D-8FC0635B4073}"

[HKCU\Software\Classes\Interface\{09DEC95B-ED9E-4448-AE54-35D0F758464E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{1332C988-6548-4F21-B4A3-A6F7BA47F57E}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\m3com.CoBrowser\CLSID]
"(Default)" = "{A8BD93E8-F6AE-4F02-828D-DE47FEC4D375}"

[HKCR\Wow6432Node\CLSID\{9F0BF664-B611-4C53-AEEA-FDBFCE6E3CA3}\ProgID]
"(Default)" = "m3com.CoSearch.1"

[HKCR\m3com.CoBrowser.1]
"(Default)" = "CoBrowser Class"

[HKCR\Wow6432Node\CLSID\{AEE9D70C-6C9E-4B27-9F2C-8F14E95BEEF6}\LocalServer32]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe"

[HKCU\Software\Classes\Wow6432Node\Interface\{1332C988-6548-4F21-B4A3-A6F7BA47F57E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4ECE211A-8310-4672-A5DF-C62EE00D5464}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\m3com.YandexBrowser.1]
"(Default)" = "YandexBrowser Class"

[HKCU\Software\Classes\Wow6432Node\Interface\{1332C988-6548-4F21-B4A3-A6F7BA47F57E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4649205D-F063-454D-A508-64757E93CE16}]
"(Default)" = "ISearch"

[HKCR\m3com.CoSearch\CLSID]
"(Default)" = "{9F0BF664-B611-4C53-AEEA-FDBFCE6E3CA3}"

[HKCU\Software\Classes\Interface\{C1E23796-5CC8-4333-8976-E5EF32364F18}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\Wow6432Node\CLSID\{A8BD93E8-F6AE-4F02-828D-DE47FEC4D375}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C1E23796-5CC8-4333-8976-E5EF32364F18}\TypeLib]
"Version" = "1.0"

[HKCR\m3com.CoSearch.1\CLSID]
"(Default)" = "{9F0BF664-B611-4C53-AEEA-FDBFCE6E3CA3}"

[HKCR\m3com.CoBrowser]
"(Default)" = "CoBrowser Class"

[HKCR\Wow6432Node\CLSID\{AD4409E5-23C2-412B-849D-8FC0635B4073}\ProgID]
"(Default)" = "m3com.YandexBrowser.1"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy]
"Dummy" = "11"

[HKCR\Wow6432Node\CLSID\{AD4409E5-23C2-412B-849D-8FC0635B4073}\VersionIndependentProgID]
"(Default)" = "m3com.YandexBrowser"

[HKCR\Wow6432Node\CLSID\{86002F38-B7C3-48C2-AEFD-6BC409D250F7}\VersionIndependentProgID]
"(Default)" = "m3com.CoExtension"

[HKCU\Software\Classes\Wow6432Node\Interface\{6822DB22-B345-4984-B046-99DB9116609D}]
"(Default)" = "IYandexBrowser"

[HKCU\Software\Classes\Wow6432Node\Interface\{4649205D-F063-454D-A508-64757E93CE16}]
"(Default)" = "ISearch"

[HKCR\Wow6432Node\CLSID\{AEE9D70C-6C9E-4B27-9F2C-8F14E95BEEF6}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\m3com.CoLocale\CLSID]
"(Default)" = "{AEE9D70C-6C9E-4B27-9F2C-8F14E95BEEF6}"

[HKCR\Wow6432Node\CLSID\{A8BD93E8-F6AE-4F02-828D-DE47FEC4D375}]
"(Default)" = "CoBrowser Class"

[HKCR\m3com.CoSearch\CurVer]
"(Default)" = "m3com.CoSearch.1"

[HKCR\Wow6432Node\CLSID\{9F0BF664-B611-4C53-AEEA-FDBFCE6E3CA3}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C1E23796-5CC8-4333-8976-E5EF32364F18}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4ECE211A-8310-4672-A5DF-C62EE00D5464}\TypeLib]
"Version" = "1.0"

[HKCR\m3com.CoCtrl\CLSID]
"(Default)" = "{DD20920E-515A-4342-85E3-FC9A9FDA55C2}"

[HKCU\Software\Classes\Interface\{4ECE211A-8310-4672-A5DF-C62EE00D5464}]
"(Default)" = "ICtrl"

[HKCU\Software\Classes\Interface\{1332C988-6548-4F21-B4A3-A6F7BA47F57E}]
"(Default)" = "IExtension"

[HKCR\Wow6432Node\CLSID\{AD4409E5-23C2-412B-849D-8FC0635B4073}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\Wow6432Node\CLSID\{DD20920E-515A-4342-85E3-FC9A9FDA55C2}\VersionIndependentProgID]
"(Default)" = "m3com.CoCtrl"

[HKCR\Wow6432Node\CLSID\{AD4409E5-23C2-412B-849D-8FC0635B4073}]
"(Default)" = "YandexBrowser Class"

[HKCR\Wow6432Node\CLSID\{86002F38-B7C3-48C2-AEFD-6BC409D250F7}]
"(Default)" = "CoExtension Class"

[HKCR\m3com.CoExtension\CLSID]
"(Default)" = "{86002F38-B7C3-48C2-AEFD-6BC409D250F7}"

[HKCR\AppID\m3com.EXE]
"AppID" = "{9989EAE6-D057-4072-8BD2-1C33DED64A34}"

[HKCR\Wow6432Node\CLSID\{DD20920E-515A-4342-85E3-FC9A9FDA55C2}]
"AppID" = "{9989EAE6-D057-4072-8BD2-1C33DED64A34}"

[HKCU\Software\Classes\Interface\{4ECE211A-8310-4672-A5DF-C62EE00D5464}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{09DEC95B-ED9E-4448-AE54-35D0F758464E}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\Wow6432Node\CLSID\{86002F38-B7C3-48C2-AEFD-6BC409D250F7}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\Wow6432Node\CLSID\{92FDEF05-B35E-4806-B87F-8B66AB649997}\VersionIndependentProgID]
"(Default)" = "m3com.CoChange"

[HKCU\Software\Classes\Interface\{1332C988-6548-4F21-B4A3-A6F7BA47F57E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{6822DB22-B345-4984-B046-99DB9116609D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{CCF7256C-B9E9-4632-8DB8-EC44D7CE8BB8}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4ECE211A-8310-4672-A5DF-C62EE00D5464}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\m3com.CoBrowser.1\CLSID]
"(Default)" = "{A8BD93E8-F6AE-4F02-828D-DE47FEC4D375}"

[HKCR\m3com.CoSearch]
"(Default)" = "CoSearch Class"

[HKCR\m3com.CoExtension\CurVer]
"(Default)" = "m3com.CoExtension.1"

[HKCU\Software\Classes\Wow6432Node\Interface\{4ECE211A-8310-4672-A5DF-C62EE00D5464}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\Wow6432Node\CLSID\{A8BD93E8-F6AE-4F02-828D-DE47FEC4D375}]
"AppID" = "{9989EAE6-D057-4072-8BD2-1C33DED64A34}"

[HKCR\Wow6432Node\CLSID\{AEE9D70C-6C9E-4B27-9F2C-8F14E95BEEF6}\VersionIndependentProgID]
"(Default)" = "m3com.CoLocale"

[HKCR\Wow6432Node\CLSID\{92FDEF05-B35E-4806-B87F-8B66AB649997}]
"(Default)" = "CoChange Class"

[HKCU\Software\Classes\TypeLib\{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}\1.0\FLAGS]
"(Default)" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3A8F03C1-E21D-49A9-A108-F708477EFB7B}]
"AppPath" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager"

[HKCU\Software\Classes\Interface\{C1E23796-5CC8-4333-8976-E5EF32364F18}\TypeLib]
"Version" = "1.0"

[HKCR\m3com.CoCtrl]
"(Default)" = "CoCtrl Class"

[HKCR\Wow6432Node\CLSID\{9F0BF664-B611-4C53-AEEA-FDBFCE6E3CA3}]
"AppID" = "{9989EAE6-D057-4072-8BD2-1C33DED64A34}"

[HKCR\Wow6432Node\CLSID\{DD20920E-515A-4342-85E3-FC9A9FDA55C2}]
"(Default)" = "CoCtrl Class"

[HKCR\m3com.CoLocale.1]
"(Default)" = "CoLocale Class"

[HKCU\Software\Classes\Interface\{6822DB22-B345-4984-B046-99DB9116609D}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\m3com.CoLocale]
"(Default)" = "CoLocale Class"

[HKCR\Wow6432Node\CLSID\{92FDEF05-B35E-4806-B87F-8B66AB649997}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCU\Software\Classes\Wow6432Node\Interface\{6822DB22-B345-4984-B046-99DB9116609D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{6822DB22-B345-4984-B046-99DB9116609D}]
"(Default)" = "IYandexBrowser"

[HKCR\m3com.YandexBrowser]
"(Default)" = "YandexBrowser Class"

[HKCU\Software\Classes\Interface\{4649205D-F063-454D-A508-64757E93CE16}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\Wow6432Node\CLSID\{AD4409E5-23C2-412B-849D-8FC0635B4073}]
"AppID" = "{9989EAE6-D057-4072-8BD2-1C33DED64A34}"

[HKCU\Software\Classes\Interface\{09DEC95B-ED9E-4448-AE54-35D0F758464E}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\m3com.CoExtension]
"(Default)" = "CoExtension Class"

[HKCU\Software\Classes\Wow6432Node\Interface\{CCF7256C-B9E9-4632-8DB8-EC44D7CE8BB8}]
"(Default)" = "IChange"

[HKCU\Software\Classes\Wow6432Node\Interface\{4649205D-F063-454D-A508-64757E93CE16}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{09DEC95B-ED9E-4448-AE54-35D0F758464E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{09DEC95B-ED9E-4448-AE54-35D0F758464E}]
"(Default)" = "IBrowser"

[HKCU\Software\Classes\Wow6432Node\Interface\{09DEC95B-ED9E-4448-AE54-35D0F758464E}\TypeLib]
"Version" = "1.0"

[HKCR\Wow6432Node\CLSID\{DD20920E-515A-4342-85E3-FC9A9FDA55C2}\ProgID]
"(Default)" = "m3com.CoCtrl.1"

[HKCU\Software\Classes\Wow6432Node\Interface\{C1E23796-5CC8-4333-8976-E5EF32364F18}]
"(Default)" = "ILocale"

[HKCU\Software\Classes\Wow6432Node\Interface\{CCF7256C-B9E9-4632-8DB8-EC44D7CE8BB8}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C1E23796-5CC8-4333-8976-E5EF32364F18}]
"(Default)" = "ILocale"

[HKCU\Software\Classes\Wow6432Node\Interface\{4649205D-F063-454D-A508-64757E93CE16}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\TypeLib\{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}\1.0\0\win32]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe"

[HKCR\Wow6432Node\CLSID\{92FDEF05-B35E-4806-B87F-8B66AB649997}\LocalServer32]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe"

[HKCR\m3com.CoExtension.1\CLSID]
"(Default)" = "{86002F38-B7C3-48C2-AEFD-6BC409D250F7}"

[HKCR\m3com.CoCtrl\CurVer]
"(Default)" = "m3com.CoCtrl.1"

[HKCU\Software\Classes\Wow6432Node\Interface\{6822DB22-B345-4984-B046-99DB9116609D}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\m3com.CoChange.1]
"(Default)" = "CoChange Class"

[HKCR\Wow6432Node\CLSID\{92FDEF05-B35E-4806-B87F-8B66AB649997}\ProgID]
"(Default)" = "m3com.CoChange.1"

[HKCR\Wow6432Node\CLSID\{9F0BF664-B611-4C53-AEEA-FDBFCE6E3CA3}\VersionIndependentProgID]
"(Default)" = "m3com.CoSearch"

[HKCU\Software\Classes\Interface\{CCF7256C-B9E9-4632-8DB8-EC44D7CE8BB8}\TypeLib]
"Version" = "1.0"
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\m3com.CoExtension.1]
"(Default)" = "CoExtension Class"

[HKCR\Wow6432Node\CLSID\{9F0BF664-B611-4C53-AEEA-FDBFCE6E3CA3}\LocalServer32]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe"

[HKCR\Wow6432Node\CLSID\{DD20920E-515A-4342-85E3-FC9A9FDA55C2}\LocalServer32]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe"

[HKCU\Software\Classes\Wow6432Node\Interface\{CCF7256C-B9E9-4632-8DB8-EC44D7CE8BB8}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{9F0BF664-B611-4C53-AEEA-FDBFCE6E3CA3}]
"(Default)" = "CoSearch Class"

[HKCR\Wow6432Node\CLSID\{A8BD93E8-F6AE-4F02-828D-DE47FEC4D375}\LocalServer32]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe"

[HKCU\Software\Classes\Wow6432Node\Interface\{4649205D-F063-454D-A508-64757E93CE16}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\Wow6432Node\CLSID\{AD4409E5-23C2-412B-849D-8FC0635B4073}\LocalServer32]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe"

[HKCR\Wow6432Node\CLSID\{86002F38-B7C3-48C2-AEFD-6BC409D250F7}\LocalServer32]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe"

[HKCU\Software\Classes\Interface\{C1E23796-5CC8-4333-8976-E5EF32364F18}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{1332C988-6548-4F21-B4A3-A6F7BA47F57E}\TypeLib]
"Version" = "1.0"

[HKCR\Wow6432Node\CLSID\{92FDEF05-B35E-4806-B87F-8B66AB649997}]
"AppID" = "{9989EAE6-D057-4072-8BD2-1C33DED64A34}"

[HKCR\m3com.CoLocale.1\CLSID]
"(Default)" = "{AEE9D70C-6C9E-4B27-9F2C-8F14E95BEEF6}"

[HKCU\Software\Classes\Wow6432Node\Interface\{09DEC95B-ED9E-4448-AE54-35D0F758464E}]
"(Default)" = "IBrowser"

[HKCU\Software\Classes\Interface\{4ECE211A-8310-4672-A5DF-C62EE00D5464}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{CCF7256C-B9E9-4632-8DB8-EC44D7CE8BB8}]
"(Default)" = "IChange"

[HKCR\m3com.CoLocale\CurVer]
"(Default)" = "m3com.CoLocale.1"

[HKCU\Software\Classes\Wow6432Node\Interface\{6822DB22-B345-4984-B046-99DB9116609D}\TypeLib]
"Version" = "1.0"

[HKCR\Wow6432Node\CLSID\{A8BD93E8-F6AE-4F02-828D-DE47FEC4D375}\ProgID]
"(Default)" = "m3com.CoBrowser.1"

[HKCR\m3com.CoChange]
"(Default)" = "CoChange Class"

[HKCR\Wow6432Node\CLSID\{86002F38-B7C3-48C2-AEFD-6BC409D250F7}]
"AppID" = "{9989EAE6-D057-4072-8BD2-1C33DED64A34}"

[HKCR\m3com.CoCtrl.1]
"(Default)" = "CoCtrl Class"

[HKCR\m3com.CoSearch.1]
"(Default)" = "CoSearch Class"

[HKCR\Wow6432Node\CLSID\{A8BD93E8-F6AE-4F02-828D-DE47FEC4D375}\VersionIndependentProgID]
"(Default)" = "m3com.CoBrowser"

[HKCU\Software\Classes\Interface\{6822DB22-B345-4984-B046-99DB9116609D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C1E23796-5CC8-4333-8976-E5EF32364F18}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\Wow6432Node\CLSID\{AEE9D70C-6C9E-4B27-9F2C-8F14E95BEEF6}]
"AppID" = "{9989EAE6-D057-4072-8BD2-1C33DED64A34}"

[HKCU\Software\Classes\TypeLib\{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}\1.0]
"(Default)" = "m3com 1.0 Type Library"

[HKCR\Wow6432Node\CLSID\{DD20920E-515A-4342-85E3-FC9A9FDA55C2}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4ECE211A-8310-4672-A5DF-C62EE00D5464}]
"(Default)" = "ICtrl"

[HKCU\Software\Classes\Wow6432Node\Interface\{1332C988-6548-4F21-B4A3-A6F7BA47F57E}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\Wow6432Node\CLSID\{AEE9D70C-6C9E-4B27-9F2C-8F14E95BEEF6}\ProgID]
"(Default)" = "m3com.CoLocale.1"

[HKCR\m3com.CoChange\CLSID]
"(Default)" = "{92FDEF05-B35E-4806-B87F-8B66AB649997}"

[HKCU\Software\Classes\Interface\{4649205D-F063-454D-A508-64757E93CE16}\TypeLib]
"Version" = "1.0"

[HKCR\Wow6432Node\CLSID\{AEE9D70C-6C9E-4B27-9F2C-8F14E95BEEF6}]
"(Default)" = "CoLocale Class"

[HKCR\Wow6432Node\CLSID\{86002F38-B7C3-48C2-AEFD-6BC409D250F7}\ProgID]
"(Default)" = "m3com.CoExtension.1"

[HKCR\m3com.YandexBrowser\CurVer]
"(Default)" = "m3com.YandexBrowser.1"

[HKCR\m3com.CoChange\CurVer]
"(Default)" = "m3com.CoChange.1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy]
"dummy"

The process downloader.exe:612 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "25 CC 85 1E BF 72 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"
"WpadDecisionTime" = "A8 81 68 86 18 7F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 43 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process rundll32.exe:3188 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB]
"InstallResult" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Branding]
"PackageLocation" = "{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Statistic\Clids]
"Clid20" = "2162082"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\AppDataLow\Software\Yandex\Toolbar\Settings]
"Fastdial" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB]
"migrateFromBar" = "1"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@C:\Windows\system32]
"MCTRes.dll,-200005" = "Websites for United States"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Statistic]
"UserId" = "{6C3F8A62-204E-4385-B520-B1E2A5B092ED}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Statistic\Clids]
"Clid9" = "2122692"
"Clid8" = "2122691"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Branding]
"PackageTimestamp" = "1416933862"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Settings]
"cols" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Statistic\Clids]
"Clid2" = "2122686"
"Clid1" = "2122685"
"Clid7" = "2122690"
"Clid6" = "2122689"
"Clid5" = "2122688"
"Clid4" = "2122687"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB]
"Install" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@C:\Windows\system32]
"ieframe.dll,-12385" = "Favorites Bar"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB]
"ShowWelcomePage" = "0"
"MIGRATE" = "2.16.0.3147"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Branding]
"BrandId" = "yandex"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Settings]
"PrevRows" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB]
"BackgroundsTime" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Settings]
"Favorites" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB]
"Update" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C93F72A2-2162-4BBA-A07A-F13663C297A6}]
"Flags" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Statistic\Clids]
"Clid13" = "2122696"
"Clid12" = "2122695"
"Clid11" = "2122694"
"Clid10" = "2122693"
"Clid17" = "2122699"
"Clid15" = "2122698"
"Clid14" = "2122697"
"Clid18" = "2122700"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\fastdialhost.dll]
"Version" = "2.16.0.3147"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EFCAFF61-6238-4414-AF2A-CDE8B15A60E0}]
"Policy" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Settings]
"MaxRows" = "5"
"Rows" = "5"

[HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"NewTabPageShow" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77A2303C-2F6F-4C71-B8AA-D6629D5AF517}]
"Policy" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB]
"PRODUCTVERSION" = "2.16.0.3147"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Settings]
"MaxCols" = "5"
"update_period" = "86400"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\fastdialhost.dll]
"Target" = "%Program Files% (x86)\Yandex\FastDial\fastdial.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C93F72A2-2162-4BBA-A07A-F13663C297A6}]
"Version" = "*"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Settings]
"SendStatistics" = "0"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@C:\Windows\system32]
"MCTRes.dll,-200016" = "USA.gov"
"MCTRes.dll,-200017" = "GobiernoUSA.gov"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB]
"NewTabPageShow" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Settings]
"PrevCols" = "5"

The Trojan deletes the following registry key(s):

[HKCU\Software\AppDataLow\Software\Yandex\VB]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\ClosedTabs]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\Locks]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Statistic]
"SearchLogo"
"SearchButton"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\Locks]
"{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Statistic]
"DeleteThumb"
"LinksHistory"
"LinksTabs"
"AddThumb"
"MoveThumb"
"EditThumb"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Settings]
"SendUserStat"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Statistic]
"LinksFavorites"
"FavoritesClck"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Branding]
"LastUpdate"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Statistic]
"LinksSettings"
"SearchSuggest"
"LinksDownloads"
"SearchEnter"

The process rundll32.exe:3300 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\fastdial64host.dll]
"Target" = "%Program Files% (x86)\Yandex\FastDial\fastdial64.dll"
"Version" = "2.16.0.3147"

The process rundll32.exe:1812 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml]
"VersionID" = "{5132A96D-9525-4F8E-81A9-4AAE06E37118}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\sbPageLastAcceptTime]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show-friends-notifications]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"Icon" = "icons/icon.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\update-interval]
"Default" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"StatisticsId" = "site"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid6" = "2122689"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting\Settings\json_timeout]
"Default" = "15"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika\Settings\show-buttonname]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"UseServices" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru]
"Enabled" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\notificationsData]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml#facebook" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml#rambler" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\masterSaveId]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta\Settings\countersUpdateInterval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml]
"Version" = "2.5.1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-video]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"UseServices" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-groups]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action1\execute\Parameter1]
"Value" = "(ÃÂ¸Ã‘ÂÃ‘â€šÃÂ¾Ã‘â€¡ÃÂ½ÃÂ¸ÃÂº: {documentUrl?}){selection?}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\old-balls]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru]
"Deleted" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\showText]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"LibraryX86" = "esync.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\messages]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"StatisticsId" = "gmail"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\show-warning]
"Default" = "true"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action2]
"HasPreview" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\sbBrowserLaunchUrl]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"Icon" = "icons/gmail.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml]
"VersionID" = "{4E657C88-BF9A-4E48-A0E5-BD1619B745D6}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"StatisticsId" = "yatic"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"Title" = "Facebook"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki\Settings\showText]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio\Settings\show_text]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-weatherHomepage]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"Icon" = "icons/on.png"

[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{91397D20-1446-11D4-8AF4-0040CA1127B6}" = "20 7D 39 91 46 14 D4 11 8A F4 00 40 CA 11 27 B6"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio\Settings\show_text]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"Icon" = "icons/quote/quote_up.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"Icon" = "icons/fotki/fotki.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-username]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#mail" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action1]
"Context" = "selection"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\show-main-button-title]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\preview]
"ParamCount" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\slice-data]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru]
"ContentMask" = "6"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru\Action1\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"Icon" = "icons/browser_red_16.png"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru]
"Deleted" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action1\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\id]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"Hidden" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru]
"Icon" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\market.ico"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml#gmail" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign\Settings\update-interval]
"Default" = "15"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-trafficHomepage]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml#radio" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"Type" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru]
"homepageurl" = "http://mail.yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\tutorial.usedFeatures]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"LibraryX86" = "webmaster.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki\Settings\countersUpdateInterval]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"Title" = "ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â.Ãâ€™ÃÂµÃÂ±ÃÂ¼ÃÂ°Ã‘ÂÃ‘â€šÃÂµÃ‘â‚¬"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"LibraryX86" = "odnoklassniki.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml]
"Version" = "4.5"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action1\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"UseServices" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"Title" = "ÃÂ¢ÃÂ²ÃÂ¸Ã‘â€šÃ‘â€šÃÂµÃ‘â‚¬"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\tutorial.usedFeatures]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"Hidden" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru]
"Enabled" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\masterSaveId]
"Default" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action2\execute\Parameter1]
"Name" = "body"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\execute]
"Action" = "http://market.yandex.ru/search.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\notification_data]
"Default" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action3\execute]
"ParamCount" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"Icon" = "icons/metrika_16.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\hintUrls]
"Default" = "about:blank;about:tabs;bar:tabs;vb:tabs;fd:tabs"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-trafficHomepage]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml]
"VersionID" = "{72E872CB-A349-4352-9994-4717A2333794}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\access_token]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"Title" = "ÃÅ¸ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ° Mail.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-msg]
"Default" = "false"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action2\execute]
"Method" = "get"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru]
"Icon" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\yandex.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\execute\Parameter1]
"Name" = "text"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"LibraryX86" = "altsearch.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-notes]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"LibraryX64" = "yavideo64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\share]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"Type" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2]
"HasPreview" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\notification_data]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru]
"Verb" = "ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\updateInterval]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-groups]
"Scope" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action1\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"UseServices" = "0"
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"Title" = "ÃÂ¢ÃÂ¾Ã‘â€¡ÃÂ½ÃÂ¾ ÃÂ¿ÃÂ¾ ÃÂ°ÃÂ´Ã‘â‚¬ÃÂµÃ‘ÂÃ‘Æ’"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show-message-notifications]
"Default" = "true"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru]
"Icon" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\slovari.ico"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Branding]
"PackageLocation" = "{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid4" = "2122687"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\execute\Parameter1]
"Value" = "{selection}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"LibraryX86" = "smartbox.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml]
"Version" = "1.6"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"Icon" = "icons/translator/translator.png"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\lastDate]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#money" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\notificationsData]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar]
"VersionIntroducedFx" = "8.7.0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\old-balls]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"LibraryX64" = "webmaster64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"Title" = "ÃÅ¸ÃÂ¾ÃÂ´ÃÂ¿ÃÂ¸Ã‘ÂÃÂºÃÂ¸"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-groups]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-trafficHomepage]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-video]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\clid]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\selectedSitenameSetting]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml]
"VersionID" = "{1CF78B46-7A2E-4341-A644-A1F914A2B732}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"Active" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml]
"Version" = "2.7"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action1\execute]
"Action" = "http://slovari.yandex.ru/{selection}/ÃÂ·ÃÂ½ÃÂ°Ã‘â€¡ÃÂµÃÂ½ÃÂ¸ÃÂµ"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki\Settings\countersUpdateInterval]
"Default" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\user_id]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"Title" = "ÃÂÃÂ²Ã‘â€šÃÂ¾Ã‘â‚¬ÃÂ¸ÃÂ·ÃÂ°Ã‘â€ ÃÂ¸Ã‘Â"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru]
"Enabled" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug\Settings\showText]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"LibraryX86" = "mailru.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-happy]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\friend]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Toolbar]
"Locked" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\offer.elements]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"Unique" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\state]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\access_token]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"Title" = "ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â.Ãâ€ÃÂ¸Ã‘â‚¬ÃÂµÃÂºÃ‘â€š"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\tutorial.showAfter]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\showHomepage]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator]
"UseServices" = "0"
"AllowDisable" = "1"
"Title" = "ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂµÃ‘ÂÃ‘â€šÃÂ¸ Ã‘ÂÃ‘â€šÃ‘â‚¬ÃÂ°ÃÂ½ÃÂ¸Ã‘â€ Ã‘Æ’"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-friend-notifications]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\defaultSearchScope]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-username]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"Type" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"LibraryX86" = "direct.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"StatisticsId" = "mailrambler"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’]
"DefaultActivity" = "yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"LibraryX64" = "webmaster64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\metrikaSaveId]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster\Settings\update-interval]
"Scope" = "2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\execute]
"Action" = "http://market.yandex.ru/search.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"LibraryX64" = "browseroffer64.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\execute\Parameter1]
"Value" = "{linkText}"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EFCAFF61-6238-4414-AF2A-CDE8B15A60E0}]
"AppPath" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\notifications]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler\Settings\show_label]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"LibraryX86" = "radio.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"LibraryX64" = "esync64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\selectedSitename]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"Icon" = "icons/geolocation/geolocation.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign\Settings\campaign]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\showTextAlert]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\access_token]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"Type" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\updateInterval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"StatisticsId" = "smartbox"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\route-work]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"Title" = "ÃÂ£ÃÂ¼ÃÂ½ÃÂ°Ã‘Â Ã‘ÂÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂºÃÂ°"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\tutorial.usedFeatures]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"Icon" = "icons/logo/logo.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml]
"VersionID" = "{4F1E73CA-9055-4D59-987E-D5B506AC467A}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show-friends-notifications]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-msg]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-username]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"Type" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator]
"Type" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"Type" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1]
"HasPreview" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\tutorial.autoCounter]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show-notification-notifications]
"Default" = "true"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru]
"Verb" = "ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\show-compose-button]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"LibraryX64" = "direct64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"StatisticsId" = "mailru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"Hidden" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru]
"DownloadUrl" = "http://slovari.yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\update-interval]
"Default" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler\Settings\show_label]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\hintUrls]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"Icon" = "icons/icon.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"Type" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta\Settings\countersUpdateInterval]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"LibraryX64" = "radio64.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru]
"DisplayName" = "ÃÂÃÂ°ÃÂ¹Ã‘â€šÃÂ¸ ÃÂ¾ÃÂ¿Ã‘â‚¬ÃÂµÃÂ´ÃÂµÃÂ»ÃÂµÃÂ½ÃÂ¸ÃÂµ Ã‘ÂÃÂ»ÃÂ¾ÃÂ²ÃÂ° ÃÂ² ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â.ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘ÂÃ‘â€¦"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action2\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml]
"Version" = "1.5.1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"LibraryX64" = "direct64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-name]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action3\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-mention-notifications]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-guest]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"Title" = "ÃÂ ÃÂ°ÃÂ´ÃÂ¸ÃÂ¾"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\save]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"Title" = "ÃÅ“ÃÂµÃ‘â€šÃ‘â‚¬ÃÂ¸ÃÂºÃÂ°"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo\Settings\countersUpdateInterval]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\customSettings]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"LibraryX64" = "smartbox64.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru]
"ActionCount" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator\Settings\tlang]
"Default" = "ru"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru]
"Icon" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\maps.ico"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"LibraryX86" = "twitter.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"Title" = "ÃÅ“ÃÂ¾Ã‘Â Ã‘ÂÃ‘â€šÃ‘â‚¬ÃÂ°ÃÂ½ÃÂ¸Ã‘â€ ÃÂ° Ãâ€™ÃÅ¡"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru]
"DisplayName" = "ÃÂÃÂ°ÃÂ¹Ã‘â€šÃÂ¸ ÃÂ¿ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´ Ã‘ÂÃÂ»ÃÂ¾ÃÂ²ÃÂ° ÃÂ² ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â.ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘ÂÃ‘â€¦"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml#profile" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"Icon" = "icons/moikrug/moikrug.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\flashOfferUrl]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"Title" = "ÃÅ¡ÃÂ¾Ã‘â€šÃÂ¸Ã‘â‚¬ÃÂ¾ÃÂ²ÃÂºÃÂ¸"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo\Settings\window-pos]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\defaultSearchScope]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-video]
"Scope" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru]
"Icon" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\lingvo.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru]
"Type" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\route-home]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"Unique" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"Title" = "ÃÅ¸ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\execute\Parameter1]
"Value" = "{selection}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\save]
"Scope" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru]
"Deleted" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika\Settings\update-interval]
"Default" = "12"
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"Title" = "ÃËœÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â Ã‘â€ ÃÂ¸Ã‘â€šÃÂ¸Ã‘â‚¬ÃÂ¾ÃÂ²ÃÂ°ÃÂ½ÃÂ¸Ã‘Â"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\show_label]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid11" = "2122694"
"Clid10" = "2122693"
"Clid13" = "2122696"
"Clid12" = "2122695"
"Clid15" = "2122698"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\Locks]
"{91397D20-1446-11D4-8AF4-0040CA1127B6}" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid17" = "2122699"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler\Settings\show_label]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\execute\Parameter1]
"Name" = "text"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid18" = "2122700"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\slice-data]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EFCAFF61-6238-4414-AF2A-CDE8B15A60E0}]
"Policy" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\clid]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"Title" = "ÃÅ¸ÃÂ»ÃÂµÃÂµÃ‘â‚¬ ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â.ÃÅ“Ã‘Æ’ÃÂ·Ã‘â€¹ÃÂºÃÂ¸"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money\Settings\countersUpdateInterval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"UseServices" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct\Settings\update-interval]
"Default" = "15"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-friends]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\customSettings]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"Icon" = "icons/mailru.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml#direct" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator]
"Hidden" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\execute]
"ParamCount" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar]
"LastRestoreVersion" = "8.7.0.3110"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77A2303C-2F6F-4C71-B8AA-D6629D5AF517}]
"AppName" = "elements64.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action1]
"Context" = "selection"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\execute\Parameter1]
"Name" = "text"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo\Settings\update-interval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\title]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements]
"LastImportedHistory" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#textonly" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#pagetranslator" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"StatisticsId" = "quotation"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"Type" = "4"
"Icon" = "icons/town/town.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\update-interval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator\Settings\ie-mode]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show_notifications]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru]
"ActionCount" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-message-notifications]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"Hidden" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\execute]
"Action" = "http://maps.yandex.ru/"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"Icon" = "icons/site_settings.png"
"Title" = "ÃÂ¡ÃÂ°ÃÂ¹Ã‘â€š"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika\Settings\show-buttonname]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\show-compose-button-title]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"Type" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\execute]
"ParamCount" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\update-interval]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\messages]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\route-work]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru]
"Verb" = "ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action1\execute]
"Method" = "get"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"Hidden" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action2\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\sbPageLastAcceptTime]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-notes]
"Default" = "false"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\preview]
"Action" = "https://export.yandex.ru/bar/mapsprint.xml?address={selection}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-weather]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote\Settings\update-interval]
"Default" = "15"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru]
"Domain" = "yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"Icon" = "icons/ic/4.png"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru]
"DownloadUrl" = "http://maps.yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-traffic]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\AutoSelect]
"SelectedWidgets" = "none"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar]
"PRODUCTVERSION" = "8.7.0.3110"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"api" = "0"
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action1\execute]
"Method" = "get"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\state]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"Title" = "ÃÂ¡ÃÂ¸ÃÂ½Ã‘â€¦Ã‘â‚¬ÃÂ¾ÃÂ½ÃÂ¸ÃÂ·ÃÂ°Ã‘â€ ÃÂ¸Ã‘Â"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action2\execute]
"Method" = "post"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"Title" = "ÃÅ¸ÃÂ¾ÃÂºÃÂ°ÃÂ·Ã‘â€¹ÃÂ²ÃÂ°Ã‘â€šÃ‘Å’ ÃÂºÃÂ¾ÃÂ½Ã‘â€šÃÂµÃÂºÃ‘ÂÃ‘â€šÃÂ½Ã‘â€¹ÃÂµ ÃÂ¿Ã‘â‚¬ÃÂµÃÂ´ÃÂ»ÃÂ¾ÃÂ¶ÃÂµÃÂ½ÃÂ¸Ã‘Â ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â.Ãâ€˜Ã‘â‚¬ÃÂ°Ã‘Æ’ÃÂ·ÃÂµÃ‘â‚¬ÃÂ°"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\AutoSelect]
"MatchedWidgets" = "none"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"LibraryX86" = "webmaster.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action2]
"HasPreview" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music\Settings\firstLaunch]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"Icon" = "icons/readability/ready.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"UseServices" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru]
"ContentMask" = "7"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-mention-notifications]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"Type" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign\Settings\campaign]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#moikrug" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\notification_data]
"Scope" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\preview]
"ParamCount" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru]
"ActionCount" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"StatisticsId" = "esync"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2]
"HasPreview" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show_notifications]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"StatisticsId" = "yamusic"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml#site" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"Title" = "ÃÅ¸ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ° ÃÂ ÃÂ°ÃÂ¼ÃÂ±ÃÂ»ÃÂµÃ‘â‚¬ÃÂ°"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml]
"Version" = "4.0.1"

[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"ITBar7Layout" = "13 00 00 00 00 00 00 00 00 00 00 00 30 00 00 00"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\BrowserHistory]
"d" = "20"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action1\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"StatisticsId" = "webmaster"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"Icon" = "icons/music/music.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\update-interval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru]
"Domain" = "yandex.ru"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action2\execute]
"Method" = "get"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\showTextAlert]
"Default" = "true"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\preview]
"Method" = "get"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "CD BB 95 86 18 7F D0 01"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\show-sitename]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"StatisticsId" = "odnoklassniki"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml]
"VersionID" = "{69F3437F-52F1-4276-B4C1-47CB531B6763}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\show-compose-button-title]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\translatorOfferUrl]
"Default" = "http://browser.yandex.ru/desktop/?from=link_element_neyb_translate_&banerid=0456530000#translate"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"Title" = "ÃÅ¾ÃÂ¿Ã‘â‚¬ÃÂµÃÂ´ÃÂµÃÂ»ÃÂµÃÂ½ÃÂ¸ÃÂµ ÃÂ¼ÃÂµÃ‘ÂÃ‘â€šÃÂ¾ÃÂ¿ÃÂ¾ÃÂ»ÃÂ¾ÃÂ¶ÃÂµÃÂ½ÃÂ¸Ã‘Â ÃÂ½ÃÂ° Ã‘ÂÃÂµÃ‘â‚¬ÃÂ²ÃÂ¸Ã‘ÂÃÂ°Ã‘â€¦ ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘ÂÃÂ°"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#lenta" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"Icon" = "icons/profile.png"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1]
"HasPreview" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\show-warning]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\notifications]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\sbPageLastAcceptTime]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting\Settings\json_timeout]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2]
"Context" = "link"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"Hidden" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action2\execute]
"ParamCount" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"Icon" = "icons/login/auth.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-comment-notifications]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action1]
"Context" = "selection"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action3]
"HasPreview" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"LibraryX64" = "gmail64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid20" = "2162082"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml#altsearch" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#town" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\menu.open]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator\Settings\ie-mode]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator\Settings\tlang]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\preview]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"UseServices" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru]
"homepageurl" = "http://yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator\Settings\tlang]
"Scope" = "2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\preview]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music\Settings\volume]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹]
"DefaultActivity" = "yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\update-interval]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"Unique" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\show-compose-button]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"StatisticsId" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\messages]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\sbBrowserInstallUrl]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign\Settings\update-interval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\execute]
"Method" = "get"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"Icon" = "icons/yavideo.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"Icon" = "icons/smartbox.png"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action1\execute]
"Method" = "post"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster\Settings\update-interval]
"Default" = "12"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\execute\Parameter1]
"Value" = "{linkText}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml]
"VersionID" = "{63AB56BC-2A5E-4A37-92C8-28E6A3545509}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"Icon" = "icons/main.png"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru]
"homepageurl" = "http://maps.yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"StatisticsId" = "geolocation"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar]
"VersionIntroduced" = "8.7.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru]
"ContentMask" = "6"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#cy" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru]
"DisplayName" = "ÃÂÃÂ°ÃÂ¹Ã‘â€šÃÂ¸ Ã‘â€šÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬ ÃÂ½ÃÂ° ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â.ÃÅ“ÃÂ°Ã‘â‚¬ÃÂºÃÂµÃ‘â€šÃÂµ"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml]
"Version" = "2.7.1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"UseServices" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"api" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru]
"Type" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\show-compose-button]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#login" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#music" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru]
"ActionCount" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\id]
"Default" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru]
"ActionCount" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml]
"Version" = "3.5.3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\show-compose-button-title]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy\Settings\showValue]
"Persistent" = "1"
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml]
"VersionID" = "{2C0FF05C-782B-4FC9-BE4E-29A676CB70AA}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"Icon" = "icons/typesquatting/icon.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"LibraryX64" = "sb64.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action3\execute\Parameter2]
"Name" = "body"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\preview]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"StatisticsId" = "twitter"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\selectedSitename]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru\Action1]
"HasPreview" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika\Settings\show-buttonname]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"LibraryX86" = "sb.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-comment-notifications]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money\Settings\countersUpdateInterval]
"Scope" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru]
"homepageurl" = "http://slovari.yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote\Settings\update-interval]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator\Settings\ie-tutorialShowCount]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo\Settings\update-interval]
"Default" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"Title" = "ÃÅ¡ÃÂ°ÃÂ¼ÃÂ¿ÃÂ°ÃÂ½ÃÂ¸Ã‘Â"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"Title" = "ÃÅ¸ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ° Gmail"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EFCAFF61-6238-4414-AF2A-CDE8B15A60E0}]
"AppName" = "elements.exe"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"Icon" = "icons/mail/mail.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\updateInterval]
"Default" = "12"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\preview]
"Action" = "http://market.yandex.ru/export/bar/search_bar.xml?text={linkText}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign\Settings\update-interval]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-photo]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"Type" = "5"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru]
"Verb" = "ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler\Settings\update_interval]
"Default" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar]
"LanguageID" = "1049"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"StatisticsId" = "yamoney"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\sbBrowserInstallUrl]
"Default" = "http://browser.yandex.ru/desktop/?head=security&from=link_element_neyb_safe_|&banerid=0456000000#safe"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-guest]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"StatisticsId" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml]
"Version" = "4.3.5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"Hidden" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action3\execute]
"Method" = "post"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"Title" = "ÃÅ¾ÃÂ´ÃÂ½ÃÂ¾ÃÂºÃÂ»ÃÂ°Ã‘ÂÃ‘ÂÃÂ½ÃÂ¸ÃÂºÃÂ¸"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show-notification-notifications]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"Hidden" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action1\execute]
"ParamCount" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"LibraryX64" = "odnoklassniki64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster\Settings\update-interval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct\Settings\update-interval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\hideallbtn]
"Default" = "true"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru]
"ActionCount" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"LibraryX64" = "webmaster64.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru]
"Domain" = "yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\title]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru]
"Domain" = "yandex.ru"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\show-sitename]
"Default" = "true"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action2\execute]
"ParamCount" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-notif]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"Unique" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml]
"Version" = "4.3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\state]
"Scope" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru]
"Deleted" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionTime" = "9E 5E CB 91 18 7F D0 01"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio\Settings\station]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo\Settings\window-pos]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru\Action1]
"Context" = "link"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-message-notifications]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"Unique" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru]
"Type" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru]
"homepageurl" = "http://slovari.yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml]
"VersionID" = "{16A3CB84-9366-4BBE-8ECD-95A8AAC0D48F}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show_notifications]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"Icon" = "icons/campaign-running.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"StatisticsId" = "facebook"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru]
"Verb" = "ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\update-interval]
"Default" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki\Settings\showText]
"Default" = "true"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\execute]
"Method" = "get"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"Title" = "Ãâ€”ÃÂ°Ã‘â€°ÃÂ¸Ã‘â€šÃÂ° ÃÂ¾Ã‘â€š Ã‘â€žÃÂ¸Ã‘Ë†ÃÂ¸ÃÂ½ÃÂ³ÃÂ°"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Branding]
"UpdateURL" = "http://ye-update.yandex.ru/update-ie.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\menu.open]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-happy]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"api" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action2\execute]
"ParamCount" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo\Settings\showInAddressBand]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting\Settings\json_timeout]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"LibraryX86" = "webmaster.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru]
"Deleted" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"Title" = "userinfo"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\hideallbtn]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\update-interval]
"Default" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml#mailru" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\old-balls]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"Type" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action3\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting\Settings\json_time]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\allowRestoreDefault]
"Default" = "true"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action1]
"HasPreview" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1]
"Context" = "selection"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru]
"DownloadUrl" = "http://slovari.yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\metrikaSaveId]
"Default" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru]
"DownloadUrl" = "http://yandex.ru"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action1\execute]
"Action" = "http://slovari.yandex.ru/{selection}/ÃÂ¿ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml]
"Version" = "2.3.2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"LibraryX86" = "vkontakte.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"api" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru\Action1\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action1\execute]
"ParamCount" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo\Settings\showInAddressBand]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action1]
"HasPreview" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"PlatformVersion" = "22"
"UseServices" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\preview]
"ParamCount" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"UseServices" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\execute]
"Action" = "http://maps.yandex.ru/"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"StatisticsId" = "moikrug"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio\Settings\station]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"Type" = "4"
"LibraryX64" = "rambler64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"UseServices" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action2\execute\Parameter1]
"Value" = "{linkText?}{link}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\customSitename]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator\Settings\ie-mode]
"Default" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\route-home]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\allowRestoreDefault]
"Scope" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1]
"Context" = "selection"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´]
"DefaultActivity" = "yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\share]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-friend-notifications]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show_notifications]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"Icon" = "icons/webmaster.png"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77A2303C-2F6F-4C71-B8AA-D6629D5AF517}]
"Policy" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"LibraryX86" = "sb.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Presets\http://bar.yandex.ru/packages/yandexbar.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\presets\http://bar.yandex.ru/packages/yandexbar.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-weather]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\notification_data]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#geolocation" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"Title" = "Ãâ€œÃÂ»ÃÂ°ÃÂ²ÃÂ½ÃÂ°Ã‘Â ÃÂºÃÂ½ÃÂ¾ÃÂ¿ÃÂºÃÂ°"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler\Settings\update_interval]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\tutorial.showAfter]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo\Settings\countersUpdateInterval]
"Default" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77A2303C-2F6F-4C71-B8AA-D6629D5AF517}]
"AppPath" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"StatisticsId" = "yalogin"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"LibraryX64" = "vkontakte64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\BrowserHistory]
"h" = "100"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"UseServices" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki\Settings\showText]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#translator" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"Title" = "ÃÅ¸Ã‘â‚¬ÃÂµÃÂ´ÃÂ»ÃÂ¾ÃÂ¶ÃÂµÃÂ½ÃÂ¸ÃÂµ ÃÂ°ÃÂ»Ã‘Å’Ã‘â€šÃÂµÃ‘â‚¬ÃÂ½ÃÂ°Ã‘â€šÃÂ¸ÃÂ²ÃÂ½ÃÂ¾ÃÂ³ÃÂ¾ ÃÂ¿ÃÂ¾ÃÂ¸Ã‘ÂÃÂºÃÂ°"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action2]
"Context" = "link"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\flashOfferUrl]
"Default" = "http://browser.yandex.ru/desktop/?head=flash&from=link_element_neyb_no-flash_|&banerid=0456510000"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml]
"Version" = "1.5.1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo\Settings\showInAddressBand]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"Icon" = "icons/subscription/subscription.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\show_label]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar]
"ManifestUrl" = "http://bar.yandex.ru/packages/yandexbar"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\showHomepage]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru]
"Type" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"LibraryX86" = "rambler.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml#metrika" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show_notifications]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\friend]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"StatisticsId" = "readability"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"Title" = "ÃÅ“ÃÂ¾ÃÂ¹ ÃÅ¡Ã‘â‚¬Ã‘Æ’ÃÂ³"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml#webmaster" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show_notifications]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\route-work]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\hintUrls]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\id]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"LibraryX64" = "sb64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"Title" = "ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â.Ãâ€ÃÂµÃÂ½Ã‘Å’ÃÂ³ÃÂ¸"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign\Settings\campaign]
"Default" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\preview]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\show_notification]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\allowRestoreDefault]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\preview]
"Method" = "get"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar]
"Version" = "8.7"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote\Settings\quote-id]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-photos]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml#mc" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-messages]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\execute]
"ParamCount" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\share]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\clid]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action3\execute\Parameter1]
"Name" = "subject"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting\Settings\json_time]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator]
"Icon" = "icons/pagetranslator/pagetranslator.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"Unique" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-guest]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\show-main-button-title]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml]
"Version" = "4.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru]
"Enabled" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show-notification-notifications]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music\Settings\volume]
"Default" = "0.7"
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"Icon" = "facebook.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\translatorOfferUrl]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar]
"LanguageID" = "1049"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml#campaign" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml]
"VersionID" = "{4C2230A9-8B67-4D21-899B-ADCD94C5B119}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct\Settings\update-interval]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote\Settings\quote-id]
"Default" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid5" = "2122688"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar]
"VersionID" = "{324DAD15-6993-4F35-9C6B-82E3A5C8B37F}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid7" = "2122690"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-friends]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid1" = "2122685"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action2\execute]
"Action" = "http://slovari.yandex.ru/{linkText}/ÃÂ¿ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid2" = "2122686"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting\Settings\json_time]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator\Settings\ie-tutorialShowCount]
"Scope" = "2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action2\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid9" = "2122692"
"Clid8" = "2122691"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"Unique" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru]
"Verb" = "ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-photos]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action1\execute\Parameter1]
"Name" = "body"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\lastDate]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action3\execute\Parameter2]
"Value" = "{documentUrl}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid14" = "2122697"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug\Settings\countersUpdateInterval]
"Default" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml#smartbox" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml]
"VersionID" = "{F729E339-C3ED-407A-AFB6-F3998C7C319E}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru]
"DisplayName" = "ÃÅ¾Ã‘â€šÃÂ¿Ã‘â‚¬ÃÂ°ÃÂ²ÃÂ¸Ã‘â€šÃ‘Å’ ÃÂ¿ÃÂ¾ ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â.ÃÅ¸ÃÂ¾Ã‘â€¡Ã‘â€šÃÂµ"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\update-interval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote\Settings\update-interval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°]
"DefaultActivity" = "yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\defaultSearchScope]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml#yavideo" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\customSitename]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-happy]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\show-name]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\notified_data]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\sbBrowserLaunchUrl]
"Default" = "http://browser.yandex.ru/desktop/?head=security&from=link_element_yabr-installed_safe_|&banerid=0456000000#safe"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo\Settings\window-pos]
"Default" = "0,0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action2\execute]
"Action" = "http://mail.yandex.ru/compose"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"StatisticsId" = "vk"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"Title" = "Ãâ€œÃÂ¾Ã‘â‚¬ÃÂ¾ÃÂ´"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\show-main-button-title]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show-message-notifications]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\sbBrowserLaunchUrl]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#quote" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"StatisticsId" = "mc"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\preview]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show-message-notifications]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"Active" = "0"

[HKCU\Software\Microsoft\Internet Explorer\MINIE]
"TabBandWidth" = "676"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\show_notification]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-notif]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"StatisticsId" = "translator"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru]
"Enabled" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta\Settings\countersUpdateInterval]
"Default" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Newest]
"x64" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110\elements64.exe"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\menu.open]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show_notifications]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\tutorial.showAfter]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-name]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\offer.elements]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"LibraryX86" = "facebook.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\bartabhost.dll]
"Version" = "8.7.0.3110"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#logo" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"StatisticsId" = "yamail"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-mention-notifications]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru\Action1\execute]
"Method" = "get"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\notificationsData]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"Icon" = "icons/money/money.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"UseServices" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo\Settings\always-on-top]
"Default" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-messages]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"Icon" = "icons/rambler.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\lastDate]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-traffic]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-photo]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Settings]
"SendStatistics" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\state]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"StatisticsId" = "altsearch"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\show_label]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo\Settings\always-on-top]
"Scope" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru\Action1\execute]
"ParamCount" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action3\execute]
"Action" = "http://mail.yandex.ru/compose"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\preview]
"Method" = "get"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"Icon" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"LibraryX86" = "direct.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-notif]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"api" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru]
"ContentMask" = "6"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"Type" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\preview]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml]
"Version" = "3.2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru\Action1\execute]
"Action" = "http://yandex.ru/yandsearch?stype=&nl=0&text={linkText}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\notification_data]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\customSettings]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 45 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\show_notification]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\execute]
"Method" = "get"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar]
"ApplySSI" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-photos]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"StatisticsId" = "typosquatting"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug\Settings\showText]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler\Settings\update_interval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml]
"VersionID" = "{6DA16603-0C30-4355-8300-86CCBD796952}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\preview]
"Action" = "http://market.yandex.ru/export/bar/search_bar.xml?text={selection}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show_notifications]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki\Settings\countersUpdateInterval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru]
"ContentMask" = "6"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music\Settings\firstLaunch]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Presets\http://bar.yandex.ru/packages/yandexbar.xml]
"Version" = "8.7"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"Type" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\slice-data]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\hideallbtn]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\tutorial.autoCounter]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-friend-notifications]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2]
"Context" = "link"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\offer.elements]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml]
"Version" = "3.11"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"Title" = "ÃÂ¢ÃÂ¾ÃÂ»Ã‘Å’ÃÂºÃÂ¾ Ã‘â€šÃÂµÃÂºÃ‘ÂÃ‘â€š"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-weatherHomepage]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru]
"Deleted" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"Icon" = "icons/twitter.png"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru]
"homepageurl" = "http://market.yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"StatisticsId" = "metrika"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\execute\Parameter1]
"Name" = "text"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru]
"DownloadUrl" = "http://market.yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\update-interval]
"Scope" = "2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\execute]
"Method" = "get"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show_notifications]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml#odnoklassniki" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"Title" = "ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â.Ãâ€™ÃÂ¸ÃÂ´ÃÂµÃÂ¾"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action3]
"Context" = "document"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action3\execute\Parameter1]
"Value" = "{documentTitle?}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru]
"DownloadUrl" = "http://mail.yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\show-warning]
"Scope" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\preview]
"Action" = "https://export.yandex.ru/bar/mapsprint.xml?address={linkText}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"LibraryX86" = "gmail.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-friends]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\save]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"StatisticsId" = "direct"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator\Settings\ie-tutorialShowCount]
"Default" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"LibraryX86" = "yavideo.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug\Settings\showText]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"StatisticsId" = "yalogo"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml#twitter" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Presets]
"(Default)" = "http://bar.yandex.ru/packages/yandexbar.xml"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action1\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action2]
"Context" = "link"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action1\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar]
"InstallResult" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\show-sitename]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"StatisticsId" = "campaign"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"StatisticsId" = "browseroffer"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\state]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml#typesquatting" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"Title" = "ÃÂ¤ÃÂ¾Ã‘â€šÃÂºÃÂ¸"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\sbBrowserInstallUrl]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\AutoSelect]
"Version" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-name]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml#esync" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\selectedSitenameSetting]
"Default" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru]
"Type" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy\Settings\showValue]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\BrowserHistory]
"dh" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\title]
"Default" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action2\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"UseServices" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action2]
"Context" = "link"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\state]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\notification_data]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-weatherHomepage]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\preview]
"ParamCount" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo\Settings\countersUpdateInterval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"Type" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"LibraryX86" = "browseroffer.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\execute]
"ParamCount" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\masterSaveId]
"Scope" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action2\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\update-interval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-photo]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\show-name]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"Title" = "ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´ Ã‘ÂÃÂ»ÃÂ¾ÃÂ²"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru]
"DisplayName" = "ÃÅ¸ÃÂ¾Ã‘ÂÃÂ¼ÃÂ¾Ã‘â€šÃ‘â‚¬ÃÂµÃ‘â€šÃ‘Å’ ÃÂ½ÃÂ° ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â.ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃÂ°Ã‘â€¦"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\customSitename]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"LibraryX64" = "mailru64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\notified_data]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Newest]
"x86" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110\elements.exe"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug\Settings\countersUpdateInterval]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\selectedSitename]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-msg]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug\Settings\countersUpdateInterval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"UseServices" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"UseServices" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº]
"DefaultActivity" = "yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics]
"UserId" = "{6C3F8A62-204E-4385-B520-B1E2A5B092ED}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action1\execute]
"Action" = "http://mail.yandex.ru/compose"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-weather]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo\Settings\update-interval]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika\Settings\update-interval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\preview]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-message-notifications]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\user_id]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\state]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹]
"DefaultActivity" = "yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml]
"VersionID" = "{5AB74C69-271E-481C-ADF6-1122620D267A}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\state]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator]
"StatisticsId" = "pagetranslator"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"StatisticsId" = "fotki"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"Unique" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru]
"ContentMask" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\flashOfferUrl]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio\Settings\station]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action1]
"HasPreview" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml]
"VersionID" = "{37B9AF14-B09A-4CA2-B74F-D4671015A4F8}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml]
"VersionID" = "{03D56DFD-E9BB-4951-A2C3-B9F88794459F}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse]
"FirstInstallDate" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\showText]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"LibraryX64" = "altsearch64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"Hidden" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action1\execute]
"ParamCount" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru]
"DisplayName" = "ÃÂÃÂ°ÃÂ¹Ã‘â€šÃÂ¸ ÃÂ² ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘ÂÃÂµ"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#fotki" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Branding]
"BrandId" = "yandex"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar]
"AllowSYH" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\showHomepage]
"Default" = "false"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action2\execute]
"Action" = "http://slovari.yandex.ru/{linkText}/ÃÂ·ÃÂ½ÃÂ°Ã‘â€¡ÃÂµÃÂ½ÃÂ¸ÃÂµ"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml#browseroffer" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"Type" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\preview]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\metrikaSaveId]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money\Settings\countersUpdateInterval]
"Default" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"StatisticsId" = "yacity"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"LibraryX64" = "twitter64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-traffic]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote\Settings\quote-id]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar]
"AllowSYS" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\user_id]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo\Settings\always-on-top]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\showText]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\preview]
"Method" = "get"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\friend]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\notifications]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml]
"Version" = "6.12"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru]
"Enabled" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio\Settings\show_text]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru]
"Icon" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\mail.ico"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"UseServices" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action2]
"HasPreview" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action2\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\tutorial.autoCounter]
"Default" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show-friends-notifications]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml]
"VersionID" = "{8801C67B-C2B4-44EB-A34B-3948E0577EB2}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\update-interval]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"Icon" = "icons/direct.png"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru]
"Domain" = "yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-messages]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\showTextAlert]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"CustomSettings" = "0"
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru]
"Domain" = "yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music\Settings\firstLaunch]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\translatorOfferUrl]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"Icon" = "icons/mc/icon.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-comment-notifications]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\route-home]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"StatisticsId" = "yasubscription"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"LibraryX64" = "facebook64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\notified_data]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\show-name]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-notes]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\state]
"Scope" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru]
"Type" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\selectedSitenameSetting]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"StatisticsId" = "radio"
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\bartabhost.dll]
"Target" = "%Program Files% (x86)\Yandex\Elements\bartab.dll"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following registry key(s):

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy\Variables]
[HKCU\Software\AppDataLow\Software\Yandex\Toolbar]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\Locks]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money\Settings]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar]
"ApplySSI"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\Locks]
"{91397D20-1446-11D4-8AF4-0040CA1127B6}"

The process setup.exe:1836 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCR\YandexPPT.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserPPT Document"

[HKLM\SOFTWARE\RegisteredApplications]
"Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q" = "Software\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities"

[HKCR\YandexFLV.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-106"

[HKCR\YandexWEBM.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserWEBM Document"

[HKCU\Software\Yandex\YandexBrowser\Commands\on-os-upgrade]
"CommandLine" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\setup.exe --on-os-upgrade --verbose-logging"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"news" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".psd" = "YandexPSD.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\.swf\OpenWithProgids]
"YandexSWF.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexPPTS.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserPPTS Document"

[HKCR\YandexDOC.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer]
"GlobalAssocChangedCounter" = "36"

[HKCR\YandexPPTX.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".crx" = "YandexCRX.DAPOW4WZBGMBLQA5WYYOJHF62Q"
".htm" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"
".fb2" = "YandexFB2.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\yabrowser\shell]
"(Default)" = "open"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"irc" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\YandexJS.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserJS Document"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"http" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\YandexFLV.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserFLV Document"

[HKCR\YandexCRX.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\.pptx\OpenWithProgids]
"YandexPPTX.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\.html\OpenWithProgids]
"YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\.epub\OpenWithProgids]
"YandexEPUB.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"DisplayIcon" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,0"

[HKCR\YandexCSS.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\browser.exe]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe"

[HKCR\YandexFILE.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"tel" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\YandexOGV.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexCSS.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-124"

[HKCU\Software\Yandex\YandexBrowser(backup)]
"InstallerError" = "0"
"Name" = "Yandex"

[HKCR\YandexSWF.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserSWF Document"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"webcal" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\YandexODT.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexGIF.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserGIF Document"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"sms" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".DOT" = "YandexDOT.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\.jpeg\OpenWithProgids]
"YandexJPEG.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexPOT.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-129"

[HKCR\YandexSXW.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserSXW Document"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"VersionMajor" = "2214"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".MP3" = "YandexMP3.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCU\Software\Yandex\YandexBrowser]
"UninstallArguments" = " --uninstall --verbose-logging"

[HKCR\YandexOGV.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserOGV Document"

[HKCU\Software\Classes\YandexBrowser.crx\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe %1"

[HKCR\yabrowser\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,0"

[HKCU\Software\Yandex\YandexBrowser]
"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\setup.exe"

[HKCR\YandexXML.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-134"

[HKCR\YandexPPTS.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-115"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"DisplayVersion" = "40.0.2214.3645"

[HKCR\.odt\OpenWithProgids]
"YandexODT.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"InstallLocation" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application"

[HKCR\YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex HTML Document"

[HKCU\Software\Yandex\YandexBrowser]
"InstallerSuccessLaunchCmdLine" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe"

[HKCR\.pot\OpenWithProgids]
"YandexPOT.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexTIFF.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserTIFF Document"

[HKCR\YandexDOT.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-125"

[HKCR\YandexPNG.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\.txt\OpenWithProgids]
"YandexTXT.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexOGV.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-128"

[HKCR\.shtml\OpenWithProgids]
"YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexFB2.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-122"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".ogv" = "YandexOGV.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\.gif\OpenWithProgids]
"YandexGIF.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexPPT.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexDOCX.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-105"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".swf" = "YandexSWF.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\.mp3\OpenWithProgIds]
"YandexMP3.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\InstallInfo]
"IconsVisible" = "1"

[HKCR\YandexDOC.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-104"

[HKCR\YandexJPEG.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"nntp" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\YandexEPUB.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserEPUB Document"

[HKCR\.webp\OpenWithProgids]
"YandexFILE.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"mailto" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCU\Software\Classes\.crx]
"(Default)" = "YandexBrowser.crx"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".html" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\yabrowser\shell\open\ddeexec]
"(Default)" = ""

[HKCR\.fb2\OpenWithProgids]
"YandexFB2.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".gif" = "YandexGIF.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\.ppts\OpenWithProgids]
"YandexPPTS.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\.doc\OpenWithProgids]
"YandexDOC.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCU\Software\Yandex\YandexBrowser]
"pv" = "40.0.2214.3645"

[HKCR\YandexJS.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-126"

[HKCR\.rtf\OpenWithProgids]
"YandexRTF.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCU\Software\Yandex\YandexBrowser]
"Name" = "Yandex"

[HKCR\.jpg\OpenWithProgids]
"YandexJPEG.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCU\Software\Yandex\YandexBrowser(backup)]
"InstallTime" = "13074413271513145"

[HKCU\Software\Yandex\YandexBrowser]
"InstallerExtraCode1" = "1"

[HKCU\Software\Classes\YandexBrowser.crx\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,0"

[HKCR\YandexPOT.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserPOT Document"

[HKCR\.xml\OpenWithProgIDs]
"YandexXML.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexPPTX.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-116"

[HKCR\.htm\OpenWithProgids]
"YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexXML.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCU\Software\Yandex\YandexBrowser]
"InstallerResult" = "0"

[HKCR\.js\OpenWithProgids]
"YandexJS.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexMP4.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexXML.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserXML Document"

[HKCU\Software\Yandex\YandexBrowser]
"InstallerError" = "0"

[HKCR\yabrowser\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\.crx\OpenWithProgids]
"YandexCRX.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexFILE.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserFILE Document"

[HKCR\.ogv\OpenWithProgIDs]
"YandexOGV.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"VersionMinor" = "3645"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"urn" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\InstallInfo]
"ReinstallCommand" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --make-default-browser"

[HKCR\YandexJPEG.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserJPEG Document"

[HKCR\.pdf\OpenWithProgIds]
"YandexPDF.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexGIF.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-107"

[HKCR\YandexJPEG.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-109"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesChanges" = "8"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\browser.exe]
"Path" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application"

[HKCR\YandexPPTS.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexTXT.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserTXT Document"

[HKCR\YandexPDF.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-112"

[HKCR\YandexFILE.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-123"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesResolve" = "CC 02 00 00 4C 00 00 00 01 14 02 00 00 00 00 00"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"smsto" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"NoRepair" = "1"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".pot" = "YandexPOT.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\%Program Files% (x86)\Google\Update\1.3.25.11, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser,"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"https" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\.psd\OpenWithProgids]
"YandexPSD.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCU\Software\Yandex\YandexBrowser(backup)]
"InstallerSuccessLaunchCmdLine" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe"

[HKCR\YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-108"

[HKCR\YandexCRX.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserCRX Document"

[HKCR\YandexPPTX.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserPPTX Document"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".epub" = "YandexEPUB.DAPOW4WZBGMBLQA5WYYOJHF62Q"
".CSS" = "YandexCSS.DAPOW4WZBGMBLQA5WYYOJHF62Q"
".shtml" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"Publisher" = "ÃÅ¾ÃÅ¾ÃÅ¾Ã‚Â Ã‚Â«ÃÂ¯ÃÂÃâ€Ãâ€¢ÃÅ¡ÃÂ¡Ã‚Â»"

[HKCR\YandexCSS.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserCSS Document"

[HKCU\Software\Yandex\YandexBrowser(backup)]
"InstallerResult" = "0"

[HKCU\Software\Yandex\YandexBrowser]
"oopcrashes" = "1"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".ppt" = "YandexPPT.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\YandexPSD.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexPPT.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-114"

[HKCU\Software\Yandex\YandexBrowser(backup)\Commands\on-os-upgrade]
"AutoRunOnOSUpgrade" = "1"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".ppts" = "YandexPPTS.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCU\Software\Yandex\YandexBrowser]
"yasend_install" = "true"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"ftp" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\YandexDOT.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCU\Software\Classes\YandexBrowser.crx]
"(Default)" = "Yandex Browser Extra"

[HKCR\YandexCRX.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-103"

[HKCR\YandexFB2.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\.css\OpenWithProgids]
"YandexCSS.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexSWF.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-118"

[HKCR\.png\OpenWithProgids]
"YandexPNG.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCU\Software\Yandex\YandexBrowser(backup)\Commands\on-os-upgrade]
"CommandLine" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\setup.exe --on-os-upgrade --verbose-logging"

[HKCR\YandexPNG.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserPNG Document"

[HKCR\YandexMP3.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-110"

[HKCR\YandexSXW.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-131"

[HKCR\.xht\OpenWithProgids]
"YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexRTF.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-117"

[HKCR\YandexODT.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserODT Document"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,0"

[HKCU\Software\Yandex\YandexBrowser]
"ap" = ""

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities]
"ApplicationDescription" = "Yandex Ã¢â‚¬â€œ Ã‘ÂÃ‘â€šÃÂ¾ ÃÂ±Ã‘â€¹Ã‘ÂÃ‘â€šÃ‘â‚¬ÃÂ°Ã‘Â ÃÂ¸Ã‚Â Ã‘Æ’ÃÂ´ÃÂ¾ÃÂ±ÃÂ½ÃÂ°Ã‘Â ÃÂ¿Ã‘â‚¬ÃÂ¾ÃÂ³Ã‘â‚¬ÃÂ°ÃÂ¼ÃÂ¼ÃÂ° ÃÂ´ÃÂ»Ã‘ÂÃ‚Â Ã‘â‚¬ÃÂ°ÃÂ±ÃÂ¾Ã‘â€šÃ‘â€¹ ÃÂ²Ã‚Â ÃÂ¸ÃÂ½Ã‘â€šÃÂµÃ‘â‚¬ÃÂ½ÃÂµÃ‘â€šÃÂµ ÃÂ¸Ã‚Â ÃÂ¿Ã‘â‚¬ÃÂ¾Ã‘ÂÃÂ¼ÃÂ¾Ã‘â€šÃ‘â‚¬ÃÂ° ÃÂ²ÃÂµÃÂ±-Ã‘ÂÃ‘â€šÃ‘â‚¬ÃÂ°ÃÂ½ÃÂ¸Ã‘â€ ."

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe"

[HKCU\Software\Yandex\YandexBrowser]
"InstallTime" = "13074413271513145"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\InstallInfo]
"ShowIconsCommand" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --show-icons"
"HideIconsCommand" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --hide-icons"

[HKCR\.sxw\OpenWithProgids]
"YandexSXW.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexSXW.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexMP4.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-111"

[HKCR\YandexTXT.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\setup.exe --uninstall --verbose-logging"

[HKCR\.ppt\OpenWithProgids]
"YandexPPT.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexWEBM.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-132"

[HKCU\Software\Yandex\YandexBrowser(backup)]
"pv" = "40.0.2214.3645"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities]
"ApplicationName" = "Yandex"

[HKCR\YandexTIFF.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-119"

[HKCU\Software\Yandex\YandexBrowser(backup)]
"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\setup.exe"

[HKCR\YandexEPUB.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-121"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".xht" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\.tiff\OpenWithProgids]
"YandexTIFF.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexPDF.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"mms" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".DOC" = "YandexDOC.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"NoModify" = "1"

[HKCR\YandexSWF.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\.docx\OpenWithProgids]
"YandexDOCX.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"Favorites" = "00 7C 01 00 00 14 00 1F 80 C8 27 34 1F 10 5C 10"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities]
"ApplicationIcon" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,0"

[HKCR\YandexEPUB.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexWEBM.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexMP3.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserMP3 Document"

[HKCR\YandexMP4.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserMP4 Document"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"InstallDate" = "20150425"

[HKCU\Software\Yandex\YandexBrowser(backup)]
"oopcrashes" = "1"

[HKCR\YandexWMV.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-133"

[HKCR\YandexMP3.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCU\Software\Yandex\YandexBrowser(backup)]
"usagestats" = "1"
"UninstallArguments" = " --uninstall --verbose-logging"

[HKCR\.flv\OpenWithProgIds]
"YandexFLV.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\Startmenu]
"StartMenuInternet" = "Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\YandexFLV.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"DisplayName" = "Yandex"

[HKCR\YandexRTF.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexTXT.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-120"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesVersion" = "2"

[HKCR\YandexWMV.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\.mp4\OpenWithProgids]
"YandexMP4.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCU\Software\Yandex\YandexBrowser(backup)]
"yasend_install" = "true"

[HKCR\YandexJS.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexDOCX.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".flv" = "YandexFLV.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCU\Software\Yandex\YandexBrowser(backup)]
"lang" = "ru"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".xhtml" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\YandexPOT.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\.xhtml\OpenWithProgids]
"YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCU\Software\Yandex\YandexBrowser\Commands\on-os-upgrade]
"AutoRunOnOSUpgrade" = "1"

[HKCR\YandexDOT.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserDOT Document"

[HKCR\YandexRTF.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserRTF Document"

[HKCR\YandexTIFF.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"Version" = "40.0.2214.3645"

[HKCR\.webm\OpenWithProgIds]
"YandexWEBM.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexFB2.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserFB2 Document"

[HKCR\YandexDOC.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserDOC Document"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".XML" = "YandexXML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex"

[HKCR\YandexWMV.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserWMV Document"

[HKCR\YandexPSD.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserPSD Document"

[HKCR\YandexGIF.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\.dot\OpenWithProgids]
"YandexDOT.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexDOCX.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserDOCX Document"

[HKCR\YandexPSD.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-130"

[HKCR\YandexODT.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-127"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".mp4" = "YandexMP4.DAPOW4WZBGMBLQA5WYYOJHF62Q"
".sxw" = "YandexSXW.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\YandexPDF.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserPDF Document"

[HKCR\yabrowser]
"URL Protocol" = ""

[HKCU\Software\Yandex\YandexBrowser]
"usagestats" = "1"

[HKCR\YandexPNG.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-113"

The Trojan deletes the following registry key(s):

[HKCU\Software\Yandex\YandexBrowser(backup)]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Yandex\YandexBrowser]
"InstallerExtraCode1"
"ap"
"pv"

The process MsiExec.exe:3368 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\cncgohepihcekklokhbhiblhfcmipbdh]
"install_parameter" = "clid=2122689&win=173&"
"update_url" = "http://clients2.google.com/service/update2/crx"

[HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gehngeifmelphpllncobkmimphfkckne]
"update_url" = "http://clients2.google.com/service/update2/crx"
"install_parameter" = "clid=2122688&win=173&"

The process MsiExec.exe:2936 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCR\Yandex.Toolbar.1]
"(Default)" = "ÃÂÃÂ»ÃÂµÃÂ¼ÃÂµÃÂ½Ã‘â€šÃ‘â€¹ ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘ÂÃÂ°"

[HKCR\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}\ProgID]
"(Default)" = "Yandex.Toolbar.1"

[HKCR\TypeLib\{91397D13-1446-11D4-8AF4-0040CA1127B6}\1.0\0\win64]
"(Default)" = "%Program Files% (x86)\Yandex\Elements\bartab64.dll"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCR\Yandex.Toolbar.1\CLSID]
"(Default)" = "{91397D20-1446-11D4-8AF4-0040CA1127B6}"

[HKCR\Yandex.Toolbar]
"(Default)" = "ÃÂÃÂ»ÃÂµÃÂ¼ÃÂµÃÂ½Ã‘â€šÃ‘â€¹ ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘ÂÃÂ°"

[HKCR\Yandex.Toolbar\CLSID]
"(Default)" = "{91397D20-1446-11D4-8AF4-0040CA1127B6}"

[HKCR\Yandex.Toolbar\CurVer]
"(Default)" = "Yandex.Toolbar.1"

[HKCR\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}]
"AppID" = "{9340F2B2-4F27-4575-8BAE-4AAD70B69B28}"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCR\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}]
"(Default)" = "ÃÂÃÂ»ÃÂµÃÂ¼ÃÂµÃÂ½Ã‘â€šÃ‘â€¹ ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘ÂÃÂ°"

[HKCR\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}\TypeLib]
"(Default)" = "{91397D20-1446-11D4-8AF4-0040CA1127B6}"

[HKCR\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}\InprocServer32]
"(Default)" = "%Program Files% (x86)\Yandex\Elements\bartab64host.dll"
"ThreadingModel" = "Apartment"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{91397D20-1446-11D4-8AF4-0040CA1127B6}" = "ÃÂÃÂ»ÃÂµÃÂ¼ÃÂµÃÂ½Ã‘â€šÃ‘â€¹ ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘ÂÃÂ°"

[HKCR\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}\VersionIndependentProgID]
"(Default)" = "Yandex.Toolbar"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

The process MsiExec.exe:2652 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Yandex.Toolbar.1\CLSID]
"(Default)" = "{91397D20-1446-11D4-8AF4-0040CA1127B6}"

[HKCR\Wow6432Node\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}\ProgID]
"(Default)" = "Yandex.Toolbar.1"

[HKCR\Wow6432Node\Interface\{91397D1F-1446-11D4-8AF4-0040CA1127B6}]
"(Default)" = "IYndbar"

[HKCR\Yandex.Toolbar.1]
"(Default)" = "ÃÂÃÂ»ÃÂµÃÂ¼ÃÂµÃÂ½Ã‘â€šÃ‘â€¹ ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘ÂÃÂ°"

[HKCR\Yandex.Toolbar\CurVer]
"(Default)" = "Yandex.Toolbar.1"

[HKCR\Interface\{91397D1F-1446-11D4-8AF4-0040CA1127B6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}\TypeLib]
"(Default)" = "{91397D20-1446-11D4-8AF4-0040CA1127B6}"

[HKCR\Wow6432Node\Interface\{91397D1F-1446-11D4-8AF4-0040CA1127B6}\TypeLib]
"Version" = "1.0"

[HKCR\TypeLib\{91397D13-1446-11D4-8AF4-0040CA1127B6}\1.0\FLAGS]
"(Default)" = "0"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCR\Interface\{91397D1F-1446-11D4-8AF4-0040CA1127B6}\TypeLib]
"Version" = "1.0"

[HKCR\Wow6432Node\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}]
"(Default)" = "ÃÂÃÂ»ÃÂµÃÂ¼ÃÂµÃÂ½Ã‘â€šÃ‘â€¹ ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘ÂÃÂ°"

[HKCR\TypeLib\{91397D13-1446-11D4-8AF4-0040CA1127B6}\1.0\HELPDIR]
"(Default)" = "%Program Files% (x86)\Yandex\Elements"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCR\TypeLib\{91397D13-1446-11D4-8AF4-0040CA1127B6}\1.0]
"(Default)" = "Yandex Toolbar 1.0 Type Library"

[HKCR\Yandex.Toolbar]
"(Default)" = "ÃÂÃÂ»ÃÂµÃÂ¼ÃÂµÃÂ½Ã‘â€šÃ‘â€¹ ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘ÂÃÂ°"

[HKCR\Wow6432Node\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}\VersionIndependentProgID]
"(Default)" = "Yandex.Toolbar"

[HKCR\Wow6432Node\Interface\{91397D1F-1446-11D4-8AF4-0040CA1127B6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{91397D1F-1446-11D4-8AF4-0040CA1127B6}\TypeLib]
"(Default)" = "{91397D13-1446-11D4-8AF4-0040CA1127B6}"

[HKCR\Interface\{91397D1F-1446-11D4-8AF4-0040CA1127B6}]
"(Default)" = "IYndbar"

[HKCR\Wow6432Node\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}\InprocServer32]
"(Default)" = "%Program Files% (x86)\Yandex\Elements\bartabhost.dll"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{91397D20-1446-11D4-8AF4-0040CA1127B6}" = "ÃÂÃÂ»ÃÂµÃÂ¼ÃÂµÃÂ½Ã‘â€šÃ‘â€¹ ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘ÂÃÂ°"

[HKCR\Wow6432Node\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}]
"AppID" = "{9340F2B2-4F27-4575-8BAE-4AAD70B69B28}"

[HKCR\TypeLib\{91397D13-1446-11D4-8AF4-0040CA1127B6}\1.0\0\win32]
"(Default)" = "%Program Files% (x86)\Yandex\Elements\bartab.dll"

[HKCR\Yandex.Toolbar\CLSID]
"(Default)" = "{91397D20-1446-11D4-8AF4-0040CA1127B6}"

[HKCR\Interface\{91397D1F-1446-11D4-8AF4-0040CA1127B6}\TypeLib]
"(Default)" = "{91397D13-1446-11D4-8AF4-0040CA1127B6}"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

The process MsiExec.exe:2020 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"Favorites" = "00 7C 01 00 00 14 00 1F 80 C8 27 34 1F 10 5C 10"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"ShowSearchSuggestions" = "1"
"NTURL" = "http://yandex.com/yandsearch?win=173&clid=2122691&text={searchTerms}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\95AC1EA33B0A9AE74AF4CF8EBEE70C9C]
"ShowSearchSuggestions" = "1"
"URL" = "http://yandex.com/yandsearch?win=173&clid=2122689&text={searchTerms}"
"FaviconURLFallback" = "http://www.yandex.com/favicon.ico"
"TopResultURLFallback" = "http://www.bing.com/search?q={searchTerms}&src=IE-TopResult&FORM=IE10TR"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"NTLogoURL" = "http://downloader.yandex.net/banner/ntpagelogo/{language}_{scalelevel}.png"

[HKCU\Software\AppDataLow\Yandex]
"UICreated_adm" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached]
"{182C3813-DF97-40FA-9C4E-B7D3E74F00CA} {000214F9-0000-0000-C000-000000000046} 0xFFFF" = "01 00 00 00 00 00 00 00 BB E6 40 89 18 7F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesVersion" = "2"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\95AC1EA33B0A9AE74AF4CF8EBEE70C9C]
"SuggestionsURL_JSON" = "http://suggest.yandex.net/suggest-ff.cgi?part={searchTerms}"

[HKCU\Software\Microsoft\Internet Explorer\SearchUrl\y]
"(Default)" = "http://yandex.com/yandsearch?win=173&clid=2122692&text=%s"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\95AC1EA33B0A9AE74AF4CF8EBEE70C9C]
"YaCreationDate" = "2015-04-25"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"DisplayName" = "Yandex"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\95AC1EA33B0A9AE74AF4CF8EBEE70C9C]
"SuggestionsURLFallback" = "http://api.bing.com/qsml.aspx?query={searchTerms}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IE10SS&market={language}"
"NTTopResultURL" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"SortIndex" = "0"
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\Internet Explorer\Services\Bing.ico"

[HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = "{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\95AC1EA33B0A9AE74AF4CF8EBEE70C9C]
"SortIndex" = "0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"SuggestionsURL" = "Type: REG_SZ, Length: 0"
"SuggestionsURL_JSON" = "http://suggest.yandex.net/suggest-ff.cgi?part={searchTerms}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\95AC1EA33B0A9AE74AF4CF8EBEE70C9C]
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\Local\MICROS~1\INTERN~1\Services\WWWYAN~2.ICO"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
"FaviconURLFallback" = "http://www.bing.com/favicon.ico"
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\Internet Explorer\Services\Bing.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"NTTopResultURL" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\95AC1EA33B0A9AE74AF4CF8EBEE70C9C]
"NTLogoURL" = "http://downloader.yandex.net/banner/ntpagelogo/{language}_{scalelevel}.png"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
"SuggestionsURLFallback" = "http://api.bing.com/qsml.aspx?query={searchTerms}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IE10SS&market={language}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\95AC1EA33B0A9AE74AF4CF8EBEE70C9C]
"DisplayName" = "Yandex"
"SuggestionsURL" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL" = "http://yandex.com/yandsearch?win=173&clid=2122689&text={searchTerms}"
"YaCreationDate" = "2015-04-25"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
"DisplayName" = "Bing"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesChanges" = "7"

[HKCU\Software\Microsoft\Internet Explorer\Main]
"Start Page" = "http://www.yandex.com/?win=173&clid=2122688"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes]
"ShowSearchSuggestionsInAddressGlobal" = "1"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"FaviconURLFallback" = "http://www.yandex.com/favicon.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
"URL" = "http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR"
"TopResultURLFallback" = "http://www.bing.com/search?q={searchTerms}&src=IE-TopResult&FORM=IE10TR"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesResolve" = "CC 02 00 00 4C 00 00 00 01 14 02 00 00 00 00 00"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\95AC1EA33B0A9AE74AF4CF8EBEE70C9C]
"NTURL" = "http://yandex.com/yandsearch?win=173&clid=2122691&text={searchTerms}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories\{56FFCC30-D398-11D0-B2AE-00A0C908FA49}\Enum]
"Implementing" = "1C 00 00 00 01 00 00 00 DF 07 04 00 06 00 19 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached]
"{E88DCCE0-B7B3-11D1-A9F0-00AA0060FA31} {000214E6-0000-0000-C000-000000000046} 0xFFFF" = "01 00 00 00 00 00 00 00 BB 65 2A 88 18 7F D0 01"

The Trojan deletes the following registry key(s):

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
[HKCU\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\95AC1EA33B0A9AE74AF4CF8EBEE70C9C]
[HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]

The Trojan deletes the following value(s) in system registry:

The process MsiExec.exe:1400 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCR\fd\DefaultIcon]
"(Default)" = "%Program Files% (x86)\Yandex\FastDial\fastdial64.dll,0"

[HKCR\FastDial.CFastDial.1\CLSID]
"(Default)" = "{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}"

[HKCR\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\TypeLib]
"(Default)" = "{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}"

[HKCR\TypeLib\{AFBDA429-7995-4CCA-9298-7C7D6B4A244C}\1.0\0\win64]
"(Default)" = "%Program Files% (x86)\Yandex\FastDial\fastdial64.dll"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING ]
"elements.exe" = "1"

[HKCR\FastDial.CFastDial.1]
"(Default)" = "Visual Bookmarks"

[HKCR\FastDial.CFastDial\CurVer]
"(Default)" = "FastDial.CFastDial.1"

[HKCR\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\InprocServer32]
"(Default)" = "%Program Files% (x86)\Yandex\FastDial\fastdial64host.dll"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]
"elements64.exe" = "10000"

[HKCR\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}]
"(Default)" = "Visual Bookmarks"

[HKCR\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\ProgID]
"(Default)" = "FastDial.CFastDial.1"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_DOCUMENT_ZOOM]
"elements64.exe" = "1"

[HKCR\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}]
"AppID" = "{53C0373B-51E4-4F85-9085-53EF06DE6E00}"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_TABBED_BROWSING]
"elements.exe" = "1"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_DOCUMENT_ZOOM]
"elements.exe" = "1"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]
"elements.exe" = "10000"

[HKCR\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\VersionIndependentProgID]
"(Default)" = "FastDial.CFastDial"

[HKCR\fd\shell\open\command]
"(Default)" = "%Program Files%\Internet Explorer\IEXPLORE.EXE %1"

[HKCR\fd]
"URL Protocol" = ""

[HKCR\FastDial.CFastDial]
"(Default)" = "Visual Bookmarks"

[HKU\.DEFAULT\SOFTWARE\AppDataLow\Software\Yandex\Toolbar\Settings]
"Fastdial" = "0"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{C93F72A2-2162-4BBA-A07A-F13663C297A6}]
"Version" = "*"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_TABBED_BROWSING]
"elements64.exe" = "1"

[HKCR\FastDial.CFastDial\CLSID]
"(Default)" = "{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING ]
"elements64.exe" = "1"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]
"elements64.exe" = "1"
"elements.exe" = "1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{C93F72A2-2162-4BBA-A07A-F13663C297A6}]
"Flags" = "1"

[HKCR\fd]
"(Default)" = "URL:FastDial Protocol"

It registers itself as a Browser Helper Object (BHO) to ensure its automatic execution every time Internet Explorer is run. It does this by creating the following registry key(s)/entry(ies):

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}]
"NoExplorer" = "1"

The Trojan deletes the following registry key(s):

[HKCR\fd\shell]
[HKCR\fd\shell\open]
[HKCR\fd\shell\open\command]
[HKCR\fd\DefaultIcon]
[HKCR\FastDial.CFastDial.1\CLSID]
[HKCR\FastDial.CFastDial.1]
[HKCR\FastDial.CFastDial\CurVer]
[HKCR\fd]
[HKCR\FastDial.CFastDial]
[HKCR\FastDial.CFastDial\CLSID]

The process MsiExec.exe:2160 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION]
"elements64.exe" = "10000"

[HKCR\fd\DefaultIcon]
"(Default)" = "%Program Files% (x86)\Yandex\FastDial\fastdial.dll,0"

[HKCR\Wow6432Node\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}]
"NoExplorer" = "1"

[HKCR\Interface\{E16FE932-52D3-4BD9-B50B-A03BEC527579}]
"(Default)" = "IFastDial"

[HKCR\Interface\{E16FE932-52D3-4BD9-B50B-A03BEC527579}\TypeLib]
"(Default)" = "{AFBDA429-7995-4CCA-9298-7C7D6B4A244C}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION]
"elements.exe" = "10000"

[HKCR\FastDial.CFastDial.1]
"(Default)" = "Visual Bookmarks"

[HKCR\Wow6432Node\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\ProgID]
"(Default)" = "FastDial.CFastDial.1"

[HKCR\FastDial.CFastDial\CurVer]
"(Default)" = "FastDial.CFastDial.1"

[HKCR\Interface\{E16FE932-52D3-4BD9-B50B-A03BEC527579}\TypeLib]
"Version" = "1.0"

[HKCR\Wow6432Node\Interface\{E16FE932-52D3-4BD9-B50B-A03BEC527579}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]
"elements64.exe" = "1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{C93F72A2-2162-4BBA-A07A-F13663C297A6}]
"Version" = "*"

[HKCR\Wow6432Node\Interface\{E16FE932-52D3-4BD9-B50B-A03BEC527579}\TypeLib]
"Version" = "1.0"

[HKCR\Wow6432Node\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\VersionIndependentProgID]
"(Default)" = "FastDial.CFastDial"

[HKCR\fd\shell\open\command]
"(Default)" = "%Program Files%\Internet Explorer\IEXPLORE.EXE %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]
"elements.exe" = "1"

[HKCR\TypeLib\{AFBDA429-7995-4CCA-9298-7C7D6B4A244C}\1.0\HELPDIR]
"(Default)" = "%Program Files% (x86)\Yandex\FastDial"

[HKCR\Interface\{E16FE932-52D3-4BD9-B50B-A03BEC527579}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\TypeLib\{AFBDA429-7995-4CCA-9298-7C7D6B4A244C}\1.0\0\win32]
"(Default)" = "%Program Files% (x86)\Yandex\FastDial\fastdial.dll"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_GPU_RENDERING]
"elements64.exe" = "1"

[HKCR\Wow6432Node\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}]
"AppID" = "{53C0373B-51E4-4F85-9085-53EF06DE6E00}"

[HKCR\FastDial.CFastDial]
"(Default)" = "Visual Bookmarks"

[HKCR\FastDial.CFastDial.1\CLSID]
"(Default)" = "{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}"

[HKCR\Wow6432Node\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\TypeLib]
"(Default)" = "{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_WEBOC_DOCUMENT_ZOOM]
"elements.exe" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_TABBED_BROWSING]
"elements64.exe" = "1"

[HKCR\Wow6432Node\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\InprocServer32]
"(Default)" = "%Program Files% (x86)\Yandex\FastDial\fastdialhost.dll"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_WEBOC_DOCUMENT_ZOOM]
"elements64.exe" = "1"

[HKU\.DEFAULT\SOFTWARE\AppDataLow\Software\Yandex\Toolbar\Settings]
"Fastdial" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_TABBED_BROWSING]
"elements.exe" = "1"

[HKCR\fd]
"URL Protocol" = ""

[HKCR\TypeLib\{AFBDA429-7995-4CCA-9298-7C7D6B4A244C}\1.0]
"(Default)" = "FastDial 1.0 Type Library"

[HKCR\FastDial.CFastDial\CLSID]
"(Default)" = "{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}"

[HKCR\fd]
"(Default)" = "URL:FastDial Protocol"

[HKCR\TypeLib\{AFBDA429-7995-4CCA-9298-7C7D6B4A244C}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\Wow6432Node\Interface\{E16FE932-52D3-4BD9-B50B-A03BEC527579}]
"(Default)" = "IFastDial"

[HKCR\Wow6432Node\Interface\{E16FE932-52D3-4BD9-B50B-A03BEC527579}\TypeLib]
"(Default)" = "{AFBDA429-7995-4CCA-9298-7C7D6B4A244C}"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{C93F72A2-2162-4BBA-A07A-F13663C297A6}]
"Flags" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_GPU_RENDERING]
"elements.exe" = "1"

[HKCR\Wow6432Node\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}]
"(Default)" = "Visual Bookmarks"

The Trojan deletes the following registry key(s):

[HKCR\FastDial.CFastDial\CurVer]
[HKCR\FastDial.CFastDial.1\CLSID]
[HKCR\FastDial.CFastDial\CLSID]
[HKCR\FastDial.CFastDial]
[HKCR\FastDial.CFastDial.1]

The process MsiExec.exe:1880 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Internet Explorer\Toolbar]
"Locked" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\bartab64host.dll]
"Target" = "%Program Files% (x86)\Yandex\Elements\bartab64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{91397D20-1446-11D4-8AF4-0040CA1127B6}" = "20 7D 39 91 46 14 D4 11 8A F4 00 40 CA 11 27 B6"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\bartab64host.dll]
"Version" = "8.7.0.3110"

[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"ITBar7Layout64" = "13 00 00 00 00 00 00 00 00 00 00 00 30 00 00 00"

The process elements64.exe:868 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\vb]
"State" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\vb\Version]
"URL" = "http://download.cdn.yandex.net/element/ie/silentupdate/891v2/vb-ru.2.18.0.5151.x64.delta.2.16.0.3147.zip"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\elements]
"TimeStamp" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionTime" = "6E 50 DC DE 18 7F D0 01"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@%SystemRoot%\system32]
"fveui.dll,-843" = "BitLocker Drive Encryption"
"fveui.dll,-844" = "BitLocker Data Recovery Agent"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "9E 5E CB 91 18 7F D0 01"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\vb\Version]
"Version" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@%SystemRoot%\system32]
"dnsapi.dll,-103" = "Domain Name System (DNS) Server Trust"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\elements\Version]
"Type" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\vb\Version]
"md5" = "9fe28fa531d40bc5bf1a01d2cf71b3c2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\elements\Version]
"Version" = "Type: REG_QWORD, Length: 8"

"URL" = "http://download.cdn.yandex.net/element/ie/silentupdate/891v2/elements-ru.8.9.1.5100.x64.delta.8.7.0.3110.zip"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\vb]
"TimeStamp" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@%SystemRoot%\system32]
"qagentrt.dll,-10" = "System Health Authentication"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\elements\Version]
"sha2" = "950f295951357e55fab701479446662cf8306fc69e98ebc657530ad192dd6a3d"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 48 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\elements\Version]
"md5" = "d8f47f6a6782b6affddad67bb309d652"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\elements]
"State" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\vb\Version]
"sha2" = "6be2966ef95494a09d67b5351518f932ebc778b37028cba396c88ca970ea93ed"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@%SystemRoot%\system32]
"p2pcollab.dll,-8042" = "Peer to Peer Trust"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\vb\Version]
"Type" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process elements64.exe:3080 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater]
"LastRestoreTime" = "Type: REG_QWORD, Length: 8"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"YandexElements" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110\elements64.exe /auto"

The process elements64.exe:4016 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater]
"NextCheckTime" = "1430026196"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

The process 32ae6a225b45400b5695711fea8b1c8c.tmp:2132 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\RestartManager\Session0000]
"RegFilesHash" = "DA BB 40 4E AA 75 64 A3 02 E9 D1 AB C4 68 8B 1B"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86819F43-51E6-4776-ABAF-A5EACBFE1805}}_is1]
"Inno Setup: Setup Version" = "5.5.4 (a)"
"URLInfoAbout" = "http://advego.ru/"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\RestartManager\Session0000]
"RegFiles0000" = "%Program Files% (x86)\Advego Plagiatus\plagiatus.exe"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86819F43-51E6-4776-ABAF-A5EACBFE1805}}_is1]
"Inno Setup: Deselected Tasks" = "desktopicon,quicklaunchicon"

[HKCU\Software\Microsoft\RestartManager\Session0000]
"SessionHash" = "F9 72 93 BA F1 26 E8 AF 0D 5D 72 7D 70 92 F9 53"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86819F43-51E6-4776-ABAF-A5EACBFE1805}}_is1]
"Inno Setup: User" = "%CurrentUserName%"
"UninstallString" = "%Program Files% (x86)\Advego Plagiatus\unins000.exe"
"InstallLocation" = "%Program Files% (x86)\Advego Plagiatus\"
"Inno Setup: Icon Group" = "Advego Plagiatus"
"NoRepair" = "1"
"InstallDate" = "20150425"
"Inno Setup: Language" = "russian"
"Publisher" = "Advego, Ltd."

[HKCU\Software\Microsoft\RestartManager\Session0000]
"Sequence" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86819F43-51E6-4776-ABAF-A5EACBFE1805}}_is1]
"QuietUninstallString" = "%Program Files% (x86)\Advego Plagiatus\unins000.exe /SILENT"
"URLUpdateInfo" = "http://advego.ru/plagiatus/top/"
"NoModify" = "1"
"EstimatedSize" = "4247"

[HKCU\Software\Microsoft\RestartManager\Session0000]
"Owner" = "54 08 00 00 3A 99 3F 62 18 7F D0 01"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86819F43-51E6-4776-ABAF-A5EACBFE1805}}_is1]
"DisplayName" = "Advego Plagiatus 1.3.1.7"
"Inno Setup: App Path" = "%Program Files% (x86)\Advego Plagiatus"
"HelpLink" = "http://advego.ru/blog/read/plagiatus/"
"Inno Setup: Selected Tasks" = ""

The Trojan deletes the following registry key(s):

[HKCU\Software\Microsoft\RestartManager\Session0000]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\RestartManager\Session0000]
"RegFilesHash"
"Sequence"
"RegFiles0000"
"SessionHash"
"Owner"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

The process u2-ctrl.exe:3616 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Wow6432Node\Interface\{5D4EA112-577A-4377-AD53-A50FE6593F00}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D35A8326-BEE2-47CA-BB99-2886A31017FD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9B84B6C2-A76D-4904-BCAF-C9BF28449182}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{81F45AC1-2A92-4CA8-833A-8C75EA10E696}]
"(Default)" = "IStatistic"

[HKCU\Software\Classes\Wow6432Node\Interface\{81F45AC1-2A92-4CA8-833A-8C75EA10E696}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\TypeLib\{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}\1.0\0\win32]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\u2-ctrl.exe"

[HKCR\u2ctrl.Updater.1\CLSID]
"(Default)" = "{34700894-16CA-43a3-91E2-4A393296F164}"

[HKCR\u2ctrl.Updater\CurVer]
"(Default)" = "u2ctrl.Updater.1"

[HKCU\Software\Classes\Wow6432Node\Interface\{9B84B6C2-A76D-4904-BCAF-C9BF28449182}]
"(Default)" = "IAsyncUpdater"

[HKCU\Software\Classes\Interface\{5D4EA112-577A-4377-AD53-A50FE6593F00}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{0B5EE9BB-BCAC-4C8D-8F22-300B84A23478}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\Interface\{5D4EA112-577A-4377-AD53-A50FE6593F00}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\Interface\{9B84B6C2-A76D-4904-BCAF-C9BF28449182}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{FCB5358B-53DC-40E0-BA2A-D694DD354BD3}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\Interface\{9B84B6C2-A76D-4904-BCAF-C9BF28449182}]
"(Default)" = "IAsyncUpdater"

[HKCR\u2ctrl.Updater]
"(Default)" = "Upd2 Class"

[HKCU\Software\Classes\Wow6432Node\Interface\{81F45AC1-2A92-4CA8-833A-8C75EA10E696}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\AppID\{E45DB0F3-B529-46a4-B8D0-C7BB61756FFF}]
"(Default)" = "u2ctrl"

[HKCU\Software\Classes\Interface\{EFB7CE54-8B07-4CA6-90E3-8BDA870268B0}]
"(Default)" = "IEnvironment"

[HKCU\Software\Classes\Interface\{81F45AC1-2A92-4CA8-833A-8C75EA10E696}]
"(Default)" = "IStatistic"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4F95C42D-0943-4F60-AD25-67310F1F50C4}]
"Policy" = "3"

[HKCU\Software\Classes\Interface\{5D4EA112-577A-4377-AD53-A50FE6593F00}]
"(Default)" = "ILegacy"

[HKCU\Software\Classes\Interface\{FCB5358B-53DC-40E0-BA2A-D694DD354BD3}]
"(Default)" = "ISyncUpdater"

[HKCU\Software\Classes\Wow6432Node\Interface\{FCB5358B-53DC-40E0-BA2A-D694DD354BD3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{34700894-16CA-43a3-91E2-4A393296F164}\LocalServer32]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\u2-ctrl.exe"

[HKCU\Software\Classes\Interface\{0B5EE9BB-BCAC-4C8D-8F22-300B84A23478}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D35A8326-BEE2-47CA-BB99-2886A31017FD}\TypeLib]
"Version" = "1.0"

[HKCR\u2ctrl.Updater.1]
"(Default)" = "Upd2 Class"

[HKCU\Software\Classes\Interface\{EFB7CE54-8B07-4CA6-90E3-8BDA870268B0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{EFB7CE54-8B07-4CA6-90E3-8BDA870268B0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D35A8326-BEE2-47CA-BB99-2886A31017FD}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\Interface\{9B84B6C2-A76D-4904-BCAF-C9BF28449182}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\TypeLib\{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}\1.0\HELPDIR]
"(Default)" = ""

[HKCU\Software\Classes\Wow6432Node\Interface\{D35A8326-BEE2-47CA-BB99-2886A31017FD}]
"(Default)" = "IWebUpdater"

[HKCU\Software\Classes\Wow6432Node\Interface\{5D4EA112-577A-4377-AD53-A50FE6593F00}]
"(Default)" = "ILegacy"

[HKCU\Software\Classes\Wow6432Node\Interface\{FCB5358B-53DC-40E0-BA2A-D694DD354BD3}]
"(Default)" = "ISyncUpdater"

[HKCU\Software\Classes\Interface\{81F45AC1-2A92-4CA8-833A-8C75EA10E696}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{EFB7CE54-8B07-4CA6-90E3-8BDA870268B0}\TypeLib]
"Version" = "1.0"

[HKCR\u2ctrl.Updater\CLSID]
"(Default)" = "{34700894-16CA-43a3-91E2-4A393296F164}"

[HKCU\Software\Classes\Interface\{9B84B6C2-A76D-4904-BCAF-C9BF28449182}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\Interface\{EFB7CE54-8B07-4CA6-90E3-8BDA870268B0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{34700894-16CA-43a3-91E2-4A393296F164}\ProgID]
"(Default)" = "u2ctrl.Updater.1"

[HKCU\Software\Classes\Wow6432Node\Interface\{9B84B6C2-A76D-4904-BCAF-C9BF28449182}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{D35A8326-BEE2-47CA-BB99-2886A31017FD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{EFB7CE54-8B07-4CA6-90E3-8BDA870268B0}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\Interface\{FCB5358B-53DC-40E0-BA2A-D694DD354BD3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{81F45AC1-2A92-4CA8-833A-8C75EA10E696}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCR\Wow6432Node\CLSID\{34700894-16CA-43a3-91E2-4A393296F164}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49cd-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\Wow6432Node\Interface\{0B5EE9BB-BCAC-4C8D-8F22-300B84A23478}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\Wow6432Node\Interface\{5D4EA112-577A-4377-AD53-A50FE6593F00}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\TypeLib\{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\Wow6432Node\CLSID\{34700894-16CA-43a3-91E2-4A393296F164}]
"(Default)" = "Upd2 Class"

[HKCU\Software\Classes\Interface\{5D4EA112-577A-4377-AD53-A50FE6593F00}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{D35A8326-BEE2-47CA-BB99-2886A31017FD}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9B84B6C2-A76D-4904-BCAF-C9BF28449182}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\TypeLib\{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}\1.0]
"(Default)" = "u2ctrl 1.0 Type Library"

[HKCU\Software\Classes\Wow6432Node\Interface\{5D4EA112-577A-4377-AD53-A50FE6593F00}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\Wow6432Node\Interface\{0B5EE9BB-BCAC-4C8D-8F22-300B84A23478}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{FCB5358B-53DC-40E0-BA2A-D694DD354BD3}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCR\AppID\u2-ctrl.EXE]
"AppID" = "{E45DB0F3-B529-46a4-B8D0-C7BB61756FFF}"

[HKCU\Software\Classes\Wow6432Node\Interface\{FCB5358B-53DC-40E0-BA2A-D694DD354BD3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{81F45AC1-2A92-4CA8-833A-8C75EA10E696}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D35A8326-BEE2-47CA-BB99-2886A31017FD}]
"(Default)" = "IWebUpdater"

[HKCR\Wow6432Node\CLSID\{34700894-16CA-43a3-91E2-4A393296F164}\VersionIndependentProgID]
"(Default)" = "u2ctrl.Updater"

[HKCU\Software\Classes\Interface\{EFB7CE54-8B07-4CA6-90E3-8BDA870268B0}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4F95C42D-0943-4F60-AD25-67310F1F50C4}]
"AppName" = "u2-ctrl.exe"

[HKCU\Software\Classes\Interface\{D35A8326-BEE2-47CA-BB99-2886A31017FD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{0B5EE9BB-BCAC-4C8D-8F22-300B84A23478}]
"(Default)" = "IAd"

[HKCU\Software\Classes\Wow6432Node\Interface\{0B5EE9BB-BCAC-4C8D-8F22-300B84A23478}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{81F45AC1-2A92-4CA8-833A-8C75EA10E696}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4F95C42D-0943-4F60-AD25-67310F1F50C4}]
"AppPath" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2"

[HKCU\Software\Classes\Interface\{0B5EE9BB-BCAC-4C8D-8F22-300B84A23478}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{FCB5358B-53DC-40E0-BA2A-D694DD354BD3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{EFB7CE54-8B07-4CA6-90E3-8BDA870268B0}]
"(Default)" = "IEnvironment"

[HKCU\Software\Classes\Wow6432Node\Interface\{0B5EE9BB-BCAC-4C8D-8F22-300B84A23478}]
"(Default)" = "IAd"

The process {0D136A26-C947-4287-995F-53C965D35271}.exe:2956 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "9E 5E CB 91 18 7F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C]
"Blob" = "04 00 00 00 01 00 00 00 10 00 00 00 3E 45 52 15"

[HKCU\Software\Yandex\YandexBrowser]
"lang" = "ru"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 46 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Yandex\YandexBrowser]
"DistribInfoParams"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates]
"B1BC968BD4F49D622AA89A81F2150152A41D829C"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Yandex\YandexBrowser]
"ClidsFile"
"BrandFile"
"brand"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKCU\Software\Yandex\YandexBrowser]
"InstallerData"
"PartnerFile"

The process browser.exe:3552 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

The process browser.exe:3212 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\6252DC40F71143A22FDE9EF7348E064251B18118]
"Blob" = "0F 00 00 00 01 00 00 00 14 00 00 00 1E 42 7A 36"

[HKCU\Software\Yandex\BLBeacon]
"State" = "1"

[HKCU\Software\Yandex\YandexBrowser]
"lastrun" = "13074413273239573"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@%SystemRoot%\system32]
"dnsapi.dll,-103" = "Domain Name System (DNS) Server Trust"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Yandex\YandexBrowser]
"_NumAccounts" = "1"
"_NumSignedIn" = "0"

[HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\74207441729CDD92EC7931D823108DC28192E2BB]
"Blob" = "0F 00 00 00 01 00 00 00 14 00 00 00 83 44 60 93"

[HKCU\Software\Yandex\YandexBrowser]
"usagestats" = "1"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@%SystemRoot%\system32]
"p2pcollab.dll,-8042" = "Peer to Peer Trust"

[HKCU\Software\Chromium\StabilityMetrics]
"user_experience_metrics.stability.exited_cleanly" = "0"

[HKCU\Software\Yandex\BLBeacon]
"Version" = "40.0.2214.3645"

[HKCU\Software\Yandex\YandexBrowser]
"clid" = "2122677"

[HKCU\Software\Yandex\BLBeacon]
"failed_count" = "0"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@""%windir%\System32]
"ie4uinit.exe"",-732" = "Finds and displays information and Web sites on the Internet."

The Trojan deletes the following registry key(s):

[HKCU\Software\Yandex\BLFinchList]

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates]
"6252DC40F71143A22FDE9EF7348E064251B18118"
"74207441729CDD92EC7931D823108DC28192E2BB"

The process browser.exe:3316 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Yandex\BLBeacon]
"State" = "2"
"failed_count" = "0"

Dropped PE files

MD5	File path
a28a9487012ad70d6efd824dce322665	c:\Program Files (x86)\Advego Plagiatus\plagiatus.exe
07332a59871924e1c9047ef460c202be	c:\Program Files (x86)\Advego Plagiatus\unins000.exe
971a41f5ece6557efcf4304218aaf379	c:\Program Files (x86)\Yandex\Common\elements.exe
2549e38e93284be049feaed1c16254da	c:\Program Files (x86)\Yandex\Common\elements64.exe
34bf9fe7634e2fab96f3c478293800b0	c:\Program Files (x86)\Yandex\Elements\barframe.dll
f43a95dcde40e5b49e771acec1f88682	c:\Program Files (x86)\Yandex\Elements\barframe64.dll
8b7e6cfa0e1fd37f425a6b61c2032c01	c:\Program Files (x86)\Yandex\Elements\barshims.dll
8db5e27e0141355a50d0bd3811853aaa	c:\Program Files (x86)\Yandex\Elements\barshims64.dll
a3333e8659cdbea6608db1b32435d4b6	c:\Program Files (x86)\Yandex\Elements\bartab.dll
7bd0198f6b9968da9db21c2287ecb4e1	c:\Program Files (x86)\Yandex\Elements\bartab64.dll
51da86f45bf7662e48ae6eb57f571d60	c:\Program Files (x86)\Yandex\Elements\bartab64host.dll
75a71bafe645c33d4d40ba28b738a607	c:\Program Files (x86)\Yandex\Elements\bartabhost.dll
d86224a084a1815f5381a7523cc2abaa	c:\Program Files (x86)\Yandex\FastDial\fastdial.dll
dd2fd94c48c8452525d87c7c608ece9e	c:\Program Files (x86)\Yandex\FastDial\fastdial64.dll
5eef7abf0e80f1109358bb5f52779f61	c:\Program Files (x86)\Yandex\FastDial\fastdial64host.dll
662960012a0f689f6c35cabe9c18eaa4	c:\Program Files (x86)\Yandex\FastDial\fastdialframe.dll
750d0b55a61a3827b0ef54ca86d4588d	c:\Program Files (x86)\Yandex\FastDial\fastdialframe64.dll
60946d84648c793ec6a548732064f9f5	c:\Program Files (x86)\Yandex\FastDial\fastdialhost.dll
5f324a0541f8797f7b1173faa1acc438	c:\Program Files (x86)\Yandex\FastDial\fastdialshims.dll
aabd0196d2637b460b7413d159a57970	c:\Program Files (x86)\Yandex\FastDial\fastdialshims64.dll
889cf8ad9eaa4a29b613832aa988dcf7	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Common\elements.exe
700be9ee53422b795d8b02761318aefa	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Common\elements64.exe
a43cbe103488bc5af57c86c7362fdbe0	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barframe.dll
90a0e552c8c525b182752becee02a533	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barframe64.dll
68470eff59376322bc00829d9d621dcd	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barshims.dll
5e200cc6012d15a8b39d48951e1c7878	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barshims64.dll
273a1e1e80f4f3b9b30675176d0fbd6d	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\bartab.dll
72ae3bf0b73412daba2d2c23ba9a21a4	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\bartab64.dll
889cf8ad9eaa4a29b613832aa988dcf7	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\Common\elements.exe
700be9ee53422b795d8b02761318aefa	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\Common\elements64.exe
b00dd6b2d1f8ac9211202f238fa88b07	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdial.dll
82d8846ddc2fed3fdf9227b830a36d6f	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdial64.dll
8466eece61ecb4c35d0c2cdd667f68db	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialframe.dll
57c0d94e7e3d7d778c0eec940aa43d72	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialframe64.dll
bd818b82660c4ac1bc29a4cae811f022	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialshims.dll
13c33ec45f1aa425c356699d8540c7ba	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialshims64.dll
32da80a97b55abd1cda9c5257810c6d1	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\rambler.dll
cc72a6b7d3f162e3c5c1ae667601994b	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\rambler64.dll
060b4dcff2b7f6f7b9b279ea4fc5febe	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\ESyncHelper.exe
ec40b647a205b76adc0132b40a95b88e	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\esync.dll
a166fb5936f6e6b6f5d2104c27398e51	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\esync64.dll
700c6a81ecdbaeae98ac60748c71dd05	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\direct.dll
ca858c2f9c53f377a8d0ffc098516d96	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\direct64.dll
a44206c911780dd36e37afe6a003273d	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\yavideo.dll
26803b9ff8f28d94ba701175d5a8352e	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\yavideo64.dll
574bea93147856a6ff34a1061ee5c6b2	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\altsearch.dll
23bacc3fb7926867e2c73cebfed642de	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\altsearch64.dll
14bde3e37e4c5d7b444b983447922d52	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\facebook.dll
794d9ca21ff6d2550a5f64f64d7f0ebc	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\facebook64.dll
381c771b894c70c0627fbc9388fa361f	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\vkontakte.dll
a31ab5ec4c56b956042fabba36c72161	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\vkontakte64.dll
d34c1391b4453d790993748e34430ec6	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\stardust.dll
6fd5e30840e39b75f13291cb14a5db6c	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\stardust64.dll
a6e3297fe8460fd5edf34d7a12efc67c	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\webmaster.dll
fb6b162d92fc0260b52e94b081941704	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\webmaster64.dll
69dbea34773b156c41a2e615dbc612db	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\mailru.dll
7032e5f9f1d13c012805483329cb388d	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\mailru64.dll
02caae9f798916b34013c2d13ca4842c	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\twitter.dll
18c64531fab9261e6f4db27d3ec20e46	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\twitter64.dll
4762df833ebb6d729e9b0006043db845	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\odnoklassniki.dll
7edf77d0d662a55255140ba47250faab	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\odnoklassniki64.dll
c1fd8390d6125554d96be50caacd5dd4	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\radio.dll
9f80995091a0ba02468a5ac0d53120af	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\radio64.dll
c05bc8fc621d511f9a2a01e1cd52accf	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\streamplayer.exe
e86c26b4a580b0d030cc7e793322d177	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\browseroffer.dll
1ba2cb257865f2125c662c9286dba6a9	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\browseroffer64.dll
99e5fe6ee4a0418d99c257827fa15f78	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\gmail.dll
d614c4118a2117090e43fcf84889769c	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\gmail64.dll
54a16e3516ac76e7b5cbb915a71d7c12	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\sb.dll
8d4a6516a1987ed8d36c36c0419ebb58	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\sb64.dll
859fa8a4b3563aaba4b27550f0401fd4	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\smartbox.dll
5975fbddceefe75c21e6cd3de9903683	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\smartbox64.dll
f843619543a67590e8be8ccfeac9610f	c:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\YandexPackSetup[1].exe
1d3e27538f7cd40d5dc9afd2f68f0409	c:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\YandexPackSetup[2].exe
ecde6bb66cfd7e1b1876348c8bab6803	c:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerInstaller.exe
1d3e27538f7cd40d5dc9afd2f68f0409	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexPackSetup.exe
6abaaafc40899fdcf61715371f1b46ec	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-8MR7L.tmp\downloader.exe
6ee7993784ffb8d8c82b3d20395cd6a1	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\lite_installer.exe
9e7e65d9fed7ce4684c708366ff8d4b1	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\sender.exe
3577c3a7cef4ae20a7d5ee167f1d8479	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\{0D136A26-C947-4287-995F-53C965D35271}.exe
9f972d4cc0d0da8ed6b62702230cf2cf	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManager.exe
ecf1b5f5621efe3aedda0c4fcf2099a5	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerGUI.exe
6b6915b4f96d4267a2572fda75e6a10c	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe
05cd793dc1186851f14b712a44911c0f	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\be\BrowserManagerGUI.resources.dll
b5249a267c44caf472ebedd89888fba9	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\en\BrowserManagerGUI.resources.dll
94763a8f6cb5a74f6ca6c67624914527	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\fixhosts.exe
854fc8bf8e842414e8b39d1b64f4eda0	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\kk\BrowserManagerGUI.resources.dll
77364ca0576e1a15f6ca6b884ae3ba70	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\seeder.dll
1a021870b1b058b862d5a41abff13b47	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\tr\BrowserManagerGUI.resources.dll
047ade2258b3d3f33a41e93b5944697a	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\uk\BrowserManagerGUI.resources.dll
971a41f5ece6557efcf4304218aaf379	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110\elements.exe
2549e38e93284be049feaed1c16254da	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110\elements64.exe
a580afd19c960638093714b54b54dd2f	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\show-dlg.dll
6b170a55bcc1020f3d4ae734611893f9	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\show-dlg.exe
6b170a55bcc1020f3d4ae734611893f9	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\show-dlg.exe.bcp
7a67696d114355d9a8df0ce08cb8c87c	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\u2-ctrl.exe
08040fc70e65c75daf5d374ec1617e1b	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\yupdate-exec.exe
5103f2d8edc9a8a89bbfd8d538230d32	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater\praetorian.exe
ab6bde7b084f2cfbec789a7cfba4cd8d	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater\show-dlg.exe
864b51ad79294b3e06fa9560899c0b2e	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater\yupdate-ctrl.exe
c9211823b2bddca32d395563b0c9a0b3	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater\yupdate-exec.exe
fef4d009ec53dc89ccd8fbb7a17b2fb2	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\setup.exe
20b8cd7d7ca68f6c539cfd12f0cbaa70	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\browser.dll
5bd0a60037665c40c0276d33e6d7a50f	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\browser_child.dll
f56204b1467a08174af755b7df008c92	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\browser_elf.dll
9f8f814603aa06ef3687b46e4a7d5438	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\crash_service.exe
c81e0c917d5db4fecd2ec3c7e2712bbf	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\d3dcompiler_46.dll
b174683215f2b62f7facdad0ed471cd0	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\dllyupdate.dll
575075114abd09b2766db97c2a0b5857	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\ffmpegsumo.dll
61a082ff39c9edae15b5a41597f40e21	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\libegl.dll
7fe07d0e4f411e5acb81b0546138bdb9	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\libexif.dll
ea515a1ee667227f2b3d463a5ad46126	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\libglesv2.dll
609aa905f8fc86945f93a81ae50a15fa	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\nacl64.exe
cbf9a483945d42f40d24dc6b65cc9b8c	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\plugins\npmedia_plugin.dll
c62322c77d1aab77b1cf1130fcc3673a	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\plugins\npswf32_16_0_0_305.dll
26b40bdec45cc0e597b62fbf90bc9341	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\service_update.exe
6b170a55bcc1020f3d4ae734611893f9	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\show-dlg.exe
a3235c6b357129cc6aaea424b1619472	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\suspend_api_check.exe
77f595dee5ffacea72b135b1fce1312e	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\xinput1_3.dll
408391e9ae8b23bb12c0f714ffb187e2	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\yapdf.dll
b744aa22e9139b0c920bed06151c1f16	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\yapr.dll
9a83a7e610e6a2331947aec9fe780b7d	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\yawp.dll
08040fc70e65c75daf5d374ec1617e1b	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\yupdate-exec.exe
b858e1f1ebfe4b746af300671aa300d7	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
221a488e6b8c88d9ec5843483794b958	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe
7ba737b4050ff77a859a9e5b494261b0	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\yapin\Yandex.exe
70fe52d099713fd74b6ac07cc5c9703b	c:\Windows\Installer\MSI23E3.tmp

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: Advego, Ltd.
Product Name: Advego Plagiatus
Product Version:
Legal Copyright:
Legal Trademarks:
Original Filename:
Internal Name:
File Version:
File Description: Advego Plagiatus Setup
Comments: This installation was built with Inno Setup.
Language: English (United States)

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
CODE	4096	40240	40448	4.59679	c3bd95c4b1a8e5199981e0d9b45fd18c
DATA	45056	592	1024	1.90742	1ee71d84f1c77af85f1f5c278f880572
BSS	49152	3724	0	0	d41d8cd98f00b204e9800998ecf8427e
.idata	53248	2384	2560	3.07115	bb5485bf968b970e5ea81292af2acdba
.tls	57344	8	0	0	d41d8cd98f00b204e9800998ecf8427e
.rdata	61440	24	512	0.14174	9ba824905bf9c7922b6fc87a38b74366
.reloc	65536	2244	0	0	d41d8cd98f00b204e9800998ecf8427e
.rsrc	69632	107556	108032	3.09929	da41c64ee1b2fffd97c7114719405dac

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL	IP
hxxp://cdn.yandex.net/yandex-pack/downloader/info.rss
hxxp://cache-kiev02.cdn.yandex.net/downloader.yandex.net/yandex-pack/downloader/info.rss	141.8.174.69
hxxp://cdn.yandex.net/yandex-pack/advego/YandexPackSetup.exe
hxxp://cache-kiev09.cdn.yandex.net/downloader.yandex.net/yandex-pack/advego/YandexPackSetup.exe	141.8.174.48
hxxp://95.163.127.68/news/plagiatus/?v=1.3.1.7&ya=1111
hxxp://e6845.ce.akamaiedge.net/crls/secureca.crl
hxxp://e8218.ce.akamaiedge.net/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6dg==
hxxp://clients.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCHwPGLvooe1z
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEDZn4Vi1JMj/v+U4FyeG8eI=
hxxp://cdn.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe
hxxp://mdata.yandex.ru/status.xml?clid=2122685&uuid={6C3F8A62-204E-4385-B520-B1E2A5B092ED}&vnt=6.1x64&top=3.0&file-no=45 15 107 106 25 6 26 27 111 129 121 42 41 43 40 89 18 17 12 11 13 10 21 24 22 20 47 104 103 108 123 124 102
hxxp://cache-kiev02.cdn.yandex.net/download.cdn.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe	141.8.174.69
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/authrootstl.cab?0cff54a7b4ff40c5
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/authrootstl.cab?20f046fabf1d0ba7
hxxp://repository.certum.pl/ca.cer	213.222.201.175
hxxp://crl.certum.pl/ca.crl	213.222.201.150
hxxp://mdata.yandex.ru/status.xml?yasoft=yabrowser&clid=2122677&ui={6C3F8A62-204E-4385-B520-B1E2A5B092ED}&ver=40.0.2214.3645&os=winnt&stat=install&bitness=64&brandID=yandex&eid=&uv=1.1.0.1801&fd=25.04.2015
hxxp://export.yandex.ru/bar/reginfo.xml?lang=ru	93.158.134.27
hxxp://favicon.yandex.net/favicon/some.nonexistent	93.158.134.36
hxxp://www.yandex.ru/instant/config	93.158.134.3
hxxp://favicon.yandex.net/favicon/browser.yandex.ru	93.158.134.36
hxxp://mdata.yandex.ru/status.xml?ui={6C3F8A62-204E-4385-B520-B1E2A5B092ED}&iyasoft=barie&iclid=2122685&iqs=1&ihp=1&version=8.7.0.3110&yst=0&mg=0&ms=0&mqs=0&mhp=0
hxxp://cache-kiev06.cdn.yandex.net/downloader.yandex.net/yandex-pack/downloader/info.rss	141.8.174.111
hxxp://cdn.yandex.net/yandex-pack/bm-partner-ru/YandexPackSetup.exe
hxxp://cache-kiev10.cdn.yandex.net/downloader.yandex.net/yandex-pack/bm-partner-ru/YandexPackSetup.exe	141.8.174.92
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQJ1TBLBrQ9OnPHXPVaWb87MxkNlgQUwu79F9f+tw/GciJ7fvbA4gIz7D4CEH6T6/t8xk5Z6kuad9QG/Ds=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRi82PVYYKWGJWdgVNyePy5kYTdqQQUX5r1blzMzHSa1N197z/b7EyALt0CEA7P9DjI/r81bgTYapgbGlA=
hxxp://clck.yandex.ru/click/dtype=stred/pid=12/cid=72085/path=rs.0ca/*	93.158.134.14
hxxp://sba.yandex.net/cp?json=1&url=market.yandex.ru,mail.yandex.ru,vk.com,youtube.com,maps.yandex.ru,kinopoisk.ru,music.yandex.ru,odnoklassniki.ru,pogoda.yandex.ru,mail.ru,facebook.com,rutracker.org,lenta.ru,avito.ru,my.mail.ru,google.ru,mail.google.com,twitter.com,ru.wikipedia.org,news.yandex.ru,ria.ru,rambler.ru,letitbit.net,zaycev.net,auto.ru,ivi.ru,afisha.ru&client=yabrbookmarks&pver=4.0	77.88.21.232
hxxp://mdata.yandex.ru/status.xml?ui={6C3F8A62-204E-4385-B520-B1E2A5B092ED}&iyasoft=bm&iclid=2021616&icclid=2210962&iqs=0&ihp=0&version=2.1.2.577
hxxp://market.yandex.ru/?from=brow_e1_tableau&nugt=yabrowser-15.2.2214.3645	213.180.204.22
hxxp://clck.yandex.ru/click/dtype=stred/pid=12/cid=72435/path=dwnldr/p=bm-partner-ru/cnt=0/dt=0/ct=1/rt=5/imp=0/*	93.158.134.14
hxxp://mdata.yandex.ru/status.xml?yasoft=bm&clid=2210962&ui={6C3F8A62-204E-4385-B520-B1E2A5B092ED}&ver=2.1.2.577&os=winnt&stat=install&bdata=1110-0410-1081-0081-1190-0090-&brcnt=3&cfg=231-0&dnet=4.0&ie=1&lcl=en&lcl2=1033&sdh=6b170a55bcc1020f3d4ae734611893f9&uac=0&uv=1.1.0.1801&fd=25.04.2015
hxxp://cdn.yandex.net/bm/version.rss
hxxp://cache-kiev11.cdn.yandex.net/download.cdn.yandex.net/bm/version.rss	141.8.174.93
hxxp://cdn.yandex.net/element/ie/silentupdate/891v2/elements-ru.8.9.1.5100.x64.delta.8.7.0.3110.zip
hxxp://cache-kiev05.cdn.yandex.net/download.cdn.yandex.net/element/ie/silentupdate/891v2/elements-ru.8.9.1.5100.x64.delta.8.7.0.3110.zip	141.8.174.56
hxxp://cdn.yandex.net/element/ie/silentupdate/891v2/vb-ru.2.18.0.5151.x64.delta.2.16.0.3147.zip
hxxp://cache-kiev03.cdn.yandex.net/download.cdn.yandex.net/element/ie/silentupdate/891v2/vb-ru.2.18.0.5151.x64.delta.2.16.0.3147.zip	141.8.174.76
hxxp://a1621.g.akamai.net/pki/crl/products/WinPCA.crl
hxxp://a1621.g.akamai.net/pki/crl/products/MicrosoftTimeStampPCA.crl
hxxp://a1363.dscg.akamai.net/pki/crl/products/microsoftrootcert.crl
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEALa8SdwQh28+NjkQGqVhx8=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEGO+CyDUoFQBjrKVo87pCRc=
hxxp://a1621.g.akamai.net/pki/crl/products/MicCodSigPCA_08-31-2010.crl
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAKQll6RM0DNpmNM7zH3/Qc=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTEemCaVgs8Tuh2B9fGVE0pKKNyzgQUTF+nNhcF4oZhIkk5jLmo40rgOBoCEC6utoKGY/7ZdVX4/iTzOxo=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRODEXefhs/UZFum2o8YfzOFwceMwQUkz5j3yJ0BOBkhDHd2yOfDq+2TZMCEA89qsgV9niZmSI6gIO0S/U=
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?20f046fabf1d0ba7	87.245.221.97
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEALa8SdwQh28+NjkQGqVhx8=	23.43.139.27
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w=	23.43.139.27
hxxp://ts-ocsp.ws.symantec.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRi82PVYYKWGJWdgVNyePy5kYTdqQQUX5r1blzMzHSa1N197z/b7EyALt0CEA7P9DjI/r81bgTYapgbGlA=	23.43.139.27
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCHwPGLvooe1z	216.58.209.206
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRODEXefhs/UZFum2o8YfzOFwceMwQUkz5j3yJ0BOBkhDHd2yOfDq+2TZMCEA89qsgV9niZmSI6gIO0S/U=	23.43.139.27
hxxp://download.cdn.yandex.net/element/ie/silentupdate/891v2/vb-ru.2.18.0.5151.x64.delta.2.16.0.3147.zip	5.45.205.233
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTEemCaVgs8Tuh2B9fGVE0pKKNyzgQUTF+nNhcF4oZhIkk5jLmo40rgOBoCEC6utoKGY/7ZdVX4/iTzOxo=	23.43.139.27
hxxp://downloader.yandex.net/yandex-pack/advego/YandexPackSetup.exe	5.45.205.232
hxxp://soft.export.yandex.ru/status.xml?ui={6C3F8A62-204E-4385-B520-B1E2A5B092ED}&iyasoft=barie&iclid=2122685&iqs=1&ihp=1&version=8.7.0.3110&yst=0&mg=0&ms=0&mqs=0&mhp=0	93.158.134.108
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEDZn4Vi1JMj/v+U4FyeG8eI=	23.43.139.27
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEGO+CyDUoFQBjrKVo87pCRc=	23.43.139.27
hxxp://soft.export.yandex.ru/status.xml?yasoft=yabrowser&clid=2122677&ui={6C3F8A62-204E-4385-B520-B1E2A5B092ED}&ver=40.0.2214.3645&os=winnt&stat=install&bitness=64&brandID=yandex&eid=&uv=1.1.0.1801&fd=25.04.2015	93.158.134.108
hxxp://downloader.yandex.net/yandex-pack/downloader/info.rss	5.45.205.232
hxxp://soft.export.yandex.ru/status.xml?ui={6C3F8A62-204E-4385-B520-B1E2A5B092ED}&iyasoft=bm&iclid=2021616&icclid=2210962&iqs=0&ihp=0&version=2.1.2.577	93.158.134.108
hxxp://download.cdn.yandex.net/bm/version.rss	5.45.205.233
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?0cff54a7b4ff40c5	87.245.221.97
hxxp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl	87.245.221.98
hxxp://download.cdn.yandex.net/element/ie/silentupdate/891v2/elements-ru.8.9.1.5100.x64.delta.8.7.0.3110.zip	5.45.205.233
hxxp://crl.geotrust.com/crls/secureca.crl	23.43.133.163
hxxp://crl.microsoft.com/pki/crl/products/WinPCA.crl	87.245.221.98
hxxp://soft.export.yandex.ru/status.xml?clid=2122685&uuid={6C3F8A62-204E-4385-B520-B1E2A5B092ED}&vnt=6.1x64&top=3.0&file-no=45 15 107 106 25 6 26 27 111 129 121 42 41 43 40 89 18 17 12 11 13 10 21 24 22 20 47 104 103 108 123 124 102	93.158.134.108
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c=	23.43.139.27
hxxp://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl	87.245.221.98
hxxp://download.cdn.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe	5.45.205.233
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8=	23.43.139.27
hxxp://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQJ1TBLBrQ9OnPHXPVaWb87MxkNlgQUwu79F9f+tw/GciJ7fvbA4gIz7D4CEH6T6/t8xk5Z6kuad9QG/Ds=	23.43.139.27
hxxp://market.yandex.ua/?from=brow_e1_tableau&nugt=yabrowser-15.2.2214.3645	213.180.204.22
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAKQll6RM0DNpmNM7zH3/Qc=	23.43.139.27
hxxp://soft.export.yandex.ru/status.xml?yasoft=bm&clid=2210962&ui={6C3F8A62-204E-4385-B520-B1E2A5B092ED}&ver=2.1.2.577&os=winnt&stat=install&bdata=1110-0410-1081-0081-1190-0090-&brcnt=3&cfg=231-0&dnet=4.0&ie=1&lcl=en&lcl2=1033&sdh=6b170a55bcc1020f3d4ae734611893f9&uac=0&uv=1.1.0.1801&fd=25.04.2015	93.158.134.108
hxxp://g.symcd.com/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6dg==	23.43.139.27
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI=	23.43.139.27
hxxp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl	87.245.221.98
hxxp://downloader.yandex.net/yandex-pack/bm-partner-ru/YandexPackSetup.exe	5.45.205.232
cache-kiev12.cdn.yandex.net	141.8.174.94
cache-kiev01.cdn.yandex.net	141.8.174.96
avatars.yandex.net	87.250.247.194
browser.yandex.ua	87.250.250.85
storage.mds.yandex.net	213.180.204.158
storage.ape.yandex.net	93.158.134.55
mc.yandex.ru	87.250.250.119
sba.cdn.yandex.net	5.45.205.231
www.gstatic.com	216.58.209.163
cache-kiev04.cdn.yandex.net	141.8.174.89
api.browser.yandex.ru	87.250.250.82
cache-kiev07.cdn.yandex.net	141.8.174.112
pass.yandex.ru	213.180.204.51
browser.yandex.ru	87.250.250.85
browser-api.store.yandex.net	77.88.21.216
cache-kiev08.cdn.yandex.net	141.8.174.113
pass.yandex.ua	213.180.204.47
yastatic.net	178.154.131.215
advego.ru

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

SURICATA UDPv4 invalid checksum
SURICATA IPv4 invalid checksum
ET POLICY curl User-Agent Outbound
SURICATA STREAM ESTABLISHED packet out of window
SURICATA STREAM Packet with invalid ack
SURICATA STREAM ESTABLISHED invalid ack
ET SHELLCODE Possible TCP x86 JMP to CALL Shellcode Detected
SURICATA STREAM SHUTDOWN RST invalid ack
SURICATA STREAM FIN out of window

Traffic

GET /click/dtype=stred/pid=12/cid=72435/path=dwnldr/p=bm-partner-ru/cnt=0/dt=0/ct=1/rt=5/imp=0/* HTTP/1.1

User-Agent: curl/1.1

Host: clck.yandex.ru

Accept: *.*


HTTP/1.1 200 Ok

Content-Type: image/gif

Cache-Control: no-cache

Content-Length: 43

GIF89a.............!.......,...........L..;..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTEemCaVgs8Tuh2B9fGVE0pKKNyzgQUTF+nNhcF4oZhIkk5jLmo40rgOBoCEC6utoKGY/7ZdVX4/iTzOxo= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1552

content-transfer-encoding: binary

Cache-Control: max-age=448326, public, no-transform, must-revalidate

Last-Modified: Thu, 23 Apr 2015 10:00:09 GMT

Expires: Thu, 30 Apr 2015 10:00:09 GMT

Date: Sat, 25 Apr 2015 05:31:34 GMT

Connection: keep-alive
0..........0..... [email protected]
3100009Z0s0q0I0... .........z`.V.<N.v...TM)(.r...L_.6....a"I9....J.
8........c..uU..$.;.....20150423100009Z....20150430100009Z0...*.H.....
.........{...M...p.....?.T.}....;.. .....P...}....b.Q.)6.{....`;......
..23.P|9.S....C.......B.....?....k..N>........B..t6.$.o...([email protected].=..
....P...I.lm.J.M.}[`[email protected]#5.6si..M]...m.9....m.0.0..Tkf...
..t...hx...\...Q.#...YE.p....W. .4.7-.k...g..b..\.k..0.N....50..10..-0
..........y.P}~.EY....T]. 0...*.H........0..1.0...U....US1.0...U....Ve
riSign, Inc.1<0:..U...3Class 3 Public Primary Certification Authori
ty - G21:08..U...1(c) 1998 VeriSign, Inc. - For authorized use only1.0
...U....VeriSign Trust Network0...141202000000Z..151216235959Z0..1.0..
.U....US1.0...U....Symantec Corporation1.0...U....Symantec Trust Netwo
rk1?0=..U...6Symantec Class 3 PCA - G2 OCSP Responder Certificate 30..
"0...*.H.............0..........6..]......w';.r........I..c..4.... ...
......TyW......hd_.....!C.k......SE<?o.H.. .me.c..9N.&....e.^-..a..
...i\:..*."..u...|....".Nf3.~.L...QW...p.....-]UV8U...J&.<./.G.....
I...4.T....#I*.i.E0\..~q$.I.......X?G....f.t......v.l.U.Ld.I...B.....=
...Sf...H.s.........0..0...U....0.0l..U. .e0c0a..`.H...E....0R0&.. ...
......hXXp://VVV.symauth.com/cps0(.. .......0...hXXp://VVV.symauth.com
/rpa0...U.%..0... .......0...U........0... .....0......0!..U....0...0.
1.0...U....TGV-B-2740...*.H............1.`...i.....H.C.i.9~.i..Z.r.*$.
.(./.ag9.....J.Q.~.`.$?b..C....<.h.........d&....3.kV.....f...3<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRODEXefhs/UZFum2o8YfzOFwceMwQUkz5j3yJ0BOBkhDHd2yOfDq+2TZMCEA89qsgV9niZmSI6gIO0S/U= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1725

content-transfer-encoding: binary

Cache-Control: max-age=512187, public, no-transform, must-revalidate

Last-Modified: Fri, 24 Apr 2015 03:44:50 GMT

Expires: Fri, 1 May 2015 03:44:50 GMT

Date: Sat, 25 Apr 2015 05:31:34 GMT

Connection: keep-alive
0..........0..... .....0......0...0......%bn.$..5.......?'4....2015042
4034450Z0s0q0I0... ........N.E.~.?Q.n.j<a.....3...>c."t..d.1..#.
...M....=....x..":...K.....20150424034450Z....20150501034450Z0...*.H..
...........t........=..O...i...9....... .J.5.]... ...[r.$M.!.bD...z...
.o...30^.u..l...6.N!.K.C......S.,'2......4.....l.... ....I..2.}.&..x..
/C2..x?$n..`.....-l.2..'.>[email protected]......$.x.....A.;....)U*R..r..i.
[]..T....5Q......t..R6..4.7u....3..`..c..xLk....i|.S....1.~.....0...0.
..0..........7.R.~|..r."....#0...*.H........0..1.0...U....US1.0...U...
.VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of us
e at hXXps://VVV.verisign.com/rpa (c)091.0,..U...%VeriSign Class 3 Cod
e Signing 2009 CA0...150401000000Z..150630235959Z0..1.0...U....US1.0..
.U....VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1VeriSi
gn Class 3 Code Signing 2009 OCSP Responder0.."0...*.H.............0..
........z..|..>.....5.Z ...2.C MWIH.5......M.\.... ...eW..`.B=..`:.
.R. ...Z.k.Y.....p@.(3.c....a.;..[E....J:'...`...B....M..&......{. (..
......%......^[v[....m....*.T.o&4..3.....3.........G...e)...'?.K..2s..
8=?..z.:..T..-.8R..8wv7*U.K..c...<s...]{.........6.?_...........0..
.0...U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://www
.verisign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS
 incorp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0.
..U........0... .....0......0"..U....0...0.1.0...U....TGV-B-34920...*.
H.............,..-......q3a........z....t;B.z.h...]...#}.6.,..YU..<<< skipped >>>

HEAD /status.xml?yasoft=yabrowser&clid=2122677&ui={6C3F8A62-204E-4385-B520-B1E2A5B092ED}&ver=40.0.2214.3645&os=winnt&stat=install&bitness=64&brandID=yandex&eid=&uv=1.1.0.1801&fd=25.04.2015 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

User-Agent: Microsoft BITS/7.5

Host: soft.export.yandex.ru


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Sat, 25 Apr 2015 05:27:56 GMT

Content-Type: text/xml

Content-Length: 64

Last-Modified: Wed, 19 Nov 2014 09:40:42 GMT

Connection: keep-alive

Keep-Alive: timeout=120

Accept-Ranges: bytes
HTTP/1.1 200 OK..Server: nginx/1.4.7..Date: Sat, 25 Apr 2015 05:27:56 
GMT..Content-Type: text/xml..Content-Length: 64..Last-Modified: Wed, 1
9 Nov 2014 09:40:42 GMT..Connection: keep-alive..Keep-Alive: timeout=1
20..Accept-Ranges: bytes......


GET /status.xml?yasoft=yabrowser&clid=2122677&ui={6C3F8A62-204E-4385-B520-B1E2A5B092ED}&ver=40.0.2214.3645&os=winnt&stat=install&bitness=64&brandID=yandex&eid=&uv=1.1.0.1801&fd=25.04.2015 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Wed, 19 Nov 2014 09:40:42 GMT

User-Agent: Microsoft BITS/7.5

Host: soft.export.yandex.ru


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Sat, 25 Apr 2015 05:27:56 GMT

Content-Type: text/xml

Content-Length: 64

Last-Modified: Wed, 19 Nov 2014 09:40:42 GMT

Connection: keep-alive

Keep-Alive: timeout=120

Accept-Ranges: bytes
<?xml version="1.0" encoding="windows-1251"?>.<page>.ok.&l
t;/page>.HTTP/1.1 200 OK..Server: nginx/1.4.7..Date: Sat, 25 Apr 20
15 05:27:56 GMT..Content-Type: text/xml..Content-Length: 64..Last-Modi
fied: Wed, 19 Nov 2014 09:40:42 GMT..Connection: keep-alive..Keep-Aliv
e: timeout=120..Accept-Ranges: bytes..<?xml version="1.0" encoding=
"windows-1251"?>.<page>.ok.</page>.....


HEAD /status.xml?ui={6C3F8A62-204E-4385-B520-B1E2A5B092ED}&iyasoft=barie&iclid=2122685&iqs=1&ihp=1&version=8.7.0.3110&yst=0&mg=0&ms=0&mqs=0&mhp=0 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

User-Agent: Microsoft BITS/7.5

Host: soft.export.yandex.ru


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Sat, 25 Apr 2015 05:28:01 GMT

Content-Type: text/xml

Content-Length: 64

Last-Modified: Wed, 19 Nov 2014 09:40:42 GMT

Connection: keep-alive

Keep-Alive: timeout=120

Accept-Ranges: bytes
....


GET /status.xml?ui={6C3F8A62-204E-4385-B520-B1E2A5B092ED}&iyasoft=barie&iclid=2122685&iqs=1&ihp=1&version=8.7.0.3110&yst=0&mg=0&ms=0&mqs=0&mhp=0 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Wed, 19 Nov 2014 09:40:42 GMT

User-Agent: Microsoft BITS/7.5

Host: soft.export.yandex.ru


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Sat, 25 Apr 2015 05:28:01 GMT

Content-Type: text/xml

Content-Length: 64

Last-Modified: Wed, 19 Nov 2014 09:40:42 GMT

Connection: keep-alive

Keep-Alive: timeout=120

Accept-Ranges: bytes
<?xml version="1.0" encoding="windows-1251"?>.<page>.ok.&l
t;/page>.HTTP/1.1 200 OK..Server: nginx/1.4.7..Date: Sat, 25 Apr 20
15 05:28:01 GMT..Content-Type: text/xml..Content-Length: 64..Last-Modi
fied: Wed, 19 Nov 2014 09:40:42 GMT..Connection: keep-alive..Keep-Aliv
e: timeout=120..Accept-Ranges: bytes..<?xml version="1.0" encoding=
"windows-1251"?>.<page>.ok.</page>.....


HEAD /status.xml?ui={6C3F8A62-204E-4385-B520-B1E2A5B092ED}&iyasoft=bm&iclid=2021616&icclid=2210962&iqs=0&ihp=0&version=2.1.2.577 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

User-Agent: Microsoft BITS/7.5

Host: soft.export.yandex.ru


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Sat, 25 Apr 2015 05:28:07 GMT

Content-Type: text/xml

Content-Length: 64

Last-Modified: Wed, 19 Nov 2014 09:40:42 GMT

Connection: keep-alive

Keep-Alive: timeout=120

Accept-Ranges: bytes
....


GET /status.xml?ui={6C3F8A62-204E-4385-B520-B1E2A5B092ED}&iyasoft=bm&iclid=2021616&icclid=2210962&iqs=0&ihp=0&version=2.1.2.577 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Wed, 19 Nov 2014 09:40:42 GMT

User-Agent: Microsoft BITS/7.5

Host: soft.export.yandex.ru


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Sat, 25 Apr 2015 05:28:07 GMT

Content-Type: text/xml

Content-Length: 64

Last-Modified: Wed, 19 Nov 2014 09:40:42 GMT

Connection: keep-alive

Keep-Alive: timeout=120

Accept-Ranges: bytes
<?xml version="1.0" encoding="windows-1251"?>.<page>.ok.&l
t;/page>.HTTP/1.1 200 OK..Server: nginx/1.4.7..Date: Sat, 25 Apr 20
15 05:28:07 GMT..Content-Type: text/xml..Content-Length: 64..Last-Modi
fied: Wed, 19 Nov 2014 09:40:42 GMT..Connection: keep-alive..Keep-Aliv
e: timeout=120..Accept-Ranges: bytes..<?xml version="1.0" encoding=
"windows-1251"?>.<page>.ok.</page>.....


HEAD /status.xml?yasoft=bm&clid=2210962&ui={6C3F8A62-204E-4385-B520-B1E2A5B092ED}&ver=2.1.2.577&os=winnt&stat=install&bdata=1*1*1*0-0*4*1*0-1*0*8*1-0*0*8*1-1*1*9*0-0*0*9*0-&brcnt=3&cfg=231-0&dnet=4.0&ie=1&lcl=en&lcl2=1033&sdh=6b170a55bcc1020f3d4ae734611893f9&uac=0&uv=1.1.0.1801&fd=25.04.2015 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

User-Agent: Microsoft BITS/7.5

Host: soft.export.yandex.ru


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Sat, 25 Apr 2015 05:28:18 GMT

Content-Type: text/xml

Content-Length: 64

Last-Modified: Wed, 19 Nov 2014 09:40:42 GMT

Connection: keep-alive

Keep-Alive: timeout=120

Accept-Ranges: bytes
....


GET /status.xml?yasoft=bm&clid=2210962&ui={6C3F8A62-204E-4385-B520-B1E2A5B092ED}&ver=2.1.2.577&os=winnt&stat=install&bdata=1*1*1*0-0*4*1*0-1*0*8*1-0*0*8*1-1*1*9*0-0*0*9*0-&brcnt=3&cfg=231-0&dnet=4.0&ie=1&lcl=en&lcl2=1033&sdh=6b170a55bcc1020f3d4ae734611893f9&uac=0&uv=1.1.0.1801&fd=25.04.2015 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Wed, 19 Nov 2014 09:40:42 GMT

User-Agent: Microsoft BITS/7.5

Host: soft.export.yandex.ru


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Sat, 25 Apr 2015 05:28:18 GMT

Content-Type: text/xml

Content-Length: 64

Last-Modified: Wed, 19 Nov 2014 09:40:42 GMT

Connection: keep-alive

Keep-Alive: timeout=120

Accept-Ranges: bytes
<?xml version="1.0" encoding="windows-1251"?>.<page>.ok.&l
t;/page>.HTTP/1.1 200 OK..Server: nginx/1.4.7..Date: Sat, 25 Apr 20
15 05:28:18 GMT..Content-Type: text/xml..Content-Length: 64..Last-Modi
fied: Wed, 19 Nov 2014 09:40:42 GMT..Connection: keep-alive..Keep-Aliv
e: timeout=120..Accept-Ranges: bytes..<?xml version="1.0" encoding=
"windows-1251"?>.<page>.ok.</page>...

HEAD /download.cdn.yandex.net/bm/version.rss HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

User-Agent: Microsoft BITS/7.5

Host: cache-kiev11.cdn.yandex.net


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Sat, 25 Apr 2015 05:28:18 GMT

Content-Type: application/rss xml

Content-Length: 6011

Connection: keep-alive

ETag: "4149516163"

Last-Modified: Thu, 16 Apr 2015 11:57:05 GMT

Accept-Ranges: bytes

....

GET /download.cdn.yandex.net/bm/version.rss HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Thu, 16 Apr 2015 11:57:05 GMT

User-Agent: Microsoft BITS/7.5

Host: cache-kiev11.cdn.yandex.net


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Sat, 25 Apr 2015 05:28:18 GMT

Content-Type: application/rss xml

Content-Length: 6011

Connection: keep-alive

ETag: "3932130162"

Last-Modified: Thu, 16 Apr 2015 11:57:05 GMT

Accept-Ranges: bytes
<?xml version="1.0" encoding="windows-1251"?>..<rss xmlns:ver
sion="hXXp://xml.yandex.ru/rss/versionmodule" version="2.0">..   &l
t;channel>..      <title>........ .........</title>..  
    <link>hXXp://VVV.yandex.ru/</link>..      <descript
ion>........ .........</description>..      <managingEdito
r>[email protected]</managingEditor>..      <item>..
         <title>........ .........</title>..         <l
ink>hXXp://VVV.yandex.ru/</link>..         <description>
;</description>..         <pubDate>Fri, 03 Apr 2015 12:00:
00 GMT</pubDate>..         <guid>hXXp://downloader.yandex.
net/yandex-pack/bm/BrowserManagerInstaller-ru.exe</guid>..      
   <version:distargs>/quiet</version:distargs>..         &
lt;version:nick>bm</version:nick>..         <version:dists
ize>4087224</version:distsize>..         <version:platform
>winnt</version:platform>..         <version:version>2.
1.2.577</version:version>..    . <version:status>critical&
lt;/version:status>..    . <version:uac_dlg>hide</version:
uac_dlg>..         <update:target>1.3.1.502</update:target
>..         <update:guid>hXXp://downloader.yandex.net/yandex-
pack/bm/BrowserManagerInstaller-ru-bs.exe</update:guid>..       
  <update:nick>bm</update:nick>..         <update:dists
ize>4106800</update:distsize>..         <update:distar<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQJ1TBLBrQ9OnPHXPVaWb87MxkNlgQUwu79F9f+tw/GciJ7fvbA4gIz7D4CEH6T6/t8xk5Z6kuad9QG/Ds= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.thawte.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1396

content-transfer-encoding: binary

Cache-Control: max-age=463307, public, no-transform, must-revalidate

Last-Modified: Thu, 23 Apr 2015 14:05:24 GMT

Expires: Thu, 30 Apr 2015 14:05:24 GMT

Date: Sat, 25 Apr 2015 05:28:04 GMT

Connection: keep-alive
0..p......i0..e.. .....0.....V0..R0..........Y.U..7q$.Z.5.(....2015042
3140524Z0s0q0I0... ..........0K..=:s.\.ZY.;3..............r"{~....3.&g
t;..~...|.NY.K.w...;....20150423140524Z....20150430140524Z0...*.H.....
...........DT......,.........e..OQ.)[email protected].. ....
...#.?.=. u...5..Z'.......$T.x.Y.6..K...b.....-..J.....:,..c.$il[~..o.
[email protected]....:TV....[.Q..t.'[email protected]`.5...i......a.....x
/..5.(/z.*l..Q.............S....W......A7)8.....A.C./t....0...0...0...
.........s7..I....G.mF.0...*.H........0..1.0...U....ZA1.0...U....Weste
rn Cape1.0...U....Durbanville1.0...U....Thawte1.0...U....Thawte Certif
ication1.0...U....Thawte Timestamping CA0...150207000000Z..15050823595
9Z0..1.0...U....ZA1.0...U....Western Cape1.0...U....Durbanville1.0...U
....Thawte1.0...U....Thawte Certification1 0)..U..."Thawte Timestampin
g OCSP Responder0.."0...*.H.............0..................W..nC.V.R..
.(.-Q.z..d`..4R`=b.....^...f...kM...pg......Y .;.c.-KZ.w...u........f.
...~n..bGF.9.>.|...5..............G6..=X0.j..._./m.s..<.U>o..
.!yT...w........v..OP.8.-~........5-.4>?......x..."jD9w..<...{D.
&.fg..F..]...[A/[.O...7.!.}....Cd..1{.........d0b0...U....0.0...U.%..0
... .......0...U........0... .....0......0"..U....0...0.1.0...U....TGV
-B-30420...*.H............I;....TkuA.[....VB.F..;W..#` .......Q.._R..V
..U..w...k.T...x..Y...,^>#...L$... .....X-.....m..>2.W.o.<.um
.......R2..i....T.~.{. ..<<< skipped >>>

GET /bar/reginfo.xml?lang=ru HTTP/1.1

Host: export.yandex.ru

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept: */*

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8

Cookie: ys=def_bro.0; yandexuid=2270699091429939676


HTTP/1.1 200 OK

Content-Type: text/xml; charset=utf-8

Expires: Sat, 25 Apr 2015 05:32:57 GMT

X-Content-Type-Options: nosniff

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 1225

Date: Sat, 25 Apr 2015 05:27:57 GMT

Server: lighttpd/1.4.26
...........W.n.F... .YtSK|.zt4^.1Pt.E..@.#..9$.C=.J..."@v.uU.E7...h.#.
"....z./S).[.......8.9s......_YR.{!.#..!.2't=6..DL;.tD.`.MC.BY<Z..\
.h........K.].....^$...2.'.`Ng..x.@[}...a.CS..1....@..!........j.=H...
)I.J....e.6.N/.ZX.Z.C...S.Q...O.)..9.{f..=......ji....D..9.....qJ.V.1.
2.......1..C...* k.@...(...=&...?.[%}.^gO`...v. ....&..y..K..*.vR)C..O
m...v...Sz....|[.o[R..H}..WE."[email protected]".....b.....EKL.hg#.
.^.W..v&.....7..q.(..g.....e...z.....R.....x.[=..q...Z1...~q6..|..!.@.
...p.J.[dZ...................).....L54MW...9~........".`.......:a.....
..-..M.(.Q.s)O.BF.....U....Pua.q...wr.C.4..c...P...aJg9......GVa.3..&l
t;..[..&.".......fu..cM............#P.9"F/G 8... .. ...'l..t......I..*
.Hl....e.r..k..\(b.....|..~.}'.....H..^..r.... ...8..o"r...{F ...F...~
7b3.Jy\..Y.J..I...a.*.L.E...;:@....y../..;.\....W#.%.5X[.;"......Y.NX.
.RN........I.Q........>............/.k.<. b4..l......Fv....5.D..
`.rXTOv.9.......V...........v.O....B...!.....q<D...M.N.Ku..1.K[neR.
V4X.?..H.,.AQ(;)...!.H..$.=.2}..D. .....2.[.ejkS.#r.[ .(....)....1....
.X..<.....Y.8"....vQD.q......2{..'..6.C).7..~l..n)<.l.....nP.'..
)Q...m.lCC.^...%......I...H.4.....-...cO]...?..j..[_P......'........x.
...%.@).Ip...J..~"./.m...5.Q8......P.Ks.>...K..o..........

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1453

content-transfer-encoding: binary

Cache-Control: max-age=513406, public, no-transform, must-revalidate

Last-Modified: Fri, 24 Apr 2015 04:05:12 GMT

Expires: Fri, 1 May 2015 04:05:12 GMT

Date: Sat, 25 Apr 2015 05:31:16 GMT

Connection: keep-alive
0..........0..... .....0......0...0......T3t.%..O.E..~..F.=....2015042
4040512Z0s0q0I0... ........H.dI.....3..^B...d6Q....ZL%."..1.m..._)..a.
.eR&.....Y.)..".\....20150424040512Z....20150501040512Z0...*.H........
........UJN.z...%sp.&.Wp..WX.W..D.R..Y..`.*A..4%....|,.8z.8.R.,....@..
OJ.....zMp.$!..a..L......~^.y.. YB h..L.",.......7....3|......3L..M.F.
........C. a.!{.&.T.....5..E.!vc.%j.....*)..01...fd..........67.....|.
0w* ..9."...........b[..C.........m..K......v..........0...0...0..3...
..../...b.v..-....l}0...*.H........0_1.0...U....US1.0...U....VeriSign,
 Inc.1705..U....Class 3 Public Primary Certification Authority0...1412
02000000Z..151216235959Z0..1.0...U....US1.0...U....Symantec Corporatio
n1.0...U....Symantec Trust Network1?0=..U...6Symantec Class 3 PCA - G1
 OCSP Responder Certificate 30.."0...*.H.............0..........'.....
.Y..x.3B1.7..Q..`..d.. ....s..t.$a.....j2R.{ ,*..c{.3.....H..3-; )....
.0._...*..9M..V...... ...{m...-.......)..tR..{D....~...M...T..pS.p..^|
o....S..v.).)[email protected]#qh...u1T.].G0.]E...=._.....
. ........TE...Sa.s4........r...3.............0..0...U....0.0l..U. .e0
c0a..`.H...E....0R0&.. .........hXXp://VVV.symauth.com/cps0(.. .......
0...hXXp://VVV.symauth.com/rpa0...U.%..0... .......0...U........0... .
....0......0!..U....0...0.1.0...U....TGV-B-2730...*.H.............$..H
......oU....Y!.z{*.V.M..u.._z..3>.. 0....3..m.....e.......a..D.....
......e..F6:.y.....di.......<y.Z.......x}..q.2....UZ1 :,....
<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=571542, public, no-transform, must-revalidate

Last-Modified: Fri, 24 Apr 2015 20:15:13 GMT

Expires: Fri, 1 May 2015 20:15:13 GMT

Date: Sat, 25 Apr 2015 05:31:16 GMT

Connection: keep-alive
0..........0..... .....0......0...0......'.V.8.F.V....H....JW..2015042
4201513Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
..M.s.Q~...@?j.......20150424201513Z....20150501201513Z0...*.H........
........'..n..........0.Z-([email protected]*K..z..._>...M......
h...:Z.....t?.1..`..@".9j.....G.p /1.l bH...Q3{."..j....Z.M.....l..}..
.M?.; H......3..<..].......J..W....j.......J..{.........X.v..y...Zl
`f.D&[.oT....f..=.m^.,...6}k...(......6.....1Uu..%.X.x./....#0...0...0
..........r..?.*......y"..0...*.H........0..1.0...U....US1.0...U....Ve
riSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use a
t hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code S
igning 2009-2 CA0...150226000000Z..150527235959Z0..1.0...U....US1.0...
U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms o
f use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Clas
s 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0.......
......m5*R........2....>...yU4..L.. ...........u..Hez..Pn.....d...n
z(...V7.}^...d!RX...bl..[..a...L.. .~..Ij......%..%p.-...u..:..i..F*].
..*....{NH..|0...gHX.Q.r....S..........._.9.(w...suC...N..s.....&."...
:.C.Q.i~rl..<..krS..8.B..o][email protected]...
U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.veri
sign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS inco
rp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U..
......0... .....0......0"..U....0...0.1.0...U....TGV-B-32010...*.H<<< skipped >>>

GET /cp?json=1&url=market.yandex.ru,mail.yandex.ru,vk.com,youtube.com,maps.yandex.ru,kinopoisk.ru,music.yandex.ru,odnoklassniki.ru,pogoda.yandex.ru,mail.ru,facebook.com,rutracker.org,lenta.ru,avito.ru,my.mail.ru,google.ru,mail.google.com,twitter.com,ru.wikipedia.org,news.yandex.ru,ria.ru,rambler.ru,letitbit.net,zaycev.net,auto.ru,ivi.ru,afisha.ru&client=yabrbookmarks&pver=4.0 HTTP/1.1

Host: sba.yandex.net

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept: */*

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8


HTTP/1.1 302 Moved temporarily

Location: hXXps://sba.yandex.net/cp?json=1&url=market.yandex.ru,mail.yandex.ru,vk.com,youtube.com,maps.yandex.ru,kinopoisk.ru,music.yandex.ru,odnoklassniki.ru,pogoda.yandex.ru,mail.ru,facebook.com,rutracker.org,lenta.ru,avito.ru,my.mail.ru,google.ru,mail.google.com,twitter.com,ru.wikipedia.org,news.yandex.ru,ria.ru,rambler.ru,letitbit.net,zaycev.net,auto.ru,ivi.ru,afisha.ru&client=yabrbookmarks&pver=4.0

Content-Length: 0

HTTP/1.1 302 Moved temporarily..Location: hXXps://sba.yandex.net/cp?js
on=1&url=market.yandex.ru,mail.yandex.ru,vk.com,youtube.com,ma
ps.yandex.ru,kinopoisk.ru,music.yandex.ru,odnoklassniki.ru,pog
oda.yandex.ru,mail.ru,facebook.com,rutracker.org,lenta.ru,av
ito.ru,my.mail.ru,google.ru,mail.google.com,twitter.com,ru.w
ikipedia.org,news.yandex.ru,ria.ru,rambler.ru,letitbit.net,z
aycev.net,auto.ru,ivi.ru,afisha.ru&client=yabrbookmarks&pver=4.0
..Content-Length: 0......

GET /ca.cer HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: repository.certum.pl


HTTP/1.1 200 OK

Date: Sat, 25 Apr 2015 05:27:55 GMT

Server: Apache

Last-Modified: Fri, 07 Mar 2014 10:05:14 GMT

ETag: "34231-310-63d6aa80"

Accept-Ranges: bytes

Content-Length: 784

Connection: close

Content-Type: text/plain; charset=UTF-8
0...0............ 0...*.H........0>1.0...U....PL1.0...U....Unizeto 
Sp. z o.o.1.0...U....Certum CA0...020611104639Z..270611104639Z0>1.0
...U....PL1.0...U....Unizeto Sp. z o.o.1.0...U....Certum CA0.."0...*.H
.............0.............O|.%..>O..o.js.[Q......\...u......#R...3
..-..v. 9....K...x.sC{.a..X..lf~...^Uc.......0h..<..n..Z.N4.6....P.
m.B......AK.jk...~b.g..&_.&..O..W(....E.n.%].n9.../.G.r...[..S?....V.n
..f.&...S.....O).B.^... ..h.......Fc..."....FY~.5,...].H3.T...o.......
.;.Y.......0.0...U.......0....0...*.H.......................D.l.9>.
.n..!w..w... A......c..7..v$...L.=.go-...e1p......`{mX..I.c2.k.:...;..
..Q....4.. ...`.'l2w...r....?..$B..W..&C.......T(>.?..M.j.:...;.#.c
.?..'y.LQ....].;..s.....nd.ZV....Lt..q;..G.io...^...|R......Yg...p...i
[email protected].)f.!.,.`*[email protected].$...,s..

GET /download.cdn.yandex.net/element/ie/silentupdate/891v2/vb-ru.2.18.0.5151.x64.delta.2.16.0.3147.zip HTTP/1.1

Accept: */*

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Win64; x64; Trident/6.0)

Host: cache-kiev03.cdn.yandex.net

Connection: Close


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Sat, 25 Apr 2015 05:30:02 GMT

Content-Type: application/zip

Content-Length: 1805601

Connection: close

ETag: "2475439488"

Last-Modified: Mon, 23 Mar 2015 14:52:58 GMT

Accept-Ranges: bytes
PK........\.wF..X..............update.xml..K..0....w..o.PJ...*........
....n.<.W0FQ.....?3?.|0...'m..^TuVh.S..HhV.L..4Fz1$...7%.F......v..
;n.,*.=5...B\). Z.eF.F..m.B....F.......$u;@...ns.m............}6.J#...
........_..fT3...-../...].W.k}.Y...gPK........}.wFX.G.-`..........Comm
on/elements.exe.patch...XU....gv=g.....~D@,....XA 6.,...(.D.....`..G"*
.....X.h.b..(b..b9.QD.H....z.n.}...w.........Y3.f..rH...L..?..>j...
.....v=.=YyF.........| D.$........][....V.:Y...(..\uo$r..[U..T8:..,Ulu
X..X....v.,.....2..l.......b..G...pmf..t..ZW(. ..y...n....l.........mi
2...2..r..h.^.;T...[.~..6..t.....\T..".>C[..../Z{.9.........u....*A
..d.V../@V/.....j?m..1_]G;..h..O..x)...D.\z..OE6N....C...%...(N.m.Lg..
[email protected]...<.........m.5..zv5z...pT8.
........n.*O..hP).W;.I4....v.....;.....ROw...ZgQ.RuU.......9l......S&g
t;c...z.*..........`.Zh....h.6..)..t.cv..E.....T..rt_........-.....OQ.
j.f!M........]......L....1.....4z.:.>....y..r.V`.......'2n.*[.....\
.3MWs...I.....q....K8k..]..q.o..1.....I....&m...9...H.P....|.fFg....r.
....&...X....F...*..:._...1}.).. H.....6......e..r..tp..^c.Z.1..b.JE.U
./.]..:M.;`T...............). R.w..G/.D.3..{_..TmtX.LD{p..O..u...6n...
Bz.m.........=.....n`...=tn].........`..k.k..C..._6s.>|..6....}...z
7j....k7.._....NN.Dt._..u.o........E..&?w..Fc5..[..a.OG..i...:.g.[j...
.gs.G;.....Z.v.p..j..Vi[.P.E...W(. .R......V.U(8.J.S..F.V..B.Qc....j.^
e....o.B...V....m..u...Qc%.<.-5j...N..R.......Fe....Z...Y...IK ...V
;.v^*CK.........[i..;....n....y.......mD..Y..k...}|....M....:x.qj.<<< skipped >>>

GET /downloader.yandex.net/yandex-pack/downloader/info.rss HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Connection: Keep-Alive

Host: cache-kiev06.cdn.yandex.net


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Sat, 25 Apr 2015 05:28:01 GMT

Content-Type: application/rss xml

Content-Length: 2267

Connection: keep-alive

ETag: "1400027787"

Last-Modified: Fri, 13 Mar 2015 15:35:59 GMT

Accept-Ranges: bytes
<?xml version="1.0" encoding="UTF-8"?>..<downloader version="
1">...<partneryandexbar>....<url>hXXp://downloader.yand
ex.net/yandex-pack/</url>....<name>YandexPackSetup.exe<
/name>..    <lt_name>YandexSearch.exe</lt_name>..    &l
t;partner name="vkmusic-elements">..            <url>hXXp://d
ownloader.yandex.net/yandex-pack/</url>..            <name>
;YandexPackSetup.exe</name>..            <lt_name>YandexSe
arch.exe</lt_name>..            <exp_path val="33">-extens
ion-exp1</exp_path>..            <exp_path val="33">-exten
sion-exp2</exp_path>..            <exp_path val="33">-exte
nsion-exp3</exp_path>..    </partner>..    <partner nam
e="disc-soft">..            <url>hXXp://downloader.yandex.net
/yandex-pack/</url>..            <name>YandexPackSetup.exe
</name>..            <lt_name>YandexSearch.exe</lt_name
>..            <exp_path val="50">-accelerator-exp1</exp_p
ath>..            <exp_path val="50">-accelerator-exp2</ex
p_path>..    </partner>..    <partner name="kmplayer-eleme
nts2">..            <url>hXXp://downloader.yandex.net/yandex-
pack/</url>..            <name>YandexPackSetup.exe</nam
e>..            <lt_name>YandexSearch.exe</lt_name>..  
          <exp_path val="33">-extension-exp1</exp_path>.. 
           <exp_path val="33">-extension-exp2</exp_path&g<<< skipped >>>

GET /MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6dg== HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: g.symcd.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1363

content-transfer-encoding: binary

Cache-Control: max-age=575922, public, no-transform, must-revalidate

Last-Modified: Fri, 24 Apr 2015 21:25:05 GMT

Expires: Fri, 1 May 2015 21:25:05 GMT

Date: Sat, 25 Apr 2015 05:27:29 GMT

Connection: keep-alive
0..O......H0..D.. .....0.....50..10......7).nj./P(.3.\\.;.B....2015042
4212505Z0f0d0<0... ..........9.....yP..`...<.......*.A.....>U
....... ...:v....20150424212505Z....20150501212505Z0...*.H............
.%...#<H1=..wo.=...T.{.fj...a..%rA..?d.P....'.Kk..T.t.;y._..?.;.Ki[
.W.5..Y.T..lm....u.8.$.3%M.(..........%...$9..d2.gM.S......0..a..2Z..d
....0..S_.~.....J......$......'....s......s.X.. .B...K....`4G.e..4[..f
.N..4....V.o.90 [email protected] ..... ..W..!..Z......0...0..}0..e....
....:}0...*.H........0B1.0...U....US1.0...U....GeoTrust Inc.1.0...U...
.GeoTrust Global CA0...141201130534Z..151216130534Z02100...U...'GeoTru
st Global CA TGV OCSP Responder 30.."0...*.H.............0............
\.hpc..J.a.j-.t......F`Aw...)L.YE.2..~..-...2.Y(.".CZ.w..T..Y. syd....
.x..YE..<....lwv.:J.76>U....uF.a.|8N.. ..1p...`f.X...B>x.....
.........6..m.&...'..W.plK....[.m.V..h..lI.........?~.....>.|'....o
...A!.Pm.*.N ...<.....3...*|.x._..1..m.W<*....._S.............0.
.0...U.#..0....z.h.....d..}.}e...N0... .....0......0...U.%..0... .....
..0...U...........0...U.......0.0!..U....0...0.1.0...U....TGV-B-2830..
.*.H.............~....2!...V..0...Y....L..k....z}~a.3Y.x..dS.L...Dk$a.
..nR9_......B......m....Y....U.5....'.....<{....v&=.2].....j*.r(7..
.=..w.I...z....\.#.J.ac.....I.[.[....6.X....0...g.3d...z.i.H..f...v...
..\.....^.N..1.J<.)`Z.....4.-.E..n.E.~t....v.e.T...?. ......i..%...
.<<< skipped >>>

GET /favicon/some.nonexistent HTTP/1.1

Host: favicon.yandex.net

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept: */*

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8


HTTP/1.1 200 OK

Content-Type: image/png

Date: Sat, 25 Apr 2015 05:27:58 GMT

Cache-Control: max-age=691200

access-control-allow-origin: *

Content-Length: 73

[email protected] .....IEND.
B`.HTTP/1.1 200 OK..Content-Type: image/png..Date: Sat, 25 Apr 2015 05
:27:58 GMT..Cache-Control: max-age=691200..access-control-allow-origin
: *..Content-Length: 73...PNG........IHDR.....................IDATx.bb
[email protected] .....IEND.B`.....

GET /favicon/browser.yandex.ru HTTP/1.1

Host: favicon.yandex.net

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept: */*

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8


HTTP/1.1 200 OK

Content-Type: image/png

Date: Sat, 25 Apr 2015 05:27:58 GMT

Cache-Control: max-age=691200

access-control-allow-origin: *

Content-Length: 698
.PNG........IHDR................a....IDATx.tSOO.o..]h...Hc.`....1X....
3....37. z2..F..*.....".ViJj1)...........3.v..g3.w.}.g.wfv...u.......~
..>R.eGU..X,.."^...8.K...d.p......z....ccc.....j}..k...N..:..l6.2M.
`..?*.7h ......:[email protected]{..3..C...`)$.4e{.7..?...p.{).....a.7z.V
...e..i7U....nS"....w$U...d..(..Q". ....4.....oH...E.T*....z.l4.......
.....F..L..,.......}`,\I8.R....aI...NOD.....3..?s..X..,uh.........E.j5
.hC./r..........JD..&:"...F.O.7)...]...!..p.~N.!....................[B
.!.w.....!....."I.#...3...j..8~8y.......U.8..c.#..q....\M...J..$..W...
i....'K[.}~~.znn.k4..BaC.c.6.A...rv....~.m.c..[.X..._...r.........;;lh
ZD...|..?.F....{...OF....&&...:==F.5.kyvvv.".W.....Z.B.........IEND.B`
.HTTP/1.1 200 OK..Content-Type: image/png..Date: Sat, 25 Apr 2015 05:2
7:58 GMT..Cache-Control: max-age=691200..access-control-allow-origin: 
*..Content-Length: 698...PNG........IHDR................a....IDATx.tSO
O.o..]h...Hc.`....1X....3....37. z2..F..*.....".ViJj1)...........3.v..
g3.w.}.g.wfv...u.......~..>R.eGU..X,.."^...8.K...d.p......z....ccc.
....j}..k...N..:..l6.2M.`..?*.7h ......:[email protected]{..3..C...`)$.4e
{.7..?...p.{).....a.7z.V...e..i7U....nS"....w$U...d..(..Q". ....4.....
oH...E.T*....z.l4............F..L..,.......}`,\I8.R....aI...NOD.....3.
.?s..X..,uh.........E.j5.hC./r..........JD..&:"...F.O.7)...]...!..p.~N
.!....................[B.!.w.....!....."I.#...3...j..8~8y.......U.8..c
.#..q....\M...J..$..W...i....'K[.}~~.znn.k4..BaC.c.6.A...rv....~.m.c..
[.X..._...r.........;;lhZD...|..?.F....{...OF....&&...:==F.5.kyvvv<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAKQll6RM0DNpmNM7zH3/Qc= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=443254, public, no-transform, must-revalidate

Last-Modified: Thu, 23 Apr 2015 08:35:12 GMT

Expires: Thu, 30 Apr 2015 08:35:12 GMT

Date: Sat, 25 Apr 2015 05:31:34 GMT

Connection: keep-alive
0..........0..... .....0......0...0......'.V.8.F.V....H....JW..2015042
3083512Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
....^[email protected]...*.H........
......_J.r.R......~..^'r...w..H-C3.].Y....1.X.j .........Dd..........z
.*.B/...V....WB.q..9....mY.<.$...]........r.D'.....mm.....lHp......
[email protected]>.......R..'.!.........i..^......h...AB.....IJI
.......).8~...dC*7*.?....l.....C.'Lb...,...N....;../W.......#0...0...0
..........r..?.*......y"..0...*.H........0..1.0...U....US1.0...U....Ve
riSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use a
t hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code S
igning 2009-2 CA0...150226000000Z..150527235959Z0..1.0...U....US1.0...
U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms o
f use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Clas
s 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0.......
......m5*R........2....>...yU4..L.. ...........u..Hez..Pn.....d...n
z(...V7.}^...d!RX...bl..[..a...L.. .~..Ij......%..%p.-...u..:..i..F*].
..*....{NH..|0...gHX.Q.r....S..........._.9.(w...suC...N..s.....&."...
:.C.Q.i~rl..<..krS..8.B..o][email protected]...
U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.veri
sign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS inco
rp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U..
......0... .....0......0"..U....0...0.1.0...U....TGV-B-32010...*.H<<< skipped >>>

GET /?from=brow_e1_tableau&nugt=yabrowser-15.2.2214.3645 HTTP/1.1

Host: market.yandex.ru

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept: */*

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8

Cookie: yandexuid=2270699091429939676; ys=def_bro.0


HTTP/1.1 302 Found

Server: nginx

Date: Sat, 25 Apr 2015 05:28:08 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=120

Cache-Control: max-age=0, proxy-revalidate

Expires: Sat, 25 Apr 2015 05:28:08 GMT

Location: hXXp://market.yandex.ua/?from=brow_e1_tableau&nugt=yabrowser-15.2.2214.3645

X-Frame-Options: Deny

X-Powered-By: Zinger

Set-Cookie: uid=CmmLqFU7JeiNrChhFsIBAg==; path=/
0..HTTP/1.1 302 Found..Server: nginx..Date: Sat, 25 Apr 2015 05:28:08 
GMT..Content-Type: text/html..Transfer-Encoding: chunked..Connection: 
keep-alive..Keep-Alive: timeout=120..Cache-Control: max-age=0, proxy-r
evalidate..Expires: Sat, 25 Apr 2015 05:28:08 GMT..Location: hXXp://ma
rket.yandex.ua/?from=brow_e1_tableau&nugt=yabrowser-15.2.2214.3645..X-
Frame-Options: Deny..X-Powered-By: Zinger..Set-Cookie: uid=CmmLqFU7Jei
NrChhFsIBAg==; path=/..0......

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1762

content-transfer-encoding: binary

Cache-Control: max-age=566292, public, no-transform, must-revalidate

Last-Modified: Fri, 24 Apr 2015 18:45:16 GMT

Expires: Fri, 1 May 2015 18:45:16 GMT

Date: Sat, 25 Apr 2015 05:27:30 GMT

Connection: keep-alive

0..........0..... .....0......0...0......;O}a.!..u...au..eUNp..2015042
4184516Z0s0q0I0... ...................B.>.I.$&.....e......0..C9...3
13..R...%V.......K3.....20150424184516Z....20150501184516Z0...*.H.....
........|.k`.#..:..."...8....:Hu%.....Pf...sS.!.Og.....4.......R.Y..e.
.....mG.-.&.Q....}..*.S......!.^.. .&S.)..o...ij.2.....^4.D.Y..N...a..
.a.-".p_E]..M....c..9.!8.%..u<...)........z}......R.j3B..l.........
........@...!......=m....<.Ep.....,...|......1.BwP.9"........0...0.
..0...........2...'U.BM...g.B0...*.H........0..1.0...U....US1.0...U...
.VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1(c) 2006 Ve
riSign, Inc. - For authorized use only1E0C..U...<VeriSign Class 3 P
ublic Primary Certification Authority - G50...141202000000Z..151216235
959Z0..1.0...U....US1.0...U....Symantec Corporation1.0...U....Symantec
 Trust Network1?0=..U...6Symantec Class 3 PCA - G5 OCSP Responder Cert
ificate 30.."0...*.H.............0...............2&..PL...,..2....:..t
H...`JG.%..*...s.c%[email protected]"1.5?..s..
...3[...u......]...R0..Z}....l..I.Y.....j\H.q...#.uw.4qz.#.J.....@2$".
.$l.B.......D.ye..(..2.........@...... ...."... E..0M,..b{.^..s'....f.
6.pr4.J........'j..........0...0...U.......0.0l..U. .e0c0a..`.H...E...
.0R0&.. .........hXXp://VVV.symauth.com/cps0(.. .......0...hXXp://VVV.
symauth.com/rpa0...U.%..0... .......0...U...........0... .....0......0
!..U....0...0.1.0...U....TGV-B-2760...U......;O}a.!..u...au..eUNp0...U
.#..0.....e......0..C9...3130...*.H.............(.&..Dgr.Ve..#...5

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEDZn4Vi1JMj/v+U4FyeG8eI= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1725

content-transfer-encoding: binary

Cache-Control: max-age=375358, public, no-transform, must-revalidate

Last-Modified: Wed, 22 Apr 2015 13:39:57 GMT

Expires: Wed, 29 Apr 2015 13:39:57 GMT

Date: Sat, 25 Apr 2015 05:27:30 GMT

Connection: keep-alive
0..........0..... .....0......0...0......N$p...v....1.;..vn....2015042
2133957Z0s0q0I0... ...................F....0.yV......{&.K......&......
.6g.X.$....8.'.......20150422133957Z....20150429133957Z0...*.H........
.....M.ZRG*.D%.x.E.Q<... ..B..7.G.....Q.~.Q3.....*...1....A.b..h.%.
...*Y...%.P...[..W;...>...s.,...J.2..N...\.MA.1.`Ue4../z....H.|..; 
.A....}..,..s).V.g.$....o[..>h.,..sf.]GB".zJ.....1.K.....-....\>
.....V..!..T..[....4.......19..:.w<.......L.e.2..4..1.K..0.s.......
0...0...0............F...I]A([email protected]...*.H........0..1.0...U....US1.0.
..U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms
 of use at hXXps://VVV.verisign.com/rpa (c)101.0,..U...%VeriSign Class
 3 Code Signing 2010 CA0...150225000000Z..150526235959Z0..1.0...U....U
S1.0...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1
VeriSign Class 3 Code Signing 2010 OCSP Responder0.."0...*.H..........
...0.........q<...A...#......A...u..Lz.............o..D.vQ%..s.....
..f....e../jI.d.W.....|K;.j5...#.B%.]..~S.... .|;S.&.....N..`...5.....
!D.p....M/.. ..;j...q..`6...2.Ck..BnLHvCZn%....,.w.Ooi..z'...\.Yx.....
.b..L...5.o..o..{..}.........%e.....N..._i........*Bc....:yQg.........
0...0...U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://
VVV.verisign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's 
CPS incorp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... ......
.0...U........0... .....0......0"..U....0...0.1.0...U....TGV-B-31830..
.*.H..............-..^.........f.P`...s.....8.....V.......... ....<<< skipped >>>

HEAD /downloadable_soft/browser/pseudoportal-ru/Yandex.exe HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

User-Agent: Microsoft BITS/7.5

Host: download.cdn.yandex.net


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Sat, 25 Apr 2015 05:27:38 GMT

Connection: keep-alive

Keep-Alive: timeout=5

Location: hXXp://cache-kiev02.cdn.yandex.net/download.cdn.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

....

GET /downloadable_soft/browser/pseudoportal-ru/Yandex.exe HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Mon, 06 Apr 2015 09:57:48 GMT

User-Agent: Microsoft BITS/7.5

Host: download.cdn.yandex.net


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Sat, 25 Apr 2015 05:27:38 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=5

Location: hXXp://cache-kiev02.cdn.yandex.net/download.cdn.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

0..

GET /ca.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.certum.pl


HTTP/1.1 200 OK

Date: Sat, 25 Apr 2015 05:27:55 GMT

Server: Apache

Last-Modified: Thu, 23 Apr 2015 09:17:13 GMT

ETag: "30026-187-bebc9840"

Accept-Ranges: bytes

Content-Length: 391

Connection: close

Content-Type: application/x-pkcs7-crl
0...0m0...*.H........0>1.0...U....PL1.0...U....Unizeto Sp. z o.o.1.
0...U....Certum CA..150416081634Z..160415081634Z0...*.H...............
........{....Q.q....{...|.OB.l..|......y.%...}kq)A>OaJ4p...._.....7
...{...6bA,..HM..r{W............N...0.7..f.].(....6....(..........a!,.
..J4n..<....C.(S..........s.....p...x..........;$@......./..HW...U(
i;.p...h7`.....4.|._...A.A&..zB.N..9................

GET /element/ie/silentupdate/891v2/vb-ru.2.18.0.5151.x64.delta.2.16.0.3147.zip HTTP/1.1

Accept: */*

Connection: Close

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Win64; x64; Trident/6.0)

Host: download.cdn.yandex.net


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Sat, 25 Apr 2015 05:30:03 GMT

Transfer-Encoding: chunked

Connection: close

Location: hXXp://cache-kiev03.cdn.yandex.net/download.cdn.yandex.net/element/ie/silentupdate/891v2/vb-ru.2.18.0.5151.x64.delta.2.16.0.3147.zip

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

0..

GET /download.cdn.yandex.net/element/ie/silentupdate/891v2/elements-ru.8.9.1.5100.x64.delta.8.7.0.3110.zip HTTP/1.1

Accept: */*

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Win64; x64; Trident/6.0)

Host: cache-kiev05.cdn.yandex.net

Connection: Close


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Sat, 25 Apr 2015 05:29:56 GMT

Content-Type: application/zip

Content-Length: 5419419

Connection: close

ETag: "2317595656"

Last-Modified: Mon, 23 Mar 2015 14:51:44 GMT

Accept-Ranges: bytes
PK........\.wF.d [email protected]...]-....X.....:...
....u..z..-*I..x.....>...D.6...U./...;..*-...1h.pB....m..k4.!....k.
.5AQT..4l|k.LJ.k.9*]o.^i...kb .Q..`i....m...\.4g..>..'...0x...gB..X
.......>s.n=.4.*E9.me.#.}.w..M...M.w?\.PK........}.wFX.G.-`........
..Common/elements.exe.patch...XU....gv=g.....~D@,....XA 6.,...(.D.....
`..G"*.....X.h.b..(b..b9.QD.H....z.n.}...w.........Y3.f..rH...L..?..&g
t;j........v=.=YyF.........| D.$........][....V.:Y...(..\uo$r..[U..T8:
..,UluX..X....v.,.....2..l.......b..G...pmf..t..ZW(. ..y...n....l.....
....mi2...2..r..h.^.;T...[.~..6..t.....\T..".>C[..../Z{.9.........u
....*A..d.V../@V/.....j?m..1_]G;..h..O..x)...D.\z..OE6N....C...%...(N.
[email protected]...<.........m.5..zv5z.
..pT8.........n.*O..hP).W;.I4....v.....;.....ROw...ZgQ.RuU.......9l...
...S>c...z.*..........`.Zh....h.6..)..t.cv..E.....T..rt_........-..
...OQ.j.f!M........]......L....1.....4z.:.>....y..r.V`.......'2n.*[
.....\.3MWs...I.....q....K8k..]..q.o..1.....I....&m...9...H.P....|.fFg
....r.....&...X....F...*..:._...1}.).. H.....6......e..r..tp..^c.Z.1..
b.JE.U./.]..:M.;`T...............). R.w..G/.D.3..{_..TmtX.LD{p..O..u..
.6n...Bz.m.........=.....n`...=tn].........`..k.k..C..._6s.>|..6...
.}...z7j....k7.._....NN.Dt._..u.o........E..&?w..Fc5..[..a.OG..i...:.g
.[j....gs.G;.....Z.v.p..j..Vi[.P.E...W(. .R......V.U(8.J.S..F.V..B.Qc.
...j.^e....o.B...V....m..u...Qc%.<.-5j...N..R.......Fe....Z...Y...I
K ...V;.v^*CK.........[i..;....n....y.......mD..Y..k...}|....M....<<< skipped >>>

GET /element/ie/silentupdate/891v2/elements-ru.8.9.1.5100.x64.delta.8.7.0.3110.zip HTTP/1.1

Accept: */*

Connection: Close

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Win64; x64; Trident/6.0)

Host: download.cdn.yandex.net


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Sat, 25 Apr 2015 05:29:56 GMT

Transfer-Encoding: chunked

Connection: close

Location: hXXp://cache-kiev05.cdn.yandex.net/download.cdn.yandex.net/element/ie/silentupdate/891v2/elements-ru.8.9.1.5100.x64.delta.8.7.0.3110.zip

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

0..

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab?0cff54a7b4ff40c5 HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Tue, 24 Feb 2015 00:37:01 GMT

If-None-Match: "80b4d90ca4fd01:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com


HTTP/1.1 304 Not Modified

Content-Type: application/octet-stream

Last-Modified: Tue, 24 Feb 2015 00:37:01 GMT

ETag: "80b4d90ca4fd01:0"

Cache-Control: max-age=604800

Date: Sat, 25 Apr 2015 05:27:52 GMT

Connection: keep-alive

HTTP/1.1 304 Not Modified..Content-Type: application/octet-stream..Las
t-Modified: Tue, 24 Feb 2015 00:37:01 GMT..ETag: "80b4d90ca4fd01:0"..C
ache-Control: max-age=604800..Date: Sat, 25 Apr 2015 05:27:52 GMT..Con
nection: keep-alive..

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCHwPGLvooe1z HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com


HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Fri, 24 Apr 2015 23:35:46 GMT

Expires: Tue, 28 Apr 2015 23:35:46 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Cache-Control: public, max-age=345600

Age: 21104

Alternate-Protocol: 80:quic,p=1
0..........0..... .....0......0...0......J......h.v....b..Z./..2015042
4130300Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
.|......s....20150424130300Z....20150501130300Z0...*.H............. ..
..J_.[..T{.!..w~r"u..t..Yw&.~O...[9...X.b@]..K81..5..9.V..e.w..o.g...;
..}.....I........$....e/......(..l........M....#}.&..0.dW..h.F....R\..
.{p.>V..a...[.. .v..._.M.I..$..WG..e.Z...\....O.<j.j.7.....k.d(.
....R.z..yD.y..k>.....^..e8b.a.@..\k....x.a5.28.1HTTP/1.1 200 OK..C
ontent-Type: application/ocsp-response..Date: Fri, 24 Apr 2015 23:35:4
6 GMT..Expires: Tue, 28 Apr 2015 23:35:46 GMT..Server: ocsp_responder.
.Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options
: SAMEORIGIN..Cache-Control: public, max-age=345600..Age: 21104..Alter
nate-Protocol: 80:quic,p=1..0..........0..... .....0......0...0......J
......h.v....b..Z./..20150424130300Z0k0i0A0... ..........j.....p.I.#z.
..(~d..J......h.v....b..Z./..|......s....20150424130300Z....2015050113
0300Z0...*.H............. ....J_.[..T{.!..w~r"u..t..Yw&.~O...[9...X.b@
]..K81..5..9.V..e.w..o.g...;..}.....I........$....e/......(..l........
M....#}.&..0.dW..h.F....R\...{p.>V..a...[.. .v..._.M.I..$..WG..e.Z.
..\....O.<j.j.7.....k.d(.....R.z..yD.y..k>.....^..e8b.a.@..\k...
.x.a5.28.1..<<< skipped >>>

GET /downloader.yandex.net/yandex-pack/bm-partner-ru/YandexPackSetup.exe HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Connection: Keep-Alive

Host: cache-kiev10.cdn.yandex.net


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Sat, 25 Apr 2015 05:28:02 GMT

Content-Type: application/x-msdos-program

Content-Length: 4107088

Connection: keep-alive

ETag: "3147634023"

Last-Modified: Tue, 24 Mar 2015 13:47:37 GMT

Accept-Ranges: bytes
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......(I..l(..l(..
l(....k.J(....i.|(....j..(..eP'.i(..eP7.O(..l(..#)....k.$(....m.m(..l(
3.n(....h.m(..Richl(..........PE..L...1<.T.........................
...2.............@...................................?...@............
.....................|...T.......`.............>.`........8..0...8.
..............................@.......................................
.....text............................... ..`.rdata....................
..........@[email protected][email protected].......
....................@[email protected][email protected].
..`...........................@[email protected]...<...........
[email protected]...............................................................
......................................................................
......................................................................
.....................................................U..QQSVW.........
....}..e..j...W.E.P.y.....t9..t5..f..f;.u.f..t.f.H.f;N.u.......f..u.3.
................}........hh.C..u..e...YY.........u...t4h..C.V.I...YY..
.......u...t.h..C.V.-...YY.........u.j.h...........YY..tgh....W3.V..X.
C...tJhh.C..u..E.Wh..C.P.u..T.......v.....t........u...Sj.V.u......9u.
t..u... ..W.~....u.Y..t.V.l ..3.._3.SW.E.P.]..G...h..C.hh.C..E.P.W"..S
Sj.S..T.C.9]..E..E}.P.u..].W.u...e....9].t..u... ...E....H._^[.......E
....u.h..E...7.....E..U....T.}..u.3......SVWjD^V.E.j.P......u.3..}<<< skipped >>>

GET /pki/crl/products/WinPCA.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Sat, 07 Mar 2015 06:01:44 GMT

Accept-Ranges: bytes

ETag: "dde36a309c58d01:0"

Server: Microsoft-IIS/8.0

VTag: 43879645100000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 561

Cache-Control: max-age=900

Date: Sat, 25 Apr 2015 05:30:42 GMT

Connection: keep-alive

0..-0......0...*.H........0..1.0...U....US1.0...U....Washington1.0...U
....Redmond1.0...U....Microsoft Corporation1 0)..U..."Microsoft Window
s Verification PCA..150306223202Z..150605105201Z._0]0...U.#..0.......p
............<.J0... .....7.......0...U......40... .....7......15060
4224201Z0...*.H.............4......n[.t........'....Dx.P3R.!3.|D.6vL..
"k..9'....L..k......e.4......._..N..TJ......N.fP...H.....8...TJA...fGA
.e...^"{../...H?..E.Y.U....h..0/.......d...6..K..V?QM...{..h.....{.3..
.v.....\~.7n..5..'..k.Ia.YL..LP.b....._7.V..%......z*$q..Y..f.b..L8<
;~..v.w....

GET /pki/crl/products/MicrosoftTimeStampPCA.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Thu, 05 Mar 2015 06:01:35 GMT

Accept-Ranges: bytes

ETag: "cf2633d6957d01:0"

Server: Microsoft-IIS/8.0

VTag: 43853244400000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 550

Cache-Control: max-age=900

Date: Sat, 25 Apr 2015 05:30:42 GMT

Connection: keep-alive
0.."0......0...*.H........0w1.0...U....US1.0...U....Washington1.0...U.
...Redmond1.0...U....Microsoft Corporation1!0...U....Microsoft Time-St
amp PCA..150304221607Z..150603103607Z._0]0...U.#..0...#[email protected].. .
.5..0... .....7.......0...U......20... .....7......150602222607Z0...*.
H.............Y..}y`....T.Z..`B<..I.N..O... E:....7......a..)......
...._|W5laoqi(..>t~.."...&`.._.7J...:..{bO_Kyi...R...!...B.s..I.c&j
...(I\.S{._;@B...[i.e.[."...R` \...........M^k.=q[.V...9y..G.1o#k3<
.W.......H.$>}...U...2qyd2|b.fB.....r....H.P...;....Q...b......5%.P
.#..

GET /yandex-pack/downloader/info.rss HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: downloader.yandex.net

Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Sat, 25 Apr 2015 05:28:01 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=5

Location: hXXp://cache-kiev06.cdn.yandex.net/downloader.yandex.net/yandex-pack/downloader/info.rss

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

0..HTTP/1.1 302 Moved Temporarily..Server: nginx/1.6.2..Date: Sat, 25 
Apr 2015 05:28:01 GMT..Transfer-Encoding: chunked..Connection: keep-al
ive..Keep-Alive: timeout=5..Location: hXXp://cache-kiev06.cdn.yandex.n
et/downloader.yandex.net/yandex-pack/downloader/info.rss..Expires: Thu
, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache..Cache-Control: no
-store,no-cache,must-revalidate..Pragma: no-cache..0......

GET /yandex-pack/bm-partner-ru/YandexPackSetup.exe HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: downloader.yandex.net

Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Sat, 25 Apr 2015 05:28:02 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=5

Location: hXXp://cache-kiev10.cdn.yandex.net/downloader.yandex.net/yandex-pack/bm-partner-ru/YandexPackSetup.exe

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

0..HTTP/1.1 302 Moved Temporarily..Server: nginx/1.6.2..Date: Sat, 25 
Apr 2015 05:28:02 GMT..Transfer-Encoding: chunked..Connection: keep-al
ive..Keep-Alive: timeout=5..Location: hXXp://cache-kiev10.cdn.yandex.n
et/downloader.yandex.net/yandex-pack/bm-partner-ru/YandexPackSetup.exe
..Expires: Thu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache..Cac
he-Control: no-store,no-cache,must-revalidate..Pragma: no-cache..0..

GET /downloader.yandex.net/yandex-pack/advego/YandexPackSetup.exe HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Connection: Keep-Alive

Host: cache-kiev09.cdn.yandex.net


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Sat, 25 Apr 2015 05:27:28 GMT

Content-Type: application/x-msdos-program

Content-Length: 39075160

Connection: keep-alive

ETag: "1978620313"

Last-Modified: Thu, 02 Apr 2015 16:54:15 GMT

Accept-Ranges: bytes

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......@...........
......o.......y.......~.G.....i...............p.......n.......k.....Ri
ch............................PE..L.....>T.....................vQ..
...>[email protected].............
........................T'..........l.P...........T.X!................
..............................@.......................................
.....text...Q........................... ..`.rdata...u.......v........
..........@[email protected]...$3...@[email protected].....
..P..2..............@..@..............................................
......................................................................
......................................................................
......................................................................
......................................................................
..................................................U..Q.M..E.P.M.......
M...H.B..E...]..............U..Q.M..E...H.B..M..".....].....U..Q.M..M.
......E....t..M.Q.J.......E...].......U...E...P.M.Q.U...R.E.P.)......]
................U...E...P.M.Q.U...R.E.P.c......]................U...E.
.M.f..f..]................U...E.P........]................U...E.P.M.Q.
U.R.E.P.H.......E.].U...E.P.M.Q.U.R.E.P.X.......E.].U......M.Q....5...
M...1..j.j..M.. ....E...].....U......M.Q....5...M...1..j.j..M.......E.
P.M.......E...].........U..Q.M.j.j..M........]..........U..Q.M..E.

<<< skipped >>>

GET /click/dtype=stred/pid=12/cid=72085/path=rs.0ca/* HTTP/1.1

User-Agent: curl/1.1

Host: clck.yandex.ru

Accept: *.*


HTTP/1.1 200 Ok

Content-Type: image/gif

Cache-Control: no-cache

Content-Length: 43

GIF89a.............!.......,...........L..;..

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab?20f046fabf1d0ba7 HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Tue, 24 Feb 2015 00:37:01 GMT

If-None-Match: "80b4d90ca4fd01:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com


HTTP/1.1 304 Not Modified

Content-Type: application/octet-stream

Last-Modified: Tue, 24 Feb 2015 00:37:01 GMT

ETag: "80b4d90ca4fd01:0"

Cache-Control: max-age=604800

Date: Sat, 25 Apr 2015 05:27:53 GMT

Connection: keep-alive

HTTP/1.1 304 Not Modified..Content-Type: application/octet-stream..Las
t-Modified: Tue, 24 Feb 2015 00:37:01 GMT..ETag: "80b4d90ca4fd01:0"..C
ache-Control: max-age=604800..Date: Sat, 25 Apr 2015 05:27:53 GMT..Con
nection: keep-alive..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRi82PVYYKWGJWdgVNyePy5kYTdqQQUX5r1blzMzHSa1N197z/b7EyALt0CEA7P9DjI/r81bgTYapgbGlA= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ts-ocsp.ws.symantec.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1508

content-transfer-encoding: binary

Cache-Control: max-age=454400, public, no-transform, must-revalidate

Last-Modified: Thu, 23 Apr 2015 11:40:01 GMT

Expires: Thu, 30 Apr 2015 11:40:01 GMT

Date: Sat, 25 Apr 2015 05:28:04 GMT

Connection: keep-alive
0..........0..... .....0......0...0......s...3f[.u....&...%.O..2015042
3114001Z0s0q0I0... ........b.c.a......Srx........_..n\..t...}.?..L....
....8...5n..j...P....20150423114001Z....20150430114001Z0...*.H........
.....f......`I..4w\5.5.%/......q.....-...)fV.p.Z&.........Bw*...w..5T.
......u.M.U?.{....bv......A.I`....a.....{.?.d.iXV..Rg..}..Ob..q..p./^.
>.l.P.H.q Z_F.a2..y.H.....$.F.u...Ru..I..._...H.a...j..;..M....Q..Y
a.....s...|...|............~"..K..o..=...^..I..2.y..].....0...0...0...
.......hWi=...$.>./C.a.0...*.H........0^1.0...U....US1.0...U....Sym
antec Corporation100...U...'Symantec Time Stamping Services CA - G20..
.150305000000Z..150603235959Z0m1.0...U....US1.0...U....Symantec Corpor
ation1?0=..U...6Symantec Time Stamping Services CA - G2 OCSP Responder
0.."0...*.H.............0..........].A.L..or....j..k..k...{k..]\.ss".(
...k...X....Ae.H.....H.D...c, .>(..Q.N..h.3;. ..I...C..K.#*...Lh*..
.p........s .k..x.....5.{A....s.3.f.2}....q..........u.B.P....\.&.Js..
{..;:r.....n.>..o.6.4J;..2.|C..N.^.*.@&;l....s.7.a.)..I..-.,.='. ..
.=a.... ..*...W........0..0... .....0......0"..U....0...0.1.0...U....T
GV-B-32580...U.#..0..._..n\..t...}.?..L...0...U......s...3f[.u....&...
%.O0...U.......0.0...U.%..0... .......0...U...........0...*.H.........
[email protected].[C\..K~..&...C..._......q.z.....".i.8gG(..
....q..3.,85: %.p.....{Q!.-n....C'..F.....:.[.g......Y^y.....9.......z
[Ae.g........c.o.... ..{>.t...}..e.p/.a..-..3...m..w......i|.G...".
;..n..<.......... ...ZL&..8.o...........^3.ud...qc.....<<< skipped >>>

GET /yandex-pack/downloader/info.rss HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: downloader.yandex.net

Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Sat, 25 Apr 2015 05:27:27 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=5

Location: hXXp://cache-kiev02.cdn.yandex.net/downloader.yandex.net/yandex-pack/downloader/info.rss

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

0..HTTP/1.1 302 Moved Temporarily..Server: nginx/1.6.2..Date: Sat, 25 
Apr 2015 05:27:27 GMT..Transfer-Encoding: chunked..Connection: keep-al
ive..Keep-Alive: timeout=5..Location: hXXp://cache-kiev02.cdn.yandex.n
et/downloader.yandex.net/yandex-pack/downloader/info.rss..Expires: Thu
, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache..Cache-Control: no
-store,no-cache,must-revalidate..Pragma: no-cache..0......

GET /yandex-pack/advego/YandexPackSetup.exe HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: downloader.yandex.net

Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Sat, 25 Apr 2015 05:27:28 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=5

Location: hXXp://cache-kiev09.cdn.yandex.net/downloader.yandex.net/yandex-pack/advego/YandexPackSetup.exe

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

0..HTTP/1.1 302 Moved Temporarily..Server: nginx/1.6.2..Date: Sat, 25 
Apr 2015 05:27:28 GMT..Transfer-Encoding: chunked..Connection: keep-al
ive..Keep-Alive: timeout=5..Location: hXXp://cache-kiev09.cdn.yandex.n
et/downloader.yandex.net/yandex-pack/advego/YandexPackSetup.exe..Expir
es: Thu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache..Cache-Cont
rol: no-store,no-cache,must-revalidate..Pragma: no-cache..0..

GET /downloader.yandex.net/yandex-pack/downloader/info.rss HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Connection: Keep-Alive

Host: cache-kiev02.cdn.yandex.net


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Sat, 25 Apr 2015 05:27:27 GMT

Content-Type: application/rss xml

Content-Length: 2267

Connection: keep-alive

ETag: "1603678379"

Last-Modified: Fri, 13 Mar 2015 15:35:59 GMT

Accept-Ranges: bytes
<?xml version="1.0" encoding="UTF-8"?>..<downloader version="
1">...<partneryandexbar>....<url>hXXp://downloader.yand
ex.net/yandex-pack/</url>....<name>YandexPackSetup.exe<
/name>..    <lt_name>YandexSearch.exe</lt_name>..    &l
t;partner name="vkmusic-elements">..            <url>hXXp://d
ownloader.yandex.net/yandex-pack/</url>..            <name>
;YandexPackSetup.exe</name>..            <lt_name>YandexSe
arch.exe</lt_name>..            <exp_path val="33">-extens
ion-exp1</exp_path>..            <exp_path val="33">-exten
sion-exp2</exp_path>..            <exp_path val="33">-exte
nsion-exp3</exp_path>..    </partner>..    <partner nam
e="disc-soft">..            <url>hXXp://downloader.yandex.net
/yandex-pack/</url>..            <name>YandexPackSetup.exe
</name>..            <lt_name>YandexSearch.exe</lt_name
>..            <exp_path val="50">-accelerator-exp1</exp_p
ath>..            <exp_path val="50">-accelerator-exp2</ex
p_path>..    </partner>..    <partner name="kmplayer-eleme
nts2">..            <url>hXXp://downloader.yandex.net/yandex-
pack/</url>..            <name>YandexPackSetup.exe</nam
e>..            <lt_name>YandexSearch.exe</lt_name>..  
          <exp_path val="33">-extension-exp1</exp_path>.. 
           <exp_path val="33">-extension-exp2</exp_path&g<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEALa8SdwQh28+NjkQGqVhx8= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com

L...5.o..o..{..}.........%e.....N..._i........*Bc....:yQg.........0...
0...U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.
verisign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS 
incorp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0..
.U........0... .....0......0"..U....0...0.1.0...U....TGV-B-31830...*.H
..............-..^.........f.P`...s.....8.....V.......... .... B.(@-)6
.Rf.......Cv..A.b.....d..5...wW...8.K.....i.i-..W;.:..B.A..B1_........
.............v...i........ .............[.}._......Z.......o...%,-A" .
 ...Ps.....kbPZ.F2.$..9.,.....f.r...5p~...N.H-..g........aj

GET /status.xml?clid=2122685&uuid={6C3F8A62-204E-4385-B520-B1E2A5B092ED}&vnt=6.1x64&top=3.0&file-no=45
15
107
106
25
6
26
27
111
129
121
42
41
43
40
89
18
17
12
11
13
10
21
24
22
20
47
104
103
108
123
124
102 HTTP/1.1

Connection: Keep-Alive

User-Agent: StatisticsEx/1.0

Host: soft.export.yandex.ru


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Sat, 25 Apr 2015 05:27:37 GMT

Content-Type: text/xml

Content-Length: 64

Last-Modified: Wed, 19 Nov 2014 09:40:42 GMT

Connection: keep-alive

Keep-Alive: timeout=120

Accept-Ranges: bytes
<?xml version="1.0" encoding="windows-1251"?>.<page>.ok.&l
t;/page>...

HEAD /download.cdn.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

User-Agent: Microsoft BITS/7.5

Host: cache-kiev02.cdn.yandex.net


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Sat, 25 Apr 2015 05:27:37 GMT

Content-Type: application/x-msdos-program

Content-Length: 61830096

Connection: keep-alive

Content-Disposition: attachment; filename="Yandex.exe"

ETag: "2204481221"

Last-Modified: Mon, 06 Apr 2015 09:57:48 GMT

Accept-Ranges: bytes

....

GET /download.cdn.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Mon, 06 Apr 2015 09:57:48 GMT

User-Agent: Microsoft BITS/7.5

Host: cache-kiev02.cdn.yandex.net


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Sat, 25 Apr 2015 05:27:37 GMT

Content-Type: application/x-msdos-program

Content-Length: 61830096

Connection: keep-alive

Content-Disposition: attachment; filename="Yandex.exe"

ETag: "2288789168"

Last-Modified: Mon, 06 Apr 2015 09:57:48 GMT

Accept-Ranges: bytes
MZ......................@................................... .........
..!..L.!This program cannot be run in DOS mode....$........p.....}...}
...}L. }...}.C3}...}.@.}...}.C.}...}.C.}...}.fP}...}.fR}...}.fU}...}..
.}o..}.h3}...}.h.}...}.h.}_..}.h.}T..}.C7}...}..{}...}.h2}...}Rich...}
........PE..L...U..T.........."..................z............@.......
[email protected]....@.....................................
.....................R...!...`..............................8w.......v
[email protected]...............
............ ..`.rdata..2...........................@[email protected].........
[email protected][email protected]
c...............................@[email protected].......`....................
[email protected]................................................................
......................................................................
......................................................................
.............................................\._......h .V...E..Y...._
......h*.V...D..Y.hZ.V...D..Y.hO.V...D..Y.hD.V...D..Y...i......_......
..h..V...D..Y.V..._...._..5.._........y....._........_.$...h..V..5.._.
...._..c^..fD..Y^.........h....hD._.....V.h..V..AD..Y.. .^....^..$.^..
..^...8.^.. .^..<.^..,.^..@.^..8.^...(.^....^..,.^....^..0.^....^..
.L.^....^..P.^....^..T.^....^..X.^....^..\.^....^..`.^....^..d.^....^.
..<.^....^...0.^....^..4.^....^...p.^....^..t.^....^....^....^....^
....^....^..(.^....^..<.^....^..P.^....^..d.^..x.^..x.^..l.^...<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=450539, public, no-transform, must-revalidate

Last-Modified: Thu, 23 Apr 2015 10:40:21 GMT

Expires: Thu, 30 Apr 2015 10:40:21 GMT

Date: Sat, 25 Apr 2015 05:31:22 GMT

Connection: keep-alive
0..........0..... .....0......0...0......'.V.8.F.V....H....JW..2015042
3104021Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
.A..2.....:...:......20150423104021Z....20150430104021Z0...*.H........
..........o.}"^O8.[....i...8..o4.....|..aJ.J...U..E[.../...\ .%.o..;.,
r~.0....xgZ...8..K..V.CQ..U...F1..D1..VwQ....<h~.*#........ [email protected]..
.-.6Y,Be...l*[email protected]......*.0.`U.U4...?_......>r..H.......q
...f..0.BD.w.m..-.f.@.%...LH.7..{........AV5......E.%.c.....#0...0...0
..........r..?.*......y"..0...*.H........0..1.0...U....US1.0...U....Ve
riSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use a
t hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code S
igning 2009-2 CA0...150226000000Z..150527235959Z0..1.0...U....US1.0...
U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms o
f use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Clas
s 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0.......
......m5*R........2....>...yU4..L.. ...........u..Hez..Pn.....d...n
z(...V7.}^...d!RX...bl..[..a...L.. .~..Ij......%..%p.-...u..:..i..F*].
..*....{NH..|0...gHX.Q.r....S..........._.9.(w...suC...N..s.....&."...
:.C.Q.i~rl..<..krS..8.B..o][email protected]...
U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.veri
sign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS inco
rp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U..
......0... .....0......0"..U....0...0.1.0...U....TGV-B-32010...*.H<<< skipped >>>

GET /?from=brow_e1_tableau&nugt=yabrowser-15.2.2214.3645 HTTP/1.1

Host: market.yandex.ua

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept: */*

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8

Cookie: Session_id=noauth:1429939678; yandexuid=2270699091429939676; ys=def_bro.0; yp=1745299683.yb.15_2_2214_3645:2122677:1429939683; _ym_visorc_25439111=b


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 25 Apr 2015 05:28:10 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=120

Cache-Control: max-age=0, proxy-revalidate

Expires: Sat, 25 Apr 2015 05:28:10 GMT

X-Frame-Options: Deny

X-Powered-By: Zinger

XSCRIPT_PARENT_REQID_SEQ: e3d82c2fc6f6a960cb8ca5298e9591f0

Set-Cookie: ps_gch=6053244912294248448; domain=market.yandex.ua; path=/; expires=Mon, 03 Aug 2015 05:28:08 GMT

Set-Cookie: yandexmarket=10,UAH,1,,,,2,0,0; domain=.market.yandex.ua; path=/; expires=Tue, 19 Jan 2038 03:14:07 GMT

Set-Cookie: yandexmarket_mbo-products-carousel-192288=192322; domain=.market.yandex.ua; path=/; expires=Sat, 25 Apr 2015 05:58:09 GMT

Set-Cookie: uid=CmmLqFU7JeqNrChhFsIQAg==; path=/

Content-Encoding: gzip
400a..................y ..."..qI..M.KU.Rs_.}.......XH,.I."...e..,.f...
[....?.SZ]*K..?A.W.'... ..\...7S.qE...............kd..f.L.-...p..}..&l
t;.M..^..X M...v..?e..x.d ....M...$.0.....'...k.........M].Zu1...[...t
a....%K.l...&.}.....s~.t...yy.h..........|a.............G..K..........
c...c..R=?..O/.}u._ .?<.u..T.e.[.x....C.......|cj..R..T.M.?..yy....
'.F..I..^y.}.L.;..$....n9S._.D.t,.....5]u..4a..........g.kI>...*.@.
.....u.V_...W.TOv..I.......O/?{...O/....._.]~vv..._\~.......Mg.?..?..~
q.[..7g........N.A..........`..5n.-.. ............./.x.I<>...a$.
.34.....G..0..}...Hh2...>OZ_}.F..W...{..yqv.c.!z....~y..;Q.O.......
&...g.._~.....<.]......e..g0........8sU....;./....T.g:........ .7..
.._...\L.V=w..V......\.I...-.Q[......J......./....4d.../..j{.....R..&l
t;.......7|.....a...H>.../... ...>..G]>....6Wd.<....@.?~..
W...}.H..&B)"|L..........0.....G...?...}...i.Y9.&|.c.p....T=]U..x.q..c
../,i ]./H....<Vn..q....2.[~..l..j/@........5.V......I......0..GD~.
YHz..$.D3.2_e.um....e.G.,".......2..<j*-..74.F...^X`.....r..M...I.l
....6....*...c..0L..?#iVrZ...NiX..b.DM.. .e....4.E....s..;.... ...?...
[email protected].".r..@7{..P&.../&H....S^..2$....w.mn....<...]..
.{......%[email protected]..)/...............`......<.....J..
.u...;.m./......j..1f.....xg......~y.....e.}.}.}. .P_*/.G.,0....~}(.&l
t;...:........4%..V.&..%..5.._>.m..?|....W>4f_V^..}':..%0.;.".5.
...a..b.?.j...]...........7.y.~?|....m...TDM5...9..l............<O.
4...!..q......o..(I......._..?...9|..}......~....W.cS... 4}p..,...<<< skipped >>>

GET /instant/config HTTP/1.1

Host: VVV.yandex.ru

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept: */*

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8

Cookie: ys=def_bro.0; yandexuid=2270699091429939676


HTTP/1.1 200 Ok

Server: nginx

Date: Sat, 25 Apr 2015 05:27:58 GMT

Content-Type: application/json; charset=UTF-8

Transfer-Encoding: chunked

Connection: close

Cache-Control: no-cache,no-store,max-age=0,must-revalidate

Expires: Sat, 25 Apr 2015 05:27:58 GMT

Last-Modified: Sat, 25 Apr 2015 05:27:58 GMT

P3P: policyref="/w3c/p3p.xml", CP="NON DSP ADM DEV PSD IVDo OUR IND STP PHY PRE NAV UNI"

Set-Cookie: ys=def_bro.0; Domain=.yandex.ru; Path=/

X-XRDS-Location: hXXp://openid.yandex.ru/server_xrds/

Content-Encoding: gzip
[email protected].#(..zu.` uK..O.K{..~.OW.....N3. X
.Z.}.`. 2..RJ}.`../..,...{..r7.`~.g....< ....I.x.#)......^.u.:...9.
p.......d..iU..>......q...q}.Xn...l.?vo..hr6b....uUl.....Y.'N......
e.....p......0..

GET /pki/crl/products/MicCodSigPCA_08-31-2010.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Tue, 14 Apr 2015 05:02:07 GMT

Accept-Ranges: bytes

ETag: "2711f7277076d01:0"

Server: Microsoft-IIS/8.5

VTag: 27948827400000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 554

Cache-Control: max-age=900

Date: Sat, 25 Apr 2015 05:31:21 GMT

Connection: keep-alive

0..&0......0...*.H........0y1.0...U....US1.0...U....Washington1.0...U.
...Redmond1.0...U....Microsoft Corporation1#0!..U....Microsoft Code Si
gning PCA..150413163223Z..150713045223Z.a0_0...U.#..0..........X..7.3.
..L...0... .....7.........0...U......Z0... .....7......150712164223Z0.
..*.H.............WK....e.\.-.n......./......."]..E!.. //=...[....w...
 ..........#...[.l.J..f|..... .s......w...J._.......3.[..#.z....ko.I..
Q{....e.nV......F..d}..rF\H.jlH]dQ.E....x......W............j....&L. 2
.$.?...X?.#.(.....pK.v.......y..r....t......=.AW......K.G.gJD.b...

HEAD /bm/version.rss HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

User-Agent: Microsoft BITS/7.5

Host: download.cdn.yandex.net


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Sat, 25 Apr 2015 05:28:19 GMT

Connection: keep-alive

Keep-Alive: timeout=5

Location: hXXp://cache-kiev11.cdn.yandex.net/download.cdn.yandex.net/bm/version.rss

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

HTTP/1.1 302 Moved Temporarily..Server: nginx/1.6.2..Date: Sat, 25 Apr
 2015 05:28:19 GMT..Connection: keep-alive..Keep-Alive: timeout=5..Loc
ation: hXXp://cache-kiev11.cdn.yandex.net/download.cdn.yandex.net/bm/v
ersion.rss..Expires: Thu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-
cache..Cache-Control: no-store,no-cache,must-revalidate..Pragma: no-ca
che......

GET /bm/version.rss HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Thu, 16 Apr 2015 11:57:05 GMT

User-Agent: Microsoft BITS/7.5

Host: download.cdn.yandex.net


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Sat, 25 Apr 2015 05:28:19 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=5

Location: hXXp://cache-kiev11.cdn.yandex.net/download.cdn.yandex.net/bm/version.rss

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

0..HTTP/1.1 302 Moved Temporarily..Server: nginx/1.6.2..Date: Sat, 25 
Apr 2015 05:28:19 GMT..Transfer-Encoding: chunked..Connection: keep-al
ive..Keep-Alive: timeout=5..Location: hXXp://cache-kiev11.cdn.yandex.n
et/download.cdn.yandex.net/bm/version.rss..Expires: Thu, 01 Jan 1970 0
0:00:01 GMT..Cache-Control: no-cache..Cache-Control: no-store,no-cache
,must-revalidate..Pragma: no-cache..0..

GET /crls/secureca.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.geotrust.com


HTTP/1.1 200 OK

Server: Apache

ETag: "6bc56803595b53f408cefa12cf3e6ca9:1429938027"

Last-Modified: Sat, 25 Apr 2015 05:00:27 GMT

Date: Sat, 25 Apr 2015 05:27:29 GMT

Content-Length: 724

Connection: keep-alive

Content-Type: application/pkix-crl

0...0..90...*.H........0N1.0...U....US1.0...U....Equifax1-0 ..U...$Equ
ifax Secure Certificate Authority..150425044300Z..150505044300Z0...0..
..v...140618150003Z0........140429180917Z0........140709194633Z0......
..140416233935Z0.....)..140617185515Z0....Bf..120627171053Z0.....3..02
0515130611Z0.....#..140606204021Z0........100729164439Z0........140606
222139Z0....%...020514181157Z0........140725020038Z0....M\..1404300004
42Z0........100729164732Z0....uU..150118022133Z0....V...140624123102Z0
........120627171025Z0........140618143256Z0.....>..140711125531Z0.
...j...140226123519Z0...*.H................h.;iQ.......>...~..e.y..
.U~....n(q.{. 7 ..$N..'.l.. .. .2...3me........2...3.^..U.....K.>y.
.[..&*P...U.........F.F...(.jt.1.HTTP/1.1 200 OK..Server: Apache..ETag
: "6bc56803595b53f408cefa12cf3e6ca9:1429938027"..Last-Modified: Sat, 2
5 Apr 2015 05:00:27 GMT..Date: Sat, 25 Apr 2015 05:27:29 GMT..Content-
Length: 724..Connection: keep-alive..Content-Type: application/pkix-cr
l..0...0..90...*.H........0N1.0...U....US1.0...U....Equifax1-0 ..U...$
Equifax Secure Certificate Authority..150425044300Z..150505044300Z0...
0....v...140618150003Z0........140429180917Z0........140709194633Z0...
.....140416233935Z0.....)..140617185515Z0....Bf..120627171053Z0.....3.
.020515130611Z0.....#..140606204021Z0........100729164439Z0........140
606222139Z0....%...020514181157Z0........140725020038Z0....M\..1404300
00442Z0........100729164732Z0....uU..150118022133Z0....V...14062412310
2Z0........120627171025Z0........140618143256Z0.....>..14071112

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEGO+CyDUoFQBjrKVo87pCRc= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1725

content-transfer-encoding: binary

Cache-Control: max-age=536993, public, no-transform, must-revalidate

Last-Modified: Fri, 24 Apr 2015 10:39:56 GMT

Expires: Fri, 1 May 2015 10:39:56 GMT

Date: Sat, 25 Apr 2015 05:31:18 GMT

Connection: keep-alive

0..........0..... .....0......0...0......N$p...v....1.;..vn....2015042
4103956Z0s0q0I0... ...................F....0.yV......{&.K......&......
.c.. ..T.............20150424103956Z....20150501103956Z0...*.H........
......n..)........bWh...hI..W.j.&...{..{W.8...H........a.....z...r.I..
.#.E.e....PIgJ,..m..%".O ...............%....X..Hr..fIm..qQ......GR.$.
....gl_.UI..f.T..C.T.e...Ir.^......./..B.q.yB..9.a.U.>..Z..([......
.!m\.M.3.......f..JVm.B.m.y.......{..t.I.op..._ LCs.......0...0...0...
.........F...I]A([email protected]...*.H........0..1.0...U....US1.0...U....VeriS
ign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use at h
ttps://VVV.verisign.com/rpa (c)101.0,..U...%VeriSign Class 3 Code Sign
ing 2010 CA0...150225000000Z..150526235959Z0..1.0...U....US1.0...U....
VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1VeriSign Cla
ss 3 Code Signing 2010 OCSP Responder0.."0...*.H.............0........
.q<...A...#......A...u..Lz.............o..D.vQ%..s.......f....e../j
I.d.W.....|K;.j5...#.B%.]..~S.... .|;S.&.....N..`...5.....!D.p....M/..
 ..;j...q..`6...2.Ck..BnLHvCZn%....,.w.Ooi..z'...\.Yx......b..L...5.o.
.o..{..}.........%e.....N..._i........*Bc....:yQg.........0...0...U...
.0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.verisign
.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS incorp. 
by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U......
..0... .....0......0"..U....0...0.1.0...U....TGV-B-31830...*.H........
......-..^.........f.P`...s.....8.....V.......... .... B.(@-)6.Rf.

<<< skipped >>>

GET /pki/crl/products/microsoftrootcert.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Tue, 24 Mar 2015 05:02:25 GMT

If-None-Match: "a1132b8ef65d01:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 304 Not Modified

Content-Type: application/pkix-crl

Last-Modified: Tue, 24 Mar 2015 05:02:25 GMT

ETag: "a1132b8ef65d01:0"

Cache-Control: max-age=900

Date: Sat, 25 Apr 2015 05:31:13 GMT

Connection: keep-alive

HTTP/1.1 304 Not Modified..Content-Type: application/pkix-crl..Last-Mo
dified: Tue, 24 Mar 2015 05:02:25 GMT..ETag: "a1132b8ef65d01:0"..Cache
-Control: max-age=900..Date: Sat, 25 Apr 2015 05:31:13 GMT..Connection
: keep-alive..

The Trojan connects to the servers at the folowing location(s):

plagiatus.exe_2920:

.text

`.rdata

@.data

.rsrc

u.Pjyjah

L$.hH

|$ ;|$(~

tcPV

?%uQW

SSh&;a

vSSSh

FTPjK

FtPj;

C.PjRV

tGHt.Ht&

<_t~<~tz<%uB

<9~r<-tn<_tj<.tf<!tb<~t^<*tZ<'tV<(tR<)tN

<.t~<_tz<~tv<%uB

<-t~<.tz<_tv<~tr<%uB

SSh@|b

SSh`|b

777777777

!7"77#7$%&7'()77* ,7-./017237747756

XX X!"XX#$XXXX%&'XXX(X)*X XXX,-.XX/0123XXXX4X5XXXXXXX6XXXXXX789:;<XXXXXXXX=XXX>?@ABCDEXXXXFXXXXGHXXXXXIXXJKXXXXXLMXXXNNXXOXXXXXXXXXPXXQXRSTUVXW

!"KKK#K$K%KK&K'()KKKK*KKKKKKKK KKKKKKKKKKKK,KK-.KKKKKKKKKKK/K0KKKKKKKKKKKKKK12KK345KK6789:KKKKKKKK;<KK=>?KK@KKKKKABCKKKKKDKEKKKKKFKKGHIJ

t.Gj:W

FL9D$(u$

FTPG

FTPj

.EKSWU

RWj%Sj

|$@3|$<3

FtPS

11111111

11111111111

11 !"#11$%&'11()* 1,11-./0

hXXp://advego.ru/plagiatus/

hXXp://advego.ru/blog/plagiatus/

[%1](%2)

ERROR_KEY_DOES_NOT_EXIST

ERROR_IMAGE_TYPE_NOT_SUPPORTED

ERROR_WRONG_USER_KEY

antigate.com

rucaptcha.com

hXXp://%1/in.php

hXXp://%1/res.php?key=%2&action=get&id=%3

hXXp://%1/res.php?key=%2&action=getbalance

ISO_646.IRV:1991

WINDOWS-1250

WINDOWS-1251

WINDOWS-1252

WINDOWS-1253

WINDOWS-1254

WINDOWS-1255

WINDOWS-1256

WINDOWS-1257

WINDOWS-1258

PTCP154

CSPTCP154

WINDOWS-874

WINDOWS-51932

WINDOWS-31J

WINDOWS-932

CSWINDOWS31J

WINDOWS-50221

WINDOWS-936

windows-874

windows-1250

windows-1251

windows-1252

windows-1253

windows-1254

windows-1255

windows-1256

windows-1257

windows-1258

mlang.dll

windows1251

windowscp1251

windows1521

microsoftcp1251

windowskoi8r

windowsutf8

windows1250

windows1252

windows874

windows936

msgreek

windows1253

windows1254

windows1255

windows1256

windows1257

windows1258

csshiftjis

idx: %d

start: %d

end: %d

RICHED20.DLL

OLE32.dll

res://%s/%d/%d

hXXp://advego.ru/plagiatus/idndl.x86.exe

hXXp://advego.ru/news/plagiatus/

All Files (*.*)

normaliz.dll

UxTheme.DLL

WTL_CmdBar_InternalAutoPopupMsg

WTL_CmdBar_InternalGetBarMsg

application/vnd.wap.xhtml xml

text/vnd.wap.wml

application/x-httpd-php

application/vnd.google-earth.kml xml

application/vnd.google-earth.kmz

application/vnd.oasis.opendocument.text application/vnd.openxmlformats

application/vnd.oasis.opendocument.text-master

application/vnd.oasis.opendocument.text-template

application/vnd.oasis.opendocument.text-web

application/vnd.oasis.opendocument.presentation

application/vnd.openxmlformats-officedocument.presentationml.presentation

application/vnd.oasis.opendocument.presentation-template

application/vnd.oasis.opendocument.spreadsheet application/vnd.oasis.opendocument.spreadsheet-template

application/vnd.oasis.opendocument.chart

application/vnd.oasis.opendocument.chart-template

application/vnd.oasis.opendocument.formula

application/vnd.oasis.opendocument.formula-template

application/vnd.oasis.opendocument.graphics

application/vnd.oasis.opendocument.graphics-template

application/vnd.oasis.opendocument.image

application/vnd.oasis.opendocument.image-template

application/vnd.lotus-wordpro

text/vnd.graphviz

application/vnd.ms-word.document.12

application/vnd.ms-word.document

application/vnd.adobe.pdf

application/vnd.ms-excel

application/vnd.ms-powerpoint

image/vnd.adobe.photoshop

image/vnd.djvu

image/x-portable-bitmap

image/x-portable-pixmap

image/x-portable-greymap

application/vnd.rn-realmedia

application/vnd.oasis.opendocument.database

application/vnd.ms-cab-compressed

application/x-executable

application/pgp-keys

application/vnd.ms-opentype

application/vnd.font-fontforge-sfd

application/vnd.ms-tnef

application/x-gnupg-keyring

application/x-java-jce-keystore

application/x-java-keystore

application/x-pgp-keyring

application/vnd.symbian.install

application/x-dosexec

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

(https?://)?(www\.)?([\w|\d|\.|-] )/?

ProxyPort

ProxyLogin

ProxyPass

AntigateKey

RucaptchaKey

hXXp://advego.ru/plagiatus/

%d%% / %d%%. %s

: %s, %d

%d%% / %d%%

(%d): %s

HTTP-

. %s (

%d): %s

%d Kb (

hXXp://advego.ru/plagiatus/advego_plagiatus.exe?%s

! (%s)

web (%s): %s

(%s): %s

: %s.

: %d /

%d%% (

: %d /

{ %s }

IDN: %s

[%H:%M:%S]

S_OK == idoc_->Range( src->chrg.cpMin, src->chrg.cpMax, &range)

u:https?://vk.*\.ru/badbrowser

r:https?://(?:[\w\-\.] \.)?youtube\.com\/results

r:https?://\d \.\d \.\d \.\d

r:^(?!https?://)

hXXp://

Yandex.com

VVV.yandex.com/yandsearch?text={query}&lr=

r:https?://(.*\.)?yandex\..*

r:hXXp://VVV.freedrweb.com/\?lng\=

r:https?://(.*\.)?google\..*

r:https?://(.*\.)?bing\..*

hXXp://search.yahoo.com/search?p={query}&ei=UTF-8&norw=1

r:https?://(?:[\w\-\.] \.)?yahoo\..

r:https?://(?:[\w\-\.] \.)?begun\..

r:https?://(?:[\w\-\.] \.)?cheetahmail\.com.

r:https?://(.*\.)?msn\.com.*

r:https?://\d \.\d \.\d \.\d /search/srpcache.*

b:https?://VVV.flickr.com/

hXXp://yandex.ru/yandsearch?text={query}&lr=225&rd=0&noreask=1

r:https?://VVV.freedrweb.com/\?lng\=.

hXXps://VVV.google.ru/search?hl=ru&source=hp&q={query}&filter=0&tbs=li:1&gbv=1&filter=0

answer.py\?answer\=86640

r:https?://(?!(books))(?!(otvety))(?:[\w\-\.] \.)?google\..

r:https?://(?:[\w\-\.] \.)?googleusercontent\..

r:https?://(?:[\w\-\.] \.)?youtube\.. \/results.*

b:hXXp://otvety.google.ru/otvety/search

u:hXXp://VVV.blogger.com/?tab=wj

u:hXXps://VVV.youtube.com/?gl=RU

hXXp://VVV.bing.com/search?q={query}&form=QBRE&cc=ru

<div\s class=.sc_captcha

r:https?://(?:[\w\-\.] \.)?bing\..

r:https?://(?:[\w\-\.] \.)?bingj\..

r:https?://(?:[\w\-\.] \.)?msn\.com.*

r:https?://(?:[\w\-\.] \.)?live\.com.*

r:https?://(?:[\w\-\.] \.)?yandex\..

b:hXXp://onlinehelp.microsoft.com

b:hXXp://go.microsoft.com

b:hXXp://advertising.microsoft.com

b:hXXp://VVV.microsofttranslator.com

b:hXXp://ms.ciao-shopping.nl

=http

[%1]: %2 (%3)

[%1]: %2

UWM_MDICHILDTABTEXTCHANGE_MSG-5DAD28E1-C961-11d5-8BDA-00500477589F

UWM_MDICHILDTABTOOLTIPCHANGE_MSG-5DAD28E3-C961-11d5-8BDA-00500477589F

UWM_MDICHILDACTIVATIONCHANGE_MSG-5DAD28E5-C961-11d5-8BDA-00500477589F

UWM_MDICHILDMAXIMIZED_MSG-5DAD28E7-C961-11d5-8BDA-00500477589F

UWM_MDICHILDUNMAXIMIZED_MSG-5DAD28E9-C961-11d5-8BDA-00500477589F

UWM_MDICHILDSHOWTABCONTEXTMENU_MSG-5DAD28EB-C961-11d5-8BDA-00500477589F

UWM_MDICHILDSAVEMODIFIED_MSG-5DAD28EC-C961-11d5-8BDA-00500477589F

UWM_MDICHILDISMODIFIED_MSG-5DAD28EC-C961-11d5-8BDA-00500477589F

UWM_MDICHILDCLOSEWITHNOPROMPT_MSG-5DAD28EC-C961-11d5-8BDA-00500477589F

Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko

Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko

https?://

hXXp://advego.ru/plagiatus/version.txt

(%1) [%2:%3]

http-equiv

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

ADVAPI32.DLL

GetProcessWindowStation

USER32.DLL

operator

portuguese-brazilian

:/?_.#&;=

dot operator, U 22C5 ISOamsb

tilde operator = varies with = similar to, U 223C ISOtech

proportional to, U 221D ISOtech

asterisk operator, U 2217 ISOtech

zero width joiner, U 200D NEW RFC 2070

zero width non-joiner, U 200C NEW RFC 2070

pluginurl

Memory allocation failed : %s

HTTP-EQUIV

Unsupported encoding %s

Char 0x%X out of allowed range

Bytes: 0xX

Bytes: 0xX 0xX 0xX 0xX

Opening and ending tag mismatch: %s and %s

Invalid char in CDATA 0x%X

Element %s embeds close tag

htmlParseCharRef: invalid xmlChar value %d

htmlCheckEncoding: unknown encoding %s

Unexpected end tag : %s

ParsePI: PI %s never end ...

ParsePI: PI %s space expected

Attribute %s redefined

Couldn't find end of Start Tag %s

Tag %s invalid

Entity: line %d:

%s:%d:

element %s:

%s: out of memory

Failure to process entity %s

Entity(%s) document marked standalone but requires external subset

SAX.xmlSAX2EntityDecl(%s) called while not in subset

Entity(%s) already defined in the external subset

Entity(%s) already defined in the internal subset

SAX.xmlSAX2AttributeDecl(%s) called while not in subset

SAX.xmlSAX2ElementDecl(%s) called while not in subset

SAX.xmlSAX2NotationDecl(%s) called while not in subset

SAX.xmlSAX2NotationDecl(%s) externalID or PublicID missing

SAX.xmlSAX2UnparsedEntityDecl(%s) called while not in subset

xml:id : attribute value %s is not an NCName

Attribute %s in %s redefined

Namespace prefix %s of attribute %s is not defined

xmlns:%s: URI %s is not absolute

xmlns:%s: %s not a valid URI

Empty namespace name for prefix %s

xmlns: URI %s is not absolute

xmlns: %s not a valid URI

Avoid attribute ending with ':' like '%s'

invalid namespace declaration '%s'

standalone: attribute %s on %s defaulted from external subset

Namespace prefix %s is not defined

Namespace prefix %s was not found

unterminated entity reference s

hXXp://VVV.w3.org/XML/1998/namespace

PTF://

%.20s%d

default%d

Attempt to load network entity %s

Operation timed out

Broken pipe

Operation not permitted

Inappropriate I/O control operation

Not supported

Operation in progress

Operation canceled

failed to load external entity "%s"

Internal error, xmlCopyCharMultiByte 0x%X out of bound

Predefined entity %s without content !

Internal parameter entity %s without content !

Internal entity %s without content !

Cannot parse entity %s

new input from entity: %s

new input from file: %s

encoding not supported %s

xmlRegisterCharEncodingHandler: Too many handler registered, see %s

input conversion failed due to input error, bytes %s

0xX 0xX 0xX 0xX

&#%d;

'()* ,-./0123456789:;

Attribute %s:%s redefined

conditional section INCLUDE or IGNORE keyword expected

Pbm popping %d NS

Excessive depth in document: %d use XML_PARSE_HUGE option

Popping input %d

xmlParseStringCharRef: invalid xmlChar value %d

new blanks wrapper for entity: %s

Name %s is not XML Namespace compliant

Attempt to reference the parameter entity '%s'

'<' in entity '%s' is not allowed in attributes values

Attribute references external entity '%s'

Entity reference to unparsed entity %s

Entity '%s' not defined

%%%s; is not a parameter entity

PEReference: %%%s; not found

Pushing input %d : %.30s

%s(%d):

PEReference: %s is not a parameter entity

PEReference: %s

PCDATA invalid Char value %d

xmlParseComment: invalid xmlChar value %d

colon are forbidden from PI names '%s'

colon are forbidden from notation names '%s'

standalone: attribute notation value token %s duplicated

standalone: attribute enumeration value token %s duplicated

xmlParseElementChildrenContentDecl : '%c' expected

xmlParseElementChildrenContentDecl : depth %d too deep, use XML_PARSE_HUGE

xmlParseElementContentDecl : %s '(' expected

Internal: %%%s; is not a parameter entity

xmlLoadEntityContent: invalid char value %d

Reading %s entity content input

Failed to parse QName '%s:%s:'

Failed to parse QName '%s:'

Failed to parse QName '%s'

Opening and ending tag mismatch: %s line %d and %s

xmlParseCharRef: invalid xmlChar value %d

EntityValue: '%c' forbidden except for entities references

xmlParseEntityDecl: entity %s not terminated

Invalid URI: %s

colon are forbidden from entities names '%s'

Entity '%s' failed to parse

Specification mandate value for attribute %s

Invalid value "%s" for xml:space : "default" or "preserve" expected

Malformed value for xml:lang : %s

Namespace prefix %s on %s is not defined

Namespaced Attribute %s in '%s' redefined

Namespace prefix %s for %s on %s is not defined

xmlns:%s: Empty XML namespace is not allowed

xmlns:%s: '%s' is not a valid URI

hXXp://VVV.w3.org/2000/xmlns/

xmlns: '%s' is not a valid URI

Couldn't find end of Start Tag %s line %d

Premature end of data in tag %s line %d

&!&!*! !.!.!

&#x%X;

Internal error removing splay node = %d

Internal error clearing splay node = %d

Operation timed out after %ld milliseconds with %lld out of %lld bytes received

In state %d with no easy_conn, bail out!

Pipe broke: handle 0x%p, url = %s

; filename="%s"

------------------------xx

--%s--

couldn't open file "%s"

Content-Type: %s

Content-Type: multipart/mixed, boundary=%s

%s; boundary=%s

Curl_addHandleToPipeline: length: %d

About to connect() to %s%s port %ld (#%ld)

Connected to %s (%s) port %ld (#%ld)

Failed to convert %s to ACE;

Protocol %s not supported or disabled in libcurl

http_proxy

Port number too large: %lu

%s://%s%s%s:%hu%s%s%s

;type=%c

IPv6 numerical address used in URL without brackets

[%*45[0123456789abcdefABCDEF:.]%c

Couldn't find host %s in the _netrc file; using defaults

[email protected]

Couldn't resolve host '%s'

Couldn't resolve proxy '%s'

User-Agent: %s

CURLOPT_SSL_VERIFYHOST no longer supports 1 as value!

Server doesn't support pipelining

Found bundle for host %s: %p

Connection #%ld to host %s left intact

Rebuilt URL to: %s

smtp

SMTP.

<url> malformed

:]://%[^

[^:]:%[^

Re-using existing connection! (#%ld) with host %s

Found connection %ld, with requests in the pipe (%zu)

%s://%s

%s:%d

Added %s:%d:%s to DNS cache

Resolve %s found illegal!

%5[^:]:%d:%5s

operation aborted by callback

ioctl callback returned error %d

the ioctl callback returned %d

seek callback returned error %d

Problem (%d) in the Chunked-Encoded data

Simulate a HTTP 304 response!

HTTP server doesn't seem to support byte ranges. Cannot resume.

Excess found in a non pipelined read: excess = %zd url = %s (zero-length body)

Unrecognized content encoding type. libcurl understands `identity', `deflate' and `gzip' content encodings.

Excess found in a non pipelined read: excess = %zu, size = %lld, maxdownload = %lld, bytecount = %lld

Rewinding stream by : %zu bytes on url %s (size = %lld, maxdownload = %lld, bytecount = %lld, nread = %zd)

Rewinding stream by : %zd bytes on url %s (zero-length body)

Operation timed out after %ld milliseconds with %lld bytes received

No URL set!

[^?&/:]://%c

Violate RFC 2616/10.3.2 and switch from POST to GET

Violate RFC 2616/10.3.3 and switch from POST to GET

Disables POST, goes with %s

Issue another request to this URL: '%s'

Could not resolve %s: %s

getaddrinfo() failed for %s:%d; %s

init_resolve_thread() failed for %s; %s

Conn: %ld (%p) Receive pipe weight: (%lld/%zu), penalized: %s

Site %s:%d is pipeline blacklisted

Server %s is blacklisted

Server %s is not blacklisted

- Conn %ld (%p) send_pipe: %zu, recv_pipe: %zu

Adding handle: recv: %d

Adding handle: send: %d

[%s %s %s]

Send failure: %s

Recv failure: %s

Operation too slow. Less than %ld bytes/sec transferred the last %ld seconds

--:--:--

%3lld %s %3lld %s %3lld %s %s %s %s %s %s %s

Failed to set SIO_KEEPALIVE_VALS on fd %d: %d

Failed to set SO_KEEPALIVE on fd %d

bind failed with errno %d: %s

Local port: %hu

getsockname() failed with errno %d: %s

Bind to local port %hu failed, trying next

Couldn't bind to '%s'

Name '%s' family %i resolved to '%s' family %i

Couldn't bind to interface '%s'

Local Interface %s is ip %s using address family %i

ssloc inet_ntop() failed with errno %d: %s

ssrem inet_ntop() failed with errno %d: %s

getpeername() failed with errno %d: %s

TCP_NODELAY set

Could not set TCP_NODELAY: %s

Failed to connect to %s: %s

Trying %s...

sa_addr inet_ntop() failed with errno %d: %s

couldn't connect to %s at %s:%ld

Failed connect to %s:%ld; %s

HTTPS

%sAuthorization: Basic %s

%s:%s

%s auth using %s with user '%s'

HTTP/

Avoided giant realloc for header (max is %d)!

The requested URL returned error: %d

The requested URL returned error: %s

If-Unmodified-Since: %s

Last-Modified: %s

If-Modified-Since: %s

%s, d %s M d:d:d GMT

Failed sending HTTP POST request

Content-Type: application/x-www-form-urlencoded

Internal HTTP POST error!

Failed sending HTTP request

%s%s=%s

%s HTTP/%s

%s%s%s%s%s%s%s%s%s%s%s

PTF://%s:%s@%s

Content-Range: bytes %s/%lld

Content-Range: bytes %s%lld/%lld

Range: bytes=%s

Host: %s%s%s:%hu

Host: %s%s%s

Chunky upload is not supported by HTTP 1.0

%s, TE

Accept-Encoding: %s

Referer: %s

HTTP error before end of send, stop sending

HTTP/1.0 connection set to keep alive!

HTTP/1.1 proxy connection set close!

HTTP/1.0 proxy connection set to keep alive!

HTTP 1.0, assume close after body

RTSP/%d.%d =

HTTP =

HTTP/%d.%d =

%s:%.*s

%s cookie %s="%s" for domain %s, path %s, expire %lld

#HttpOnly_

skipped cookie with bad tailmatch domain: %s

httponly

23[^;

=]=I99[^;

%s%s%s

# Fatal libcurl error

# Netscape HTTP Cookie File

# hXXp://curl.haxx.se/docs/http-cookies.html

# This file was generated by libcurl! Edit at your own risk.

WARNING: failed to save cookies in %s

%s%s%s%s%s%s

Session: %s

%s %s RTSP/1.0

Range: %s

Refusing to issue an RTSP SETUP without a Transport: header.

Transport: %s

Transport:

Refusing to issue an RTSP request [%s] without a session ID.

Got RTSP Session ID Line [%s], but wanted ID [%s]

Unable to read the CSeq header: [%s]

SMTPS

SMTP

LOGIN

EHLO %s

HELO %s

No known authentication mechanisms supported!

AUTH %s %s

AUTH %s

MAIL FROM:%s SIZE=%s

MAIL FROM:%s AUTH=%s SIZE=%s

MAIL FROM:%s AUTH=%s

MAIL FROM:%s

RCPT TO:<%s>

RCPT TO:%s

Got unexpected smtp-server response: %d

STARTTLS denied. %c

STARTTLS not supported.

Remote access denied: %d

Access denied: %d

Authentication failed: %d

MAIL failed: %d

RCPT failed: %d

USER %s

APOP %s %s

%s %s

STLS not supported.

Access denied. %c

PASS %s

%cd

LOGIN %s %s

AUTHENTICATE %s %s

AUTHENTICATE %s

LIST "%s" *

SELECT %s

FETCH %s BODY[%s]

APPEND %s (\Seen) {%lld}

LOGINDISABLED

TFTP

set timeouts for state %d; Total %ld, retry %d maxtry %d

invalid tsize -:%s:- value in OACK packet

%s (%ld)

blksize is smaller than min supported

%s (%d)

blksize is larger than max supported

%s (%d) %s (%d)

got option=(%s) value=(%s)

tftp_rx: internal error

Timeout waiting for block %d ACK. Retries = %d

Received unexpected DATA packet block %d, expecting block %d

Received last DATA packet block %d again.

tftp_tx: internal error, event: %i

tftp_tx: giving up waiting for block %d ack

Received ACK for block %d, expecting %d

bind() failed; %s

tftp_send_first: internal error

%s%c%s%c

TFTP finished

TFTP response timeout

Can't get the size of %s

Can't open %s for writing

Last-Modified: %s, d %s M d:d:d GMT

Couldn't open file %s

There are more than %d entries

LDAP remote: %s

LDAP local: ldap_simple_bind_s %s

LDAP local: Cannot connect to %s:%ld

LDAP local: trying to establish %s connection

LDAP local: %s

LDAP local: LDAP Vendor = %s ; LDAP Version = %d

CLIENT libcurl 7.33.0

MATCH %s %s %s

DEFINE %s %s

insufficient winsock version to support telnet

WSAStartup failed (%d)

%s %d %d

%s %s %d

%s %s %s

%s IAC %d

%s IAC %s

Sending data failed (%d)

%d (unknown)

%s (unsupported)

%s IAC SB

Syntax error in telnet option: %s

Unknown telnet option %s

7[^= ]%*[ =]%5s

USER,%s

%c%c%c%c%s%c%c

%c%s%c%s

7[^,],7s

%c%c%c%c

FreeLibrary(wsock2) failed (%d)

WSACloseEvent failed (%d)

WSAEnumNetworkEvents failed (%d)

WSACreateEvent failed (%d)

failed to find WSAEnumNetworkEvents function (%d)

failed to find WSAEventSelect function (%d)

failed to find WSACloseEvent function (%d)

failed to find WSACreateEvent function (%d)

failed to load WS2_32.DLL (%d)

WS2_32.DLL

FTPS

PORT

Failure sending PORT command: %s

,%d,%d

Failure sending EPRT command: %s

%s |%d|%s|%hu|

bind() failed, we ran out of ports!

bind(port=%hu) failed: %s

bind(port=%hu) on non-local address failed: %s

socket failure: %s

failed to resolve the address provided to PORT: %s

getsockname() failed: %s

Connect data stream passively

STOR %s

APPE %s

SIZE %s

RETR %s

ftp server doesn't support SIZE

PBSZ %d

Access denied: d

ACCT %s

ACCT rejected by server: d

Connecting to %s (%s) port %d

Failure sending QUIT command: %s

Uploading to a URL without a file name!

FTP response aborted due to select/poll error: %d

FTP response timeout

MDTM %s

Bad PASV/EPSV response: d

Can't resolve new host %s:%hu

Can't resolve proxy host %s:%hu

%d.%d.%d.%d

Skips %d.%d.%d.%d for data connection, uses %s instead

%d,%d,%d,%d,%d,%d

Illegal port number in EPSV reply

%c%c%c%u%c

ddd d:d:d GMT

dddddd

unsupported MDTM reply format

QUOT string not accepted: %s

Wildcard - "%s" skipped by user

Wildcard - START of "%s"

Preparing for accepting server on data port

CWD %s

Failed FTP upload:

RETR response: d

server did not report OK, got %d

Failure sending ABOR command: %s

Remembering we are in dir "%s"

ftp_perform ends with SECONDARY: %d

PRET RETR %s

PRET STOR %s

PRET %s

REST %d

Got a d response code instead of the assumed 200

TYPE %c

Failed to do PORT

PRET command not accepted: d

Failed to MKD dir: d

MKD %s

QUOT command failed with d

Entry path is '%s'

PROT %c

unsupported parameter to CURLOPT_FTPSSLAUTH: %d

Got a d ftp-server response when 220 was expected

Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), Unknown.

Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because the client program and identd report different user-ids.

Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because SOCKS server cannot connect to identd on the client.

Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected or failed.

SOCKS4%s request granted.

Failed to resolve "%s" for SOCKS4 connect.

No authentication method was acceptable. (It is quite likely that the SOCKS5 server wanted a username/password, since none was supplied to the server on this connection.)

SOCKS5 GSSAPI per-message authentication is not supported.

Can't complete SOCKS5 connection to xx:xx:xx:xx:xx:xx:xx:xx:%d. (%d)

Can't complete SOCKS5 connection to %s:%d. (%d)

Can't complete SOCKS5 connection to %d.%d.%d.%d:%d. (%d)

Failed to resolve "%s" for SOCKS5 connect.

User was rejected by the SOCKS5 server (%d %d).

Received HTTP code %d from proxy after CONNECT

CONNECT %s HTTP/%s

%s%s%s%s

Host: %s

%s%s%s:%hu

%s:%hu

Establish HTTP proxy tunnel to %s:%hu

TUNNEL_STATE switched to: %d

HTTP/1.%d %d

0123456789

login

%s, algorithm="%s"

%s, opaque="%s"

%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%s", response="%s"

%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%s", cnonce="%s", nc=x, qop=%s, response="%s"

%s:%s:x:%s:%s:%s

%s:%s:%s

xxxx

%sAuthorization: NTLM %s

Error while processing content unencoding: %s

1.2.5

1.2.0.4

Unable to parse FTP file list

Error in the SSH layer

Caller must register CURLOPT_CONV_ callback options

TFTP: No such user

TFTP: Unknown transfer ID

TFTP: Illegal operation

TFTP: Access Violation

TFTP: File Not Found

Login denied

Issuer check against peer certificate failed

Invalid LDAP URL

Unrecognized or bad HTTP Content or Transfer-Encoding

Problem with the SSL CA cert (path? access rights?)

Peer certificate cannot be authenticated with given CA certificates

Problem with the local SSL certificate

SSL peer certificate or SSH remote key was not OK

An unknown option was passed in to libcurl

A libcurl function was given a bad argument

Operation was aborted by an application callback

FTP: command REST failed

FTP: command PORT failed

HTTP response code said error

FTP: couldn't retrieve (RETR failed) the specified file

FTP: couldn't set file type

FTP: can't figure out the host in the PASV response

FTP: unknown 227 response format

FTP: unknown PASV reply

FTP: unknown PASS reply

FTP: The server did not accept the PRET command.

FTP: Accepting server connect has timed out

FTP: The server failed to connect to data port

FTP: weird server reply

A requested feature, protocol or option was not found built-in in this libcurl due to a build-time decision.

URL using bad/illegal format or missing URL

Unsupported protocol

Winsock version not supported

Protocol family not supported

Address family not supported

Operation not supported

Socket is unsupported

Protocol is unsupported

Protocol option is unsupported

Unknown error %d (%#x)

%c%c==

%c%c%c=

d:d

d:d:d

libcurl is now using a weak random seed!

not supported file type '%s' for certificate

file type P12 for certificate not supported

file type ENG for certificate not implemented

not supported file type for private key

Private key does not match the certificate public key

file type P12 for private key not supported

file type ENG for private key not supported

unable to set private key file: '%s' type %s

unable to use client certificate (no key found or wrong pass phrase?)

SSL Engine not supported

select/poll on SSL socket, errno: %d

SSL read: %s, errno %d

d-d-d d:d:d %s

common name: %s (matched)

SSL: certificate subject name '%s' does not match target host name '%s'

SSL: unable to obtain common name from peer certificate

SSL: illegal cert name field

SSL: no alternative certificate subject name matches target host name '%s'

subjectAltName does not match %s

subjectAltName: %s matched

CERT verify

Client key exchange

Server key exchange

CERT

Client CERT

Request CERT

Client key

SSLv%c, %s%s (%d):

SSL: SSL_set_fd failed: %s

SSL: SSL_set_session failed: %s

error loading CRL file: %s

CRLfile: %s

CAfile: %s

CApath: %s

successfully set certificate verify locations:

error setting certificate verify locations, continuing anyway:

error setting certificate verify locations:

SSL: couldn't create a context: %s

OpenSSL was built without SSLv2 support

SSL connection using %s

SSL certificate problem, verify that the CA cert is OK.

SSL certificate problem: %s

Unknown SSL protocol error in connection to %s:%ld

%s: %s

x:

%s(%s)

%s: %s

Signature: %s

Cert

RSA Public Key

RSA Public Key (%d bits)

pub_key

priv_key

Serial Number: %s

x%c

Unable to load public key

Public Key Algorithm

Public Key Algorithm: %s

Expire date: %s

Start date: %s

Signature Algorithm: %s

Issuer: %s

- Subject: %s

--- Certificate chain

SSL certificate verify ok.

SSL certificate verify result: %s (%ld), continuing anyway.

SSL certificate verify result: %s (%ld)

SSL certificate issuer check ok (%s)

SSL: Certificate issuer check failed (%s)

SSL: Unable to read issuer cert (%s)

SSL: Unable to open issuer cert (%s)

issuer: %s

expire date: %s

start date: %s

subject: %s

Server certificate:

SSL: couldn't get peer certificate!

SSL_write() return error %d

SSL_write() error: %s

SSL_write() returned SYSCALL, errno = %d

%s xxxxxxxxxxxxxxxx

username="%s",realm="%s",nonce="%s",cnonce="%s",nc="%s",digest-uri="%s",response=%s

%s/%s

12345678

00000001

user=%s

auth=Bearer %s

0123456789-

Normaliz.dll

NTLMSSP%c

%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%s%s

%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c

OpenSSL 1.0.1e 11 Feb 2013

\X

X.509 part of OpenSSL 1.0.1e 11 Feb 2013

OPENSSL_ALLOW_PROXY_CERTS

passed a null parameter

DSO support routines

x509 certificate routines

error:lX:%s:%s:%s

ASN.1 part of OpenSSL 1.0.1e 11 Feb 2013

d.registeredID

d.iPAddress

d.uniformResourceIdentifier

d.ediPartyName

d.directoryName

d.dNSName

d.rfc822Name

d.otherName

Stack part of OpenSSL 1.0.1e 11 Feb 2013

%-23s %s Kx=%-8s Au=%-4s Enc=%-9s Mac=%-4s%s

EXPORT56

EXPORT40

EXPORT

unsupported or invalid name syntax

unsupported or invalid name constraint syntax

unsupported name constraint type

name constraints minimum and maximum not supported

Unsupported extension feature

invalid or inconsistent certificate policy extension

invalid or inconsistent certificate extension

key usage does not include digital signature

key usage does not include CRL signing

unable to get CRL issuer certificate

key usage does not include certificate signing

authority and subject key identifier mismatch

certificate rejected

certificate not trusted

unsupported certificate purpose

proxy certificates not allowed, please set the appropriate flag

invalid non-CA certificate (has CA markings)

invalid CA certificate

certificate revoked

certificate chain too long

unable to verify the first certificate

unable to get local issuer certificate

self signed certificate in certificate chain

self signed certificate

format error in certificate's notAfter field

format error in certificate's notBefore field

certificate has expired

certificate is not yet valid

certificate signature failure

unable to decode issuer public key

unable to decrypt certificate's signature

unable to get certificate CRL

unable to get issuer certificate

x%s

%s - d:d:d%.*s %d%s

%*s<Not Supported>

%*s%s

%*s%s:

CERTIFICATE

Big Number part of OpenSSL 1.0.1e 11 Feb 2013

cert_info

MD5 part of OpenSSL 1.0.1e 11 Feb 2013

KGS!@#$% inflate 1.2.5 Copyright 1995-2010 Mark Adler

RAND part of OpenSSL 1.0.1e 11 Feb 2013

You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html

ssl_sess_cert

ssl_cert

evp_pkey

x509_pkey

%s(%d): OpenSSL internal error, assertion failed: %s

lhash part of OpenSSL 1.0.1e 11 Feb 2013

.\ssl\ssl_cert.c

Any Extended Key Usage

anyExtendedKeyUsage

supportedAlgorithms

crossCertificatePair

certificateRevocationList

cACertificate

userCertificate

userPassword

supportedApplicationContext

Microsoft Local Key set

LocalKeySet

id-Gost28147-89-None-KeyMeshing

id-Gost28147-89-CryptoPro-KeyMeshing

password based MAC

id-PasswordBasedMAC

X509v3 Certificate Issuer

certificateIssuer

certicom-arc

Proxy Certificate Information

proxyCertInfo

Microsoft Smartcardlogin

msSmartcardLogin

joint-iso-itu-t

JOINT-ISO-ITU-T

set-rootKeyThumb

setAttr-Cert

setCext-cCertRequired

setCext-certType

setct-CertResTBE

setct-CertReqTBEX

setct-CertReqTBE

setct-AcqCardCodeMsgTBE

setct-CertInqReqTBS

setct-CertResData

setct-CertReqTBS

setct-CertReqData

setct-PCertResTBS

setct-PCertReqData

setct-AcqCardCodeMsg

certificate extensions

set-certExt

set-msgExt

id-ecPublicKey

id-cmc-confirmCertAcceptance

id-cmc-getCert

id-regInfo-certReq

id-regCtrl-protocolEncrKey

id-regCtrl-oldCertID

id-it-revPassphrase

id-it-keyPairParamRep

id-it-keyPairParamReq

id-it-unsupportedOIDs

id-it-caKeyUpdateInfo

id-it-encKeyPairTypes

id-it-signKeyPairTypes

id-it-caProtEncCert

id-mod-attribute-cert

id-mod-qualified-cert-93

id-mod-qualified-cert-88

id-smime-aa-ets-certCRLTimestamp

id-smime-aa-ets-certValues

id-smime-aa-ets-CertificateRefs

id-smime-aa-ets-otherSigCert

id-smime-aa-smimeEncryptCerts

id-smime-aa-signingCertificate

id-smime-aa-encrypKeyPref

id-smime-aa-msgSigDigest

id-smime-ct-publishCert

id-smime-mod-msg-v3

sdsiCertificate

x509Certificate

localKeyID

certBag

pkcs8ShroudedKeyBag

keyBag

pbeWithSHA1And2-KeyTripleDES-CBC

pbeWithSHA1And3-KeyTripleDES-CBC

TLS Web Client Authentication

TLS Web Server Authentication

X509v3 Extended Key Usage

extendedKeyUsage

X509v3 Authority Key Identifier

authorityKeyIdentifier

X509v3 Certificate Policies

certificatePolicies

X509v3 Private Key Usage Period

privateKeyUsagePeriod

X509v3 Key Usage

keyUsage

X509v3 Subject Key Identifier

subjectKeyIdentifier

Netscape Certificate Sequence

nsCertSequence

Netscape CA Policy Url

nsCaPolicyUrl

Netscape Renewal Url

nsRenewalUrl

Netscape CA Revocation Url

nsCaRevocationUrl

Netscape Revocation Url

nsRevocationUrl

Netscape Base Url

nsBaseUrl

Netscape Cert Type

nsCertType

Netscape Certificate Extension

nsCertExt

extendedCertificateAttributes

challengePassword

dhKeyAgreement

Diffie-Hellman part of OpenSSL 1.0.1e 11 Feb 2013

EVP part of OpenSSL 1.0.1e 11 Feb 2013

crlUrl

certStatus

certId

OCSP_CERTSTATUS

value.unknown

value.revoked

value.good

value.byKey

value.byName

reqCert

OCSP_CERTID

issuerKeyHash

certs

RSA part of OpenSSL 1.0.1e 11 Feb 2013

DSA part of OpenSSL 1.0.1e 11 Feb 2013

.\crypto\ec\ec_key.c

value.single

value.set

X509_PUBKEY

public_key

.\crypto\asn1\x_pubkey.c

.\crypto\pem\pem_pkey.c

ENCRYPTED PRIVATE KEY

PRIVATE KEY

ANY PRIVATE KEY

CERTIFICATE REQUEST

NEW CERTIFICATE REQUEST

RSA PRIVATE KEY

DSA PRIVATE KEY

EC PRIVATE KEY

TRUSTED CERTIFICATE

<ASN1 %d>

appl [ %d ]

cont [ %d ]

priv [ %d ]

'() ,-./:=?

%d.%d.%d.%d/%d.%d.%d.%d

ddddddZ

ddddddZ

wrong number of key bits

unsupported status type

unsupported ssl version

unsupported protocol

unsupported elliptic curve

unsupported digest type

unsupported compression algorithm

unsupported cipher

unknown pkey type

unknown key exchange type

unknown certificate type

unable to find public key parameters

unable to extract public key

unable to decode ecdh certs

unable to decode dh certs

tried to use unsupported cipher

tls peer did not respond with certificate list

tls illegal exporter label

tls client cert req with anon cipher

tlsv1 unsupported extension

tlsv1 certificate unobtainable

tlsv1 bad certificate status response

tlsv1 bad certificate hash value

tlsv1 alert export restriction

sslv3 alert unsupported certificate

sslv3 alert no certificate

sslv3 alert certificate unknown

sslv3 alert certificate revoked

sslv3 alert certificate expired

sslv3 alert bad certificate

signature for non signing certificate

reuse cert type not zero

reuse cert length not zero

public key not rsa

public key is not rsa

public key encrypt error

peer error unsupported certificate type

peer error no certificate

peer error certificate

peer did not return a certificate

null ssl method passed

no publickey

no private key assigned

no privatekey

Peer haven't sent GOST certificate, required for selected ciphersuite

no client cert received

no client cert method

no ciphers passed

no certificate specified

no certificate set

no certificate returned

no certificate assigned

no certificates returned

missing tmp rsa pkey

missing tmp rsa key

missing tmp ecdh key

missing tmp dh key

missing rsa signing cert

missing rsa encrypting cert

missing rsa certificate

missing export tmp rsa key

missing export tmp dh key

missing dsa signing cert

missing dh rsa cert

missing dh key

missing dh dsa cert

krb5 server rd_req (keytab perms?)

key arg too long

invalid ticket keys length

http request

https proxy request

error generating tmp rsa key

ecc cert should have sha1 signature

ecc cert should have rsa signature

ecc cert not for signing

ecc cert not for key agreement

cert length mismatch

certificate verify failed

bad ecc cert

bad dh pub key length

TLS1_SETUP_KEY_BLOCK

TLS1_EXPORT_KEYING_MATERIAL

tls1_cert_verify_mac

SSL_VERIFY_CERT_CHAIN

SSL_use_RSAPrivateKey_file

SSL_use_RSAPrivateKey_ASN1

SSL_use_RSAPrivateKey

SSL_use_PrivateKey_file

SSL_use_PrivateKey_ASN1

SSL_use_PrivateKey

SSL_use_certificate_file

SSL_use_certificate_ASN1

SSL_use_certificate

SSL_SET_PKEY

SSL_SET_CERT

SSL_SESS_CERT_NEW

SSL_GET_SIGN_PKEY

SSL_GET_SERVER_SEND_PKEY

SSL_GET_SERVER_SEND_CERT

SSL_CTX_use_RSAPrivateKey_file

SSL_CTX_use_RSAPrivateKey_ASN1

SSL_CTX_use_RSAPrivateKey

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey_ASN1

SSL_CTX_use_PrivateKey

SSL_CTX_use_certificate_file

SSL_CTX_use_certificate_chain_file

SSL_CTX_use_certificate_ASN1

SSL_CTX_use_certificate

SSL_CTX_set_client_cert_engine

SSL_CTX_check_private_key

SSL_CHECK_SRVR_ECC_CERT_AND_ALG

SSL_check_private_key

SSL_CERT_NEW

SSL_CERT_INSTANTIATE

SSL_CERT_INST

SSL_CERT_DUP

SSL_add_file_cert_subjects_to_stack

SSL_add_dir_cert_subjects_to_stack

SSL3_SETUP_KEY_BLOCK

SSL3_SEND_SERVER_KEY_EXCHANGE

SSL3_SEND_SERVER_CERTIFICATE

SSL3_SEND_CLIENT_KEY_EXCHANGE

SSL3_SEND_CLIENT_CERTIFICATE

SSL3_SEND_CERTIFICATE_REQUEST

SSL3_OUTPUT_CERT_CHAIN

SSL3_GET_SERVER_CERTIFICATE

SSL3_GET_KEY_EXCHANGE

SSL3_GET_CLIENT_KEY_EXCHANGE

SSL3_GET_CLIENT_CERTIFICATE

SSL3_GET_CERT_VERIFY

SSL3_GET_CERT_STATUS

SSL3_GET_CERTIFICATE_REQUEST

SSL3_GENERATE_KEY_BLOCK

SSL3_CHECK_CERT_AND_ALGORITHM

SSL3_ADD_CERT_TO_BUF

SSL2_SET_CERTIFICATE

SSL2_GENERATE_KEY_MATERIAL

REQUEST_CERTIFICATE

GET_CLIENT_MASTER_KEY

DTLS1_SEND_SERVER_KEY_EXCHANGE

DTLS1_SEND_SERVER_CERTIFICATE

DTLS1_SEND_CLIENT_KEY_EXCHANGE

DTLS1_SEND_CLIENT_CERTIFICATE

DTLS1_SEND_CERTIFICATE_REQUEST

DTLS1_OUTPUT_CERT_CHAIN

DTLS1_ADD_CERT_TO_BUF

CLIENT_MASTER_KEY

CLIENT_CERTIFICATE

.\crypto\engine\eng_pkey.c

PEM part of OpenSSL 1.0.1e 11 Feb 2013

phrase is too short, needs to be at least %d chars

Enter PEM pass phrase:

X509 CERTIFICATE

TLSv1 part of OpenSSL 1.0.1e 11 Feb 2013

c:/prj/build/ssl/certs

c:/prj/build/ssl/cert.pem

SSL_CERT_DIR

SSL_CERT_FILE

SSLv3 part of OpenSSL 1.0.1e 11 Feb 2013

EC part of OpenSSL 1.0.1e 11 Feb 2013

.\crypto\dh\dh_key.c

SSLv2 part of OpenSSL 1.0.1e 11 Feb 2013

s->session->master_key_length >= 0 && s->session->master_key_length < (int)sizeof(s->session->master_key)

%lu:%s:%s:%d:%s

%sx - <SPACES/NULS>

x -

name.relativename

name.fullname

certificateHold

Certificate Hold

cessationOfOperation

Cessation Of Operation

keyCompromise

Key Compromise

%*sOnly Attribute Certificates

%*sOnly CA Certificates

%*sOnly User Certificates

PROXY_CERT_INFO_EXTENSION

AUTHORITY_KEYID

keyid

X509_CERT_PAIR

X509_CERT_AUX

libdes part of OpenSSL 1.0.1e 11 Feb 2013

DES part of OpenSSL 1.0.1e 11 Feb 2013

MD4 part of OpenSSL 1.0.1e 11 Feb 2013

NETAPI32.DLL

KERNEL32.DLL

Load certs from files in a directory

%s%clx.%s%d

DTLSv1 part of OpenSSL 1.0.1e 11 Feb 2013

%s: (%d bit)

Public-Key

Private-Key

recommended-private-length: %d bits

public-key:

private-key:

PKCS#3 DH Public-Key

PKCS#3 DH Private-Key

Public-Key: (%d bit)

Private-Key: (%d bit)

SHA1 part of OpenSSL 1.0.1e 11 Feb 2013

SHA-256 part of OpenSSL 1.0.1e 11 Feb 2013

SHA-512 part of OpenSSL 1.0.1e 11 Feb 2013

pubkey

enc_key

key_enc_algor

cert

d.encrypted

d.digest

d.signed_and_enveloped

d.enveloped

d.sign

d.data

d.other

EC_PRIVATEKEY

publicKey

privateKey

value.implicitlyCA

value.parameters

value.named_curve

p.char_two

p.prime

p.ppBasis

p.tpBasis

p.onBasis

p.other

PKCS8_PRIV_KEY_INFO

pkey

pkeyalg

.\crypto\evp\evp_pkey.c

NETSCAPE_CERT_SEQUENCE

<unsupported>

IP Address:%d.%d.%d.%d

URI:%s

DNS:%s

email:%s

EdiPartyName:<unsupported>

X400Name:<unsupported>

othername:<unsupported>

.pp@0

aEÐ

 (#EÚ

ÚE<<0

6AES part of OpenSSL 1.0.1e 11 Feb 2013

RC2 part of OpenSSL 1.0.1e 11 Feb 2013

IDEA part of OpenSSL 1.0.1e 11 Feb 2013

unsupported type

unsupported recpientinfo type

unsupported recipient type

unsupported key encryption algorithm

unsupported kek algorithm

unsupported content type

signer certificate not found

private key does not match certificate

no public key

no private key

no password

no msgsigdigest

no key or cert

no key

not supported for this key type

not key transport

msgsigdigest wrong length

msgsigdigest verification failure

msgsigdigest error

invalid key length

invalid key encryption parameter

invalid encrypted key length

error setting key

error getting public key

certificate verify error

certificate has no keyid

certificate already present

CMS_SIGNERINFO_VERIFY_CERT

CMS_RecipientInfo_set0_pkey

CMS_RecipientInfo_set0_password

CMS_RecipientInfo_set0_key

CMS_RecipientInfo_ktri_cert_cmp

cms_msgSigDigest_add1

CMS_GET0_CERTIFICATE_CHOICES

CMS_EncryptedData_set1_key

CMS_decrypt_set1_pkey

CMS_decrypt_set1_password

CMS_decrypt_set1_key

CMS_add1_recipient_cert

CMS_add0_recipient_password

CMS_add0_recipient_key

CMS_add0_cert

unsupported requestorname type

no certificates in chain

error parsing url

PARSE_HTTP_LINE1

OCSP_parse_url

OCSP_cert_id_new

unimplemented public key method

invalid cmd number

invalid cmd name

failed loading public key

failed loading private key

cmd not executable

ENGINE_UNLOAD_KEY

ENGINE_load_ssl_client_cert

ENGINE_load_public_key

ENGINE_load_private_key

ENGINE_get_pkey_meth

ENGINE_get_pkey_asn1_meth

ENGINE_ctrl_cmd_string

ENGINE_ctrl_cmd

ENGINE_cmd_is_executable

unsupported version

unsupported md algorithm

invalid signer certificate purpose

ess signing certificate error

ess add signing cert error

TS_VERIFY_CERT

TS_TST_INFO_set_msg_imprint

TS_RESP_CTX_set_signer_cert

TS_RESP_CTX_set_certs

TS_REQ_set_msg_imprint

TS_MSG_IMPRINT_set_algo

TS_CHECK_SIGNING_CERTS

ESS_SIGNING_CERT_NEW_INIT

ESS_CERT_ID_NEW_INIT

ESS_ADD_SIGNING_CERT

functionality not supported

WIN32_JOINER

unsupported pkcs12 mode

key gen error

PKCS8_add_keyusage

PKCS12_PBE_keyivgen

PKCS12_newpass

PKCS12_MAKE_SHKEYBAG

PKCS12_MAKE_KEYBAG

PKCS12_key_gen_uni

PKCS12_key_gen_asc

PKCS12_add_localkeyid

unsupported option

unable to get issuer keyid

policy syntax not currently supported

operation not defined

no proxy cert policy language defined

no issuer certificate

extension setting not supported

V2I_EXTENDED_KEY_USAGE

V2I_AUTHORITY_KEYID

S2I_SKEY_ID

S2I_ASN1_SKEY_ID

R2I_CERTPOL

unsupported cipher type

unknown operation

unable to find certificate

signing not supported for this key type

operation not supported on this type

no recipient matches key

no recipient matches certificate

encryption not supported for this key type

decrypted key is wrong length

PKCS7_add_certificate

unsupported method

no port specified

no port defined

no accept port specified

broken pipe

BIO_get_port

ECDH_compute_key

data too large for key size

unsupported field

passed null parameter

not a supported NIST prime

missing private key

keys not set

invalid private key

gf2m not supported

PKEY_EC_SIGN

PKEY_EC_PARAMGEN

PKEY_EC_KEYGEN

PKEY_EC_DERIVE

PKEY_EC_CTRL_STR

PKEY_EC_CTRL

o2i_ECPublicKey

i2o_ECPublicKey

i2d_ECPrivateKey

EC_KEY_set_public_key_affine_coordinates

EC_KEY_print_fp

EC_KEY_print

EC_KEY_new

EC_KEY_generate_key

EC_KEY_copy

EC_KEY_check_key

ECKEY_TYPE2PARAM

ECKEY_PUB_ENCODE

ECKEY_PUB_DECODE

ECKEY_PRIV_ENCODE

ECKEY_PRIV_DECODE

ECKEY_PARAM_DECODE

ECKEY_PARAM2TYPE

DO_EC_KEY_PRINT

d2i_ECPrivateKey

zlib not supported

fips mode not supported

wrong public key type

unsupported public key type

unsupported encryption algorithm

unsupported any defined by type

unknown public key type

unable to decode rsa private key

unable to decode rsa key

streaming not supported

private key header missing

digest and key type not supported

bad password read

X509_PKEY_new

i2d_RSA_PUBKEY

i2d_PublicKey

i2d_PrivateKey

i2d_EC_PUBKEY

i2d_DSA_PUBKEY

d2i_X509_PKEY

d2i_PublicKey

d2i_PrivateKey

d2i_AutoPrivateKey

unsupported algorithm

unknown key type

unable to get certs public key

public key encode error

public key decode error

no cert set for us to verify

method not supported

loading cert dir

key values mismatch

key type mismatch

cert already in hash table

cant check dh key

X509_verify_cert

X509_STORE_add_cert

X509_REQ_check_private_key

X509_PUBKEY_set

X509_PUBKEY_get

X509_load_cert_file

X509_load_cert_crl_file

X509_get_pubkey_parameters

X509_check_private_key

GET_CERT_BY_SUBJECT

ADD_CERT_DIR

PKEY_DSA_KEYGEN

PKEY_DSA_CTRL

DSA_generate_key

unsupported key components

unsupported encryption

read key

public key no rsa

problems getting password

keyblob too short

keyblob header parse error

expecting public key blob

expecting private key blob

error converting private key

PEM_WRITE_PRIVATEKEY

PEM_READ_PRIVATEKEY

PEM_READ_BIO_PRIVATEKEY

PEM_PK8PKEY

PEM_F_PEM_WRITE_PKCS8PRIVATEKEY

DO_PK8PKEY_FP

DO_PK8PKEY

d2i_PKCS8PrivateKey_fp

d2i_PKCS8PrivateKey_bio

unsupported salt type

unsupported private key algorithm

unsupported prf

unsupported key size

unsupported key derivation function

unsupported keylength

unsuported number of rounds

private key encode error

private key decode error

operaton not initialized

operation not supported for this keytype

no operation set

no key set

keygen failure

invalid operation

expecting a ec key

expecting a ecdsa key

expecting a dsa key

expecting a dh key

expecting an rsa key

different key types

ctrl operation not implemented

command not supported

camellia key setup failed

bn pubkey error

bad key length

aes key setup failed

PKEY_SET_TYPE

PKCS5_V2_PBKDF2_KEYIVGEN

PKCS5_v2_PBE_keyivgen

PKCS5_PBE_keyivgen

FIPS_CIPHER_CTX_SET_KEY_LENGTH

EVP_PKEY_verify_recover_init

EVP_PKEY_verify_recover

EVP_PKEY_verify_init

EVP_PKEY_verify

EVP_PKEY_sign_init

EVP_PKEY_sign

EVP_PKEY_paramgen_init

EVP_PKEY_paramgen

EVP_PKEY_new

EVP_PKEY_keygen_init

EVP_PKEY_keygen

EVP_PKEY_get1_RSA

EVP_PKEY_get1_EC_KEY

EVP_PKEY_GET1_ECDSA

EVP_PKEY_get1_DSA

EVP_PKEY_get1_DH

EVP_PKEY_encrypt_old

EVP_PKEY_encrypt_init

EVP_PKEY_encrypt

EVP_PKEY_derive_set_peer

EVP_PKEY_derive_init

EVP_PKEY_derive

EVP_PKEY_decrypt_old

EVP_PKEY_decrypt_init

EVP_PKEY_decrypt

EVP_PKEY_CTX_dup

EVP_PKEY_CTX_ctrl_str

EVP_PKEY_CTX_ctrl

EVP_PKEY_copy_parameters

EVP_PKEY2PKCS8_broken

EVP_PKCS82PKEY_BROKEN

EVP_PKCS82PKEY

EVP_CIPHER_CTX_set_key_length

ECKEY_PKEY2PKCS8

ECDSA_PKEY2PKCS8

DSA_PKEY2PKCS8

DSAPKEY2PKCS8

D2I_PKEY

CAMELLIA_INIT_KEY

AES_INIT_KEY

AESNI_INIT_KEY

key size too small

invalid public key

PKEY_DH_KEYGEN

PKEY_DH_DERIVE

GENERATE_KEY

DH_generate_key

DH_compute_key

COMPUTE_KEY

unsupported signature type

unsupported mask parameter

unsupported mask algorithm

rsa operations not supported

operation not allowed in fips mode

invalid keybits

illegal or unsupported padding mode

digest too big for rsa key

data too small for key size

RSA_generate_key_ex

RSA_generate_key

RSA_check_key

RSA_BUILTIN_KEYGEN

PKEY_RSA_VERIFYRECOVER

PKEY_RSA_VERIFY

PKEY_RSA_SIGN

PKEY_RSA_CTRL_STR

PKEY_RSA_CTRL

keylen <= sizeof key

EVP_CIPHER_key_length(cipher) <= (int)sizeof(md_tmp)

.\crypto\evp\evp_key.c

nkey <= EVP_MAX_KEY_LENGTH

?456789:;<=

!"#$%&'()* ,-./0123

key expansion

client write key

server write key

%s:%d: rec->data != rec->input

len>=0 && len<=(int)sizeof(ctx->key)

j <= (int)sizeof(ctx->key)

%*sPolicy Text: %s

%*scrlUrl:

EXTENDED_KEY_USAGE

%*sZone: %s, User:

.\crypto\x509v3\v3_akey.c

d.usernotice

d.cpsuri

CERTIFICATEPOLICIES

%*sExplicit Text: %s

%*sNumber%s:

%*sOrganization: %s

%*sCPS: %s

PKEY_USAGE_PERIOD

keyCertSign

Certificate Sign

keyAgreement

Key Agreement

keyEncipherment

Key Encipherment

.\crypto\x509v3\v3_skey.c

.\crypto\asn1\x_pkey.c

hexkey

rsa_keygen_pubexp

rsa_keygen_bits

ECDH part of OpenSSL 1.0.1e 11 Feb 2013

ECDSA part of OpenSSL 1.0.1e 11 Feb 2013

c->iv_len <= (int)sizeof(s->session->key_arg)

s->s2->key_material_length <= sizeof s->s2->key_material

deflate 1.2.5 Copyright 1995-2010 Jean-loup Gailly and Mark Adler

TXT_DB part of OpenSSL 1.0.1e 11 Feb 2013

Basis Type: %s

Field Type: %s

ASN1 OID: %s

%s %s%lu (%s0x%lx)

RIPE-MD160 part of OpenSSL 1.0.1e 11 Feb 2013

SHA part of OpenSSL 1.0.1e 11 Feb 2013

CAST part of OpenSSL 1.0.1e 11 Feb 2013

Blowfish part of OpenSSL 1.0.1e 11 Feb 2013

:CAMELLIA part of OpenSSL 1.0.1e 11 Feb 2013

RC4 part of OpenSSL 1.0.1e 11 Feb 2013

keylength

keyfunc

.\crypto\pkcs12\p12_key.c

CONF part of OpenSSL 1.0.1e 11 Feb 2013

%'%1$=%C%K%O%s%

.%.-.3.7.9.?.W.[.o.y.

C%C'C3C7C9COCWCiC

d.receiptList

d.allOrFirstTier

d.compressedData

d.authenticatedData

d.encryptedData

d.digestedData

d.envelopedData

d.signedData

d.ori

d.pwri

d.kekri

d.kari

d.ktri

CMS_PasswordRecipientInfo

keyDerivationAlgorithm

keyIdentifier

CMS_KeyAgreeRecipientInfo

recipientEncryptedKeys

CMS_OriginatorIdentifierOrKey

d.originatorKey

CMS_OriginatorPublicKey

CMS_RecipientEncryptedKey

CMS_KeyAgreeRecipientIdentifier

d.rKeyId

CMS_RecipientKeyIdentifier

CMS_OtherKeyAttribute

keyAttr

keyAttrId

CMS_KeyTransRecipientInfo

encryptedKey

keyEncryptionAlgorithm

certificates

d.crl

d.subjectKeyIdentifier

d.issuerAndSerialNumber

CMS_CertificateChoices

d.v2AttrCert

d.v1AttrCert

d.extendedCertificate

d.certificate

CMS_OtherCertificateFormat

otherCert

otherCertFormat

Verifying - %s

CONF_def part of OpenSSL 1.0.1e 11 Feb 2013

[[%s]]

[%s] %s=%s

value.bag

value.safes

value.shkeybag

value.keybag

value.sdsicert

value.x509cert

value.other

%s.dll

kernel32.dll

Visual C   CRT: Not enough memory to complete call to strerror.

portuguese

porter

,????*(??

operand of unlimited repeat could match the empty string

POSIX named classes are supported only within a class

erroffset passed as NULL

POSIX collating elements are not supported

this version of PCRE is not compiled with PCRE_UTF8 support

PCRE does not support \L, \l, \N{name}, \U, or \u

support for \P, \p, and \X has not been compiled

this version of PCRE is not compiled with PCRE_UCP support

background-image: url(

font-family: %s

font-size: %s

color: %s

background-color: %s

margin-left: Þm

if !supportEmptyParas

hXXp://VVV.w3.org/1999/xhtml

This option specifies if Tidy should write back the tidied markup to the same file it read from. You are advised to keep copies of important files before tidying them, as on rare occasions the result may not be what you expect.

This option specifies if Tidy should keep the original modification time of files that Tidy modifies in place. The default is no. Setting the option to yes allows you to tidy files without causing these files to be uploaded to a web server when using a tool such as SiteCopy. Note this feature is not supported on some platforms.

This option specifies if Tidy should change the format for reporting errors and warnings to a format that is more easily parsed by GNU Emacs.

This option specifies if Tidy should produce output even if errors are encountered. Use this option with care - if Tidy reports an error, this means Tidy was not able to, or is not sure how to, fix the error, so the resulting output may not reflect your intention.

This option specifies if Tidy should replace backslash characters "<code>\</code>" in URLs by forward slashes "<code>/</code>".

The default is appropriate to the current platform: CRLF on PC-DOS, MS-Windows and OS/2, CR on Classic Mac OS, and LF everywhere else (Unix and Linux).

This option specifies the character encoding Tidy uses for both the input and output. For ascii, Tidy will accept Latin-1 (ISO-8859-1) character values, but will use entities for all characters whose value > 127. For raw, Tidy will output values above 127 without translating them into entities. For latin1, characters above 255 will be written as entities. For utf8, Tidy assumes that both input and output is encoded as UTF-8. You can use iso2022 for files encoded using the ISO-2022 family of encodings e.g. ISO-2022-JP. For mac and win1252, Tidy will accept vendor specific character values, but will use entities for all characters whose value > 127. For unsupported encodings, use an external utility to convert to and from UTF-8.

This option specifies if Tidy should ensure that whitespace characters within attribute values are passed through unchanged.

This option specifies what level of accessibility checking, if any, that Tidy should do. Level 0 is equivalent to Tidy Classic's accessibility checking. For more information on Tidy's accessibility checking, visit the <a href="hXXp://VVV.aprompt.ca/Tidy/accessibilitychecks.html" >Adaptive Technology Resource Centre at the University of Toronto</a>.

This option specifies if Tidy should go to great pains to strip out all the surplus stuff Microsoft Word 2000 inserts when you save Word documents as "Web pages". Doesn't handle embedded images or VML. You should consider using Word's "Save As: Web Page, Filtered".

This option specifies if Tidy should print only the contents of the body tag as an HTML fragment. If set to "auto", this is performed only if the body tag has been inferred. Useful for incorporating existing whole pages as a portion of another page. This option has no effect if XML output is requested.

This option specifies if Tidy should output " characters as &quot; as is preferred by some editing environments. The apostrophe character ' is written out as &#39; since many web browsers don't yet support &apos;.

[13.10.1.1]: skip over ascii art.

[13.2.1.3]: Metadata missing (redirect/auto-refresh).

[13.2.1.1]: Metadata missing.

[13.1.1.4]: link text not meaningful (click here).

[13.1.1.3]: link text too long.

[13.1.1.2]: link text missing.

[13.1.1.1]: link text not meaningful.

[12.4.1.3]: associate labels explicitly with form controls (id).

[12.4.1.2]: associate labels explicitly with form controls (for).

[12.4.1.1]: associate labels explicitly with form controls.

[12.1.1.3]: <frame> title invalid (spaces).

[12.1.1.2]: <frame> title invalid (null).

[12.1.1.1]: <frame> missing title.

[11.2.1.10]: replace deprecated html <u>.

[11.2.1.9]: replace deprecated html <strike>.

[11.2.1.8]: replace deprecated html <s>.

[11.2.1.7]: replace deprecated html <menu>.

[11.2.1.6]: replace deprecated html <isindex>.

[11.2.1.5]: replace deprecated html <font>.

[11.2.1.4]: replace deprecated html <dir>.

[11.2.1.3]: replace deprecated html <center>.

[11.2.1.2]: replace deprecated html <basefont>.

[11.2.1.1]: replace deprecated html <applet>.

[10.4.1.3]: form control default text invalid (spaces).

[10.4.1.2]: form control default text invalid (null).

[10.4.1.1]: form control requires default text.

[10.1.1.2]: new windows require warning (_blank).

[10.1.1.1]: new windows require warning (_new).

[9.3.1.6]: <script> not keyboard accessible (onMouseMove).

[9.3.1.5]: <script> not keyboard accessible (onMouseOut).

[9.3.1.4]: <script> not keyboard accessible (onMouseOver).

[9.3.1.3]: <script> not keyboard accessible (onClick).

[9.3.1.2]: <script> not keyboard accessible (onMouseUp).

[9.3.1.1]: <script> not keyboard accessible (onMouseDown).

[9.1.1.1]: image map (server-side) requires conversion.

[8.1.1.4]: ensure programmatic objects are accessible (embed).

[8.1.1.3]: ensure programmatic objects are accessible (applet).

[8.1.1.2]: ensure programmatic objects are accessible (object).

[8.1.1.1]: ensure programmatic objects are accessible (script).

[7.5.1.1]: remove auto-redirect.

[7.4.1.1]: remove auto-refresh.

[7.2.1.1]: remove blink/marquee.

[7.1.1.5]: remove flicker (animated gif).

[7.1.1.4]: remove flicker (applet).

[7.1.1.3]: remove flicker (embed).

[7.1.1.2]: remove flicker (object).

[7.1.1.1]: remove flicker (script).

[6.5.1.4]: <noframes> section invalid (link).

[6.5.1.3]: <noframes> section invalid (content).

[6.5.1.2]: <noframes> section invalid (no value).

[6.5.1.1]: <frameset> missing <noframes> section.

[6.3.1.4]: programmatic objects require testing (applet).

[6.3.1.3]: programmatic objects require testing (embed).

[6.3.1.2]: programmatic objects require testing (object).

[6.3.1.1]: programmatic objects require testing (script).

[6.2.2.3]: text equivalents require updating (object).

[6.2.2.2]: text equivalents require updating (script).

[6.2.2.1]: text equivalents require updating (applet).

[6.2.1.1]: <frame> source invalid.

[6.1.1.3]: style sheets require testing (style attribute).

[6.1.1.2]: style sheets require testing (style element).

[6.1.1.1]: style sheets require testing (link).

[5.6.1.3]: <table> header abbreviations invalid (spaces).

[5.6.1.2]: <table> header abbreviations invalid (null).

[5.6.1.1]: <table> may require header abbreviations.

[5.5.2.1]: <table> missing <caption>.

[5.5.1.6]: <table> summary invalid (placeholder text).

[5.5.1.3]: <table> summary invalid (spaces).

[5.5.1.2]: <table> summary invalid (null).

[5.5.1.1]: <table> missing summary.

[5.4.1.1]: invalid markup used in layout <table>.

[5.3.1.1]: verify layout tables linearize properly.

[5.2.1.2]: data <table> may require markup (row headers).

[5.2.1.1]: data <table> may require markup (column headers).

[5.1.2.3]: data <table> missing row/column headers (1 row).

[5.1.2.2]: data <table> missing row/column headers (1 col).

[5.1.2.1]: data <table> missing row/column headers (all).

[4.3.1.2]: language attribute invalid.

[4.3.1.1]: language not identified.

[4.1.1.1]: indicate changes in language.

[3.6.1.4]: list usage invalid <li>.

[3.6.1.2]: list usage invalid <ol>.

[3.6.1.1]: list usage invalid <ul>.

[3.5.3.1]: header used to format text.

[3.5.2.3]: potential header (underline).

[3.5.2.2]: potential header (italics).

[3.5.2.1]: potential header (bold).

[3.5.1.1]: headers improperly nested.

[3.3.1.1]: use style sheets to control presentation.

[3.2.1.1]: <doctype> missing.

[2.2.1.4]: poor color contrast (visited link).

[2.2.1.3]: poor color contrast (active link).

[2.2.1.2]: poor color contrast (link).

[2.2.1.1]: poor color contrast (text).

[2.1.1.5]: ensure information not conveyed through color alone (input).

[2.1.1.4]: ensure information not conveyed through color alone (script).

[2.1.1.3]: ensure information not conveyed through color alone (object).

[2.1.1.2]: ensure information not conveyed through color alone (applet).

[2.1.1.1]: ensure information not conveyed through color alone (image).

[1.5.1.1]: image map (client-side) missing text links.

[1.4.1.1]: multimedia requires synchronized text equivalents.

[1.2.1.1]: image map (server-side) requires text links.

[1.1.12.1]: ascii art requires description.

[1.1.10.1]: <script> missing <noscript> section.

[1.1.9.1]: <area> missing 'alt' text.

[1.1.8.1]: <frame> may require 'longdesc'.

[1.1.6.6]: audio missing text transcript (rm).

[1.1.6.5]: audio missing text transcript (ra).

[1.1.6.4]: audio missing text transcript (snd).

[1.1.6.3]: audio missing text transcript (aiff).

[1.1.6.2]: audio missing text transcript (au).

[1.1.6.1]: audio missing text transcript (wav).

[1.1.5.1]: <object> missing alternate content.

[1.1.4.1]: <applet> missing alternate content.

[1.1.3.1]: <img> (button) missing 'alt' text.

[1.1.2.3]: <img> missing 'longdesc'.

[1.1.2.2]: <img> missing d-link.

[1.1.2.1]: <img> missing 'longdesc' and d-link.

[1.1.1.10]: suspicious 'alt' text (too long).

[1.1.1.4]: suspicious 'alt' text (placeholder).

[1.1.1.3]: suspicious 'alt' text (file size).

[1.1.1.2]: suspicious 'alt' text (filename).

[1.1.1.1]: <img> missing 'alt' text.

<%s> previously mentioned

%s is not recognized!

unescaped %s in pre content

too many %s elements in <%s>

unexpected </%s> in <%s>

%s element not empty or not closed

unexpected end of file %s

%s not inside 'noframes' element

%s shouldn't be nested

%s is not approved by W3C

%s can't be nested

inserting implicit <%s>

using <br> in place of %s

too many %s elements

unexpected </%s>

missing <%s>

%s isn't allowed in <%s> elements

replacing unexpected %s by </%s>

discarding unexpected %s

missing </%s> before %s

missing </%s>

replacing unexpected %s by %s

replacing %s by %s

trimming empty %s

<%s> is probably intended as </%s>

replacing obsolete element %s by %s

nested emphasis %s

%s lacks "%s" attribute

%s should use client-side image map

%s unexpected '=', expected attribute name

%s discarding whitespace in URI reference

%s discarding newline in URI reference

%s escaping malformed URI reference

%s improperly escaped URI reference

%s converting backslash in URI to slash

%s URI reference contains backslash. Typo?

%s id and name attribute value mismatch

%s end of file while parsing attributes

%s attribute with missing trailing quote mark

%s unexpected or duplicate quote mark

%s missing '>' for end of tag

%s cannot copy name attribute to id

%s dropping value "%s" for repeated attribute "%s"

%s attribute name "%s" (value="%s") is invalid

%s attribute "%s" had invalid value "%s" and has been replaced

%s attribute "%s" has invalid value "%s"

%s anchor "%s" already defined

%s proprietary attribute value "%s"

%s attribute value "%s" must be lower case for XHTML

%s ID "%s" uses XML ID syntax

%s has XML attribute "%s"

%s joining values of repeated attribute "%s"

%s proprietary attribute "%s"

%s unknown attribute "%s"

%s attribute "%s" lacks value

%s inserting "%s" attribute

unescaped & or unknown entity "%s"

numeric character reference "%s" doesn't end in ';'

entity "%s" doesn't end in ';'

%s invalid numeric character reference %s

%s invalid UTF-16 surrogate pair (char. code %s)

%s invalid UTF-8 bytes (char. code %s)

%s invalid character code %s

specified input encoding (%s) does not match actual input encoding (%s)

%s:%d:%d:

line %d column %d -

</%s>

unknown option: %s

missing or malformed argument for option: %s

U X

Doctype given is "%s"

Document content looks like %s

%u %s, %u %s were found!

join-styles

join-classes

onkeyup

onkeypress

onkeydown

accesskey

%%X

password

keygen

hXXp://VVV.w3.org/TR/xhtml-basic/xhtml-basic10.dtd

hXXp://VVV.w3.org/TR/xhtml11/DTD/xhtml11.dtd

hXXp://VVV.w3.org/TR/xhtml1/DTD/xhtml1-frameset.dtd

hXXp://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd

hXXp://VVV.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd

hXXp://VVV.w3.org/TR/html4/frameset.dtd

hXXp://VVV.w3.org/TR/html4/loose.dtd

hXXp://VVV.w3.org/TR/html4/strict.dtd

hXXp://VVV.w3.org/TR/REC-html40/frameset.dtd

hXXp://VVV.w3.org/TR/REC-html40/loose.dtd

hXXp://VVV.w3.org/TR/REC-html40/strict.dtd

HTML Tidy for Windows (vers %s), see VVV.w3.org

&#%u;

Fatal error: %s

.cfml

.shtml

.shtm

.html

.smil

.mpeg

.mp2v

.aiff

.tiff

.jpeg

http:

RegCloseKey

RegOpenKeyExA

SetViewportOrgEx

UnhookWindowsHookEx

GetKeyState

SetWindowsHookExA

RegDeleteKeyA

RegCreateKeyExA

RegQueryInfoKeyA

RegEnumKeyExA

GDI32.dll

USER32.dll

ADVAPI32.dll

WS2_32.dll

WLDAP32.dll

ReportEventA

VERSION.dll

GetCPInfoExA

GetCPInfo

GetConsoleOutputCP

GetProcessHeap

PeekNamedPipe

KERNEL32.dll

MsgWaitForMultipleObjectsEx

COMDLG32.dll

ShellExecuteExA

ShellExecuteA

SHELL32.dll

ole32.dll

OLEAUT32.dll

SHLWAPI.dll

COMCTL32.dll

urlmon.dll

GdiplusShutdown

gdiplus.dll

plagiatus.exe

.?AV?$IDispEventSimpleImpl@$00VCHtmlView@@$1?DIID_DWebBrowserEvents2@@3U_GUID@@B@ATL@@

.?AV?$_IDispEventLocator@$00$1?DIID_DWebBrowserEvents2@@3U_GUID@@B@ATL@@

.?AVCURLLoadDlg@advego@@

.?AV?$CDialogImpl@VCURLLoadDlg@advego@@VCWindow@ATL@@@ATL@@

.?AV?$CDialogResize@VCURLLoadDlg@advego@@@WTL@@

.?AVCUrlEditCtrl@@

.?AV?$CWindowImpl@VCUrlEditCtrl@@V?$CEditT@VCWindow@ATL@@@WTL@@V?$CWinTraits@$0FGAAAAAA@$0A@@ATL@@@ATL@@

# %,7/(;!.&$)

"3015269=

6;%,:)05.7*<$1&

%,!.)083*<$1&

=$.GI

3 )"[(4/,5&1;'#0

l}C.we

zcÁ

c:\prj\build\src\glib-2.28.8\gthread\gthread-win32.c

file %s: line %d (%s): error %s during %s

file %s: line %d: assertion `%s' failed

Too many GPrivate allocated. Their number is limited to %d.

Error creating thread: %s

target->joinable

TLS_OUT_OF_INDEXES != (g_thread_self_tls = TlsAlloc ())

TLS_OUT_OF_INDEXES != (g_private_tls = TlsAlloc ())

TLS_OUT_OF_INDEXES != (g_cond_event_tls = TlsAlloc ())

Trying to unlock an unlocked mutex at '%s'

Trying to recursively lock a mutex at '%s', previously locked at '%s'

Trying to recursivly lock a mutex at '%s', previously locked at '%s'

Trying to unlock a mutex at '%s', previously locked by a different thread at '%s'

Trying to use an unlocked mutex in g_cond_wait() at '%s'

Trying to free a locked mutex at '%s', which was previously locked at '%s'

Threads are not supported on this platform.

Trying to use a mutex locked by another thread in g_cond_wait() at '%s'

Trying to use an unlocked mutex in g_cond_timed_wait() at '%s'

Trying to use a mutex locked by another thread in g_cond_timed_wait() at '%s'

Errorcheck mutexes can only be used for native thread implementations. Sorry.

MsgWaitForMultipleObjectsEx(%d, %d)

MsgWaitForMultipleObjectsEx failed: %s

WaitForMultipleObjectsEx(%d, %d)

WaitForMultipleObjectsEx failed: %s

(msg)

wait returns %ld%s

Could not allocate %lu bytes to read file "%s"

Error reading file '%s': %s

File "%s" is too large

Failed to open file '%s': %s

Failed to rename file '%s' to '%s': g_rename() failed: %s

%s.XXXXXX

Failed to create file '%s': %s

Failed to open file '%s' for writing: fdopen() failed: %s

Failed to write file '%s': fwrite() failed: %s

Failed to write file '%s': fflush() failed: %s

Failed to close file '%s': fclose() failed: %s

Existing file '%s' could not be removed: g_unlink() failed: %s

.XXXXXX

Template '%s' invalid, should not contain a '%s'

Template '%s' doesn't contain XXXXXX

%u bytes

%u byte

Symbolic links not supported

M-d-dTd:d:d.ldZ

M-d-dTd:d:dZ

Passing a non-NULL package to g_win32_get_package_installation_directory() is deprecated and it is ignored.

This version of GLib requires NT-based Windows.

Cannot create wake-up semaphore: %s

g_thread_supported ()

polling context=%p n=%d timeout=%d

g_main_poll(%d) timeout: %d - elapsed .10f seconds

..\..\..\glib\gmain.c:4189: GetExitCodeProcess() failed: %s

Conversion from character set '%s' to '%s' is not supported

Could not open converter from '%s' to '%s'

Error during conversion: %s

Cannot convert fallback '%s' to codeset '%s'

\ux

\Ux

The URI '%s' is not an absolute URI using the "file" scheme

The local file URI '%s' may not include a '#'

The URI '%s' is invalid

The hostname of the URI '%s' is invalid

The URI '%s' contains invalidly escaped characters

The pathname '%s' is not an absolute path

Unknown G_RANDOM_VERSION "%s". Using version 2.2.

assertion failed: %s

failed to allocate %u bytes (alignment: %u): %s

%s[%ld]: GSlice:

GSlice: MemChecker: attempt to release non-allocated block: %p size=%u

GSlice: MemChecker: attempt to release block with invalid size: %p size=%u invalid-size=%u

MemChecker: failure in debugging tree: %s

Could not register atexit() function: %s

.exe;.cmd;.bat;.com

Supported debug values:

.local

.config

.cache

shell32.dll

msg != NULL

{*LOG(%s)

:{%s}

%s%.16Lg

GTest: random seed: %s

GTest: result: %s

(MINPERF:%s)

(MAXPERF:%s)

(MSG: %s)

GTest: run: %s

unknown test mode: -m %s

%s [OPTION...]

-l List test cases available in a test executable

-p TESTPATH execute all tests matching TESTPATH

-m {perf|slow|thorough|quick} Execute tests according modes

R02Sxxxx

Unknown or invalid random seed: %s

Bug Reference: %s

Bug Reference: %s%s

invalid test case path: %s

assertion failed (%s): (%.0Lf %s %.0Lf)

assertion failed (%s): (0xI64x %s 0xI64x)

assertion failed (%s): (%.9Lg %s %.9Lg)

assertion failed (%s): (%s %s %s)

(%s == (%s, %d)):

(%s == NULL):

%s (%s, %d)

%s is NULL

failed to read() from child process (%d): %s

tmsg != NULL

Error text not found (please report)

key_id > 0

The overwriting error message was: %s

%s: could not find handler with id `%d' for domain "%s"

%s: assertion `%s' failed

file %s: line %d (%s): assertion failed: (%s)

file %s: line %d (%s): should not be reached

\xx

GLib: Cannot convert message: %s

(%s:%lu):

unknown error (%d)

unknown signal (%d)

%s: input too large for Base64 encoding (%u chars)

%s: failed to allocate %u bytes

%s: overflow allocating %u*%u bytes

u | ld | ld | ld | ld |% 11ld

>%6u | ld | ld | ld | ld | ***

GLib Memory statistics (successful operations):

GLib Memory statistics (failing operations):

Total bytes: allocated=%u, zero-initialized=%u (%.2f%%), freed=%u (%.2f%%), remaining=%u

free(%p): memory has been freed %u times already

realloc(%p, %u): memory has been freed %u times already

thread->joinable

A NULL argument was passed to PCRE

the pattern contains items not supported for partial matching

A negative ovecsize was passed to PCRE

back references as conditions are not supported for partial matching

Error while matching regular expression %s: %s

String '%s' contains references to the match, can't expand references without GMatchInfo object

PCRE library is compiled without UTF8 support

PCRE library is compiled without UTF8 properties support

Error while compiling regular expression %s at char %d: %s

Error while optimizing regular expression %s: %s

Error while parsing replacement text "%s" at char %lu: %s

1.3.1.7

%Program Files% (x86)\Advego Plagiatus\plagiatus.exe

Inappropriate I/O control opera

Created with ajaxload.info

1I%f]

#"!-,*:97

"&%U>

/^4$...&%%%

-4a}%

@F.kB

Dillo/0.6.4

Dillo/0.7.3

Dillo/0.8.6

Dillo/0.8.6-i18n-misc

Opera/9.80 (Windows NT 5.0; U; ru) Presto/2.2.15 Version/10.00

Opera/9.80 (Windows NT 5.1; U; be) Presto/2.2.15 Version/10.00

Opera/9.80 (Windows NT 5.1; U; MRA 5.4 (build 02603); ru) Presto/2.2.15 Version/10.00

Opera/9.80 (Windows NT 5.1; U; YB/3.5.1; ru) Presto/2.2.15 Version/10.00

Opera/9.80 (Windows NT 6.0; U; MRA 5.3 (build 02564); ru) Presto/2.2.15 Version/10.00

Opera/9.80 (X11; Linux i686; U; uk) Presto/2.2.15 Version/10.00

Opera/9.80 (Windows NT 6.0; U; pl) Presto/2.7.62 Version/11.01

Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.7.62 Version/11.01

NCSA Mosaic/1.0 (X11;SunOS 4.1.4 sun4m)

NCSA Mosaic/3.0 (Windows 95)

Mozilla/5.0 (X11; U; Linux i686; it; rv:1.9.0.5) Gecko/2008122011 Iceweasel/3.0.5 (Debian-3.0.5-1)

Mozilla/5.0 (X11; U; Linux i686; de; rv:1.9.0.5) Gecko/2008122011 Iceweasel/3.0.5 (Debian-3.0.5-1)

Mozilla/5.0 (X11; U; Linux i686; pt-PT; rv:1.9.2.3) Gecko/20100402 Iceweasel/3.6.3 (like Firefox/3.6.3) GTB7.0

Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.13) Gecko/2009082120 Iceweasel/3.0.12 (Debian-3.0.12-1)

Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2a1pre) Gecko/20090807 Minefield/3.6a1pre

Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.3) Gecko/20090909 SUSE/3.5.3-1.2 Firefox/3.5.3

Mozilla/5.0 (X11; U; Linux i686; ru; rv:1.9.0.14) Gecko/2009090216 Ubuntu/9.04 (jaunty) Firefox/3.0.14 WebMoney Advisor

Mozilla/5.0 (X11; U; Linux i686; ru; rv:1.9.1) Gecko/20090630 Fedora/3.5-1.fc11 Firefox/3.5 GTB5

Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.0.7) Gecko/2009021910 Firefox/3.0.7

Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1 WebMoney Advisor

Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3

Mozilla/5.0 (Windows; U; Windows NT 6.0; uk; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) WebMoney Advisor

Mozilla/5.0 (Windows; U; Windows NT 6.1; bg; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 1.1.4322; InfoPath.2; .NET CLR 3.5.21022; .NET CLR 3.5.30729; MS-RTC LM 8; OfficeLiveConnector.1.4; OfficeLivePatch.1.3; .NET CLR 3.0.30729)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; InfoPath.2)

Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; WebMoney Advisor; GTB6; MRA 5.4 (build 02650))

Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; WebMoney Advisor; MRA 5.5 (build 02842); MRSPUTNIK 2, 1, 0, 4 SW; MRIE8PACK 2.0.1)

Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 6.0)

Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/525.19 (KHTML, like Gecko) Chrome/0.4.154.25 Safari/525.19

Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/530.0 (KHTML, like Gecko) Chrome/2.0.160.0 Safari/530.0

amaya/9.52 libwww/5.4.0

amaya/11.1 libwww/5.4.0

|{||{||{||{||{||{||{||{||{||{||{||{||{||{|

|{|*)*>>>

fVVN.bbZ

wfl]MRm^N%sdT

f888.ee],

$$$2$$$2

999.999.

X999.999.888

633}633}

("""/"""/"""/"""/"""/"""/"""/"""/

% 0 0 0 0 0 0 0 0 0 0 0 0 0

222^888\

1"""/"""/"""/"""/"""/

999;}}}`

8882999\999\

999\999\8882

PPP.QQQTPPP

TTT.TTTRTTTRTTT.

;;;@:::'

...nUUU

$// )))(*/ /

%/   //*&/

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "hXXp://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="hXXp://VVV.w3.org/1999/xhtml" xml:lang="ru" lang="ru">

<meta http-equiv="content-type" content="text/html; charset=windows-1251" />

<link rel="shortcut icon" href="/favicon.ico" type="image/x-icon" />

.main {

.item {

.small {

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="0.9.3.2" processorArchitecture="x86" name="plagiatus" type="win32"></assemblyIdentity><description>

</description><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo></assembly>P

ekernel32.dll

mscoree.dll

ERROR %d converting to Punycode

WUSER32.DLL

[]#&*-<>\$%@

'()* ,-./

&'()* ,-

option_defs[ optId ].type == TidyInteger

option_defs[ optId ].type == TidyBoolean

.\lexer.c

lexer->parent != NULL

Assertion failed: %s, file %s, line %d

: 2.045.345

hXXp://advego.ru/

(5 - 90)

(1 - 5120)

(0 - 100)

(2 - 10)

(3 - 10)

hXXp://advego.ru<

%d (%d%%)

http, https, ftp )

1, 3, 1, 7

browser.exe_3212:

.text

`.rdata

@.data

.rsrc

@.reloc

HtdHtHHHt.HH

j.Yf;

_tcPVj@

.PjRW

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\chrome_exe_main_win.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\client_util.cc

No valid Chrome version found

Failed to load Chrome DLL from

ChromeMain

RelaunchChromeBrowserWithNewCommandLineIfNeeded

Could not find exported function

allow-insecure-websocket-from-https-origin

disable-webgl

disable-web-security

enable-experimental-web-platform-features

enable-tcp-fastopen

enable-viewport

enable-viewport-meta

enable-vtune-support

enable-webgl-draft-extensions

enable-webgl-image-chromium

enable-web-midi

enable-webkit-find-restart

ignore-certificate-errors

remote-debugging-port

renderer-cmd-prefix

testing-fixed-http-port

testing-fixed-https-port

trace-upload-url

utility-cmd-prefix

zygote-cmd-prefix

disable-webrtc-hw-decoding

disable-webrtc-encryption

disable-webrtc-hw-encoding

enable-webrtc-hw-vp8-encoding

enable-webrtc-hw-h264-encoding

disable-webaudio

opera

1.3.21.115

%s-x-x

Chrome

0.0.0.0-devel

%s-%x

url-chunk

font_key_name

subresource_url

CHROME_MAIN_TIME

%x-%x

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\google_update_settings.cc

auto-launch-chrome

chrome

chrome-sxs

new-setup-exe

register-dev-chrome

register-url-protocol

rename-browser-exe

update-setup-exe

toast-results-key

Cannot initialize AppCommands from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_commands.cc

Failed to open key "

Skipping over key "

make-browser-default-after-import

silent-first-import

ya_permanent_state.brand_id

ya_permanent_state.base_host

ya_permanent_state.partner_id

ya_permanent_state.uninstall_survey_url

yandex.ru

iexplore.exe

googlechromeapphost

googlechromeframe

Cannot initialize an AppCommand from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_command.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\language_selector.cc

CHROME_BREAKPAD_PIPE_NAME

CHROME_BREAKPAD_EVENT_NAME

d:\buildagent\work\9d1bc32700498ce4\src\components\crash\app\breakpad_win.cc

NTDLL.DLL

kernel32.dll

d:\buildagent\work\9d1bc32700498ce4\src\sandbox\win\src\sandbox_policy_base.cc

CreateNamedPipeW

NtCreateKey

NtOpenKey

NtOpenKeyEx

AudioCaptureAllowedUrls

AutoSelectCertificateForUrls

ChromeFrameContentTypes

ChromeFrameRendererSettings

ChromeOsLockOnIdleSuspend

ChromeOsMultiProfileUserBehavior

ChromeOsReleaseChannel

ChromeOsReleaseChannelDelegated

CloudPrintProxyEnabled

CloudPrintSubmitEnabled

ContentPackManualBehaviorURLs

CookiesAllowedForUrls

CookiesBlockedForUrls

CookiesSessionOnlyForUrls

DefaultSearchProviderAlternateURLs

DefaultSearchProviderIconURL

DefaultSearchProviderImageURL

DefaultSearchProviderImageURLPostParams

DefaultSearchProviderInstantURL

DefaultSearchProviderInstantURLPostParams

DefaultSearchProviderKeyword

DefaultSearchProviderNewTabURL

DefaultSearchProviderSearchTermsReplacementKey

DefaultSearchProviderSearchURL

DefaultSearchProviderSearchURLPostParams

DefaultSearchProviderSuggestURL

DefaultSearchProviderSuggestURLPostParams

DeviceAllowRedeemChromeOsRegistrationOffers

DeviceLocalAccountAutoLoginBailoutEnabled

DeviceLocalAccountAutoLoginDelay

DeviceLocalAccountAutoLoginId

DeviceLoginScreenDefaultHighContrastEnabled

DeviceLoginScreenDefaultLargeCursorEnabled

DeviceLoginScreenDefaultScreenMagnifierType

DeviceLoginScreenDefaultSpokenFeedbackEnabled

DeviceLoginScreenDefaultVirtualKeyboardEnabled

DeviceLoginScreenPowerManagement

DeviceLoginScreenSaverId

DeviceLoginScreenSaverTimeout

DeviceMetricsReportingEnabled

DeviceStartUpUrls

DeviceUpdateHttpDownloadsEnabled

EnableAuthNegotiatePort

EnableDeprecatedWebPlatformFeatures

EnableOriginBoundCerts

EnableWebBasedSignin

EnterpriseWebStoreName

EnterpriseWebStoreURL

HideWebStoreIcon

HideWebStorePromo

ImagesAllowedForUrls

ImagesBlockedForUrls

ImportAutofillFormData

ImportBookmarks

ImportHistory

ImportHomepage

ImportSavedPasswords

ImportSearchEngine

JavaScriptAllowedForUrls

JavaScriptBlockedForUrls

KeyboardDefaultToFunctionKeys

MetricsReportingEnabled

NotificationsAllowedForUrls

NotificationsBlockedForUrls

PasswordManagerAllowShowPasswords

PasswordManagerEnabled

PluginsAllowedForUrls

PluginsBlockedForUrls

PopupsAllowedForUrls

PopupsBlockedForUrls

ProxyBypassList

ProxyPacUrl

RemoteAccessHostAllowClientPairing

RemoteAccessHostAllowGnubbyAuth

RemoteAccessHostAllowRelayedConnection

RemoteAccessHostDomain

RemoteAccessHostFirewallTraversal

RemoteAccessHostRequireCurtain

RemoteAccessHostRequireTwoFactor

RemoteAccessHostTalkGadgetPrefix

RemoteAccessHostUdpPortRange

RenderInChromeFrameList

ReportDeviceActivityTimes

ReportDeviceBootMode

ReportDeviceLocation

ReportDeviceNetworkInterfaces

ReportDeviceUsers

ReportDeviceVersionInfo

RestoreOnStartupURLs

ShowAppsShortcutInBookmarkBar

SuppressChromeFrameTurndownPrompt

TermsOfServiceURL

TouchVirtualKeyboardEnabled

URLBlacklist

URLWhitelist

VideoCaptureAllowedUrls

VirtualKeyboardEnabled

update_url

^update_url:

CHROME_VERSION

CHROME_SAFE_MODE

2676A9A2-D919-4FEE-9187-152100393AB2

ignore-urlfetcher-cert-requests

install-chrome-app

install-ephemeral-app-from-webstore

pack-extension-key

permission-request-api-url

promo-server-url

proxy-bypass-list

proxy-pac-url

remember-cert-error-decisions

spelling-service-feedback-url

try-chrome-again

variations-server-url

winhttp-proxy-resolver

ya-url-copy-safe-text

skip-first-import

plugins-metadata-server-url

windows8-search

allow-http-screen-capture

app-list-start-page-url

apps-checkout-url

apps-gallery-download-url

apps-gallery-url

apps-gallery-update-url

certificate-transparency-log

disable-extensions-http-throttling

disable-password-manager-reauthentication

disable-quic-port-selection

disable-save-password-bubble

disable-web-resources

enable-auth-negotiate-port

enable-npn-http

enable-quic-port-selection

enable-save-password-bubble

enable-sdch-over-https

enable-user-controlled-alternate-protocol-ports

enable-websocket-over-spdy

enable-website-settings-manager

explicitly-allowed-ports

extensions-not-webstore

help-url

40.0.2214.3645

CHROME_HEADLESS

CHROME_LOG_FILE

CHROME_METRO_CONNECTED

CHROMEOS_SESSION_LOG_DIR

CHROME_CRASHED

CHROME_RESTART

profile.ephemeral_mode

profile.icon_version

session.restore_on_startup

session.restore_on_startup_migrated

session.startup_urls_migration_time

session.restore_to_homepage_if_empty

profile.exited_cleanly

profile.exit_type

profile.managed.custodian_email

profile.managed.custodian_name

profile.managed.custodian_profile_image_url

profile.managed.custodian_profile_url

profile.managed.manual_hosts

profile.managed.manual_urls

profile.managed.second_custodian_email

profile.managed.second_custodian_name

profile.managed.second_custodian_profile_image_url

profile.managed.second_custodian_profile_url

profile.managed.shared_settings

session.startup_urls

session.urls_to_restore_on_startup

intl.app_locale

intl.charset_default

intl.accept_languages

intl.applied_brand_package_accept_languages

intl.static_encodings

webkit.webprefs.fonts.standard.Zyyy

webkit.webprefs.fonts.fixed.Zyyy

webkit.webprefs.fonts.serif.Zyyy

webkit.webprefs.fonts.sansserif.Zyyy

webkit.webprefs.fonts.cursive.Zyyy

webkit.webprefs.fonts.fantasy.Zyyy

webkit.webprefs.fonts.pictograph.Zyyy

webkit.webprefs.fonts.standard

webkit.webprefs.fonts.fixed

webkit.webprefs.fonts.serif

webkit.webprefs.fonts.sansserif

webkit.webprefs.fonts.cursive

webkit.webprefs.fonts.fantasy

webkit.webprefs.fonts.pictograph

webkit.webprefs.fonts.standard.Arab

webkit.webprefs.fonts.fixed.Arab

webkit.webprefs.fonts.serif.Arab

webkit.webprefs.fonts.sansserif.Arab

webkit.webprefs.fonts.standard.Cyrl

webkit.webprefs.fonts.fixed.Cyrl

webkit.webprefs.fonts.serif.Cyrl

webkit.webprefs.fonts.sansserif.Cyrl

webkit.webprefs.fonts.standard.Grek

webkit.webprefs.fonts.fixed.Grek

webkit.webprefs.fonts.serif.Grek

webkit.webprefs.fonts.sansserif.Grek

webkit.webprefs.fonts.standard.Jpan

webkit.webprefs.fonts.fixed.Jpan

webkit.webprefs.fonts.serif.Jpan

webkit.webprefs.fonts.sansserif.Jpan

webkit.webprefs.fonts.standard.Hang

webkit.webprefs.fonts.fixed.Hang

webkit.webprefs.fonts.serif.Hang

webkit.webprefs.fonts.sansserif.Hang

webkit.webprefs.fonts.cursive.Hang

webkit.webprefs.fonts.standard.Hans

webkit.webprefs.fonts.fixed.Hans

webkit.webprefs.fonts.serif.Hans

webkit.webprefs.fonts.sansserif.Hans

webkit.webprefs.fonts.standard.Hant

webkit.webprefs.fonts.fixed.Hant

webkit.webprefs.fonts.serif.Hant

webkit.webprefs.fonts.sansserif.Hant

webkit.webprefs.default_font_size

webkit.webprefs.default_fixed_font_size

webkit.webprefs.minimum_font_size

webkit.webprefs.minimum_logical_font_size

webkit.webprefs.javascript_enabled

webkit.webprefs.web_security_enabled

webkit.webprefs.javascript_can_open_windows_automatically

webkit.webprefs.loads_images_automatically

webkit.webprefs.plugins_enabled

webkit.webprefs.dom_paste_enabled

webkit.webprefs.shrinks_standalone_images_to_fit

webkit.webprefs.uses_universal_detector

webkit.webprefs.text_areas_are_resizable

webkit.webprefs.java_enabled

webkit.webprefs.tabs_to_links

webkit.webprefs.allow_displaying_insecure_content

webkit.webprefs.allow_running_insecure_content

safebrowsing.enabled

safebrowsing.extended_reporting_enabled

safebrowsing.proceed_anyway_disabled

safebrowsing.incident_report_sent

safebrowsing.incidents_sent

incognito.mode_availability

search.suggest_enabled

browser.confirm_to_quit

security.cookie_behavior

download.prompt_for_download

alternate_error_pages.enabled

dns_prefetching.startup_list

dns_prefetching.host_referral_list

spdy.disabled

net.http_server_properties

spdy.servers

spdy.alternate_protocol

protocol.disabled_schemes

instant_ui.zero_suggest_url_prefix

local_state.multiple_profile_prefs_version

dns_prefetching.enabled

net.network_prediction_options

hide_web_store_icon

browser.show_home_button

browser.show_ya_button

browser.show_tablo_on_click

browser.last_session_empty

browser.session_empty

browser.use_mouse_gestures

browser.enable_page_expiration

browser.do_not_count_page_expiration_infobar_closings

profile.recently_selected_encodings

browser.clear_data.browsing_history

browser.clear_data.download_history

browser.clear_data.cache

browser.clear_data.cookies

browser.clear_data.passwords

browser.clear_data.form_data

browser.clear_data.hosted_apps_data

browser.clear_data.content_licenses

browser.enable_spellchecking

browser.speechinput_censor_results

browser.speechinput_tray_notification_shown_contexts

browser.enabled_labs_experiments

ya.experiments_edited_by_user

ya.distrib_default_experiments

browser.enable_autospellcorrect

history.saving_disabled

ya.settings.text_wrap

history.deleting_enabled

settings.force_safesearch

settings.history_recorded

browser.clear_data.time_period

browser.last_clear_browsing_data_time

extensions.theme.pack

extensions.theme.id

extensions.theme.images

extensions.theme.colors

extensions.theme.tints

extensions.theme.properties

extensions.ui.developer_mode

extensions.commands

plugins.last_internal_directory

plugins.plugins_list

plugins.plugins_disabled

plugins.plugins_disabled_exceptions

plugins.plugins_enabled

plugins.migrated_to_pepper_flash

plugins.removed_old_component_pepper_flash_settings

plugins.show_details

plugins.allow_outdated

plugins.always_authorize

plugins.metadata

plugins.resource_cache_update

browser.check_default_browser

browser.default_browser_setting_enabled

browser.custom_chrome_frame

profile.content_settings.plugin_whitelist

profile.block_third_party_cookies

profile.clear_site_data_on_exit

partition.default_zoom_level

profile.default_zoom_level

partition.per_host_zoom_levels

profile.per_host_zoom_levels

autofill.data_model_default

autofill.pay_without_wallet

autofill.wallet_location_disclosure

autofill.save_data

autofill.wallet_shipping_same_as_billing

autofill.generated_card_bubble_times_shown

autofill.rac_dialog_defaults

breadcrumbs.enabled

push_to_call.enabled

push_to_call.wasenabled

ya.disk.want_install

context_translate.enabled

context_translate.translate_words

enable_deprecated_web_platform_features

import_last_source_browser

import_autofill_form_data

import_bookmarks

import_history

import_home_page

import_saved_passwords

import_cookies

import_last_session

import_extensions

import_speed_dial

import_other

ya.statistics.import_rollback

ya.import_new_source_type

ya.import_new_source_profile

import_search_engine

profile.avatar_index

profile.using_default_name

profile.name

profile.using_default_avatar

profile.using_gaia_avatar

profile.managed_user_id

profile.gaia_info_update_time

profile.gaia_info_picture_url

profile.avatar_bubble_tutorial_shown

printing.enabled

printing.print_preview_disabled

profile.managed.default_filtering_behavior

profile.managed_user_creation_allowed

profile.managed_users

profile.reset_prompt_memento

message_center.disabled_extension_ids

message_center.disabled_system_component_ids

message_center.welcome_notification_dismissed

message_center.welcome_notification_dismissed_local

message_center.welcome_notification_previously_popped_up

message_center.welcome_notification_expiration_timestamp

fullscreen.allowed

local_discovery.notifications_enabled

prefs.preference_reset_time

ya.prefetch.latest_update_list

ya.tablo_pins.instance_id

gcm.channel_enabled

gcm.push_messaging_registration_count

easy_unlock.allowed

easy_unlock.enabled

easy_unlock.pairing

easy_unlock.proximity_required

easy_unlock.show_tutorial

zerosuggest.cachedresults

signin.error_stats_update_time

ssl.rev_checking.enabled

ssl.rev_checking.required_for_local_anchors

ssl.version_min

ssl.version_max

ssl.version_fallback_min

ssl.cipher_suites.blacklist

ssl.ssl_record_splitting.disabled

ssl.ssl_blocking_bypassed

user_experience_metrics.reporting_enabled

profile.last_used

profile.last_active_profiles

profile.profiles_created

profile.info_cache

profile.created_by_version

profile.reset_prompt_mementos

user_experience_metrics.stability.page_load_count

user_experience_metrics.stability.renderer_crash_count

user_experience_metrics.stability.extension_renderer_crash_count

user_experience_metrics.stability.renderer_hang_count

user_experience_metrics.stability.child_process_crash_count

user_experience_metrics.stability.other_user_crash_count

user_experience_metrics.stability.kernel_crash_count

user_experience_metrics.stability.system_unclean_shutdowns

user_experience_metrics.stability.plugin_stats2

uninstall_metrics.page_load_count

uninstall_metrics.last_launch_time_sec

uninstall_metrics.last_observed_running_time_sec

browser.suppress_default_browser_prompt_for_version

browser.window_placement

browser.window_placement_popup

task_manager.window_placement

browser.app_window_placement

renderer.memory_cache.size

download.default_directory

download.default_directory_display_name

download.extensions_to_open

download.directory_upgrade

download.open_pdf_in_system_reader

savefile.default_directory

savefile.type

select_file_dialogs.allowed

filebrowser.tasks.default_by_mime_type

filebrowser.tasks.default_by_suffix

selectfile.last_directory

browser.hung_plugin_detect_freq

browser.plugin_message_response_timeout

spellcheck.dictionary

spellcheck.use_spelling_service

protocol_handler.excluded_schemes

safe_browsing.client_key

safe_browsing.wrapped_key

options_window.last_tab_index

certificate_manager_window.last_tab_index

browser.show_omnibox_share_buttons

browser.last_redirect_origin

shutdown.type

shutdown.num_processes

shutdown.num_processes_slow

restart.last.session.on.shutdown

was.restarted

relaunch.mode

extensions.disabled

plugins.disable_plugin_finder

ntp.app_page_names

ntp.collapsed_open_tabs

ntp.collapsed_foreign_sessions

ntp.collapsed_recently_closed_tabs

ntp.collapsed_snapshot_document

ntp.collapsed_sync_promo

ntp.date_resource_server

ntp.most_visited_blacklist

ntp.promo_desktop_session_found

ntp.promo_resource_cache_update

ntp.shown_bookmarks_folder

ntp.shown_page

ntp.tips_resource_server

ntp.webstore_enabled

devtools.adb_key

devtools.disabled

devtools.discover_usb_devices

devtools.edited_files

devtools.file_system_paths

devtools.open_docked

devtools.port_forwarding_enabled

devtools.port_forwarding_default_set

devtools.port_forwarding_config

google.services.password_hash

invalidation_service.use_gcm_channel

sync_promo.startup_count

sync_promo.user_skipped

sync_promo.show_on_first_run_allowed

sync_promo.show_ntp_bubble

browser.web_app.create_on_desktop

browser.web_app.create_in_apps_menu

browser.web_app.create_in_quick_launch_bar

geolocation.access_token

media.default_audio_capture_device

media.default_video_capture_Device

media.device_id_salt

remote_access.host_firewall_traversal

remote_access.host_require_two_factor

remote_access.host_domain

remote_access.host_talkgadget_prefix

remote_access.host_require_curtain

remote_access.host_allow_client_pairing

remote_access.host_allow_gnubby_auth

remote_access.host_allow_relayed_connection

remote_access.host_udp_port_range

printing.print_preview_sticky_settings

cloud_print.dialog_size.width

cloud_print.dialog_size.height

cloud_print.signin_dialog_size.width

cloud_print.signin_dialog_size.height

cloud_print.enabled

cloud_print.proxy_id

cloud_print.auth_token

cloud_print.xmpp_auth_token

cloud_print.email

cloud_print.print_system_settings

cloud_print.enable_job_poll

cloud_print.robot_refresh_token

cloud_print.robot_email

cloud_print.user_settings.connectNewPrinters

cloud_print.xmpp_ping_enabled

cloud_print.xmpp_ping_timeout_sec

cloud_print.user_settings.printers

cloud_print.submit_enabled

cloud_print.user_settings

net.max_connections_per_proxy

hardware.audio_capture_enabled

hardware.audio_capture_allowed_urls

hardware.video_capture_enabled

hardware.video_capture_allowed_urls

hotword.search_enabled_2

hotword.always_on_search_enabled

hotword.audio_logging_enabled

hotword.audio_history_enabled

hotword.previous_language

browser.clear_lso_data_enabled

browser.pepper_flash_settings_enabled

browser.disk_cache_dir

browser.disk_cache_size

browser.last_default_status

browser.media_cache_size

cros.system.releaseChannel

feedback.performance_tracing_enabled

background_contents.registered

browser.shown_autolaunch_infobar

auth.schemes

auth.disable_negotiate_cname_lookup

auth.enable_negotiate_port

auth.server_whitelist

auth.negotiate_delegate_whitelist

auth.gssapi_library_name

auth.allow_cross_origin_prompt

async_dns.enabled

custom_handlers.registered_protocol_handlers

custom_handlers.ignored_protocol_handlers

custom_handlers.policy.registered_protocol_handlers

custom_handlers.policy.ignored_protocol_handlers

custom_handlers.enabled

background_mode.enabled

hardware_acceleration_mode.enabled

policy.device_refresh_rate

message_center.showed_first_run_balloon

message_center.show_icon

message_center.was_forced_on_taskbar

browser.attempted_to_enable_autoupdate

media_galleries.gallery_id

media_galleries.remembered_galleries

media_galleries.last_scan_time

shelf_chrome_icon_index

gesture.max_separation_for_gesture_touches_in_pixels

gesture.semi_long_press_time_in_ms

gesture.tab_scrub_activation_delay_in_ms

gesture.fling_max_cancel_to_down_time_in_ms

gesture.fling_max_tap_gap_time_in_ms

overscroll.horizontal_threshold_complete

overscroll.vertical_threshold_complete

overscroll.minimum_threshold_start

overscroll.minimum_threshold_start_touchpad

overscroll.vertical_threshold_start

overscroll.horizontal_resist_threshold

overscroll.vertical_resist_threshold

ya.send_install

ya.last_welcome_page_version

ya.clids

ya.banerid

ya.update_failures

ya.update_last_failure

ya.welcome_page

ya.custom_cookies

ya.bar.ui

ya.bar.uuid

ya.bar.r1

ya.statistics.last_default_check_time

ya.statistics.enabled

ya.tab_finder_enabled_once

ya.crash_dumps_checkbox_was_set

ya.crash_dumps_checkbox_was_set_at_1_0_1084_5404

ya.disk.installer_etag

ya.vk.show_infobar

ya.vk.last_shown

ya.vk.clicks_left

ya.last_runned_version

ya.last_runned_partner_id

ya.education.enabled

ya.custo_education.enabled

ya.searchness.enabled

ya.all_sb_chunks_downloaded_time

ya.splitview.enabled

ya.splitview.visible

ya.sync.device.push_id

ya.sync.device.name

ya.block_flash

ya.extensions_to_replace

ya.mute_state

ya.background_animation.enabled

ya.background_animation.disable_on_low_battery

ya.notifications.extension_settings_migrated

ya.notifications.migrated_fb_token

ya.notifications.migrated_fb_token_expires_in

ya.notifications.migrated_vk_token

ya.notifications.migrated_vk_token_expires_in

ya.notifications.silent_mode_until

ya.notifications.silent_mode

ya.notifications.fb.enabled

ya.notifications.fb.show.comments

ya.notifications.fb.show.friend_requests

ya.notifications.fb.show.messages

ya.notifications.fb.view_content

ya.notifications.fb.num_invitations_shown

ya.notifications.fb.last_time_invitation_shown

ya.notifications.fb.share_accepted

ya.notifications.fb.last_share_propose_time

ya.notifications.vk.enabled

ya.notifications.vk.show.comments

ya.notifications.vk.show.friend_requests

ya.notifications.vk.show.messages

ya.notifications.vk.view_content

ya.notifications.vk.num_invitations_shown

ya.notifications.vk.last_time_invitation_shown

ya.notifications.vk.share_accepted

ya.notifications.vk.last_share_propose_time

ya.notifications.yamail.enabled

ya.notifications.yamail.view_content

show.comments

show.friend_requests

show.messages

omnibox-infobar-panel.enabled

omnibox-infobar-panel.disabled

searchness.disabled

ya.persist_state_updated

network_profile.warnings_left

network_profile.last_warning_time

ya.feedback.update_date

ya.smartback.dictionary_last_modified

torrents.open_mode

apps.app_launch_for_metro_restart

apps.app_launch_for_metro_restart_profile

apps.shortcuts_version

module_conflict.bubble_shown

settings.privacy.drm_salt

settings.privacy.drm_enabled

browser.allow_discard_tabs

browser.allow_discard_tabs_updated

profile.extensions.activity_log.num_consumers_active

proxy.quick_check_enabled

profile.browser_guest_enabled

profile.add_person_enabled

ya.show_newtab_search_arrow

ya.popup_block_enabled

ya.plugin_restricted_document_kinds

ya.custo_tab_activation_order_on_tab_close

ya.custo_ui_first_time_launch

easy_unlock.hardlock_state

password_bubble.timestamp

password_bubble.nopes

password_bubble.interactions

ya.tablo.snapshot_click_map

license_url

feedback.url

conf_policy_url

hXXp://legal.yandex.ru/browser_agreement/

hXXp://legal.yandex.ru/confidential/

SHELL32.dll

ole32.dll

OLEAUT32.dll

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

%s-%Iu

u\uX

Dictionary keys must be quoted.

Unsupported encoding. JSON must be UTF-8.

full-memory-crash-report

(0x%X)

Error (0x%X) while retrieving error. (0x%X)

(%d = %3.1f%%)

Histogram: %s recorded %d samples

(flags = 0x%x)

PlatformFile.UnknownErrors.Windows

user32.dll

0123456789

.syzygy

.thunks

Line: %i, column: %i, %s

D:\BuildAgent\work\9d1bc32700498ce4\src\out\Release\initialexe\browser.exe.pdb

browser.exe

ClearBreakpadPipeEnvironmentVariable

ClearCrashKeyValueImpl

SetCrashKeyValueImpl

SignalChromeElf

browser_elf.dll

WINMM.dll

VERSION.dll

SHLWAPI.dll

RegEnumKeyExW

RegQueryInfoKeyW

RegCreateKeyExW

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

GetAsyncKeyState

CloseWindowStation

CreateWindowStationW

SetProcessWindowStation

USER32.dll

GetProcessHeap

GetWindowsDirectoryW

CreateIoCompletionPort

GetProcessHandleCount

KERNEL32.dll

USERENV.dll

WTSAPI32.dll

GetCPInfo

SetNamedPipeHandleState

TransactNamedPipe

WaitNamedPipeW

zcÁ

40.0.2214.3645-00000c8c-0006fc77

.ccc]

.IDATx

.aU/@G

\]]]]_]^

.owO[

.RwuWee

o.yST

G.HIJ

]]][\^__^\]`

i.snh

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="Win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><dependency><dependentAssembly><assemblyIdentity type="win32" name="40.0.2214.3645" version="40.0.2214.3645" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>

0%1X2

0"0)040=0

9%:0:>:]:~:

5-5v5}5

4$4044484

1 1$1(1,10141

8,;0;4;8;<;

6(7,707\7

5$5(5,50545

2 2$2(2,2024282<2

1 1$1,1@1`1

7 7$7(7,707

registering_chrome

uninstalling_chrome_frame

eyndxstp.exe

{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}

app_host.exe

browser.dll

browser_child.dll

npbrowser_frame.dll

browser_frame_helper.dll

browser_frame_helper.exe

browser_launcher.exe

metro_driver.dll

new_browser.exe

old_browser.exe

delegate_execute.exe

nacl64.exe

setup.exe

InstallerSuccessLaunchCmdLine

YandexSSHTM

{45033924-ABD6-4063-AD60-71925CDE206E}

{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}

{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}

Browse the web

Software\Microsoft\Windows\CurrentVersion\Uninstall\Chromium

-chrome

-chromeframe

{8A69D345-D564-463C-AFF1-A69D9E530F96}

{430FD4D0-B729-4F61-AA34-91526481799D}

GoogleUpdateSetup.exe

CFEndTempOptOutCmd

CFOptInCmd

CFOptOutCmd

CFTempOptOutCmd

UninstallCmdLine

WebAccessible

3E40F524-16FA-440A-B919-B44AB355B174

service_update.exe

winrt_helper.dll

{5FAFC90A-D443-4E4F-B69B-DA1F8D553C6C}

d-d-%d

hXXp://browser.

%d.%d.%d

Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser

Google Chrome App Launcher

ChromeAppList

tSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher

{8BA986DA-5100-405E-AA35-86F34A02ACBF}

Google Chrome Frame

Google\Chrome Frame

Chrome in a Frame.

Uninstall Chrome Frame

Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame

\\.\pipe\GoogleCrashServices\

\\.\pipe\YandexCrashServices

error %u

ntdll.dll

chrome.exe

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_TEXT

HKEY_PERFORMANCE_NLSTEXT

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

pipe\

kernelbase.dll

eKey

gdi32.dll

xntdll.dll

wow_helper.exe"

shell32.dll

Reported Crashes.txt

testing_interface.dll

Origin Bound Certs

Certificate Revocation Lists

Custom Dictionary.txt

Login Data

Cached Theme.pak

Web Applications

pepflashplayer.dll

CHROME_METRO_NAV_SEARCH_REQUEST

CHROME_METRO_GET_CURRENT_TAB_INFO

CHROME_METRO_SETTINGS_COMMAND

gcswf32.dll

pdf.dll

yapdf.dll

yadocviewer.dll

npmedia_plugin.dll

pepper/libppeffects.dll

Crash Reports

crash_service.exe

script.log

resources.pak

${windows}

hunspecified-crash-key

%u.%s

reported

mscoree.dll

ADVAPI32.DLL

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

USER32.DLL

portuguese-brazilian

dbghelp.dll

rpcrt4.dll

crash_service.exe --max-reports=10

%s\%s.dmp

x-x-x-xx-xxxxxx

Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32

Software\Microsoft\Windows\CurrentVersion\Run

.Chrome_MessagePumpWindow_%p

Ndebug.log

.\debug.log

\StringFileInfo\xx\%ls

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Crash Reports\events\3212.crashed

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe

chrome_exe

40.0.2214.115

15.2.2214.3645

crash_service.exe_3220:

.text

`.rdata

@.data

.rsrc

@.reloc

j.Yf;

_tcPVj@

.PjRW

d:\buildagent\work\9d1bc32700498ce4\src\chrome\tools\crash_service\main.cc

session start. cmdline is [

CHROME_VERSION

CHROME_SAFE_MODE

2676A9A2-D919-4FEE-9187-152100393AB2

ignore-urlfetcher-cert-requests

install-chrome-app

install-ephemeral-app-from-webstore

pack-extension-key

permission-request-api-url

promo-server-url

proxy-bypass-list

proxy-pac-url

remember-cert-error-decisions

spelling-service-feedback-url

try-chrome-again

variations-server-url

winhttp-proxy-resolver

ya-url-copy-safe-text

skip-first-import

plugins-metadata-server-url

windows8-search

allow-http-screen-capture

app-list-start-page-url

apps-checkout-url

apps-gallery-download-url

apps-gallery-url

apps-gallery-update-url

certificate-transparency-log

disable-extensions-http-throttling

disable-password-manager-reauthentication

disable-quic-port-selection

disable-save-password-bubble

disable-web-resources

enable-auth-negotiate-port

enable-npn-http

enable-quic-port-selection

enable-save-password-bubble

enable-sdch-over-https

enable-user-controlled-alternate-protocol-ports

enable-websocket-over-spdy

enable-website-settings-manager

explicitly-allowed-ports

extensions-not-webstore

help-url

max-reports

reporter

pipe-name

CHROME_BREAKPAD_PIPE_NAME

CHROME_BREAKPAD_EVENT_NAME

d:\buildagent\work\9d1bc32700498ce4\src\components\crash\tools\crash_service.cc

pipe name is

reporter is

reports/day

trying to send report for pid =

checking for unsent reports in

we're done with unsent reports

dumps reported :

license_url

feedback.url

conf_policy_url

hXXp://legal.yandex.ru/browser_agreement/

hXXp://legal.yandex.ru/confidential/

SHELL32.dll

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

googlechromeapphost

googlechromeframe

ya_permanent_state.brand_id

ya_permanent_state.base_host

ya_permanent_state.partner_id

ya_permanent_state.uninstall_survey_url

yandex.ru

iexplore.exe

auto-launch-chrome

chrome

chrome-sxs

new-setup-exe

register-dev-chrome

register-url-protocol

rename-browser-exe

update-setup-exe

toast-results-key

make-browser-default-after-import

silent-first-import

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\language_selector.cc

profile.ephemeral_mode

profile.icon_version

session.restore_on_startup

session.restore_on_startup_migrated

session.startup_urls_migration_time

session.restore_to_homepage_if_empty

profile.exited_cleanly

profile.exit_type

profile.managed.custodian_email

profile.managed.custodian_name

profile.managed.custodian_profile_image_url

profile.managed.custodian_profile_url

profile.managed.manual_hosts

profile.managed.manual_urls

profile.managed.second_custodian_email

profile.managed.second_custodian_name

profile.managed.second_custodian_profile_image_url

profile.managed.second_custodian_profile_url

profile.managed.shared_settings

session.startup_urls

session.urls_to_restore_on_startup

intl.app_locale

intl.charset_default

intl.accept_languages

intl.applied_brand_package_accept_languages

intl.static_encodings

webkit.webprefs.fonts.standard.Zyyy

webkit.webprefs.fonts.fixed.Zyyy

webkit.webprefs.fonts.serif.Zyyy

webkit.webprefs.fonts.sansserif.Zyyy

webkit.webprefs.fonts.cursive.Zyyy

webkit.webprefs.fonts.fantasy.Zyyy

webkit.webprefs.fonts.pictograph.Zyyy

webkit.webprefs.fonts.standard

webkit.webprefs.fonts.fixed

webkit.webprefs.fonts.serif

webkit.webprefs.fonts.sansserif

webkit.webprefs.fonts.cursive

webkit.webprefs.fonts.fantasy

webkit.webprefs.fonts.pictograph

webkit.webprefs.fonts.standard.Arab

webkit.webprefs.fonts.fixed.Arab

webkit.webprefs.fonts.serif.Arab

webkit.webprefs.fonts.sansserif.Arab

webkit.webprefs.fonts.standard.Cyrl

webkit.webprefs.fonts.fixed.Cyrl

webkit.webprefs.fonts.serif.Cyrl

webkit.webprefs.fonts.sansserif.Cyrl

webkit.webprefs.fonts.standard.Grek

webkit.webprefs.fonts.fixed.Grek

webkit.webprefs.fonts.serif.Grek

webkit.webprefs.fonts.sansserif.Grek

webkit.webprefs.fonts.standard.Jpan

webkit.webprefs.fonts.fixed.Jpan

webkit.webprefs.fonts.serif.Jpan

webkit.webprefs.fonts.sansserif.Jpan

webkit.webprefs.fonts.standard.Hang

webkit.webprefs.fonts.fixed.Hang

webkit.webprefs.fonts.serif.Hang

webkit.webprefs.fonts.sansserif.Hang

webkit.webprefs.fonts.cursive.Hang

webkit.webprefs.fonts.standard.Hans

webkit.webprefs.fonts.fixed.Hans

webkit.webprefs.fonts.serif.Hans

webkit.webprefs.fonts.sansserif.Hans

webkit.webprefs.fonts.standard.Hant

webkit.webprefs.fonts.fixed.Hant

webkit.webprefs.fonts.serif.Hant

webkit.webprefs.fonts.sansserif.Hant

webkit.webprefs.default_font_size

webkit.webprefs.default_fixed_font_size

webkit.webprefs.minimum_font_size

webkit.webprefs.minimum_logical_font_size

webkit.webprefs.javascript_enabled

webkit.webprefs.web_security_enabled

webkit.webprefs.javascript_can_open_windows_automatically

webkit.webprefs.loads_images_automatically

webkit.webprefs.plugins_enabled

webkit.webprefs.dom_paste_enabled

webkit.webprefs.shrinks_standalone_images_to_fit

webkit.webprefs.uses_universal_detector

webkit.webprefs.text_areas_are_resizable

webkit.webprefs.java_enabled

webkit.webprefs.tabs_to_links

webkit.webprefs.allow_displaying_insecure_content

webkit.webprefs.allow_running_insecure_content

safebrowsing.enabled

safebrowsing.extended_reporting_enabled

safebrowsing.proceed_anyway_disabled

safebrowsing.incident_report_sent

safebrowsing.incidents_sent

incognito.mode_availability

search.suggest_enabled

browser.confirm_to_quit

security.cookie_behavior

download.prompt_for_download

alternate_error_pages.enabled

dns_prefetching.startup_list

dns_prefetching.host_referral_list

spdy.disabled

net.http_server_properties

spdy.servers

spdy.alternate_protocol

protocol.disabled_schemes

instant_ui.zero_suggest_url_prefix

local_state.multiple_profile_prefs_version

dns_prefetching.enabled

net.network_prediction_options

hide_web_store_icon

browser.show_home_button

browser.show_ya_button

browser.show_tablo_on_click

browser.last_session_empty

browser.session_empty

browser.use_mouse_gestures

browser.enable_page_expiration

browser.do_not_count_page_expiration_infobar_closings

profile.recently_selected_encodings

browser.clear_data.browsing_history

browser.clear_data.download_history

browser.clear_data.cache

browser.clear_data.cookies

browser.clear_data.passwords

browser.clear_data.form_data

browser.clear_data.hosted_apps_data

browser.clear_data.content_licenses

browser.enable_spellchecking

browser.speechinput_censor_results

browser.speechinput_tray_notification_shown_contexts

browser.enabled_labs_experiments

ya.experiments_edited_by_user

ya.distrib_default_experiments

browser.enable_autospellcorrect

history.saving_disabled

ya.settings.text_wrap

history.deleting_enabled

settings.force_safesearch

settings.history_recorded

browser.clear_data.time_period

browser.last_clear_browsing_data_time

extensions.theme.pack

extensions.theme.id

extensions.theme.images

extensions.theme.colors

extensions.theme.tints

extensions.theme.properties

extensions.ui.developer_mode

extensions.commands

plugins.last_internal_directory

plugins.plugins_list

plugins.plugins_disabled

plugins.plugins_disabled_exceptions

plugins.plugins_enabled

plugins.migrated_to_pepper_flash

plugins.removed_old_component_pepper_flash_settings

plugins.show_details

plugins.allow_outdated

plugins.always_authorize

plugins.metadata

plugins.resource_cache_update

browser.check_default_browser

browser.default_browser_setting_enabled

browser.custom_chrome_frame

profile.content_settings.plugin_whitelist

profile.block_third_party_cookies

profile.clear_site_data_on_exit

partition.default_zoom_level

profile.default_zoom_level

partition.per_host_zoom_levels

profile.per_host_zoom_levels

autofill.data_model_default

autofill.pay_without_wallet

autofill.wallet_location_disclosure

autofill.save_data

autofill.wallet_shipping_same_as_billing

autofill.generated_card_bubble_times_shown

autofill.rac_dialog_defaults

breadcrumbs.enabled

push_to_call.enabled

push_to_call.wasenabled

ya.disk.want_install

context_translate.enabled

context_translate.translate_words

enable_deprecated_web_platform_features

import_last_source_browser

import_autofill_form_data

import_bookmarks

import_history

import_home_page

import_saved_passwords

import_cookies

import_last_session

import_extensions

import_speed_dial

import_other

ya.statistics.import_rollback

ya.import_new_source_type

ya.import_new_source_profile

import_search_engine

profile.avatar_index

profile.using_default_name

profile.name

profile.using_default_avatar

profile.using_gaia_avatar

profile.managed_user_id

profile.gaia_info_update_time

profile.gaia_info_picture_url

profile.avatar_bubble_tutorial_shown

printing.enabled

printing.print_preview_disabled

profile.managed.default_filtering_behavior

profile.managed_user_creation_allowed

profile.managed_users

profile.reset_prompt_memento

message_center.disabled_extension_ids

message_center.disabled_system_component_ids

message_center.welcome_notification_dismissed

message_center.welcome_notification_dismissed_local

message_center.welcome_notification_previously_popped_up

message_center.welcome_notification_expiration_timestamp

fullscreen.allowed

local_discovery.notifications_enabled

prefs.preference_reset_time

ya.prefetch.latest_update_list

ya.tablo_pins.instance_id

gcm.channel_enabled

gcm.push_messaging_registration_count

easy_unlock.allowed

easy_unlock.enabled

easy_unlock.pairing

easy_unlock.proximity_required

easy_unlock.show_tutorial

zerosuggest.cachedresults

signin.error_stats_update_time

ssl.rev_checking.enabled

ssl.rev_checking.required_for_local_anchors

ssl.version_min

ssl.version_max

ssl.version_fallback_min

ssl.cipher_suites.blacklist

ssl.ssl_record_splitting.disabled

ssl.ssl_blocking_bypassed

user_experience_metrics.reporting_enabled

profile.last_used

profile.last_active_profiles

profile.profiles_created

profile.info_cache

profile.created_by_version

profile.reset_prompt_mementos

user_experience_metrics.stability.page_load_count

user_experience_metrics.stability.renderer_crash_count

user_experience_metrics.stability.extension_renderer_crash_count

user_experience_metrics.stability.renderer_hang_count

user_experience_metrics.stability.child_process_crash_count

user_experience_metrics.stability.other_user_crash_count

user_experience_metrics.stability.kernel_crash_count

user_experience_metrics.stability.system_unclean_shutdowns

user_experience_metrics.stability.plugin_stats2

uninstall_metrics.page_load_count

uninstall_metrics.last_launch_time_sec

uninstall_metrics.last_observed_running_time_sec

browser.suppress_default_browser_prompt_for_version

browser.window_placement

browser.window_placement_popup

task_manager.window_placement

browser.app_window_placement

renderer.memory_cache.size

download.default_directory

download.default_directory_display_name

download.extensions_to_open

download.directory_upgrade

download.open_pdf_in_system_reader

savefile.default_directory

savefile.type

select_file_dialogs.allowed

filebrowser.tasks.default_by_mime_type

filebrowser.tasks.default_by_suffix

selectfile.last_directory

browser.hung_plugin_detect_freq

browser.plugin_message_response_timeout

spellcheck.dictionary

spellcheck.use_spelling_service

protocol_handler.excluded_schemes

safe_browsing.client_key

safe_browsing.wrapped_key

options_window.last_tab_index

certificate_manager_window.last_tab_index

browser.show_omnibox_share_buttons

browser.last_redirect_origin

shutdown.type

shutdown.num_processes

shutdown.num_processes_slow

restart.last.session.on.shutdown

was.restarted

relaunch.mode

extensions.disabled

plugins.disable_plugin_finder

ntp.app_page_names

ntp.collapsed_open_tabs

ntp.collapsed_foreign_sessions

ntp.collapsed_recently_closed_tabs

ntp.collapsed_snapshot_document

ntp.collapsed_sync_promo

ntp.date_resource_server

ntp.most_visited_blacklist

ntp.promo_desktop_session_found

ntp.promo_resource_cache_update

ntp.shown_bookmarks_folder

ntp.shown_page

ntp.tips_resource_server

ntp.webstore_enabled

devtools.adb_key

devtools.disabled

devtools.discover_usb_devices

devtools.edited_files

devtools.file_system_paths

devtools.open_docked

devtools.port_forwarding_enabled

devtools.port_forwarding_default_set

devtools.port_forwarding_config

google.services.password_hash

invalidation_service.use_gcm_channel

sync_promo.startup_count

sync_promo.user_skipped

sync_promo.show_on_first_run_allowed

sync_promo.show_ntp_bubble

browser.web_app.create_on_desktop

browser.web_app.create_in_apps_menu

browser.web_app.create_in_quick_launch_bar

geolocation.access_token

media.default_audio_capture_device

media.default_video_capture_Device

media.device_id_salt

remote_access.host_firewall_traversal

remote_access.host_require_two_factor

remote_access.host_domain

remote_access.host_talkgadget_prefix

remote_access.host_require_curtain

remote_access.host_allow_client_pairing

remote_access.host_allow_gnubby_auth

remote_access.host_allow_relayed_connection

remote_access.host_udp_port_range

printing.print_preview_sticky_settings

cloud_print.dialog_size.width

cloud_print.dialog_size.height

cloud_print.signin_dialog_size.width

cloud_print.signin_dialog_size.height

cloud_print.enabled

cloud_print.proxy_id

cloud_print.auth_token

cloud_print.xmpp_auth_token

cloud_print.email

cloud_print.print_system_settings

cloud_print.enable_job_poll

cloud_print.robot_refresh_token

cloud_print.robot_email

cloud_print.user_settings.connectNewPrinters

cloud_print.xmpp_ping_enabled

cloud_print.xmpp_ping_timeout_sec

cloud_print.user_settings.printers

cloud_print.submit_enabled

cloud_print.user_settings

net.max_connections_per_proxy

hardware.audio_capture_enabled

hardware.audio_capture_allowed_urls

hardware.video_capture_enabled

hardware.video_capture_allowed_urls

hotword.search_enabled_2

hotword.always_on_search_enabled

hotword.audio_logging_enabled

hotword.audio_history_enabled

hotword.previous_language

browser.clear_lso_data_enabled

browser.pepper_flash_settings_enabled

browser.disk_cache_dir

browser.disk_cache_size

browser.last_default_status

browser.media_cache_size

cros.system.releaseChannel

feedback.performance_tracing_enabled

background_contents.registered

browser.shown_autolaunch_infobar

auth.schemes

auth.disable_negotiate_cname_lookup

auth.enable_negotiate_port

auth.server_whitelist

auth.negotiate_delegate_whitelist

auth.gssapi_library_name

auth.allow_cross_origin_prompt

async_dns.enabled

custom_handlers.registered_protocol_handlers

custom_handlers.ignored_protocol_handlers

custom_handlers.policy.registered_protocol_handlers

custom_handlers.policy.ignored_protocol_handlers

custom_handlers.enabled

background_mode.enabled

hardware_acceleration_mode.enabled

policy.device_refresh_rate

message_center.showed_first_run_balloon

message_center.show_icon

message_center.was_forced_on_taskbar

browser.attempted_to_enable_autoupdate

media_galleries.gallery_id

media_galleries.remembered_galleries

media_galleries.last_scan_time

shelf_chrome_icon_index

gesture.max_separation_for_gesture_touches_in_pixels

gesture.semi_long_press_time_in_ms

gesture.tab_scrub_activation_delay_in_ms

gesture.fling_max_cancel_to_down_time_in_ms

gesture.fling_max_tap_gap_time_in_ms

overscroll.horizontal_threshold_complete

overscroll.vertical_threshold_complete

overscroll.minimum_threshold_start

overscroll.minimum_threshold_start_touchpad

overscroll.vertical_threshold_start

overscroll.horizontal_resist_threshold

overscroll.vertical_resist_threshold

ya.send_install

ya.last_welcome_page_version

ya.clids

ya.banerid

ya.update_failures

ya.update_last_failure

ya.welcome_page

ya.custom_cookies

ya.bar.ui

ya.bar.uuid

ya.bar.r1

ya.statistics.last_default_check_time

ya.statistics.enabled

ya.tab_finder_enabled_once

ya.crash_dumps_checkbox_was_set

ya.crash_dumps_checkbox_was_set_at_1_0_1084_5404

ya.disk.installer_etag

ya.vk.show_infobar

ya.vk.last_shown

ya.vk.clicks_left

ya.last_runned_version

ya.last_runned_partner_id

ya.education.enabled

ya.custo_education.enabled

ya.searchness.enabled

ya.all_sb_chunks_downloaded_time

ya.splitview.enabled

ya.splitview.visible

ya.sync.device.push_id

ya.sync.device.name

ya.block_flash

ya.extensions_to_replace

ya.mute_state

ya.background_animation.enabled

ya.background_animation.disable_on_low_battery

ya.notifications.extension_settings_migrated

ya.notifications.migrated_fb_token

ya.notifications.migrated_fb_token_expires_in

ya.notifications.migrated_vk_token

ya.notifications.migrated_vk_token_expires_in

ya.notifications.silent_mode_until

ya.notifications.silent_mode

ya.notifications.fb.enabled

ya.notifications.fb.show.comments

ya.notifications.fb.show.friend_requests

ya.notifications.fb.show.messages

ya.notifications.fb.view_content

ya.notifications.fb.num_invitations_shown

ya.notifications.fb.last_time_invitation_shown

ya.notifications.fb.share_accepted

ya.notifications.fb.last_share_propose_time

ya.notifications.vk.enabled

ya.notifications.vk.show.comments

ya.notifications.vk.show.friend_requests

ya.notifications.vk.show.messages

ya.notifications.vk.view_content

ya.notifications.vk.num_invitations_shown

ya.notifications.vk.last_time_invitation_shown

ya.notifications.vk.share_accepted

ya.notifications.vk.last_share_propose_time

ya.notifications.yamail.enabled

ya.notifications.yamail.view_content

show.comments

show.friend_requests

show.messages

omnibox-infobar-panel.enabled

omnibox-infobar-panel.disabled

searchness.disabled

ya.persist_state_updated

network_profile.warnings_left

network_profile.last_warning_time

ya.feedback.update_date

ya.smartback.dictionary_last_modified

torrents.open_mode

apps.app_launch_for_metro_restart

apps.app_launch_for_metro_restart_profile

apps.shortcuts_version

module_conflict.bubble_shown

settings.privacy.drm_salt

settings.privacy.drm_enabled

browser.allow_discard_tabs

browser.allow_discard_tabs_updated

profile.extensions.activity_log.num_consumers_active

proxy.quick_check_enabled

profile.browser_guest_enabled

profile.add_person_enabled

ya.show_newtab_search_arrow

ya.popup_block_enabled

ya.plugin_restricted_document_kinds

ya.custo_tab_activation_order_on_tab_close

ya.custo_ui_first_time_launch

easy_unlock.hardlock_state

password_bubble.timestamp

password_bubble.nopes

password_bubble.interactions

ya.tablo.snapshot_click_map

\uX

Dictionary keys must be quoted.

Unsupported encoding. JSON must be UTF-8.

user.js

PlatformFile.UnknownErrors.Windows

0123456789

Histogram: %s recorded %d samples

(flags = 0x%x)

(%d = %3.1f%%)

Line: %i, column: %i, %s

D:\BuildAgent\work\9d1bc32700498ce4\src\out\Release\crash_service.exe.pdb

SHFileOperationW

WINMM.dll

InternetCrackUrlW

HttpOpenRequestW

HttpAddRequestHeadersW

HttpSendRequestW

HttpQueryInfoW

WININET.dll

RegCreateKeyExW

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

GetWindowsDirectoryW

ConnectNamedPipe

DisconnectNamedPipe

CreateNamedPipeW

KERNEL32.dll

ole32.dll

USER32.dll

GetProcessHeap

GetCPInfo

OLEAUT32.dll

zcÁ

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>

2(2;2#3-3

0!0(010=0

< <&<,<0<5<<<

;!;<;[;};

;';-;:;|;

8"9(9,90949

<$=1=<>~>

7$8/858\8

4 4$4(4,4044484<4@4

2 2$2(2,20242

1 1<1@1`1

operation_log.txt

gcswf32.dll

pdf.dll

yapdf.dll

yadocviewer.dll

npmedia_plugin.dll

pepper/libppeffects.dll

Crash Reports

crash_service.exe

script.log

resources.pak

shell32.dll

browser.exe

metro_driver.dll

Reported Crashes.txt

testing_interface.dll

browser.dll

Origin Bound Certs

Certificate Revocation Lists

Custom Dictionary.txt

Login Data

Cached Theme.pak

Web Applications

pepflashplayer.dll

CHROME_METRO_NAV_SEARCH_REQUEST

CHROME_METRO_GET_CURRENT_TAB_INFO

CHROME_METRO_SETTINGS_COMMAND

\\.\pipe\YandexCrashServices

hXXp://crash-reports.browser.yandex.net/submit

crash_checkpoint.txt

uploads.log

*.dmp

%u.%s

reported

verifier.dll

dbghelp.dll

rpcrt4.dll

x-x-x-xx-xxxxxx

Breakpad/1.0 (Windows)

https

%sXX

mscoree.dll

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

USER32.DLL

portuguese-brazilian

{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}

{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}

Browse the web

Software\Microsoft\Windows\CurrentVersion\Uninstall\Chromium

Google Chrome App Launcher

ChromeAppList

tSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher

{8BA986DA-5100-405E-AA35-86F34A02ACBF}

Google Chrome Frame

Google\Chrome Frame

Chrome in a Frame.

Uninstall Chrome Frame

Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame

registering_chrome

uninstalling_chrome_frame

{5FAFC90A-D443-4E4F-B69B-DA1F8D553C6C}

d-d-%d

hXXp://browser.

%d.%d.%d

mSoftware\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser

YandexSSHTM

{45033924-ABD6-4063-AD60-71925CDE206E}

eyndxstp.exe

{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}

app_host.exe

browser_child.dll

npbrowser_frame.dll

browser_frame_helper.dll

browser_frame_helper.exe

browser_launcher.exe

new_browser.exe

old_browser.exe

delegate_execute.exe

nacl64.exe

setup.exe

InstallerSuccessLaunchCmdLine

3E40F524-16FA-440A-B919-B44AB355B174

-chrome

-chromeframe

service_update.exe

winrt_helper.dll

{8A69D345-D564-463C-AFF1-A69D9E530F96}

{430FD4D0-B729-4F61-AA34-91526481799D}

GoogleUpdateSetup.exe

CFEndTempOptOutCmd

CFOptInCmd

CFOptOutCmd

CFTempOptOutCmd

UninstallCmdLine

WebAccessible

.Chrome_MessagePumpWindow_%p

Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32

Software\Microsoft\Windows\CurrentVersion\Run

Ndebug.log

.\debug.log

kernel32.dll

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\crash_service.exe

browser.exe_3392:

.text

`.rdata

@.data

.rsrc

@.reloc

HtdHtHHHt.HH

j.Yf;

_tcPVj@

.PjRW

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\chrome_exe_main_win.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\client_util.cc

No valid Chrome version found

Failed to load Chrome DLL from

ChromeMain

RelaunchChromeBrowserWithNewCommandLineIfNeeded

Could not find exported function

allow-insecure-websocket-from-https-origin

disable-webgl

disable-web-security

enable-experimental-web-platform-features

enable-tcp-fastopen

enable-viewport

enable-viewport-meta

enable-vtune-support

enable-webgl-draft-extensions

enable-webgl-image-chromium

enable-web-midi

enable-webkit-find-restart

ignore-certificate-errors

remote-debugging-port

renderer-cmd-prefix

testing-fixed-http-port

testing-fixed-https-port

trace-upload-url

utility-cmd-prefix

zygote-cmd-prefix

disable-webrtc-hw-decoding

disable-webrtc-encryption

disable-webrtc-hw-encoding

enable-webrtc-hw-vp8-encoding

enable-webrtc-hw-h264-encoding

disable-webaudio

opera

1.3.21.115

%s-x-x

Chrome

0.0.0.0-devel

%s-%x

url-chunk

font_key_name

subresource_url

CHROME_MAIN_TIME

%x-%x

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\google_update_settings.cc

auto-launch-chrome

chrome

chrome-sxs

new-setup-exe

register-dev-chrome

register-url-protocol

rename-browser-exe

update-setup-exe

toast-results-key

Cannot initialize AppCommands from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_commands.cc

Failed to open key "

Skipping over key "

make-browser-default-after-import

silent-first-import

ya_permanent_state.brand_id

ya_permanent_state.base_host

ya_permanent_state.partner_id

ya_permanent_state.uninstall_survey_url

yandex.ru

iexplore.exe

googlechromeapphost

googlechromeframe

Cannot initialize an AppCommand from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_command.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\language_selector.cc

CHROME_BREAKPAD_PIPE_NAME

CHROME_BREAKPAD_EVENT_NAME

d:\buildagent\work\9d1bc32700498ce4\src\components\crash\app\breakpad_win.cc

NTDLL.DLL

kernel32.dll

d:\buildagent\work\9d1bc32700498ce4\src\sandbox\win\src\sandbox_policy_base.cc

CreateNamedPipeW

NtCreateKey

NtOpenKey

NtOpenKeyEx

AudioCaptureAllowedUrls

AutoSelectCertificateForUrls

ChromeFrameContentTypes

ChromeFrameRendererSettings

ChromeOsLockOnIdleSuspend

ChromeOsMultiProfileUserBehavior

ChromeOsReleaseChannel

ChromeOsReleaseChannelDelegated

CloudPrintProxyEnabled

CloudPrintSubmitEnabled

ContentPackManualBehaviorURLs

CookiesAllowedForUrls

CookiesBlockedForUrls

CookiesSessionOnlyForUrls

DefaultSearchProviderAlternateURLs

DefaultSearchProviderIconURL

DefaultSearchProviderImageURL

DefaultSearchProviderImageURLPostParams

DefaultSearchProviderInstantURL

DefaultSearchProviderInstantURLPostParams

DefaultSearchProviderKeyword

DefaultSearchProviderNewTabURL

DefaultSearchProviderSearchTermsReplacementKey

DefaultSearchProviderSearchURL

DefaultSearchProviderSearchURLPostParams

DefaultSearchProviderSuggestURL

DefaultSearchProviderSuggestURLPostParams

DeviceAllowRedeemChromeOsRegistrationOffers

DeviceLocalAccountAutoLoginBailoutEnabled

DeviceLocalAccountAutoLoginDelay

DeviceLocalAccountAutoLoginId

DeviceLoginScreenDefaultHighContrastEnabled

DeviceLoginScreenDefaultLargeCursorEnabled

DeviceLoginScreenDefaultScreenMagnifierType

DeviceLoginScreenDefaultSpokenFeedbackEnabled

DeviceLoginScreenDefaultVirtualKeyboardEnabled

DeviceLoginScreenPowerManagement

DeviceLoginScreenSaverId

DeviceLoginScreenSaverTimeout

DeviceMetricsReportingEnabled

DeviceStartUpUrls

DeviceUpdateHttpDownloadsEnabled

EnableAuthNegotiatePort

EnableDeprecatedWebPlatformFeatures

EnableOriginBoundCerts

EnableWebBasedSignin

EnterpriseWebStoreName

EnterpriseWebStoreURL

HideWebStoreIcon

HideWebStorePromo

ImagesAllowedForUrls

ImagesBlockedForUrls

ImportAutofillFormData

ImportBookmarks

ImportHistory

ImportHomepage

ImportSavedPasswords

ImportSearchEngine

JavaScriptAllowedForUrls

JavaScriptBlockedForUrls

KeyboardDefaultToFunctionKeys

MetricsReportingEnabled

NotificationsAllowedForUrls

NotificationsBlockedForUrls

PasswordManagerAllowShowPasswords

PasswordManagerEnabled

PluginsAllowedForUrls

PluginsBlockedForUrls

PopupsAllowedForUrls

PopupsBlockedForUrls

ProxyBypassList

ProxyPacUrl

RemoteAccessHostAllowClientPairing

RemoteAccessHostAllowGnubbyAuth

RemoteAccessHostAllowRelayedConnection

RemoteAccessHostDomain

RemoteAccessHostFirewallTraversal

RemoteAccessHostRequireCurtain

RemoteAccessHostRequireTwoFactor

RemoteAccessHostTalkGadgetPrefix

RemoteAccessHostUdpPortRange

RenderInChromeFrameList

ReportDeviceActivityTimes

ReportDeviceBootMode

ReportDeviceLocation

ReportDeviceNetworkInterfaces

ReportDeviceUsers

ReportDeviceVersionInfo

RestoreOnStartupURLs

ShowAppsShortcutInBookmarkBar

SuppressChromeFrameTurndownPrompt

TermsOfServiceURL

TouchVirtualKeyboardEnabled

URLBlacklist

URLWhitelist

VideoCaptureAllowedUrls

VirtualKeyboardEnabled

update_url

^update_url:

CHROME_VERSION

CHROME_SAFE_MODE

2676A9A2-D919-4FEE-9187-152100393AB2

ignore-urlfetcher-cert-requests

install-chrome-app

install-ephemeral-app-from-webstore

pack-extension-key

permission-request-api-url

promo-server-url

proxy-bypass-list

proxy-pac-url

remember-cert-error-decisions

spelling-service-feedback-url

try-chrome-again

variations-server-url

winhttp-proxy-resolver

ya-url-copy-safe-text

skip-first-import

plugins-metadata-server-url

windows8-search

allow-http-screen-capture

app-list-start-page-url

apps-checkout-url

apps-gallery-download-url

apps-gallery-url

apps-gallery-update-url

certificate-transparency-log

disable-extensions-http-throttling

disable-password-manager-reauthentication

disable-quic-port-selection

disable-save-password-bubble

disable-web-resources

enable-auth-negotiate-port

enable-npn-http

enable-quic-port-selection

enable-save-password-bubble

enable-sdch-over-https

enable-user-controlled-alternate-protocol-ports

enable-websocket-over-spdy

enable-website-settings-manager

explicitly-allowed-ports

extensions-not-webstore

help-url

40.0.2214.3645

CHROME_HEADLESS

CHROME_LOG_FILE

CHROME_METRO_CONNECTED

CHROMEOS_SESSION_LOG_DIR

CHROME_CRASHED

CHROME_RESTART

profile.ephemeral_mode

profile.icon_version

session.restore_on_startup

session.restore_on_startup_migrated

session.startup_urls_migration_time

session.restore_to_homepage_if_empty

profile.exited_cleanly

profile.exit_type

profile.managed.custodian_email

profile.managed.custodian_name

profile.managed.custodian_profile_image_url

profile.managed.custodian_profile_url

profile.managed.manual_hosts

profile.managed.manual_urls

profile.managed.second_custodian_email

profile.managed.second_custodian_name

profile.managed.second_custodian_profile_image_url

profile.managed.second_custodian_profile_url

profile.managed.shared_settings

session.startup_urls

session.urls_to_restore_on_startup

intl.app_locale

intl.charset_default

intl.accept_languages

intl.applied_brand_package_accept_languages

intl.static_encodings

webkit.webprefs.fonts.standard.Zyyy

webkit.webprefs.fonts.fixed.Zyyy

webkit.webprefs.fonts.serif.Zyyy

webkit.webprefs.fonts.sansserif.Zyyy

webkit.webprefs.fonts.cursive.Zyyy

webkit.webprefs.fonts.fantasy.Zyyy

webkit.webprefs.fonts.pictograph.Zyyy

webkit.webprefs.fonts.standard

webkit.webprefs.fonts.fixed

webkit.webprefs.fonts.serif

webkit.webprefs.fonts.sansserif

webkit.webprefs.fonts.cursive

webkit.webprefs.fonts.fantasy

webkit.webprefs.fonts.pictograph

webkit.webprefs.fonts.standard.Arab

webkit.webprefs.fonts.fixed.Arab

webkit.webprefs.fonts.serif.Arab

webkit.webprefs.fonts.sansserif.Arab

webkit.webprefs.fonts.standard.Cyrl

webkit.webprefs.fonts.fixed.Cyrl

webkit.webprefs.fonts.serif.Cyrl

webkit.webprefs.fonts.sansserif.Cyrl

webkit.webprefs.fonts.standard.Grek

webkit.webprefs.fonts.fixed.Grek

webkit.webprefs.fonts.serif.Grek

webkit.webprefs.fonts.sansserif.Grek

webkit.webprefs.fonts.standard.Jpan

webkit.webprefs.fonts.fixed.Jpan

webkit.webprefs.fonts.serif.Jpan

webkit.webprefs.fonts.sansserif.Jpan

webkit.webprefs.fonts.standard.Hang

webkit.webprefs.fonts.fixed.Hang

webkit.webprefs.fonts.serif.Hang

webkit.webprefs.fonts.sansserif.Hang

webkit.webprefs.fonts.cursive.Hang

webkit.webprefs.fonts.standard.Hans

webkit.webprefs.fonts.fixed.Hans

webkit.webprefs.fonts.serif.Hans

webkit.webprefs.fonts.sansserif.Hans

webkit.webprefs.fonts.standard.Hant

webkit.webprefs.fonts.fixed.Hant

webkit.webprefs.fonts.serif.Hant

webkit.webprefs.fonts.sansserif.Hant

webkit.webprefs.default_font_size

webkit.webprefs.default_fixed_font_size

webkit.webprefs.minimum_font_size

webkit.webprefs.minimum_logical_font_size

webkit.webprefs.javascript_enabled

webkit.webprefs.web_security_enabled

webkit.webprefs.javascript_can_open_windows_automatically

webkit.webprefs.loads_images_automatically

webkit.webprefs.plugins_enabled

webkit.webprefs.dom_paste_enabled

webkit.webprefs.shrinks_standalone_images_to_fit

webkit.webprefs.uses_universal_detector

webkit.webprefs.text_areas_are_resizable

webkit.webprefs.java_enabled

webkit.webprefs.tabs_to_links

webkit.webprefs.allow_displaying_insecure_content

webkit.webprefs.allow_running_insecure_content

safebrowsing.enabled

safebrowsing.extended_reporting_enabled

safebrowsing.proceed_anyway_disabled

safebrowsing.incident_report_sent

safebrowsing.incidents_sent

incognito.mode_availability

search.suggest_enabled

browser.confirm_to_quit

security.cookie_behavior

download.prompt_for_download

alternate_error_pages.enabled

dns_prefetching.startup_list

dns_prefetching.host_referral_list

spdy.disabled

net.http_server_properties

spdy.servers

spdy.alternate_protocol

protocol.disabled_schemes

instant_ui.zero_suggest_url_prefix

local_state.multiple_profile_prefs_version

dns_prefetching.enabled

net.network_prediction_options

hide_web_store_icon

browser.show_home_button

browser.show_ya_button

browser.show_tablo_on_click

browser.last_session_empty

browser.session_empty

browser.use_mouse_gestures

browser.enable_page_expiration

browser.do_not_count_page_expiration_infobar_closings

profile.recently_selected_encodings

browser.clear_data.browsing_history

browser.clear_data.download_history

browser.clear_data.cache

browser.clear_data.cookies

browser.clear_data.passwords

browser.clear_data.form_data

browser.clear_data.hosted_apps_data

browser.clear_data.content_licenses

browser.enable_spellchecking

browser.speechinput_censor_results

browser.speechinput_tray_notification_shown_contexts

browser.enabled_labs_experiments

ya.experiments_edited_by_user

ya.distrib_default_experiments

browser.enable_autospellcorrect

history.saving_disabled

ya.settings.text_wrap

history.deleting_enabled

settings.force_safesearch

settings.history_recorded

browser.clear_data.time_period

browser.last_clear_browsing_data_time

extensions.theme.pack

extensions.theme.id

extensions.theme.images

extensions.theme.colors

extensions.theme.tints

extensions.theme.properties

extensions.ui.developer_mode

extensions.commands

plugins.last_internal_directory

plugins.plugins_list

plugins.plugins_disabled

plugins.plugins_disabled_exceptions

plugins.plugins_enabled

plugins.migrated_to_pepper_flash

plugins.removed_old_component_pepper_flash_settings

plugins.show_details

plugins.allow_outdated

plugins.always_authorize

plugins.metadata

plugins.resource_cache_update

browser.check_default_browser

browser.default_browser_setting_enabled

browser.custom_chrome_frame

profile.content_settings.plugin_whitelist

profile.block_third_party_cookies

profile.clear_site_data_on_exit

partition.default_zoom_level

profile.default_zoom_level

partition.per_host_zoom_levels

profile.per_host_zoom_levels

autofill.data_model_default

autofill.pay_without_wallet

autofill.wallet_location_disclosure

autofill.save_data

autofill.wallet_shipping_same_as_billing

autofill.generated_card_bubble_times_shown

autofill.rac_dialog_defaults

breadcrumbs.enabled

push_to_call.enabled

push_to_call.wasenabled

ya.disk.want_install

context_translate.enabled

context_translate.translate_words

enable_deprecated_web_platform_features

import_last_source_browser

import_autofill_form_data

import_bookmarks

import_history

import_home_page

import_saved_passwords

import_cookies

import_last_session

import_extensions

import_speed_dial

import_other

ya.statistics.import_rollback

ya.import_new_source_type

ya.import_new_source_profile

import_search_engine

profile.avatar_index

profile.using_default_name

profile.name

profile.using_default_avatar

profile.using_gaia_avatar

profile.managed_user_id

profile.gaia_info_update_time

profile.gaia_info_picture_url

profile.avatar_bubble_tutorial_shown

printing.enabled

printing.print_preview_disabled

profile.managed.default_filtering_behavior

profile.managed_user_creation_allowed

profile.managed_users

profile.reset_prompt_memento

message_center.disabled_extension_ids

message_center.disabled_system_component_ids

message_center.welcome_notification_dismissed

message_center.welcome_notification_dismissed_local

message_center.welcome_notification_previously_popped_up

message_center.welcome_notification_expiration_timestamp

fullscreen.allowed

local_discovery.notifications_enabled

prefs.preference_reset_time

ya.prefetch.latest_update_list

ya.tablo_pins.instance_id

gcm.channel_enabled

gcm.push_messaging_registration_count

easy_unlock.allowed

easy_unlock.enabled

easy_unlock.pairing

easy_unlock.proximity_required

easy_unlock.show_tutorial

zerosuggest.cachedresults

signin.error_stats_update_time

ssl.rev_checking.enabled

ssl.rev_checking.required_for_local_anchors

ssl.version_min

ssl.version_max

ssl.version_fallback_min

ssl.cipher_suites.blacklist

ssl.ssl_record_splitting.disabled

ssl.ssl_blocking_bypassed

user_experience_metrics.reporting_enabled

profile.last_used

profile.last_active_profiles

profile.profiles_created

profile.info_cache

profile.created_by_version

profile.reset_prompt_mementos

user_experience_metrics.stability.page_load_count

user_experience_metrics.stability.renderer_crash_count

user_experience_metrics.stability.extension_renderer_crash_count

user_experience_metrics.stability.renderer_hang_count

user_experience_metrics.stability.child_process_crash_count

user_experience_metrics.stability.other_user_crash_count

user_experience_metrics.stability.kernel_crash_count

user_experience_metrics.stability.system_unclean_shutdowns

user_experience_metrics.stability.plugin_stats2

uninstall_metrics.page_load_count

uninstall_metrics.last_launch_time_sec

uninstall_metrics.last_observed_running_time_sec

browser.suppress_default_browser_prompt_for_version

browser.window_placement

browser.window_placement_popup

task_manager.window_placement

browser.app_window_placement

renderer.memory_cache.size

download.default_directory

download.default_directory_display_name

download.extensions_to_open

download.directory_upgrade

download.open_pdf_in_system_reader

savefile.default_directory

savefile.type

select_file_dialogs.allowed

filebrowser.tasks.default_by_mime_type

filebrowser.tasks.default_by_suffix

selectfile.last_directory

browser.hung_plugin_detect_freq

browser.plugin_message_response_timeout

spellcheck.dictionary

spellcheck.use_spelling_service

protocol_handler.excluded_schemes

safe_browsing.client_key

safe_browsing.wrapped_key

options_window.last_tab_index

certificate_manager_window.last_tab_index

browser.show_omnibox_share_buttons

browser.last_redirect_origin

shutdown.type

shutdown.num_processes

shutdown.num_processes_slow

restart.last.session.on.shutdown

was.restarted

relaunch.mode

extensions.disabled

plugins.disable_plugin_finder

ntp.app_page_names

ntp.collapsed_open_tabs

ntp.collapsed_foreign_sessions

ntp.collapsed_recently_closed_tabs

ntp.collapsed_snapshot_document

ntp.collapsed_sync_promo

ntp.date_resource_server

ntp.most_visited_blacklist

ntp.promo_desktop_session_found

ntp.promo_resource_cache_update

ntp.shown_bookmarks_folder

ntp.shown_page

ntp.tips_resource_server

ntp.webstore_enabled

devtools.adb_key

devtools.disabled

devtools.discover_usb_devices

devtools.edited_files

devtools.file_system_paths

devtools.open_docked

devtools.port_forwarding_enabled

devtools.port_forwarding_default_set

devtools.port_forwarding_config

google.services.password_hash

invalidation_service.use_gcm_channel

sync_promo.startup_count

sync_promo.user_skipped

sync_promo.show_on_first_run_allowed

sync_promo.show_ntp_bubble

browser.web_app.create_on_desktop

browser.web_app.create_in_apps_menu

browser.web_app.create_in_quick_launch_bar

geolocation.access_token

media.default_audio_capture_device

media.default_video_capture_Device

media.device_id_salt

remote_access.host_firewall_traversal

remote_access.host_require_two_factor

remote_access.host_domain

remote_access.host_talkgadget_prefix

remote_access.host_require_curtain

remote_access.host_allow_client_pairing

remote_access.host_allow_gnubby_auth

remote_access.host_allow_relayed_connection

remote_access.host_udp_port_range

printing.print_preview_sticky_settings

cloud_print.dialog_size.width

cloud_print.dialog_size.height

cloud_print.signin_dialog_size.width

cloud_print.signin_dialog_size.height

cloud_print.enabled

cloud_print.proxy_id

cloud_print.auth_token

cloud_print.xmpp_auth_token

cloud_print.email

cloud_print.print_system_settings

cloud_print.enable_job_poll

cloud_print.robot_refresh_token

cloud_print.robot_email

cloud_print.user_settings.connectNewPrinters

cloud_print.xmpp_ping_enabled

cloud_print.xmpp_ping_timeout_sec

cloud_print.user_settings.printers

cloud_print.submit_enabled

cloud_print.user_settings

net.max_connections_per_proxy

hardware.audio_capture_enabled

hardware.audio_capture_allowed_urls

hardware.video_capture_enabled

hardware.video_capture_allowed_urls

hotword.search_enabled_2

hotword.always_on_search_enabled

hotword.audio_logging_enabled

hotword.audio_history_enabled

hotword.previous_language

browser.clear_lso_data_enabled

browser.pepper_flash_settings_enabled

browser.disk_cache_dir

browser.disk_cache_size

browser.last_default_status

browser.media_cache_size

cros.system.releaseChannel

feedback.performance_tracing_enabled

background_contents.registered

browser.shown_autolaunch_infobar

auth.schemes

auth.disable_negotiate_cname_lookup

auth.enable_negotiate_port

auth.server_whitelist

auth.negotiate_delegate_whitelist

auth.gssapi_library_name

auth.allow_cross_origin_prompt

async_dns.enabled

custom_handlers.registered_protocol_handlers

custom_handlers.ignored_protocol_handlers

custom_handlers.policy.registered_protocol_handlers

custom_handlers.policy.ignored_protocol_handlers

custom_handlers.enabled

background_mode.enabled

hardware_acceleration_mode.enabled

policy.device_refresh_rate

message_center.showed_first_run_balloon

message_center.show_icon

message_center.was_forced_on_taskbar

browser.attempted_to_enable_autoupdate

media_galleries.gallery_id

media_galleries.remembered_galleries

media_galleries.last_scan_time

shelf_chrome_icon_index

gesture.max_separation_for_gesture_touches_in_pixels

gesture.semi_long_press_time_in_ms

gesture.tab_scrub_activation_delay_in_ms

gesture.fling_max_cancel_to_down_time_in_ms

gesture.fling_max_tap_gap_time_in_ms

overscroll.horizontal_threshold_complete

overscroll.vertical_threshold_complete

overscroll.minimum_threshold_start

overscroll.minimum_threshold_start_touchpad

overscroll.vertical_threshold_start

overscroll.horizontal_resist_threshold

overscroll.vertical_resist_threshold

ya.send_install

ya.last_welcome_page_version

ya.clids

ya.banerid

ya.update_failures

ya.update_last_failure

ya.welcome_page

ya.custom_cookies

ya.bar.ui

ya.bar.uuid

ya.bar.r1

ya.statistics.last_default_check_time

ya.statistics.enabled

ya.tab_finder_enabled_once

ya.crash_dumps_checkbox_was_set

ya.crash_dumps_checkbox_was_set_at_1_0_1084_5404

ya.disk.installer_etag

ya.vk.show_infobar

ya.vk.last_shown

ya.vk.clicks_left

ya.last_runned_version

ya.last_runned_partner_id

ya.education.enabled

ya.custo_education.enabled

ya.searchness.enabled

ya.all_sb_chunks_downloaded_time

ya.splitview.enabled

ya.splitview.visible

ya.sync.device.push_id

ya.sync.device.name

ya.block_flash

ya.extensions_to_replace

ya.mute_state

ya.background_animation.enabled

ya.background_animation.disable_on_low_battery

ya.notifications.extension_settings_migrated

ya.notifications.migrated_fb_token

ya.notifications.migrated_fb_token_expires_in

ya.notifications.migrated_vk_token

ya.notifications.migrated_vk_token_expires_in

ya.notifications.silent_mode_until

ya.notifications.silent_mode

ya.notifications.fb.enabled

ya.notifications.fb.show.comments

ya.notifications.fb.show.friend_requests

ya.notifications.fb.show.messages

ya.notifications.fb.view_content

ya.notifications.fb.num_invitations_shown

ya.notifications.fb.last_time_invitation_shown

ya.notifications.fb.share_accepted

ya.notifications.fb.last_share_propose_time

ya.notifications.vk.enabled

ya.notifications.vk.show.comments

ya.notifications.vk.show.friend_requests

ya.notifications.vk.show.messages

ya.notifications.vk.view_content

ya.notifications.vk.num_invitations_shown

ya.notifications.vk.last_time_invitation_shown

ya.notifications.vk.share_accepted

ya.notifications.vk.last_share_propose_time

ya.notifications.yamail.enabled

ya.notifications.yamail.view_content

show.comments

show.friend_requests

show.messages

omnibox-infobar-panel.enabled

omnibox-infobar-panel.disabled

searchness.disabled

ya.persist_state_updated

network_profile.warnings_left

network_profile.last_warning_time

ya.feedback.update_date

ya.smartback.dictionary_last_modified

torrents.open_mode

apps.app_launch_for_metro_restart

apps.app_launch_for_metro_restart_profile

apps.shortcuts_version

module_conflict.bubble_shown

settings.privacy.drm_salt

settings.privacy.drm_enabled

browser.allow_discard_tabs

browser.allow_discard_tabs_updated

profile.extensions.activity_log.num_consumers_active

proxy.quick_check_enabled

profile.browser_guest_enabled

profile.add_person_enabled

ya.show_newtab_search_arrow

ya.popup_block_enabled

ya.plugin_restricted_document_kinds

ya.custo_tab_activation_order_on_tab_close

ya.custo_ui_first_time_launch

easy_unlock.hardlock_state

password_bubble.timestamp

password_bubble.nopes

password_bubble.interactions

ya.tablo.snapshot_click_map

license_url

feedback.url

conf_policy_url

hXXp://legal.yandex.ru/browser_agreement/

hXXp://legal.yandex.ru/confidential/

SHELL32.dll

ole32.dll

OLEAUT32.dll

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

%s-%Iu

u\uX

Dictionary keys must be quoted.

Unsupported encoding. JSON must be UTF-8.

full-memory-crash-report

(0x%X)

Error (0x%X) while retrieving error. (0x%X)

(%d = %3.1f%%)

Histogram: %s recorded %d samples

(flags = 0x%x)

PlatformFile.UnknownErrors.Windows

user32.dll

0123456789

.syzygy

.thunks

Line: %i, column: %i, %s

D:\BuildAgent\work\9d1bc32700498ce4\src\out\Release\initialexe\browser.exe.pdb

browser.exe

ClearBreakpadPipeEnvironmentVariable

ClearCrashKeyValueImpl

SetCrashKeyValueImpl

SignalChromeElf

browser_elf.dll

WINMM.dll

VERSION.dll

SHLWAPI.dll

RegEnumKeyExW

RegQueryInfoKeyW

RegCreateKeyExW

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

GetAsyncKeyState

CloseWindowStation

CreateWindowStationW

SetProcessWindowStation

USER32.dll

GetProcessHeap

GetWindowsDirectoryW

CreateIoCompletionPort

GetProcessHandleCount

KERNEL32.dll

USERENV.dll

WTSAPI32.dll

GetCPInfo

SetNamedPipeHandleState

TransactNamedPipe

WaitNamedPipeW

zcÁ

.ccc]

.IDATx

.aU/@G

\]]]]_]^

.owO[

.RwuWee

o.yST

G.HIJ

]]][\^__^\]`

i.snh

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="Win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><dependency><dependentAssembly><assemblyIdentity type="win32" name="40.0.2214.3645" version="40.0.2214.3645" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>

0%1X2

0"0)040=0

9%:0:>:]:~:

5-5v5}5

4$4044484

1 1$1(1,10141

8,;0;4;8;<;

6(7,707\7

5$5(5,50545

2 2$2(2,2024282<2

1 1$1,1@1`1

7 7$7(7,707

registering_chrome

uninstalling_chrome_frame

eyndxstp.exe

{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}

app_host.exe

browser.dll

browser_child.dll

npbrowser_frame.dll

browser_frame_helper.dll

browser_frame_helper.exe

browser_launcher.exe

metro_driver.dll

new_browser.exe

old_browser.exe

delegate_execute.exe

nacl64.exe

setup.exe

InstallerSuccessLaunchCmdLine

YandexSSHTM

{45033924-ABD6-4063-AD60-71925CDE206E}

{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}

{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}

Browse the web

Software\Microsoft\Windows\CurrentVersion\Uninstall\Chromium

-chrome

-chromeframe

{8A69D345-D564-463C-AFF1-A69D9E530F96}

{430FD4D0-B729-4F61-AA34-91526481799D}

GoogleUpdateSetup.exe

CFEndTempOptOutCmd

CFOptInCmd

CFOptOutCmd

CFTempOptOutCmd

UninstallCmdLine

WebAccessible

3E40F524-16FA-440A-B919-B44AB355B174

service_update.exe

winrt_helper.dll

{5FAFC90A-D443-4E4F-B69B-DA1F8D553C6C}

d-d-%d

hXXp://browser.

%d.%d.%d

Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser

Google Chrome App Launcher

ChromeAppList

tSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher

{8BA986DA-5100-405E-AA35-86F34A02ACBF}

Google Chrome Frame

Google\Chrome Frame

Chrome in a Frame.

Uninstall Chrome Frame

Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame

\\.\pipe\GoogleCrashServices\

\\.\pipe\YandexCrashServices

error %u

ntdll.dll

chrome.exe

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_TEXT

HKEY_PERFORMANCE_NLSTEXT

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

pipe\

kernelbase.dll

eKey

gdi32.dll

xntdll.dll

wow_helper.exe"

shell32.dll

Reported Crashes.txt

testing_interface.dll

Origin Bound Certs

Certificate Revocation Lists

Custom Dictionary.txt

Login Data

Cached Theme.pak

Web Applications

pepflashplayer.dll

CHROME_METRO_NAV_SEARCH_REQUEST

CHROME_METRO_GET_CURRENT_TAB_INFO

CHROME_METRO_SETTINGS_COMMAND

gcswf32.dll

pdf.dll

yapdf.dll

yadocviewer.dll

npmedia_plugin.dll

pepper/libppeffects.dll

Crash Reports

crash_service.exe

script.log

resources.pak

${windows}

hunspecified-crash-key

%u.%s

reported

mscoree.dll

ADVAPI32.DLL

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

USER32.DLL

portuguese-brazilian

dbghelp.dll

rpcrt4.dll

crash_service.exe --max-reports=10

%s\%s.dmp

x-x-x-xx-xxxxxx

Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32

Software\Microsoft\Windows\CurrentVersion\Run

.Chrome_MessagePumpWindow_%p

Ndebug.log

.\debug.log

\StringFileInfo\xx\%ls

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Crash Reports\events\3392.crashed

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe

chrome_exe

40.0.2214.115

15.2.2214.3645

browser.exe_3500:

.text

`.rdata

@.data

.rsrc

@.reloc

HtdHtHHHt.HH

j.Yf;

_tcPVj@

.PjRW

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\chrome_exe_main_win.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\client_util.cc

No valid Chrome version found

Failed to load Chrome DLL from

ChromeMain

RelaunchChromeBrowserWithNewCommandLineIfNeeded

Could not find exported function

allow-insecure-websocket-from-https-origin

disable-webgl

disable-web-security

enable-experimental-web-platform-features

enable-tcp-fastopen

enable-viewport

enable-viewport-meta

enable-vtune-support

enable-webgl-draft-extensions

enable-webgl-image-chromium

enable-web-midi

enable-webkit-find-restart

ignore-certificate-errors

remote-debugging-port

renderer-cmd-prefix

testing-fixed-http-port

testing-fixed-https-port

trace-upload-url

utility-cmd-prefix

zygote-cmd-prefix

disable-webrtc-hw-decoding

disable-webrtc-encryption

disable-webrtc-hw-encoding

enable-webrtc-hw-vp8-encoding

enable-webrtc-hw-h264-encoding

disable-webaudio

opera

1.3.21.115

%s-x-x

Chrome

0.0.0.0-devel

%s-%x

url-chunk

font_key_name

subresource_url

CHROME_MAIN_TIME

%x-%x

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\google_update_settings.cc

auto-launch-chrome

chrome

chrome-sxs

new-setup-exe

register-dev-chrome

register-url-protocol

rename-browser-exe

update-setup-exe

toast-results-key

Cannot initialize AppCommands from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_commands.cc

Failed to open key "

Skipping over key "

make-browser-default-after-import

silent-first-import

ya_permanent_state.brand_id

ya_permanent_state.base_host

ya_permanent_state.partner_id

ya_permanent_state.uninstall_survey_url

yandex.ru

iexplore.exe

googlechromeapphost

googlechromeframe

Cannot initialize an AppCommand from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_command.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\language_selector.cc

CHROME_BREAKPAD_PIPE_NAME

CHROME_BREAKPAD_EVENT_NAME

d:\buildagent\work\9d1bc32700498ce4\src\components\crash\app\breakpad_win.cc

NTDLL.DLL

kernel32.dll

d:\buildagent\work\9d1bc32700498ce4\src\sandbox\win\src\sandbox_policy_base.cc

CreateNamedPipeW

NtCreateKey

NtOpenKey

NtOpenKeyEx

AudioCaptureAllowedUrls

AutoSelectCertificateForUrls

ChromeFrameContentTypes

ChromeFrameRendererSettings

ChromeOsLockOnIdleSuspend

ChromeOsMultiProfileUserBehavior

ChromeOsReleaseChannel

ChromeOsReleaseChannelDelegated

CloudPrintProxyEnabled

CloudPrintSubmitEnabled

ContentPackManualBehaviorURLs

CookiesAllowedForUrls

CookiesBlockedForUrls

CookiesSessionOnlyForUrls

DefaultSearchProviderAlternateURLs

DefaultSearchProviderIconURL

DefaultSearchProviderImageURL

DefaultSearchProviderImageURLPostParams

DefaultSearchProviderInstantURL

DefaultSearchProviderInstantURLPostParams

DefaultSearchProviderKeyword

DefaultSearchProviderNewTabURL

DefaultSearchProviderSearchTermsReplacementKey

DefaultSearchProviderSearchURL

DefaultSearchProviderSearchURLPostParams

DefaultSearchProviderSuggestURL

DefaultSearchProviderSuggestURLPostParams

DeviceAllowRedeemChromeOsRegistrationOffers

DeviceLocalAccountAutoLoginBailoutEnabled

DeviceLocalAccountAutoLoginDelay

DeviceLocalAccountAutoLoginId

DeviceLoginScreenDefaultHighContrastEnabled

DeviceLoginScreenDefaultLargeCursorEnabled

DeviceLoginScreenDefaultScreenMagnifierType

DeviceLoginScreenDefaultSpokenFeedbackEnabled

DeviceLoginScreenDefaultVirtualKeyboardEnabled

DeviceLoginScreenPowerManagement

DeviceLoginScreenSaverId

DeviceLoginScreenSaverTimeout

DeviceMetricsReportingEnabled

DeviceStartUpUrls

DeviceUpdateHttpDownloadsEnabled

EnableAuthNegotiatePort

EnableDeprecatedWebPlatformFeatures

EnableOriginBoundCerts

EnableWebBasedSignin

EnterpriseWebStoreName

EnterpriseWebStoreURL

HideWebStoreIcon

HideWebStorePromo

ImagesAllowedForUrls

ImagesBlockedForUrls

ImportAutofillFormData

ImportBookmarks

ImportHistory

ImportHomepage

ImportSavedPasswords

ImportSearchEngine

JavaScriptAllowedForUrls

JavaScriptBlockedForUrls

KeyboardDefaultToFunctionKeys

MetricsReportingEnabled

NotificationsAllowedForUrls

NotificationsBlockedForUrls

PasswordManagerAllowShowPasswords

PasswordManagerEnabled

PluginsAllowedForUrls

PluginsBlockedForUrls

PopupsAllowedForUrls

PopupsBlockedForUrls

ProxyBypassList

ProxyPacUrl

RemoteAccessHostAllowClientPairing

RemoteAccessHostAllowGnubbyAuth

RemoteAccessHostAllowRelayedConnection

RemoteAccessHostDomain

RemoteAccessHostFirewallTraversal

RemoteAccessHostRequireCurtain

RemoteAccessHostRequireTwoFactor

RemoteAccessHostTalkGadgetPrefix

RemoteAccessHostUdpPortRange

RenderInChromeFrameList

ReportDeviceActivityTimes

ReportDeviceBootMode

ReportDeviceLocation

ReportDeviceNetworkInterfaces

ReportDeviceUsers

ReportDeviceVersionInfo

RestoreOnStartupURLs

ShowAppsShortcutInBookmarkBar

SuppressChromeFrameTurndownPrompt

TermsOfServiceURL

TouchVirtualKeyboardEnabled

URLBlacklist

URLWhitelist

VideoCaptureAllowedUrls

VirtualKeyboardEnabled

update_url

^update_url:

CHROME_VERSION

CHROME_SAFE_MODE

2676A9A2-D919-4FEE-9187-152100393AB2

ignore-urlfetcher-cert-requests

install-chrome-app

install-ephemeral-app-from-webstore

pack-extension-key

permission-request-api-url

promo-server-url

proxy-bypass-list

proxy-pac-url

remember-cert-error-decisions

spelling-service-feedback-url

try-chrome-again

variations-server-url

winhttp-proxy-resolver

ya-url-copy-safe-text

skip-first-import

plugins-metadata-server-url

windows8-search

allow-http-screen-capture

app-list-start-page-url

apps-checkout-url

apps-gallery-download-url

apps-gallery-url

apps-gallery-update-url

certificate-transparency-log

disable-extensions-http-throttling

disable-password-manager-reauthentication

disable-quic-port-selection

disable-save-password-bubble

disable-web-resources

enable-auth-negotiate-port

enable-npn-http

enable-quic-port-selection

enable-save-password-bubble

enable-sdch-over-https

enable-user-controlled-alternate-protocol-ports

enable-websocket-over-spdy

enable-website-settings-manager

explicitly-allowed-ports

extensions-not-webstore

help-url

40.0.2214.3645

CHROME_HEADLESS

CHROME_LOG_FILE

CHROME_METRO_CONNECTED

CHROMEOS_SESSION_LOG_DIR

CHROME_CRASHED

CHROME_RESTART

profile.ephemeral_mode

profile.icon_version

session.restore_on_startup

session.restore_on_startup_migrated

session.startup_urls_migration_time

session.restore_to_homepage_if_empty

profile.exited_cleanly

profile.exit_type

profile.managed.custodian_email

profile.managed.custodian_name

profile.managed.custodian_profile_image_url

profile.managed.custodian_profile_url

profile.managed.manual_hosts

profile.managed.manual_urls

profile.managed.second_custodian_email

profile.managed.second_custodian_name

profile.managed.second_custodian_profile_image_url

profile.managed.second_custodian_profile_url

profile.managed.shared_settings

session.startup_urls

session.urls_to_restore_on_startup

intl.app_locale

intl.charset_default

intl.accept_languages

intl.applied_brand_package_accept_languages

intl.static_encodings

webkit.webprefs.fonts.standard.Zyyy

webkit.webprefs.fonts.fixed.Zyyy

webkit.webprefs.fonts.serif.Zyyy

webkit.webprefs.fonts.sansserif.Zyyy

webkit.webprefs.fonts.cursive.Zyyy

webkit.webprefs.fonts.fantasy.Zyyy

webkit.webprefs.fonts.pictograph.Zyyy

webkit.webprefs.fonts.standard

webkit.webprefs.fonts.fixed

webkit.webprefs.fonts.serif

webkit.webprefs.fonts.sansserif

webkit.webprefs.fonts.cursive

webkit.webprefs.fonts.fantasy

webkit.webprefs.fonts.pictograph

webkit.webprefs.fonts.standard.Arab

webkit.webprefs.fonts.fixed.Arab

webkit.webprefs.fonts.serif.Arab

webkit.webprefs.fonts.sansserif.Arab

webkit.webprefs.fonts.standard.Cyrl

webkit.webprefs.fonts.fixed.Cyrl

webkit.webprefs.fonts.serif.Cyrl

webkit.webprefs.fonts.sansserif.Cyrl

webkit.webprefs.fonts.standard.Grek

webkit.webprefs.fonts.fixed.Grek

webkit.webprefs.fonts.serif.Grek

webkit.webprefs.fonts.sansserif.Grek

webkit.webprefs.fonts.standard.Jpan

webkit.webprefs.fonts.fixed.Jpan

webkit.webprefs.fonts.serif.Jpan

webkit.webprefs.fonts.sansserif.Jpan

webkit.webprefs.fonts.standard.Hang

webkit.webprefs.fonts.fixed.Hang

webkit.webprefs.fonts.serif.Hang

webkit.webprefs.fonts.sansserif.Hang

webkit.webprefs.fonts.cursive.Hang

webkit.webprefs.fonts.standard.Hans

webkit.webprefs.fonts.fixed.Hans

webkit.webprefs.fonts.serif.Hans

webkit.webprefs.fonts.sansserif.Hans

webkit.webprefs.fonts.standard.Hant

webkit.webprefs.fonts.fixed.Hant

webkit.webprefs.fonts.serif.Hant

webkit.webprefs.fonts.sansserif.Hant

webkit.webprefs.default_font_size

webkit.webprefs.default_fixed_font_size

webkit.webprefs.minimum_font_size

webkit.webprefs.minimum_logical_font_size

webkit.webprefs.javascript_enabled

webkit.webprefs.web_security_enabled

webkit.webprefs.javascript_can_open_windows_automatically

webkit.webprefs.loads_images_automatically

webkit.webprefs.plugins_enabled

webkit.webprefs.dom_paste_enabled

webkit.webprefs.shrinks_standalone_images_to_fit

webkit.webprefs.uses_universal_detector

webkit.webprefs.text_areas_are_resizable

webkit.webprefs.java_enabled

webkit.webprefs.tabs_to_links

webkit.webprefs.allow_displaying_insecure_content

webkit.webprefs.allow_running_insecure_content

safebrowsing.enabled

safebrowsing.extended_reporting_enabled

safebrowsing.proceed_anyway_disabled

safebrowsing.incident_report_sent

safebrowsing.incidents_sent

incognito.mode_availability

search.suggest_enabled

browser.confirm_to_quit

security.cookie_behavior

download.prompt_for_download

alternate_error_pages.enabled

dns_prefetching.startup_list

dns_prefetching.host_referral_list

spdy.disabled

net.http_server_properties

spdy.servers

spdy.alternate_protocol

protocol.disabled_schemes

instant_ui.zero_suggest_url_prefix

local_state.multiple_profile_prefs_version

dns_prefetching.enabled

net.network_prediction_options

hide_web_store_icon

browser.show_home_button

browser.show_ya_button

browser.show_tablo_on_click

browser.last_session_empty

browser.session_empty

browser.use_mouse_gestures

browser.enable_page_expiration

browser.do_not_count_page_expiration_infobar_closings

profile.recently_selected_encodings

browser.clear_data.browsing_history

browser.clear_data.download_history

browser.clear_data.cache

browser.clear_data.cookies

browser.clear_data.passwords

browser.clear_data.form_data

browser.clear_data.hosted_apps_data

browser.clear_data.content_licenses

browser.enable_spellchecking

browser.speechinput_censor_results

browser.speechinput_tray_notification_shown_contexts

browser.enabled_labs_experiments

ya.experiments_edited_by_user

ya.distrib_default_experiments

browser.enable_autospellcorrect

history.saving_disabled

ya.settings.text_wrap

history.deleting_enabled

settings.force_safesearch

settings.history_recorded

browser.clear_data.time_period

browser.last_clear_browsing_data_time

extensions.theme.pack

extensions.theme.id

extensions.theme.images

extensions.theme.colors

extensions.theme.tints

extensions.theme.properties

extensions.ui.developer_mode

extensions.commands

plugins.last_internal_directory

plugins.plugins_list

plugins.plugins_disabled

plugins.plugins_disabled_exceptions

plugins.plugins_enabled

plugins.migrated_to_pepper_flash

plugins.removed_old_component_pepper_flash_settings

plugins.show_details

plugins.allow_outdated

plugins.always_authorize

plugins.metadata

plugins.resource_cache_update

browser.check_default_browser

browser.default_browser_setting_enabled

browser.custom_chrome_frame

profile.content_settings.plugin_whitelist

profile.block_third_party_cookies

profile.clear_site_data_on_exit

partition.default_zoom_level

profile.default_zoom_level

partition.per_host_zoom_levels

profile.per_host_zoom_levels

autofill.data_model_default

autofill.pay_without_wallet

autofill.wallet_location_disclosure

autofill.save_data

autofill.wallet_shipping_same_as_billing

autofill.generated_card_bubble_times_shown

autofill.rac_dialog_defaults

breadcrumbs.enabled

push_to_call.enabled

push_to_call.wasenabled

ya.disk.want_install

context_translate.enabled

context_translate.translate_words

enable_deprecated_web_platform_features

import_last_source_browser

import_autofill_form_data

import_bookmarks

import_history

import_home_page

import_saved_passwords

import_cookies

import_last_session

import_extensions

import_speed_dial

import_other

ya.statistics.import_rollback

ya.import_new_source_type

ya.import_new_source_profile

import_search_engine

profile.avatar_index

profile.using_default_name

profile.name

profile.using_default_avatar

profile.using_gaia_avatar

profile.managed_user_id

profile.gaia_info_update_time

profile.gaia_info_picture_url

profile.avatar_bubble_tutorial_shown

printing.enabled

printing.print_preview_disabled

profile.managed.default_filtering_behavior

profile.managed_user_creation_allowed

profile.managed_users

profile.reset_prompt_memento

message_center.disabled_extension_ids

message_center.disabled_system_component_ids

message_center.welcome_notification_dismissed

message_center.welcome_notification_dismissed_local

message_center.welcome_notification_previously_popped_up

message_center.welcome_notification_expiration_timestamp

fullscreen.allowed

local_discovery.notifications_enabled

prefs.preference_reset_time

ya.prefetch.latest_update_list

ya.tablo_pins.instance_id

gcm.channel_enabled

gcm.push_messaging_registration_count

easy_unlock.allowed

easy_unlock.enabled

easy_unlock.pairing

easy_unlock.proximity_required

easy_unlock.show_tutorial

zerosuggest.cachedresults

signin.error_stats_update_time

ssl.rev_checking.enabled

ssl.rev_checking.required_for_local_anchors

ssl.version_min

ssl.version_max

ssl.version_fallback_min

ssl.cipher_suites.blacklist

ssl.ssl_record_splitting.disabled

ssl.ssl_blocking_bypassed

user_experience_metrics.reporting_enabled

profile.last_used

profile.last_active_profiles

profile.profiles_created

profile.info_cache

profile.created_by_version

profile.reset_prompt_mementos

user_experience_metrics.stability.page_load_count

user_experience_metrics.stability.renderer_crash_count

user_experience_metrics.stability.extension_renderer_crash_count

user_experience_metrics.stability.renderer_hang_count

user_experience_metrics.stability.child_process_crash_count

user_experience_metrics.stability.other_user_crash_count

user_experience_metrics.stability.kernel_crash_count

user_experience_metrics.stability.system_unclean_shutdowns

user_experience_metrics.stability.plugin_stats2

uninstall_metrics.page_load_count

uninstall_metrics.last_launch_time_sec

uninstall_metrics.last_observed_running_time_sec

browser.suppress_default_browser_prompt_for_version

browser.window_placement

browser.window_placement_popup

task_manager.window_placement

browser.app_window_placement

renderer.memory_cache.size

download.default_directory

download.default_directory_display_name

download.extensions_to_open

download.directory_upgrade

download.open_pdf_in_system_reader

savefile.default_directory

savefile.type

select_file_dialogs.allowed

filebrowser.tasks.default_by_mime_type

filebrowser.tasks.default_by_suffix

selectfile.last_directory

browser.hung_plugin_detect_freq

browser.plugin_message_response_timeout

spellcheck.dictionary

spellcheck.use_spelling_service

protocol_handler.excluded_schemes

safe_browsing.client_key

safe_browsing.wrapped_key

options_window.last_tab_index

certificate_manager_window.last_tab_index

browser.show_omnibox_share_buttons

browser.last_redirect_origin

shutdown.type

shutdown.num_processes

shutdown.num_processes_slow

restart.last.session.on.shutdown

was.restarted

relaunch.mode

extensions.disabled

plugins.disable_plugin_finder

ntp.app_page_names

ntp.collapsed_open_tabs

ntp.collapsed_foreign_sessions

ntp.collapsed_recently_closed_tabs

ntp.collapsed_snapshot_document

ntp.collapsed_sync_promo

ntp.date_resource_server

ntp.most_visited_blacklist

ntp.promo_desktop_session_found

ntp.promo_resource_cache_update

ntp.shown_bookmarks_folder

ntp.shown_page

ntp.tips_resource_server

ntp.webstore_enabled

devtools.adb_key

devtools.disabled

devtools.discover_usb_devices

devtools.edited_files

devtools.file_system_paths

devtools.open_docked

devtools.port_forwarding_enabled

devtools.port_forwarding_default_set

devtools.port_forwarding_config

google.services.password_hash

invalidation_service.use_gcm_channel

sync_promo.startup_count

sync_promo.user_skipped

sync_promo.show_on_first_run_allowed

sync_promo.show_ntp_bubble

browser.web_app.create_on_desktop

browser.web_app.create_in_apps_menu

browser.web_app.create_in_quick_launch_bar

geolocation.access_token

media.default_audio_capture_device

media.default_video_capture_Device

media.device_id_salt

remote_access.host_firewall_traversal

remote_access.host_require_two_factor

remote_access.host_domain

remote_access.host_talkgadget_prefix

remote_access.host_require_curtain

remote_access.host_allow_client_pairing

remote_access.host_allow_gnubby_auth

remote_access.host_allow_relayed_connection

remote_access.host_udp_port_range

printing.print_preview_sticky_settings

cloud_print.dialog_size.width

cloud_print.dialog_size.height

cloud_print.signin_dialog_size.width

cloud_print.signin_dialog_size.height

cloud_print.enabled

cloud_print.proxy_id

cloud_print.auth_token

cloud_print.xmpp_auth_token

cloud_print.email

cloud_print.print_system_settings

cloud_print.enable_job_poll

cloud_print.robot_refresh_token

cloud_print.robot_email

cloud_print.user_settings.connectNewPrinters

cloud_print.xmpp_ping_enabled

cloud_print.xmpp_ping_timeout_sec

cloud_print.user_settings.printers

cloud_print.submit_enabled

cloud_print.user_settings

net.max_connections_per_proxy

hardware.audio_capture_enabled

hardware.audio_capture_allowed_urls

hardware.video_capture_enabled

hardware.video_capture_allowed_urls

hotword.search_enabled_2

hotword.always_on_search_enabled

hotword.audio_logging_enabled

hotword.audio_history_enabled

hotword.previous_language

browser.clear_lso_data_enabled

browser.pepper_flash_settings_enabled

browser.disk_cache_dir

browser.disk_cache_size

browser.last_default_status

browser.media_cache_size

cros.system.releaseChannel

feedback.performance_tracing_enabled

background_contents.registered

browser.shown_autolaunch_infobar

auth.schemes

auth.disable_negotiate_cname_lookup

auth.enable_negotiate_port

auth.server_whitelist

auth.negotiate_delegate_whitelist

auth.gssapi_library_name

auth.allow_cross_origin_prompt

async_dns.enabled

custom_handlers.registered_protocol_handlers

custom_handlers.ignored_protocol_handlers

custom_handlers.policy.registered_protocol_handlers

custom_handlers.policy.ignored_protocol_handlers

custom_handlers.enabled

background_mode.enabled

hardware_acceleration_mode.enabled

policy.device_refresh_rate

message_center.showed_first_run_balloon

message_center.show_icon

message_center.was_forced_on_taskbar

browser.attempted_to_enable_autoupdate

media_galleries.gallery_id

media_galleries.remembered_galleries

media_galleries.last_scan_time

shelf_chrome_icon_index

gesture.max_separation_for_gesture_touches_in_pixels

gesture.semi_long_press_time_in_ms

gesture.tab_scrub_activation_delay_in_ms

gesture.fling_max_cancel_to_down_time_in_ms

gesture.fling_max_tap_gap_time_in_ms

overscroll.horizontal_threshold_complete

overscroll.vertical_threshold_complete

overscroll.minimum_threshold_start

overscroll.minimum_threshold_start_touchpad

overscroll.vertical_threshold_start

overscroll.horizontal_resist_threshold

overscroll.vertical_resist_threshold

ya.send_install

ya.last_welcome_page_version

ya.clids

ya.banerid

ya.update_failures

ya.update_last_failure

ya.welcome_page

ya.custom_cookies

ya.bar.ui

ya.bar.uuid

ya.bar.r1

ya.statistics.last_default_check_time

ya.statistics.enabled

ya.tab_finder_enabled_once

ya.crash_dumps_checkbox_was_set

ya.crash_dumps_checkbox_was_set_at_1_0_1084_5404

ya.disk.installer_etag

ya.vk.show_infobar

ya.vk.last_shown

ya.vk.clicks_left

ya.last_runned_version

ya.last_runned_partner_id

ya.education.enabled

ya.custo_education.enabled

ya.searchness.enabled

ya.all_sb_chunks_downloaded_time

ya.splitview.enabled

ya.splitview.visible

ya.sync.device.push_id

ya.sync.device.name

ya.block_flash

ya.extensions_to_replace

ya.mute_state

ya.background_animation.enabled

ya.background_animation.disable_on_low_battery

ya.notifications.extension_settings_migrated

ya.notifications.migrated_fb_token

ya.notifications.migrated_fb_token_expires_in

ya.notifications.migrated_vk_token

ya.notifications.migrated_vk_token_expires_in

ya.notifications.silent_mode_until

ya.notifications.silent_mode

ya.notifications.fb.enabled

ya.notifications.fb.show.comments

ya.notifications.fb.show.friend_requests

ya.notifications.fb.show.messages

ya.notifications.fb.view_content

ya.notifications.fb.num_invitations_shown

ya.notifications.fb.last_time_invitation_shown

ya.notifications.fb.share_accepted

ya.notifications.fb.last_share_propose_time

ya.notifications.vk.enabled

ya.notifications.vk.show.comments

ya.notifications.vk.show.friend_requests

ya.notifications.vk.show.messages

ya.notifications.vk.view_content

ya.notifications.vk.num_invitations_shown

ya.notifications.vk.last_time_invitation_shown

ya.notifications.vk.share_accepted

ya.notifications.vk.last_share_propose_time

ya.notifications.yamail.enabled

ya.notifications.yamail.view_content

show.comments

show.friend_requests

show.messages

omnibox-infobar-panel.enabled

omnibox-infobar-panel.disabled

searchness.disabled

ya.persist_state_updated

network_profile.warnings_left

network_profile.last_warning_time

ya.feedback.update_date

ya.smartback.dictionary_last_modified

torrents.open_mode

apps.app_launch_for_metro_restart

apps.app_launch_for_metro_restart_profile

apps.shortcuts_version

module_conflict.bubble_shown

settings.privacy.drm_salt

settings.privacy.drm_enabled

browser.allow_discard_tabs

browser.allow_discard_tabs_updated

profile.extensions.activity_log.num_consumers_active

proxy.quick_check_enabled

profile.browser_guest_enabled

profile.add_person_enabled

ya.show_newtab_search_arrow

ya.popup_block_enabled

ya.plugin_restricted_document_kinds

ya.custo_tab_activation_order_on_tab_close

ya.custo_ui_first_time_launch

easy_unlock.hardlock_state

password_bubble.timestamp

password_bubble.nopes

password_bubble.interactions

ya.tablo.snapshot_click_map

license_url

feedback.url

conf_policy_url

hXXp://legal.yandex.ru/browser_agreement/

hXXp://legal.yandex.ru/confidential/

SHELL32.dll

ole32.dll

OLEAUT32.dll

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

%s-%Iu

u\uX

Dictionary keys must be quoted.

Unsupported encoding. JSON must be UTF-8.

full-memory-crash-report

(0x%X)

Error (0x%X) while retrieving error. (0x%X)

(%d = %3.1f%%)

Histogram: %s recorded %d samples

(flags = 0x%x)

PlatformFile.UnknownErrors.Windows

user32.dll

0123456789

.syzygy

.thunks

Line: %i, column: %i, %s

D:\BuildAgent\work\9d1bc32700498ce4\src\out\Release\initialexe\browser.exe.pdb

browser.exe

ClearBreakpadPipeEnvironmentVariable

ClearCrashKeyValueImpl

SetCrashKeyValueImpl

SignalChromeElf

browser_elf.dll

WINMM.dll

VERSION.dll

SHLWAPI.dll

RegEnumKeyExW

RegQueryInfoKeyW

RegCreateKeyExW

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

GetAsyncKeyState

CloseWindowStation

CreateWindowStationW

SetProcessWindowStation

USER32.dll

GetProcessHeap

GetWindowsDirectoryW

CreateIoCompletionPort

GetProcessHandleCount

KERNEL32.dll

USERENV.dll

WTSAPI32.dll

GetCPInfo

SetNamedPipeHandleState

TransactNamedPipe

WaitNamedPipeW

zcÁ

.ccc]

.IDATx

.aU/@G

\]]]]_]^

.owO[

.RwuWee

o.yST

G.HIJ

]]][\^__^\]`

i.snh

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="Win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><dependency><dependentAssembly><assemblyIdentity type="win32" name="40.0.2214.3645" version="40.0.2214.3645" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>

0%1X2

0"0)040=0

9%:0:>:]:~:

5-5v5}5

4$4044484

1 1$1(1,10141

8,;0;4;8;<;

6(7,707\7

5$5(5,50545

2 2$2(2,2024282<2

1 1$1,1@1`1

7 7$7(7,707

registering_chrome

uninstalling_chrome_frame

eyndxstp.exe

{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}

app_host.exe

browser.dll

browser_child.dll

npbrowser_frame.dll

browser_frame_helper.dll

browser_frame_helper.exe

browser_launcher.exe

metro_driver.dll

new_browser.exe

old_browser.exe

delegate_execute.exe

nacl64.exe

setup.exe

InstallerSuccessLaunchCmdLine

YandexSSHTM

{45033924-ABD6-4063-AD60-71925CDE206E}

{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}

{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}

Browse the web

Software\Microsoft\Windows\CurrentVersion\Uninstall\Chromium

-chrome

-chromeframe

{8A69D345-D564-463C-AFF1-A69D9E530F96}

{430FD4D0-B729-4F61-AA34-91526481799D}

GoogleUpdateSetup.exe

CFEndTempOptOutCmd

CFOptInCmd

CFOptOutCmd

CFTempOptOutCmd

UninstallCmdLine

WebAccessible

3E40F524-16FA-440A-B919-B44AB355B174

service_update.exe

winrt_helper.dll

{5FAFC90A-D443-4E4F-B69B-DA1F8D553C6C}

d-d-%d

hXXp://browser.

%d.%d.%d

Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser

Google Chrome App Launcher

ChromeAppList

tSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher

{8BA986DA-5100-405E-AA35-86F34A02ACBF}

Google Chrome Frame

Google\Chrome Frame

Chrome in a Frame.

Uninstall Chrome Frame

Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame

\\.\pipe\GoogleCrashServices\

\\.\pipe\YandexCrashServices

error %u

ntdll.dll

chrome.exe

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_TEXT

HKEY_PERFORMANCE_NLSTEXT

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

pipe\

kernelbase.dll

eKey

gdi32.dll

xntdll.dll

wow_helper.exe"

shell32.dll

Reported Crashes.txt

testing_interface.dll

Origin Bound Certs

Certificate Revocation Lists

Custom Dictionary.txt

Login Data

Cached Theme.pak

Web Applications

pepflashplayer.dll

CHROME_METRO_NAV_SEARCH_REQUEST

CHROME_METRO_GET_CURRENT_TAB_INFO

CHROME_METRO_SETTINGS_COMMAND

gcswf32.dll

pdf.dll

yapdf.dll

yadocviewer.dll

npmedia_plugin.dll

pepper/libppeffects.dll

Crash Reports

crash_service.exe

script.log

resources.pak

${windows}

hunspecified-crash-key

%u.%s

reported

mscoree.dll

ADVAPI32.DLL

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

USER32.DLL

portuguese-brazilian

dbghelp.dll

rpcrt4.dll

crash_service.exe --max-reports=10

%s\%s.dmp

x-x-x-xx-xxxxxx

Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32

Software\Microsoft\Windows\CurrentVersion\Run

.Chrome_MessagePumpWindow_%p

Ndebug.log

.\debug.log

\StringFileInfo\xx\%ls

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Crash Reports\events\3500.crashed

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe

chrome_exe

40.0.2214.115

15.2.2214.3645

browser.exe_3500_rwx_3D00A000_00078000:

#.md{$

browser.exe_3692:

.text

`.rdata

@.data

.rsrc

@.reloc

HtdHtHHHt.HH

j.Yf;

_tcPVj@

.PjRW

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\chrome_exe_main_win.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\client_util.cc

No valid Chrome version found

Failed to load Chrome DLL from

ChromeMain

RelaunchChromeBrowserWithNewCommandLineIfNeeded

Could not find exported function

allow-insecure-websocket-from-https-origin

disable-webgl

disable-web-security

enable-experimental-web-platform-features

enable-tcp-fastopen

enable-viewport

enable-viewport-meta

enable-vtune-support

enable-webgl-draft-extensions

enable-webgl-image-chromium

enable-web-midi

enable-webkit-find-restart

ignore-certificate-errors

remote-debugging-port

renderer-cmd-prefix

testing-fixed-http-port

testing-fixed-https-port

trace-upload-url

utility-cmd-prefix

zygote-cmd-prefix

disable-webrtc-hw-decoding

disable-webrtc-encryption

disable-webrtc-hw-encoding

enable-webrtc-hw-vp8-encoding

enable-webrtc-hw-h264-encoding

disable-webaudio

opera

1.3.21.115

%s-x-x

Chrome

0.0.0.0-devel

%s-%x

url-chunk

font_key_name

subresource_url

CHROME_MAIN_TIME

%x-%x

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\google_update_settings.cc

auto-launch-chrome

chrome

chrome-sxs

new-setup-exe

register-dev-chrome

register-url-protocol

rename-browser-exe

update-setup-exe

toast-results-key

Cannot initialize AppCommands from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_commands.cc

Failed to open key "

Skipping over key "

make-browser-default-after-import

silent-first-import

ya_permanent_state.brand_id

ya_permanent_state.base_host

ya_permanent_state.partner_id

ya_permanent_state.uninstall_survey_url

yandex.ru

iexplore.exe

googlechromeapphost

googlechromeframe

Cannot initialize an AppCommand from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_command.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\language_selector.cc

CHROME_BREAKPAD_PIPE_NAME

CHROME_BREAKPAD_EVENT_NAME

d:\buildagent\work\9d1bc32700498ce4\src\components\crash\app\breakpad_win.cc

NTDLL.DLL

kernel32.dll

d:\buildagent\work\9d1bc32700498ce4\src\sandbox\win\src\sandbox_policy_base.cc

CreateNamedPipeW

NtCreateKey

NtOpenKey

NtOpenKeyEx

AudioCaptureAllowedUrls

AutoSelectCertificateForUrls

ChromeFrameContentTypes

ChromeFrameRendererSettings

ChromeOsLockOnIdleSuspend

ChromeOsMultiProfileUserBehavior

ChromeOsReleaseChannel

ChromeOsReleaseChannelDelegated

CloudPrintProxyEnabled

CloudPrintSubmitEnabled

ContentPackManualBehaviorURLs

CookiesAllowedForUrls

CookiesBlockedForUrls

CookiesSessionOnlyForUrls

DefaultSearchProviderAlternateURLs

DefaultSearchProviderIconURL

DefaultSearchProviderImageURL

DefaultSearchProviderImageURLPostParams

DefaultSearchProviderInstantURL

DefaultSearchProviderInstantURLPostParams

DefaultSearchProviderKeyword

DefaultSearchProviderNewTabURL

DefaultSearchProviderSearchTermsReplacementKey

DefaultSearchProviderSearchURL

DefaultSearchProviderSearchURLPostParams

DefaultSearchProviderSuggestURL

DefaultSearchProviderSuggestURLPostParams

DeviceAllowRedeemChromeOsRegistrationOffers

DeviceLocalAccountAutoLoginBailoutEnabled

DeviceLocalAccountAutoLoginDelay

DeviceLocalAccountAutoLoginId

DeviceLoginScreenDefaultHighContrastEnabled

DeviceLoginScreenDefaultLargeCursorEnabled

DeviceLoginScreenDefaultScreenMagnifierType

DeviceLoginScreenDefaultSpokenFeedbackEnabled

DeviceLoginScreenDefaultVirtualKeyboardEnabled

DeviceLoginScreenPowerManagement

DeviceLoginScreenSaverId

DeviceLoginScreenSaverTimeout

DeviceMetricsReportingEnabled

DeviceStartUpUrls

DeviceUpdateHttpDownloadsEnabled

EnableAuthNegotiatePort

EnableDeprecatedWebPlatformFeatures

EnableOriginBoundCerts

EnableWebBasedSignin

EnterpriseWebStoreName

EnterpriseWebStoreURL

HideWebStoreIcon

HideWebStorePromo

ImagesAllowedForUrls

ImagesBlockedForUrls

ImportAutofillFormData

ImportBookmarks

ImportHistory

ImportHomepage

ImportSavedPasswords

ImportSearchEngine

JavaScriptAllowedForUrls

JavaScriptBlockedForUrls

KeyboardDefaultToFunctionKeys

MetricsReportingEnabled

NotificationsAllowedForUrls

NotificationsBlockedForUrls

PasswordManagerAllowShowPasswords

PasswordManagerEnabled

PluginsAllowedForUrls

PluginsBlockedForUrls

PopupsAllowedForUrls

PopupsBlockedForUrls

ProxyBypassList

ProxyPacUrl

RemoteAccessHostAllowClientPairing

RemoteAccessHostAllowGnubbyAuth

RemoteAccessHostAllowRelayedConnection

RemoteAccessHostDomain

RemoteAccessHostFirewallTraversal

RemoteAccessHostRequireCurtain

RemoteAccessHostRequireTwoFactor

RemoteAccessHostTalkGadgetPrefix

RemoteAccessHostUdpPortRange

RenderInChromeFrameList

ReportDeviceActivityTimes

ReportDeviceBootMode

ReportDeviceLocation

ReportDeviceNetworkInterfaces

ReportDeviceUsers

ReportDeviceVersionInfo

RestoreOnStartupURLs

ShowAppsShortcutInBookmarkBar

SuppressChromeFrameTurndownPrompt

TermsOfServiceURL

TouchVirtualKeyboardEnabled

URLBlacklist

URLWhitelist

VideoCaptureAllowedUrls

VirtualKeyboardEnabled

update_url

^update_url:

CHROME_VERSION

CHROME_SAFE_MODE

2676A9A2-D919-4FEE-9187-152100393AB2

ignore-urlfetcher-cert-requests

install-chrome-app

install-ephemeral-app-from-webstore

pack-extension-key

permission-request-api-url

promo-server-url

proxy-bypass-list

proxy-pac-url

remember-cert-error-decisions

spelling-service-feedback-url

try-chrome-again

variations-server-url

winhttp-proxy-resolver

ya-url-copy-safe-text

skip-first-import

plugins-metadata-server-url

windows8-search

allow-http-screen-capture

app-list-start-page-url

apps-checkout-url

apps-gallery-download-url

apps-gallery-url

apps-gallery-update-url

certificate-transparency-log

disable-extensions-http-throttling

disable-password-manager-reauthentication

disable-quic-port-selection

disable-save-password-bubble

disable-web-resources

enable-auth-negotiate-port

enable-npn-http

enable-quic-port-selection

enable-save-password-bubble

enable-sdch-over-https

enable-user-controlled-alternate-protocol-ports

enable-websocket-over-spdy

enable-website-settings-manager

explicitly-allowed-ports

extensions-not-webstore

help-url

40.0.2214.3645

CHROME_HEADLESS

CHROME_LOG_FILE

CHROME_METRO_CONNECTED

CHROMEOS_SESSION_LOG_DIR

CHROME_CRASHED

CHROME_RESTART

profile.ephemeral_mode

profile.icon_version

session.restore_on_startup

session.restore_on_startup_migrated

session.startup_urls_migration_time

session.restore_to_homepage_if_empty

profile.exited_cleanly

profile.exit_type

profile.managed.custodian_email

profile.managed.custodian_name

profile.managed.custodian_profile_image_url

profile.managed.custodian_profile_url

profile.managed.manual_hosts

profile.managed.manual_urls

profile.managed.second_custodian_email

profile.managed.second_custodian_name

profile.managed.second_custodian_profile_image_url

profile.managed.second_custodian_profile_url

profile.managed.shared_settings

session.startup_urls

session.urls_to_restore_on_startup

intl.app_locale

intl.charset_default

intl.accept_languages

intl.applied_brand_package_accept_languages

intl.static_encodings

webkit.webprefs.fonts.standard.Zyyy

webkit.webprefs.fonts.fixed.Zyyy

webkit.webprefs.fonts.serif.Zyyy

webkit.webprefs.fonts.sansserif.Zyyy

webkit.webprefs.fonts.cursive.Zyyy

webkit.webprefs.fonts.fantasy.Zyyy

webkit.webprefs.fonts.pictograph.Zyyy

webkit.webprefs.fonts.standard

webkit.webprefs.fonts.fixed

webkit.webprefs.fonts.serif

webkit.webprefs.fonts.sansserif

webkit.webprefs.fonts.cursive

webkit.webprefs.fonts.fantasy

webkit.webprefs.fonts.pictograph

webkit.webprefs.fonts.standard.Arab

webkit.webprefs.fonts.fixed.Arab

webkit.webprefs.fonts.serif.Arab

webkit.webprefs.fonts.sansserif.Arab

webkit.webprefs.fonts.standard.Cyrl

webkit.webprefs.fonts.fixed.Cyrl

webkit.webprefs.fonts.serif.Cyrl

webkit.webprefs.fonts.sansserif.Cyrl

webkit.webprefs.fonts.standard.Grek

webkit.webprefs.fonts.fixed.Grek

webkit.webprefs.fonts.serif.Grek

webkit.webprefs.fonts.sansserif.Grek

webkit.webprefs.fonts.standard.Jpan

webkit.webprefs.fonts.fixed.Jpan

webkit.webprefs.fonts.serif.Jpan

webkit.webprefs.fonts.sansserif.Jpan

webkit.webprefs.fonts.standard.Hang

webkit.webprefs.fonts.fixed.Hang

webkit.webprefs.fonts.serif.Hang

webkit.webprefs.fonts.sansserif.Hang

webkit.webprefs.fonts.cursive.Hang

webkit.webprefs.fonts.standard.Hans

webkit.webprefs.fonts.fixed.Hans

webkit.webprefs.fonts.serif.Hans

webkit.webprefs.fonts.sansserif.Hans

webkit.webprefs.fonts.standard.Hant

webkit.webprefs.fonts.fixed.Hant

webkit.webprefs.fonts.serif.Hant

webkit.webprefs.fonts.sansserif.Hant

webkit.webprefs.default_font_size

webkit.webprefs.default_fixed_font_size

webkit.webprefs.minimum_font_size

webkit.webprefs.minimum_logical_font_size

webkit.webprefs.javascript_enabled

webkit.webprefs.web_security_enabled

webkit.webprefs.javascript_can_open_windows_automatically

webkit.webprefs.loads_images_automatically

webkit.webprefs.plugins_enabled

webkit.webprefs.dom_paste_enabled

webkit.webprefs.shrinks_standalone_images_to_fit

webkit.webprefs.uses_universal_detector

webkit.webprefs.text_areas_are_resizable

webkit.webprefs.java_enabled

webkit.webprefs.tabs_to_links

webkit.webprefs.allow_displaying_insecure_content

webkit.webprefs.allow_running_insecure_content

safebrowsing.enabled

safebrowsing.extended_reporting_enabled

safebrowsing.proceed_anyway_disabled

safebrowsing.incident_report_sent

safebrowsing.incidents_sent

incognito.mode_availability

search.suggest_enabled

browser.confirm_to_quit

security.cookie_behavior

download.prompt_for_download

alternate_error_pages.enabled

dns_prefetching.startup_list

dns_prefetching.host_referral_list

spdy.disabled

net.http_server_properties

spdy.servers

spdy.alternate_protocol

protocol.disabled_schemes

instant_ui.zero_suggest_url_prefix

local_state.multiple_profile_prefs_version

dns_prefetching.enabled

net.network_prediction_options

hide_web_store_icon

browser.show_home_button

browser.show_ya_button

browser.show_tablo_on_click

browser.last_session_empty

browser.session_empty

browser.use_mouse_gestures

browser.enable_page_expiration

browser.do_not_count_page_expiration_infobar_closings

profile.recently_selected_encodings

browser.clear_data.browsing_history

browser.clear_data.download_history

browser.clear_data.cache

browser.clear_data.cookies

browser.clear_data.passwords

browser.clear_data.form_data

browser.clear_data.hosted_apps_data

browser.clear_data.content_licenses

browser.enable_spellchecking

browser.speechinput_censor_results

browser.speechinput_tray_notification_shown_contexts

browser.enabled_labs_experiments

ya.experiments_edited_by_user

ya.distrib_default_experiments

browser.enable_autospellcorrect

history.saving_disabled

ya.settings.text_wrap

history.deleting_enabled

settings.force_safesearch

settings.history_recorded

browser.clear_data.time_period

browser.last_clear_browsing_data_time

extensions.theme.pack

extensions.theme.id

extensions.theme.images

extensions.theme.colors

extensions.theme.tints

extensions.theme.properties

extensions.ui.developer_mode

extensions.commands

plugins.last_internal_directory

plugins.plugins_list

plugins.plugins_disabled

plugins.plugins_disabled_exceptions

plugins.plugins_enabled

plugins.migrated_to_pepper_flash

plugins.removed_old_component_pepper_flash_settings

plugins.show_details

plugins.allow_outdated

plugins.always_authorize

plugins.metadata

plugins.resource_cache_update

browser.check_default_browser

browser.default_browser_setting_enabled

browser.custom_chrome_frame

profile.content_settings.plugin_whitelist

profile.block_third_party_cookies

profile.clear_site_data_on_exit

partition.default_zoom_level

profile.default_zoom_level

partition.per_host_zoom_levels

profile.per_host_zoom_levels

autofill.data_model_default

autofill.pay_without_wallet

autofill.wallet_location_disclosure

autofill.save_data

autofill.wallet_shipping_same_as_billing

autofill.generated_card_bubble_times_shown

autofill.rac_dialog_defaults

breadcrumbs.enabled

push_to_call.enabled

push_to_call.wasenabled

ya.disk.want_install

context_translate.enabled

context_translate.translate_words

enable_deprecated_web_platform_features

import_last_source_browser

import_autofill_form_data

import_bookmarks

import_history

import_home_page

import_saved_passwords

import_cookies

import_last_session

import_extensions

import_speed_dial

import_other

ya.statistics.import_rollback

ya.import_new_source_type

ya.import_new_source_profile

import_search_engine

profile.avatar_index

profile.using_default_name

profile.name

profile.using_default_avatar

profile.using_gaia_avatar

profile.managed_user_id

profile.gaia_info_update_time

profile.gaia_info_picture_url

profile.avatar_bubble_tutorial_shown

printing.enabled

printing.print_preview_disabled

profile.managed.default_filtering_behavior

profile.managed_user_creation_allowed

profile.managed_users

profile.reset_prompt_memento

message_center.disabled_extension_ids

message_center.disabled_system_component_ids

message_center.welcome_notification_dismissed

message_center.welcome_notification_dismissed_local

message_center.welcome_notification_previously_popped_up

message_center.welcome_notification_expiration_timestamp

fullscreen.allowed

local_discovery.notifications_enabled

prefs.preference_reset_time

ya.prefetch.latest_update_list

ya.tablo_pins.instance_id

gcm.channel_enabled

gcm.push_messaging_registration_count

easy_unlock.allowed

easy_unlock.enabled

easy_unlock.pairing

easy_unlock.proximity_required

easy_unlock.show_tutorial

zerosuggest.cachedresults

signin.error_stats_update_time

ssl.rev_checking.enabled

ssl.rev_checking.required_for_local_anchors

ssl.version_min

ssl.version_max

ssl.version_fallback_min

ssl.cipher_suites.blacklist

ssl.ssl_record_splitting.disabled

ssl.ssl_blocking_bypassed

user_experience_metrics.reporting_enabled

profile.last_used

profile.last_active_profiles

profile.profiles_created

profile.info_cache

profile.created_by_version

profile.reset_prompt_mementos

user_experience_metrics.stability.page_load_count

user_experience_metrics.stability.renderer_crash_count

user_experience_metrics.stability.extension_renderer_crash_count

user_experience_metrics.stability.renderer_hang_count

user_experience_metrics.stability.child_process_crash_count

user_experience_metrics.stability.other_user_crash_count

user_experience_metrics.stability.kernel_crash_count

user_experience_metrics.stability.system_unclean_shutdowns

user_experience_metrics.stability.plugin_stats2

uninstall_metrics.page_load_count

uninstall_metrics.last_launch_time_sec

uninstall_metrics.last_observed_running_time_sec

browser.suppress_default_browser_prompt_for_version

browser.window_placement

browser.window_placement_popup

task_manager.window_placement

browser.app_window_placement

renderer.memory_cache.size

download.default_directory

download.default_directory_display_name

download.extensions_to_open

download.directory_upgrade

download.open_pdf_in_system_reader

savefile.default_directory

savefile.type

select_file_dialogs.allowed

filebrowser.tasks.default_by_mime_type

filebrowser.tasks.default_by_suffix

selectfile.last_directory

browser.hung_plugin_detect_freq

browser.plugin_message_response_timeout

spellcheck.dictionary

spellcheck.use_spelling_service

protocol_handler.excluded_schemes

safe_browsing.client_key

safe_browsing.wrapped_key

options_window.last_tab_index

certificate_manager_window.last_tab_index

browser.show_omnibox_share_buttons

browser.last_redirect_origin

shutdown.type

shutdown.num_processes

shutdown.num_processes_slow

restart.last.session.on.shutdown

was.restarted

relaunch.mode

extensions.disabled

plugins.disable_plugin_finder

ntp.app_page_names

ntp.collapsed_open_tabs

ntp.collapsed_foreign_sessions

ntp.collapsed_recently_closed_tabs

ntp.collapsed_snapshot_document

ntp.collapsed_sync_promo

ntp.date_resource_server

ntp.most_visited_blacklist

ntp.promo_desktop_session_found

ntp.promo_resource_cache_update

ntp.shown_bookmarks_folder

ntp.shown_page

ntp.tips_resource_server

ntp.webstore_enabled

devtools.adb_key

devtools.disabled

devtools.discover_usb_devices

devtools.edited_files

devtools.file_system_paths

devtools.open_docked

devtools.port_forwarding_enabled

devtools.port_forwarding_default_set

devtools.port_forwarding_config

google.services.password_hash

invalidation_service.use_gcm_channel

sync_promo.startup_count

sync_promo.user_skipped

sync_promo.show_on_first_run_allowed

sync_promo.show_ntp_bubble

browser.web_app.create_on_desktop

browser.web_app.create_in_apps_menu

browser.web_app.create_in_quick_launch_bar

geolocation.access_token

media.default_audio_capture_device

media.default_video_capture_Device

media.device_id_salt

remote_access.host_firewall_traversal

remote_access.host_require_two_factor

remote_access.host_domain

remote_access.host_talkgadget_prefix

remote_access.host_require_curtain

remote_access.host_allow_client_pairing

remote_access.host_allow_gnubby_auth

remote_access.host_allow_relayed_connection

remote_access.host_udp_port_range

printing.print_preview_sticky_settings

cloud_print.dialog_size.width

cloud_print.dialog_size.height

cloud_print.signin_dialog_size.width

cloud_print.signin_dialog_size.height

cloud_print.enabled

cloud_print.proxy_id

cloud_print.auth_token

cloud_print.xmpp_auth_token

cloud_print.email

cloud_print.print_system_settings

cloud_print.enable_job_poll

cloud_print.robot_refresh_token

cloud_print.robot_email

cloud_print.user_settings.connectNewPrinters

cloud_print.xmpp_ping_enabled

cloud_print.xmpp_ping_timeout_sec

cloud_print.user_settings.printers

cloud_print.submit_enabled

cloud_print.user_settings

net.max_connections_per_proxy

hardware.audio_capture_enabled

hardware.audio_capture_allowed_urls

hardware.video_capture_enabled

hardware.video_capture_allowed_urls

hotword.search_enabled_2

hotword.always_on_search_enabled

hotword.audio_logging_enabled

hotword.audio_history_enabled

hotword.previous_language

browser.clear_lso_data_enabled

browser.pepper_flash_settings_enabled

browser.disk_cache_dir

browser.disk_cache_size

browser.last_default_status

browser.media_cache_size

cros.system.releaseChannel

feedback.performance_tracing_enabled

background_contents.registered

browser.shown_autolaunch_infobar

auth.schemes

auth.disable_negotiate_cname_lookup

auth.enable_negotiate_port

auth.server_whitelist

auth.negotiate_delegate_whitelist

auth.gssapi_library_name

auth.allow_cross_origin_prompt

async_dns.enabled

custom_handlers.registered_protocol_handlers

custom_handlers.ignored_protocol_handlers

custom_handlers.policy.registered_protocol_handlers

custom_handlers.policy.ignored_protocol_handlers

custom_handlers.enabled

background_mode.enabled

hardware_acceleration_mode.enabled

policy.device_refresh_rate

message_center.showed_first_run_balloon

message_center.show_icon

message_center.was_forced_on_taskbar

browser.attempted_to_enable_autoupdate

media_galleries.gallery_id

media_galleries.remembered_galleries

media_galleries.last_scan_time

shelf_chrome_icon_index

gesture.max_separation_for_gesture_touches_in_pixels

gesture.semi_long_press_time_in_ms

gesture.tab_scrub_activation_delay_in_ms

gesture.fling_max_cancel_to_down_time_in_ms

gesture.fling_max_tap_gap_time_in_ms

overscroll.horizontal_threshold_complete

overscroll.vertical_threshold_complete

overscroll.minimum_threshold_start

overscroll.minimum_threshold_start_touchpad

overscroll.vertical_threshold_start

overscroll.horizontal_resist_threshold

overscroll.vertical_resist_threshold

ya.send_install

ya.last_welcome_page_version

ya.clids

ya.banerid

ya.update_failures

ya.update_last_failure

ya.welcome_page

ya.custom_cookies

ya.bar.ui

ya.bar.uuid

ya.bar.r1

ya.statistics.last_default_check_time

ya.statistics.enabled

ya.tab_finder_enabled_once

ya.crash_dumps_checkbox_was_set

ya.crash_dumps_checkbox_was_set_at_1_0_1084_5404

ya.disk.installer_etag

ya.vk.show_infobar

ya.vk.last_shown

ya.vk.clicks_left

ya.last_runned_version

ya.last_runned_partner_id

ya.education.enabled

ya.custo_education.enabled

ya.searchness.enabled

ya.all_sb_chunks_downloaded_time

ya.splitview.enabled

ya.splitview.visible

ya.sync.device.push_id

ya.sync.device.name

ya.block_flash

ya.extensions_to_replace

ya.mute_state

ya.background_animation.enabled

ya.background_animation.disable_on_low_battery

ya.notifications.extension_settings_migrated

ya.notifications.migrated_fb_token

ya.notifications.migrated_fb_token_expires_in

ya.notifications.migrated_vk_token

ya.notifications.migrated_vk_token_expires_in

ya.notifications.silent_mode_until

ya.notifications.silent_mode

ya.notifications.fb.enabled

ya.notifications.fb.show.comments

ya.notifications.fb.show.friend_requests

ya.notifications.fb.show.messages

ya.notifications.fb.view_content

ya.notifications.fb.num_invitations_shown

ya.notifications.fb.last_time_invitation_shown

ya.notifications.fb.share_accepted

ya.notifications.fb.last_share_propose_time

ya.notifications.vk.enabled

ya.notifications.vk.show.comments

ya.notifications.vk.show.friend_requests

ya.notifications.vk.show.messages

ya.notifications.vk.view_content

ya.notifications.vk.num_invitations_shown

ya.notifications.vk.last_time_invitation_shown

ya.notifications.vk.share_accepted

ya.notifications.vk.last_share_propose_time

ya.notifications.yamail.enabled

ya.notifications.yamail.view_content

show.comments

show.friend_requests

show.messages

omnibox-infobar-panel.enabled

omnibox-infobar-panel.disabled

searchness.disabled

ya.persist_state_updated

network_profile.warnings_left

network_profile.last_warning_time

ya.feedback.update_date

ya.smartback.dictionary_last_modified

torrents.open_mode

apps.app_launch_for_metro_restart

apps.app_launch_for_metro_restart_profile

apps.shortcuts_version

module_conflict.bubble_shown

settings.privacy.drm_salt

settings.privacy.drm_enabled

browser.allow_discard_tabs

browser.allow_discard_tabs_updated

profile.extensions.activity_log.num_consumers_active

proxy.quick_check_enabled

profile.browser_guest_enabled

profile.add_person_enabled

ya.show_newtab_search_arrow

ya.popup_block_enabled

ya.plugin_restricted_document_kinds

ya.custo_tab_activation_order_on_tab_close

ya.custo_ui_first_time_launch

easy_unlock.hardlock_state

password_bubble.timestamp

password_bubble.nopes

password_bubble.interactions

ya.tablo.snapshot_click_map

license_url

feedback.url

conf_policy_url

hXXp://legal.yandex.ru/browser_agreement/

hXXp://legal.yandex.ru/confidential/

SHELL32.dll

ole32.dll

OLEAUT32.dll

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

%s-%Iu

u\uX

Dictionary keys must be quoted.

Unsupported encoding. JSON must be UTF-8.

full-memory-crash-report

(0x%X)

Error (0x%X) while retrieving error. (0x%X)

(%d = %3.1f%%)

Histogram: %s recorded %d samples

(flags = 0x%x)

PlatformFile.UnknownErrors.Windows

user32.dll

0123456789

.syzygy

.thunks

Line: %i, column: %i, %s

D:\BuildAgent\work\9d1bc32700498ce4\src\out\Release\initialexe\browser.exe.pdb

browser.exe

ClearBreakpadPipeEnvironmentVariable

ClearCrashKeyValueImpl

SetCrashKeyValueImpl

SignalChromeElf

browser_elf.dll

WINMM.dll

VERSION.dll

SHLWAPI.dll

RegEnumKeyExW

RegQueryInfoKeyW

RegCreateKeyExW

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

GetAsyncKeyState

CloseWindowStation

CreateWindowStationW

SetProcessWindowStation

USER32.dll

GetProcessHeap

GetWindowsDirectoryW

CreateIoCompletionPort

GetProcessHandleCount

KERNEL32.dll

USERENV.dll

WTSAPI32.dll

GetCPInfo

SetNamedPipeHandleState

TransactNamedPipe

WaitNamedPipeW

zcÁ

.ccc]

.IDATx

.aU/@G

\]]]]_]^

.owO[

.RwuWee

o.yST

G.HIJ

]]][\^__^\]`

i.snh

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="Win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><dependency><dependentAssembly><assemblyIdentity type="win32" name="40.0.2214.3645" version="40.0.2214.3645" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>

0%1X2

0"0)040=0

9%:0:>:]:~:

5-5v5}5

4$4044484

1 1$1(1,10141

8,;0;4;8;<;

6(7,707\7

5$5(5,50545

2 2$2(2,2024282<2

1 1$1,1@1`1

7 7$7(7,707

registering_chrome

uninstalling_chrome_frame

eyndxstp.exe

{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}

app_host.exe

browser.dll

browser_child.dll

npbrowser_frame.dll

browser_frame_helper.dll

browser_frame_helper.exe

browser_launcher.exe

metro_driver.dll

new_browser.exe

old_browser.exe

delegate_execute.exe

nacl64.exe

setup.exe

InstallerSuccessLaunchCmdLine

YandexSSHTM

{45033924-ABD6-4063-AD60-71925CDE206E}

{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}

{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}

Browse the web

Software\Microsoft\Windows\CurrentVersion\Uninstall\Chromium

-chrome

-chromeframe

{8A69D345-D564-463C-AFF1-A69D9E530F96}

{430FD4D0-B729-4F61-AA34-91526481799D}

GoogleUpdateSetup.exe

CFEndTempOptOutCmd

CFOptInCmd

CFOptOutCmd

CFTempOptOutCmd

UninstallCmdLine

WebAccessible

3E40F524-16FA-440A-B919-B44AB355B174

service_update.exe

winrt_helper.dll

{5FAFC90A-D443-4E4F-B69B-DA1F8D553C6C}

d-d-%d

hXXp://browser.

%d.%d.%d

Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser

Google Chrome App Launcher

ChromeAppList

tSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher

{8BA986DA-5100-405E-AA35-86F34A02ACBF}

Google Chrome Frame

Google\Chrome Frame

Chrome in a Frame.

Uninstall Chrome Frame

Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame

\\.\pipe\GoogleCrashServices\

\\.\pipe\YandexCrashServices

error %u

ntdll.dll

chrome.exe

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_TEXT

HKEY_PERFORMANCE_NLSTEXT

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

pipe\

kernelbase.dll

eKey

gdi32.dll

xntdll.dll

wow_helper.exe"

shell32.dll

Reported Crashes.txt

testing_interface.dll

Origin Bound Certs

Certificate Revocation Lists

Custom Dictionary.txt

Login Data

Cached Theme.pak

Web Applications

pepflashplayer.dll

CHROME_METRO_NAV_SEARCH_REQUEST

CHROME_METRO_GET_CURRENT_TAB_INFO

CHROME_METRO_SETTINGS_COMMAND

gcswf32.dll

pdf.dll

yapdf.dll

yadocviewer.dll

npmedia_plugin.dll

pepper/libppeffects.dll

Crash Reports

crash_service.exe

script.log

resources.pak

${windows}

hunspecified-crash-key

%u.%s

reported

mscoree.dll

ADVAPI32.DLL

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

USER32.DLL

portuguese-brazilian

dbghelp.dll

rpcrt4.dll

crash_service.exe --max-reports=10

%s\%s.dmp

x-x-x-xx-xxxxxx

Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32

Software\Microsoft\Windows\CurrentVersion\Run

.Chrome_MessagePumpWindow_%p

Ndebug.log

.\debug.log

\StringFileInfo\xx\%ls

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Crash Reports\events\3692.crashed

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe

chrome_exe

40.0.2214.115

15.2.2214.3645

browser.exe_3732:

.text

`.rdata

@.data

.rsrc

@.reloc

HtdHtHHHt.HH

j.Yf;

_tcPVj@

.PjRW

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\chrome_exe_main_win.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\client_util.cc

No valid Chrome version found

Failed to load Chrome DLL from

ChromeMain

RelaunchChromeBrowserWithNewCommandLineIfNeeded

Could not find exported function

allow-insecure-websocket-from-https-origin

disable-webgl

disable-web-security

enable-experimental-web-platform-features

enable-tcp-fastopen

enable-viewport

enable-viewport-meta

enable-vtune-support

enable-webgl-draft-extensions

enable-webgl-image-chromium

enable-web-midi

enable-webkit-find-restart

ignore-certificate-errors

remote-debugging-port

renderer-cmd-prefix

testing-fixed-http-port

testing-fixed-https-port

trace-upload-url

utility-cmd-prefix

zygote-cmd-prefix

disable-webrtc-hw-decoding

disable-webrtc-encryption

disable-webrtc-hw-encoding

enable-webrtc-hw-vp8-encoding

enable-webrtc-hw-h264-encoding

disable-webaudio

opera

1.3.21.115

%s-x-x

Chrome

0.0.0.0-devel

%s-%x

url-chunk

font_key_name

subresource_url

CHROME_MAIN_TIME

%x-%x

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\google_update_settings.cc

auto-launch-chrome

chrome

chrome-sxs

new-setup-exe

register-dev-chrome

register-url-protocol

rename-browser-exe

update-setup-exe

toast-results-key

Cannot initialize AppCommands from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_commands.cc

Failed to open key "

Skipping over key "

make-browser-default-after-import

silent-first-import

ya_permanent_state.brand_id

ya_permanent_state.base_host

ya_permanent_state.partner_id

ya_permanent_state.uninstall_survey_url

yandex.ru

iexplore.exe

googlechromeapphost

googlechromeframe

Cannot initialize an AppCommand from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_command.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\language_selector.cc

CHROME_BREAKPAD_PIPE_NAME

CHROME_BREAKPAD_EVENT_NAME

d:\buildagent\work\9d1bc32700498ce4\src\components\crash\app\breakpad_win.cc

NTDLL.DLL

kernel32.dll

d:\buildagent\work\9d1bc32700498ce4\src\sandbox\win\src\sandbox_policy_base.cc

CreateNamedPipeW

NtCreateKey

NtOpenKey

NtOpenKeyEx

AudioCaptureAllowedUrls

AutoSelectCertificateForUrls

ChromeFrameContentTypes

ChromeFrameRendererSettings

ChromeOsLockOnIdleSuspend

ChromeOsMultiProfileUserBehavior

ChromeOsReleaseChannel

ChromeOsReleaseChannelDelegated

CloudPrintProxyEnabled

CloudPrintSubmitEnabled

ContentPackManualBehaviorURLs

CookiesAllowedForUrls

CookiesBlockedForUrls

CookiesSessionOnlyForUrls

DefaultSearchProviderAlternateURLs

DefaultSearchProviderIconURL

DefaultSearchProviderImageURL

DefaultSearchProviderImageURLPostParams

DefaultSearchProviderInstantURL

DefaultSearchProviderInstantURLPostParams

DefaultSearchProviderKeyword

DefaultSearchProviderNewTabURL

DefaultSearchProviderSearchTermsReplacementKey

DefaultSearchProviderSearchURL

DefaultSearchProviderSearchURLPostParams

DefaultSearchProviderSuggestURL

DefaultSearchProviderSuggestURLPostParams

DeviceAllowRedeemChromeOsRegistrationOffers

DeviceLocalAccountAutoLoginBailoutEnabled

DeviceLocalAccountAutoLoginDelay

DeviceLocalAccountAutoLoginId

DeviceLoginScreenDefaultHighContrastEnabled

DeviceLoginScreenDefaultLargeCursorEnabled

DeviceLoginScreenDefaultScreenMagnifierType

DeviceLoginScreenDefaultSpokenFeedbackEnabled

DeviceLoginScreenDefaultVirtualKeyboardEnabled

DeviceLoginScreenPowerManagement

DeviceLoginScreenSaverId

DeviceLoginScreenSaverTimeout

DeviceMetricsReportingEnabled

DeviceStartUpUrls

DeviceUpdateHttpDownloadsEnabled

EnableAuthNegotiatePort

EnableDeprecatedWebPlatformFeatures

EnableOriginBoundCerts

EnableWebBasedSignin

EnterpriseWebStoreName

EnterpriseWebStoreURL

HideWebStoreIcon

HideWebStorePromo

ImagesAllowedForUrls

ImagesBlockedForUrls

ImportAutofillFormData

ImportBookmarks

ImportHistory

ImportHomepage

ImportSavedPasswords

ImportSearchEngine

JavaScriptAllowedForUrls

JavaScriptBlockedForUrls

KeyboardDefaultToFunctionKeys

MetricsReportingEnabled

NotificationsAllowedForUrls

NotificationsBlockedForUrls

PasswordManagerAllowShowPasswords

PasswordManagerEnabled

PluginsAllowedForUrls

PluginsBlockedForUrls

PopupsAllowedForUrls

PopupsBlockedForUrls

ProxyBypassList

ProxyPacUrl

RemoteAccessHostAllowClientPairing

RemoteAccessHostAllowGnubbyAuth

RemoteAccessHostAllowRelayedConnection

RemoteAccessHostDomain

RemoteAccessHostFirewallTraversal

RemoteAccessHostRequireCurtain

RemoteAccessHostRequireTwoFactor

RemoteAccessHostTalkGadgetPrefix

RemoteAccessHostUdpPortRange

RenderInChromeFrameList

ReportDeviceActivityTimes

ReportDeviceBootMode

ReportDeviceLocation

ReportDeviceNetworkInterfaces

ReportDeviceUsers

ReportDeviceVersionInfo

RestoreOnStartupURLs

ShowAppsShortcutInBookmarkBar

SuppressChromeFrameTurndownPrompt

TermsOfServiceURL

TouchVirtualKeyboardEnabled

URLBlacklist

URLWhitelist

VideoCaptureAllowedUrls

VirtualKeyboardEnabled

update_url

^update_url:

CHROME_VERSION

CHROME_SAFE_MODE

2676A9A2-D919-4FEE-9187-152100393AB2

ignore-urlfetcher-cert-requests

install-chrome-app

install-ephemeral-app-from-webstore

pack-extension-key

permission-request-api-url

promo-server-url

proxy-bypass-list

proxy-pac-url

remember-cert-error-decisions

spelling-service-feedback-url

try-chrome-again

variations-server-url

winhttp-proxy-resolver

ya-url-copy-safe-text

skip-first-import

plugins-metadata-server-url

windows8-search

allow-http-screen-capture

app-list-start-page-url

apps-checkout-url

apps-gallery-download-url

apps-gallery-url

apps-gallery-update-url

certificate-transparency-log

disable-extensions-http-throttling

disable-password-manager-reauthentication

disable-quic-port-selection

disable-save-password-bubble

disable-web-resources

enable-auth-negotiate-port

enable-npn-http

enable-quic-port-selection

enable-save-password-bubble

enable-sdch-over-https

enable-user-controlled-alternate-protocol-ports

enable-websocket-over-spdy

enable-website-settings-manager

explicitly-allowed-ports

extensions-not-webstore

help-url

40.0.2214.3645

CHROME_HEADLESS

CHROME_LOG_FILE

CHROME_METRO_CONNECTED

CHROMEOS_SESSION_LOG_DIR

CHROME_CRASHED

CHROME_RESTART

profile.ephemeral_mode

profile.icon_version

session.restore_on_startup

session.restore_on_startup_migrated

session.startup_urls_migration_time

session.restore_to_homepage_if_empty

profile.exited_cleanly

profile.exit_type

profile.managed.custodian_email

profile.managed.custodian_name

profile.managed.custodian_profile_image_url

profile.managed.custodian_profile_url

profile.managed.manual_hosts

profile.managed.manual_urls

profile.managed.second_custodian_email

profile.managed.second_custodian_name

profile.managed.second_custodian_profile_image_url

profile.managed.second_custodian_profile_url

profile.managed.shared_settings

session.startup_urls

session.urls_to_restore_on_startup

intl.app_locale

intl.charset_default

intl.accept_languages

intl.applied_brand_package_accept_languages

intl.static_encodings

webkit.webprefs.fonts.standard.Zyyy

webkit.webprefs.fonts.fixed.Zyyy

webkit.webprefs.fonts.serif.Zyyy

webkit.webprefs.fonts.sansserif.Zyyy

webkit.webprefs.fonts.cursive.Zyyy

webkit.webprefs.fonts.fantasy.Zyyy

webkit.webprefs.fonts.pictograph.Zyyy

webkit.webprefs.fonts.standard

webkit.webprefs.fonts.fixed

webkit.webprefs.fonts.serif

webkit.webprefs.fonts.sansserif

webkit.webprefs.fonts.cursive

webkit.webprefs.fonts.fantasy

webkit.webprefs.fonts.pictograph

webkit.webprefs.fonts.standard.Arab

webkit.webprefs.fonts.fixed.Arab

webkit.webprefs.fonts.serif.Arab

webkit.webprefs.fonts.sansserif.Arab

webkit.webprefs.fonts.standard.Cyrl

webkit.webprefs.fonts.fixed.Cyrl

webkit.webprefs.fonts.serif.Cyrl

webkit.webprefs.fonts.sansserif.Cyrl

webkit.webprefs.fonts.standard.Grek

webkit.webprefs.fonts.fixed.Grek

webkit.webprefs.fonts.serif.Grek

webkit.webprefs.fonts.sansserif.Grek

webkit.webprefs.fonts.standard.Jpan

webkit.webprefs.fonts.fixed.Jpan

webkit.webprefs.fonts.serif.Jpan

webkit.webprefs.fonts.sansserif.Jpan

webkit.webprefs.fonts.standard.Hang

webkit.webprefs.fonts.fixed.Hang

webkit.webprefs.fonts.serif.Hang

webkit.webprefs.fonts.sansserif.Hang

webkit.webprefs.fonts.cursive.Hang

webkit.webprefs.fonts.standard.Hans

webkit.webprefs.fonts.fixed.Hans

webkit.webprefs.fonts.serif.Hans

webkit.webprefs.fonts.sansserif.Hans

webkit.webprefs.fonts.standard.Hant

webkit.webprefs.fonts.fixed.Hant

webkit.webprefs.fonts.serif.Hant

webkit.webprefs.fonts.sansserif.Hant

webkit.webprefs.default_font_size

webkit.webprefs.default_fixed_font_size

webkit.webprefs.minimum_font_size

webkit.webprefs.minimum_logical_font_size

webkit.webprefs.javascript_enabled

webkit.webprefs.web_security_enabled

webkit.webprefs.javascript_can_open_windows_automatically

webkit.webprefs.loads_images_automatically

webkit.webprefs.plugins_enabled

webkit.webprefs.dom_paste_enabled

webkit.webprefs.shrinks_standalone_images_to_fit

webkit.webprefs.uses_universal_detector

webkit.webprefs.text_areas_are_resizable

webkit.webprefs.java_enabled

webkit.webprefs.tabs_to_links

webkit.webprefs.allow_displaying_insecure_content

webkit.webprefs.allow_running_insecure_content

safebrowsing.enabled

safebrowsing.extended_reporting_enabled

safebrowsing.proceed_anyway_disabled

safebrowsing.incident_report_sent

safebrowsing.incidents_sent

incognito.mode_availability

search.suggest_enabled

browser.confirm_to_quit

security.cookie_behavior

download.prompt_for_download

alternate_error_pages.enabled

dns_prefetching.startup_list

dns_prefetching.host_referral_list

spdy.disabled

net.http_server_properties

spdy.servers

spdy.alternate_protocol

protocol.disabled_schemes

instant_ui.zero_suggest_url_prefix

local_state.multiple_profile_prefs_version

dns_prefetching.enabled

net.network_prediction_options

hide_web_store_icon

browser.show_home_button

browser.show_ya_button

browser.show_tablo_on_click

browser.last_session_empty

browser.session_empty

browser.use_mouse_gestures

browser.enable_page_expiration

browser.do_not_count_page_expiration_infobar_closings

profile.recently_selected_encodings

browser.clear_data.browsing_history

browser.clear_data.download_history

browser.clear_data.cache

browser.clear_data.cookies

browser.clear_data.passwords

browser.clear_data.form_data

browser.clear_data.hosted_apps_data

browser.clear_data.content_licenses

browser.enable_spellchecking

browser.speechinput_censor_results

browser.speechinput_tray_notification_shown_contexts

browser.enabled_labs_experiments

ya.experiments_edited_by_user

ya.distrib_default_experiments

browser.enable_autospellcorrect

history.saving_disabled

ya.settings.text_wrap

history.deleting_enabled

settings.force_safesearch

settings.history_recorded

browser.clear_data.time_period

browser.last_clear_browsing_data_time

extensions.theme.pack

extensions.theme.id

extensions.theme.images

extensions.theme.colors

extensions.theme.tints

extensions.theme.properties

extensions.ui.developer_mode

extensions.commands

plugins.last_internal_directory

plugins.plugins_list

plugins.plugins_disabled

plugins.plugins_disabled_exceptions

plugins.plugins_enabled

plugins.migrated_to_pepper_flash

plugins.removed_old_component_pepper_flash_settings

plugins.show_details

plugins.allow_outdated

plugins.always_authorize

plugins.metadata

plugins.resource_cache_update

browser.check_default_browser

browser.default_browser_setting_enabled

browser.custom_chrome_frame

profile.content_settings.plugin_whitelist

profile.block_third_party_cookies

profile.clear_site_data_on_exit

partition.default_zoom_level

profile.default_zoom_level

partition.per_host_zoom_levels

profile.per_host_zoom_levels

autofill.data_model_default

autofill.pay_without_wallet

autofill.wallet_location_disclosure

autofill.save_data

autofill.wallet_shipping_same_as_billing

autofill.generated_card_bubble_times_shown

autofill.rac_dialog_defaults

breadcrumbs.enabled

push_to_call.enabled

push_to_call.wasenabled

ya.disk.want_install

context_translate.enabled

context_translate.translate_words

enable_deprecated_web_platform_features

import_last_source_browser

import_autofill_form_data

import_bookmarks

import_history

import_home_page

import_saved_passwords

import_cookies

import_last_session

import_extensions

import_speed_dial

import_other

ya.statistics.import_rollback

ya.import_new_source_type

ya.import_new_source_profile

import_search_engine

profile.avatar_index

profile.using_default_name

profile.name

profile.using_default_avatar

profile.using_gaia_avatar

profile.managed_user_id

profile.gaia_info_update_time

profile.gaia_info_picture_url

profile.avatar_bubble_tutorial_shown

printing.enabled

printing.print_preview_disabled

profile.managed.default_filtering_behavior

profile.managed_user_creation_allowed

profile.managed_users

profile.reset_prompt_memento

message_center.disabled_extension_ids

message_center.disabled_system_component_ids

message_center.welcome_notification_dismissed

message_center.welcome_notification_dismissed_local

message_center.welcome_notification_previously_popped_up

message_center.welcome_notification_expiration_timestamp

fullscreen.allowed

local_discovery.notifications_enabled

prefs.preference_reset_time

ya.prefetch.latest_update_list

ya.tablo_pins.instance_id

gcm.channel_enabled

gcm.push_messaging_registration_count

easy_unlock.allowed

easy_unlock.enabled

easy_unlock.pairing

easy_unlock.proximity_required

easy_unlock.show_tutorial

zerosuggest.cachedresults

signin.error_stats_update_time

ssl.rev_checking.enabled

ssl.rev_checking.required_for_local_anchors

ssl.version_min

ssl.version_max

ssl.version_fallback_min

ssl.cipher_suites.blacklist

ssl.ssl_record_splitting.disabled

ssl.ssl_blocking_bypassed

user_experience_metrics.reporting_enabled

profile.last_used

profile.last_active_profiles

profile.profiles_created

profile.info_cache

profile.created_by_version

profile.reset_prompt_mementos

user_experience_metrics.stability.page_load_count

user_experience_metrics.stability.renderer_crash_count

user_experience_metrics.stability.extension_renderer_crash_count

user_experience_metrics.stability.renderer_hang_count

user_experience_metrics.stability.child_process_crash_count

user_experience_metrics.stability.other_user_crash_count

user_experience_metrics.stability.kernel_crash_count

user_experience_metrics.stability.system_unclean_shutdowns

user_experience_metrics.stability.plugin_stats2

uninstall_metrics.page_load_count

uninstall_metrics.last_launch_time_sec

uninstall_metrics.last_observed_running_time_sec

browser.suppress_default_browser_prompt_for_version

browser.window_placement

browser.window_placement_popup

task_manager.window_placement

browser.app_window_placement

renderer.memory_cache.size

download.default_directory

download.default_directory_display_name

download.extensions_to_open

download.directory_upgrade

download.open_pdf_in_system_reader

savefile.default_directory

savefile.type

select_file_dialogs.allowed

filebrowser.tasks.default_by_mime_type

filebrowser.tasks.default_by_suffix

selectfile.last_directory

browser.hung_plugin_detect_freq

browser.plugin_message_response_timeout

spellcheck.dictionary

spellcheck.use_spelling_service

protocol_handler.excluded_schemes

safe_browsing.client_key

safe_browsing.wrapped_key

options_window.last_tab_index

certificate_manager_window.last_tab_index

browser.show_omnibox_share_buttons

browser.last_redirect_origin

shutdown.type

shutdown.num_processes

shutdown.num_processes_slow

restart.last.session.on.shutdown

was.restarted

relaunch.mode

extensions.disabled

plugins.disable_plugin_finder

ntp.app_page_names

ntp.collapsed_open_tabs

ntp.collapsed_foreign_sessions

ntp.collapsed_recently_closed_tabs

ntp.collapsed_snapshot_document

ntp.collapsed_sync_promo

ntp.date_resource_server

ntp.most_visited_blacklist

ntp.promo_desktop_session_found

ntp.promo_resource_cache_update

ntp.shown_bookmarks_folder

ntp.shown_page

ntp.tips_resource_server

ntp.webstore_enabled

devtools.adb_key

devtools.disabled

devtools.discover_usb_devices

devtools.edited_files

devtools.file_system_paths

devtools.open_docked

devtools.port_forwarding_enabled

devtools.port_forwarding_default_set

devtools.port_forwarding_config

google.services.password_hash

invalidation_service.use_gcm_channel

sync_promo.startup_count

sync_promo.user_skipped

sync_promo.show_on_first_run_allowed

sync_promo.show_ntp_bubble

browser.web_app.create_on_desktop

browser.web_app.create_in_apps_menu

browser.web_app.create_in_quick_launch_bar

geolocation.access_token

media.default_audio_capture_device

media.default_video_capture_Device

media.device_id_salt

remote_access.host_firewall_traversal

remote_access.host_require_two_factor

remote_access.host_domain

remote_access.host_talkgadget_prefix

remote_access.host_require_curtain

remote_access.host_allow_client_pairing

remote_access.host_allow_gnubby_auth

remote_access.host_allow_relayed_connection

remote_access.host_udp_port_range

printing.print_preview_sticky_settings

cloud_print.dialog_size.width

cloud_print.dialog_size.height

cloud_print.signin_dialog_size.width

cloud_print.signin_dialog_size.height

cloud_print.enabled

cloud_print.proxy_id

cloud_print.auth_token

cloud_print.xmpp_auth_token

cloud_print.email

cloud_print.print_system_settings

cloud_print.enable_job_poll

cloud_print.robot_refresh_token

cloud_print.robot_email

cloud_print.user_settings.connectNewPrinters

cloud_print.xmpp_ping_enabled

cloud_print.xmpp_ping_timeout_sec

cloud_print.user_settings.printers

cloud_print.submit_enabled

cloud_print.user_settings

net.max_connections_per_proxy

hardware.audio_capture_enabled

hardware.audio_capture_allowed_urls

hardware.video_capture_enabled

hardware.video_capture_allowed_urls

hotword.search_enabled_2

hotword.always_on_search_enabled

hotword.audio_logging_enabled

hotword.audio_history_enabled

hotword.previous_language

browser.clear_lso_data_enabled

browser.pepper_flash_settings_enabled

browser.disk_cache_dir

browser.disk_cache_size

browser.last_default_status

browser.media_cache_size

cros.system.releaseChannel

feedback.performance_tracing_enabled

background_contents.registered

browser.shown_autolaunch_infobar

auth.schemes

auth.disable_negotiate_cname_lookup

auth.enable_negotiate_port

auth.server_whitelist

auth.negotiate_delegate_whitelist

auth.gssapi_library_name

auth.allow_cross_origin_prompt

async_dns.enabled

custom_handlers.registered_protocol_handlers

custom_handlers.ignored_protocol_handlers

custom_handlers.policy.registered_protocol_handlers

custom_handlers.policy.ignored_protocol_handlers

custom_handlers.enabled

background_mode.enabled

hardware_acceleration_mode.enabled

policy.device_refresh_rate

message_center.showed_first_run_balloon

message_center.show_icon

message_center.was_forced_on_taskbar

browser.attempted_to_enable_autoupdate

media_galleries.gallery_id

media_galleries.remembered_galleries

media_galleries.last_scan_time

shelf_chrome_icon_index

gesture.max_separation_for_gesture_touches_in_pixels

gesture.semi_long_press_time_in_ms

gesture.tab_scrub_activation_delay_in_ms

gesture.fling_max_cancel_to_down_time_in_ms

gesture.fling_max_tap_gap_time_in_ms

overscroll.horizontal_threshold_complete

overscroll.vertical_threshold_complete

overscroll.minimum_threshold_start

overscroll.minimum_threshold_start_touchpad

overscroll.vertical_threshold_start

overscroll.horizontal_resist_threshold

overscroll.vertical_resist_threshold

ya.send_install

ya.last_welcome_page_version

ya.clids

ya.banerid

ya.update_failures

ya.update_last_failure

ya.welcome_page

ya.custom_cookies

ya.bar.ui

ya.bar.uuid

ya.bar.r1

ya.statistics.last_default_check_time

ya.statistics.enabled

ya.tab_finder_enabled_once

ya.crash_dumps_checkbox_was_set

ya.crash_dumps_checkbox_was_set_at_1_0_1084_5404

ya.disk.installer_etag

ya.vk.show_infobar

ya.vk.last_shown

ya.vk.clicks_left

ya.last_runned_version

ya.last_runned_partner_id

ya.education.enabled

ya.custo_education.enabled

ya.searchness.enabled

ya.all_sb_chunks_downloaded_time

ya.splitview.enabled

ya.splitview.visible

ya.sync.device.push_id

ya.sync.device.name

ya.block_flash

ya.extensions_to_replace

ya.mute_state

ya.background_animation.enabled

ya.background_animation.disable_on_low_battery

ya.notifications.extension_settings_migrated

ya.notifications.migrated_fb_token

ya.notifications.migrated_fb_token_expires_in

ya.notifications.migrated_vk_token

ya.notifications.migrated_vk_token_expires_in

ya.notifications.silent_mode_until

ya.notifications.silent_mode

ya.notifications.fb.enabled

ya.notifications.fb.show.comments

ya.notifications.fb.show.friend_requests

ya.notifications.fb.show.messages

ya.notifications.fb.view_content

ya.notifications.fb.num_invitations_shown

ya.notifications.fb.last_time_invitation_shown

ya.notifications.fb.share_accepted

ya.notifications.fb.last_share_propose_time

ya.notifications.vk.enabled

ya.notifications.vk.show.comments

ya.notifications.vk.show.friend_requests

ya.notifications.vk.show.messages

ya.notifications.vk.view_content

ya.notifications.vk.num_invitations_shown

ya.notifications.vk.last_time_invitation_shown

ya.notifications.vk.share_accepted

ya.notifications.vk.last_share_propose_time

ya.notifications.yamail.enabled

ya.notifications.yamail.view_content

show.comments

show.friend_requests

show.messages

omnibox-infobar-panel.enabled

omnibox-infobar-panel.disabled

searchness.disabled

ya.persist_state_updated

network_profile.warnings_left

network_profile.last_warning_time

ya.feedback.update_date

ya.smartback.dictionary_last_modified

torrents.open_mode

apps.app_launch_for_metro_restart

apps.app_launch_for_metro_restart_profile

apps.shortcuts_version

module_conflict.bubble_shown

settings.privacy.drm_salt

settings.privacy.drm_enabled

browser.allow_discard_tabs

browser.allow_discard_tabs_updated

profile.extensions.activity_log.num_consumers_active

proxy.quick_check_enabled

profile.browser_guest_enabled

profile.add_person_enabled

ya.show_newtab_search_arrow

ya.popup_block_enabled

ya.plugin_restricted_document_kinds

ya.custo_tab_activation_order_on_tab_close

ya.custo_ui_first_time_launch

easy_unlock.hardlock_state

password_bubble.timestamp

password_bubble.nopes

password_bubble.interactions

ya.tablo.snapshot_click_map

license_url

feedback.url

conf_policy_url

hXXp://legal.yandex.ru/browser_agreement/

hXXp://legal.yandex.ru/confidential/

SHELL32.dll

ole32.dll

OLEAUT32.dll

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

%s-%Iu

u\uX

Dictionary keys must be quoted.

Unsupported encoding. JSON must be UTF-8.

full-memory-crash-report

(0x%X)

Error (0x%X) while retrieving error. (0x%X)

(%d = %3.1f%%)

Histogram: %s recorded %d samples

(flags = 0x%x)

PlatformFile.UnknownErrors.Windows

user32.dll

0123456789

.syzygy

.thunks

Line: %i, column: %i, %s

D:\BuildAgent\work\9d1bc32700498ce4\src\out\Release\initialexe\browser.exe.pdb

browser.exe

ClearBreakpadPipeEnvironmentVariable

ClearCrashKeyValueImpl

SetCrashKeyValueImpl

SignalChromeElf

browser_elf.dll

WINMM.dll

VERSION.dll

SHLWAPI.dll

RegEnumKeyExW

RegQueryInfoKeyW

RegCreateKeyExW

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

GetAsyncKeyState

CloseWindowStation

CreateWindowStationW

SetProcessWindowStation

USER32.dll

GetProcessHeap

GetWindowsDirectoryW

CreateIoCompletionPort

GetProcessHandleCount

KERNEL32.dll

USERENV.dll

WTSAPI32.dll

GetCPInfo

SetNamedPipeHandleState

TransactNamedPipe

WaitNamedPipeW

zcÁ

.ccc]

.IDATx

.aU/@G

\]]]]_]^

.owO[

.RwuWee

o.yST

G.HIJ

]]][\^__^\]`

i.snh

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="Win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><dependency><dependentAssembly><assemblyIdentity type="win32" name="40.0.2214.3645" version="40.0.2214.3645" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>

0%1X2

0"0)040=0

9%:0:>:]:~:

5-5v5}5

4$4044484

1 1$1(1,10141

8,;0;4;8;<;

6(7,707\7

5$5(5,50545

2 2$2(2,2024282<2

1 1$1,1@1`1

7 7$7(7,707

registering_chrome

uninstalling_chrome_frame

eyndxstp.exe

{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}

app_host.exe

browser.dll

browser_child.dll

npbrowser_frame.dll

browser_frame_helper.dll

browser_frame_helper.exe

browser_launcher.exe

metro_driver.dll

new_browser.exe

old_browser.exe

delegate_execute.exe

nacl64.exe

setup.exe

InstallerSuccessLaunchCmdLine

YandexSSHTM

{45033924-ABD6-4063-AD60-71925CDE206E}

{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}

{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}

Browse the web

Software\Microsoft\Windows\CurrentVersion\Uninstall\Chromium

-chrome

-chromeframe

{8A69D345-D564-463C-AFF1-A69D9E530F96}

{430FD4D0-B729-4F61-AA34-91526481799D}

GoogleUpdateSetup.exe

CFEndTempOptOutCmd

CFOptInCmd

CFOptOutCmd

CFTempOptOutCmd

UninstallCmdLine

WebAccessible

3E40F524-16FA-440A-B919-B44AB355B174

service_update.exe

winrt_helper.dll

{5FAFC90A-D443-4E4F-B69B-DA1F8D553C6C}

d-d-%d

hXXp://browser.

%d.%d.%d

Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser

Google Chrome App Launcher

ChromeAppList

tSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher

{8BA986DA-5100-405E-AA35-86F34A02ACBF}

Google Chrome Frame

Google\Chrome Frame

Chrome in a Frame.

Uninstall Chrome Frame

Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame

\\.\pipe\GoogleCrashServices\

\\.\pipe\YandexCrashServices

error %u

ntdll.dll

chrome.exe

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_TEXT

HKEY_PERFORMANCE_NLSTEXT

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

pipe\

kernelbase.dll

eKey

gdi32.dll

xntdll.dll

wow_helper.exe"

shell32.dll

Reported Crashes.txt

testing_interface.dll

Origin Bound Certs

Certificate Revocation Lists

Custom Dictionary.txt

Login Data

Cached Theme.pak

Web Applications

pepflashplayer.dll

CHROME_METRO_NAV_SEARCH_REQUEST

CHROME_METRO_GET_CURRENT_TAB_INFO

CHROME_METRO_SETTINGS_COMMAND

gcswf32.dll

pdf.dll

yapdf.dll

yadocviewer.dll

npmedia_plugin.dll

pepper/libppeffects.dll

Crash Reports

crash_service.exe

script.log

resources.pak

${windows}

hunspecified-crash-key

%u.%s

reported

mscoree.dll

ADVAPI32.DLL

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

USER32.DLL

portuguese-brazilian

dbghelp.dll

rpcrt4.dll

crash_service.exe --max-reports=10

%s\%s.dmp

x-x-x-xx-xxxxxx

Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32

Software\Microsoft\Windows\CurrentVersion\Run

.Chrome_MessagePumpWindow_%p

Ndebug.log

.\debug.log

\StringFileInfo\xx\%ls

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Crash Reports\events\3732.crashed

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe

chrome_exe

40.0.2214.115

15.2.2214.3645

browser.exe_3692_rwx_1790A000_000F5000:

Vh%x)

=.ha"

=.ha"u

_Rh%U

browser.exe_3316:

.text

`.rdata

@.data

.rsrc

@.reloc

HtdHtHHHt.HH

j.Yf;

_tcPVj@

.PjRW

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\chrome_exe_main_win.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\client_util.cc

No valid Chrome version found

Failed to load Chrome DLL from

ChromeMain

RelaunchChromeBrowserWithNewCommandLineIfNeeded

Could not find exported function

allow-insecure-websocket-from-https-origin

disable-webgl

disable-web-security

enable-experimental-web-platform-features

enable-tcp-fastopen

enable-viewport

enable-viewport-meta

enable-vtune-support

enable-webgl-draft-extensions

enable-webgl-image-chromium

enable-web-midi

enable-webkit-find-restart

ignore-certificate-errors

remote-debugging-port

renderer-cmd-prefix

testing-fixed-http-port

testing-fixed-https-port

trace-upload-url

utility-cmd-prefix

zygote-cmd-prefix

disable-webrtc-hw-decoding

disable-webrtc-encryption

disable-webrtc-hw-encoding

enable-webrtc-hw-vp8-encoding

enable-webrtc-hw-h264-encoding

disable-webaudio

opera

1.3.21.115

%s-x-x

Chrome

0.0.0.0-devel

%s-%x

url-chunk

font_key_name

subresource_url

CHROME_MAIN_TIME

%x-%x

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\google_update_settings.cc

auto-launch-chrome

chrome

chrome-sxs

new-setup-exe

register-dev-chrome

register-url-protocol

rename-browser-exe

update-setup-exe

toast-results-key

Cannot initialize AppCommands from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_commands.cc

Failed to open key "

Skipping over key "

make-browser-default-after-import

silent-first-import

ya_permanent_state.brand_id

ya_permanent_state.base_host

ya_permanent_state.partner_id

ya_permanent_state.uninstall_survey_url

yandex.ru

iexplore.exe

googlechromeapphost

googlechromeframe

Cannot initialize an AppCommand from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_command.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\language_selector.cc

CHROME_BREAKPAD_PIPE_NAME

CHROME_BREAKPAD_EVENT_NAME

d:\buildagent\work\9d1bc32700498ce4\src\components\crash\app\breakpad_win.cc

NTDLL.DLL

kernel32.dll

d:\buildagent\work\9d1bc32700498ce4\src\sandbox\win\src\sandbox_policy_base.cc

CreateNamedPipeW

NtCreateKey

NtOpenKey

NtOpenKeyEx

AudioCaptureAllowedUrls

AutoSelectCertificateForUrls

ChromeFrameContentTypes

ChromeFrameRendererSettings

ChromeOsLockOnIdleSuspend

ChromeOsMultiProfileUserBehavior

ChromeOsReleaseChannel

ChromeOsReleaseChannelDelegated

CloudPrintProxyEnabled

CloudPrintSubmitEnabled

ContentPackManualBehaviorURLs

CookiesAllowedForUrls

CookiesBlockedForUrls

CookiesSessionOnlyForUrls

DefaultSearchProviderAlternateURLs

DefaultSearchProviderIconURL

DefaultSearchProviderImageURL

DefaultSearchProviderImageURLPostParams

DefaultSearchProviderInstantURL

DefaultSearchProviderInstantURLPostParams

DefaultSearchProviderKeyword

DefaultSearchProviderNewTabURL

DefaultSearchProviderSearchTermsReplacementKey

DefaultSearchProviderSearchURL

DefaultSearchProviderSearchURLPostParams

DefaultSearchProviderSuggestURL

DefaultSearchProviderSuggestURLPostParams

DeviceAllowRedeemChromeOsRegistrationOffers

DeviceLocalAccountAutoLoginBailoutEnabled

DeviceLocalAccountAutoLoginDelay

DeviceLocalAccountAutoLoginId

DeviceLoginScreenDefaultHighContrastEnabled

DeviceLoginScreenDefaultLargeCursorEnabled

DeviceLoginScreenDefaultScreenMagnifierType

DeviceLoginScreenDefaultSpokenFeedbackEnabled

DeviceLoginScreenDefaultVirtualKeyboardEnabled

DeviceLoginScreenPowerManagement

DeviceLoginScreenSaverId

DeviceLoginScreenSaverTimeout

DeviceMetricsReportingEnabled

DeviceStartUpUrls

DeviceUpdateHttpDownloadsEnabled

EnableAuthNegotiatePort

EnableDeprecatedWebPlatformFeatures

EnableOriginBoundCerts

EnableWebBasedSignin

EnterpriseWebStoreName

EnterpriseWebStoreURL

HideWebStoreIcon

HideWebStorePromo

ImagesAllowedForUrls

ImagesBlockedForUrls

ImportAutofillFormData

ImportBookmarks

ImportHistory

ImportHomepage

ImportSavedPasswords

ImportSearchEngine

JavaScriptAllowedForUrls

JavaScriptBlockedForUrls

KeyboardDefaultToFunctionKeys

MetricsReportingEnabled

NotificationsAllowedForUrls

NotificationsBlockedForUrls

PasswordManagerAllowShowPasswords

PasswordManagerEnabled

PluginsAllowedForUrls

PluginsBlockedForUrls

PopupsAllowedForUrls

PopupsBlockedForUrls

ProxyBypassList

ProxyPacUrl

RemoteAccessHostAllowClientPairing

RemoteAccessHostAllowGnubbyAuth

RemoteAccessHostAllowRelayedConnection

RemoteAccessHostDomain

RemoteAccessHostFirewallTraversal

RemoteAccessHostRequireCurtain

RemoteAccessHostRequireTwoFactor

RemoteAccessHostTalkGadgetPrefix

RemoteAccessHostUdpPortRange

RenderInChromeFrameList

ReportDeviceActivityTimes

ReportDeviceBootMode

ReportDeviceLocation

ReportDeviceNetworkInterfaces

ReportDeviceUsers

ReportDeviceVersionInfo

RestoreOnStartupURLs

ShowAppsShortcutInBookmarkBar

SuppressChromeFrameTurndownPrompt

TermsOfServiceURL

TouchVirtualKeyboardEnabled

URLBlacklist

URLWhitelist

VideoCaptureAllowedUrls

VirtualKeyboardEnabled

update_url

^update_url:

CHROME_VERSION

CHROME_SAFE_MODE

2676A9A2-D919-4FEE-9187-152100393AB2

ignore-urlfetcher-cert-requests

install-chrome-app

install-ephemeral-app-from-webstore

pack-extension-key

permission-request-api-url

promo-server-url

proxy-bypass-list

proxy-pac-url

remember-cert-error-decisions

spelling-service-feedback-url

try-chrome-again

variations-server-url

winhttp-proxy-resolver

ya-url-copy-safe-text

skip-first-import

plugins-metadata-server-url

windows8-search

allow-http-screen-capture

app-list-start-page-url

apps-checkout-url

apps-gallery-download-url

apps-gallery-url

apps-gallery-update-url

certificate-transparency-log

disable-extensions-http-throttling

disable-password-manager-reauthentication

disable-quic-port-selection

disable-save-password-bubble

disable-web-resources

enable-auth-negotiate-port

enable-npn-http

enable-quic-port-selection

enable-save-password-bubble

enable-sdch-over-https

enable-user-controlled-alternate-protocol-ports

enable-websocket-over-spdy

enable-website-settings-manager

explicitly-allowed-ports

extensions-not-webstore

help-url

40.0.2214.3645

CHROME_HEADLESS

CHROME_LOG_FILE

CHROME_METRO_CONNECTED

CHROMEOS_SESSION_LOG_DIR

CHROME_CRASHED

CHROME_RESTART

profile.ephemeral_mode

profile.icon_version

session.restore_on_startup

session.restore_on_startup_migrated

session.startup_urls_migration_time

session.restore_to_homepage_if_empty

profile.exited_cleanly

profile.exit_type

profile.managed.custodian_email

profile.managed.custodian_name

profile.managed.custodian_profile_image_url

profile.managed.custodian_profile_url

profile.managed.manual_hosts

profile.managed.manual_urls

profile.managed.second_custodian_email

profile.managed.second_custodian_name

profile.managed.second_custodian_profile_image_url

profile.managed.second_custodian_profile_url

profile.managed.shared_settings

session.startup_urls

session.urls_to_restore_on_startup

intl.app_locale

intl.charset_default

intl.accept_languages

intl.applied_brand_package_accept_languages

intl.static_encodings

webkit.webprefs.fonts.standard.Zyyy

webkit.webprefs.fonts.fixed.Zyyy

webkit.webprefs.fonts.serif.Zyyy

webkit.webprefs.fonts.sansserif.Zyyy

webkit.webprefs.fonts.cursive.Zyyy

webkit.webprefs.fonts.fantasy.Zyyy

webkit.webprefs.fonts.pictograph.Zyyy

webkit.webprefs.fonts.standard

webkit.webprefs.fonts.fixed

webkit.webprefs.fonts.serif

webkit.webprefs.fonts.sansserif

webkit.webprefs.fonts.cursive

webkit.webprefs.fonts.fantasy

webkit.webprefs.fonts.pictograph

webkit.webprefs.fonts.standard.Arab

webkit.webprefs.fonts.fixed.Arab

webkit.webprefs.fonts.serif.Arab

webkit.webprefs.fonts.sansserif.Arab

webkit.webprefs.fonts.standard.Cyrl

webkit.webprefs.fonts.fixed.Cyrl

webkit.webprefs.fonts.serif.Cyrl

webkit.webprefs.fonts.sansserif.Cyrl

webkit.webprefs.fonts.standard.Grek

webkit.webprefs.fonts.fixed.Grek

webkit.webprefs.fonts.serif.Grek

webkit.webprefs.fonts.sansserif.Grek

webkit.webprefs.fonts.standard.Jpan

webkit.webprefs.fonts.fixed.Jpan

webkit.webprefs.fonts.serif.Jpan

webkit.webprefs.fonts.sansserif.Jpan

webkit.webprefs.fonts.standard.Hang

webkit.webprefs.fonts.fixed.Hang

webkit.webprefs.fonts.serif.Hang

webkit.webprefs.fonts.sansserif.Hang

webkit.webprefs.fonts.cursive.Hang

webkit.webprefs.fonts.standard.Hans

webkit.webprefs.fonts.fixed.Hans

webkit.webprefs.fonts.serif.Hans

webkit.webprefs.fonts.sansserif.Hans

webkit.webprefs.fonts.standard.Hant

webkit.webprefs.fonts.fixed.Hant

webkit.webprefs.fonts.serif.Hant

webkit.webprefs.fonts.sansserif.Hant

webkit.webprefs.default_font_size

webkit.webprefs.default_fixed_font_size

webkit.webprefs.minimum_font_size

webkit.webprefs.minimum_logical_font_size

webkit.webprefs.javascript_enabled

webkit.webprefs.web_security_enabled

webkit.webprefs.javascript_can_open_windows_automatically

webkit.webprefs.loads_images_automatically

webkit.webprefs.plugins_enabled

webkit.webprefs.dom_paste_enabled

webkit.webprefs.shrinks_standalone_images_to_fit

webkit.webprefs.uses_universal_detector

webkit.webprefs.text_areas_are_resizable

webkit.webprefs.java_enabled

webkit.webprefs.tabs_to_links

webkit.webprefs.allow_displaying_insecure_content

webkit.webprefs.allow_running_insecure_content

safebrowsing.enabled

safebrowsing.extended_reporting_enabled

safebrowsing.proceed_anyway_disabled

safebrowsing.incident_report_sent

safebrowsing.incidents_sent

incognito.mode_availability

search.suggest_enabled

browser.confirm_to_quit

security.cookie_behavior

download.prompt_for_download

alternate_error_pages.enabled

dns_prefetching.startup_list

dns_prefetching.host_referral_list

spdy.disabled

net.http_server_properties

spdy.servers

spdy.alternate_protocol

protocol.disabled_schemes

instant_ui.zero_suggest_url_prefix

local_state.multiple_profile_prefs_version

dns_prefetching.enabled

net.network_prediction_options

hide_web_store_icon

browser.show_home_button

browser.show_ya_button

browser.show_tablo_on_click

browser.last_session_empty

browser.session_empty

browser.use_mouse_gestures

browser.enable_page_expiration

browser.do_not_count_page_expiration_infobar_closings

profile.recently_selected_encodings

browser.clear_data.browsing_history

browser.clear_data.download_history

browser.clear_data.cache

browser.clear_data.cookies

browser.clear_data.passwords

browser.clear_data.form_data

browser.clear_data.hosted_apps_data

browser.clear_data.content_licenses

browser.enable_spellchecking

browser.speechinput_censor_results

browser.speechinput_tray_notification_shown_contexts

browser.enabled_labs_experiments

ya.experiments_edited_by_user

ya.distrib_default_experiments

browser.enable_autospellcorrect

history.saving_disabled

ya.settings.text_wrap

history.deleting_enabled

settings.force_safesearch

settings.history_recorded

browser.clear_data.time_period

browser.last_clear_browsing_data_time

extensions.theme.pack

extensions.theme.id

extensions.theme.images

extensions.theme.colors

extensions.theme.tints

extensions.theme.properties

extensions.ui.developer_mode

extensions.commands

plugins.last_internal_directory

plugins.plugins_list

plugins.plugins_disabled

plugins.plugins_disabled_exceptions

plugins.plugins_enabled

plugins.migrated_to_pepper_flash

plugins.removed_old_component_pepper_flash_settings

plugins.show_details

plugins.allow_outdated

plugins.always_authorize

plugins.metadata

plugins.resource_cache_update

browser.check_default_browser

browser.default_browser_setting_enabled

browser.custom_chrome_frame

profile.content_settings.plugin_whitelist

profile.block_third_party_cookies

profile.clear_site_data_on_exit

partition.default_zoom_level

profile.default_zoom_level

partition.per_host_zoom_levels

profile.per_host_zoom_levels

autofill.data_model_default

autofill.pay_without_wallet

autofill.wallet_location_disclosure

autofill.save_data

autofill.wallet_shipping_same_as_billing

autofill.generated_card_bubble_times_shown

autofill.rac_dialog_defaults

breadcrumbs.enabled

push_to_call.enabled

push_to_call.wasenabled

ya.disk.want_install

context_translate.enabled

context_translate.translate_words

enable_deprecated_web_platform_features

import_last_source_browser

import_autofill_form_data

import_bookmarks

import_history

import_home_page

import_saved_passwords

import_cookies

import_last_session

import_extensions

import_speed_dial

import_other

ya.statistics.import_rollback

ya.import_new_source_type

ya.import_new_source_profile

import_search_engine

profile.avatar_index

profile.using_default_name

profile.name

profile.using_default_avatar

profile.using_gaia_avatar

profile.managed_user_id

profile.gaia_info_update_time

profile.gaia_info_picture_url

profile.avatar_bubble_tutorial_shown

printing.enabled

printing.print_preview_disabled

profile.managed.default_filtering_behavior

profile.managed_user_creation_allowed

profile.managed_users

profile.reset_prompt_memento

message_center.disabled_extension_ids

message_center.disabled_system_component_ids

message_center.welcome_notification_dismissed

message_center.welcome_notification_dismissed_local

message_center.welcome_notification_previously_popped_up

message_center.welcome_notification_expiration_timestamp

fullscreen.allowed

local_discovery.notifications_enabled

prefs.preference_reset_time

ya.prefetch.latest_update_list

ya.tablo_pins.instance_id

gcm.channel_enabled

gcm.push_messaging_registration_count

easy_unlock.allowed

easy_unlock.enabled

easy_unlock.pairing

easy_unlock.proximity_required

easy_unlock.show_tutorial

zerosuggest.cachedresults

signin.error_stats_update_time

ssl.rev_checking.enabled

ssl.rev_checking.required_for_local_anchors

ssl.version_min

ssl.version_max

ssl.version_fallback_min

ssl.cipher_suites.blacklist

ssl.ssl_record_splitting.disabled

ssl.ssl_blocking_bypassed

user_experience_metrics.reporting_enabled

profile.last_used

profile.last_active_profiles

profile.profiles_created

profile.info_cache

profile.created_by_version

profile.reset_prompt_mementos

user_experience_metrics.stability.page_load_count

user_experience_metrics.stability.renderer_crash_count

user_experience_metrics.stability.extension_renderer_crash_count

user_experience_metrics.stability.renderer_hang_count

user_experience_metrics.stability.child_process_crash_count

user_experience_metrics.stability.other_user_crash_count

user_experience_metrics.stability.kernel_crash_count

user_experience_metrics.stability.system_unclean_shutdowns

user_experience_metrics.stability.plugin_stats2

uninstall_metrics.page_load_count

uninstall_metrics.last_launch_time_sec

uninstall_metrics.last_observed_running_time_sec

browser.suppress_default_browser_prompt_for_version

browser.window_placement

browser.window_placement_popup

task_manager.window_placement

browser.app_window_placement

renderer.memory_cache.size

download.default_directory

download.default_directory_display_name

download.extensions_to_open

download.directory_upgrade

download.open_pdf_in_system_reader

savefile.default_directory

savefile.type

select_file_dialogs.allowed

filebrowser.tasks.default_by_mime_type

filebrowser.tasks.default_by_suffix

selectfile.last_directory

browser.hung_plugin_detect_freq

browser.plugin_message_response_timeout

spellcheck.dictionary

spellcheck.use_spelling_service

protocol_handler.excluded_schemes

safe_browsing.client_key

safe_browsing.wrapped_key

options_window.last_tab_index

certificate_manager_window.last_tab_index

browser.show_omnibox_share_buttons

browser.last_redirect_origin

shutdown.type

shutdown.num_processes

shutdown.num_processes_slow

restart.last.session.on.shutdown

was.restarted

relaunch.mode

extensions.disabled

plugins.disable_plugin_finder

ntp.app_page_names

ntp.collapsed_open_tabs

ntp.collapsed_foreign_sessions

ntp.collapsed_recently_closed_tabs

ntp.collapsed_snapshot_document

ntp.collapsed_sync_promo

ntp.date_resource_server

ntp.most_visited_blacklist

ntp.promo_desktop_session_found

ntp.promo_resource_cache_update

ntp.shown_bookmarks_folder

ntp.shown_page

ntp.tips_resource_server

ntp.webstore_enabled

devtools.adb_key

devtools.disabled

devtools.discover_usb_devices

devtools.edited_files

devtools.file_system_paths

devtools.open_docked

devtools.port_forwarding_enabled

devtools.port_forwarding_default_set

devtools.port_forwarding_config

google.services.password_hash

invalidation_service.use_gcm_channel

sync_promo.startup_count

sync_promo.user_skipped

sync_promo.show_on_first_run_allowed

sync_promo.show_ntp_bubble

browser.web_app.create_on_desktop

browser.web_app.create_in_apps_menu

browser.web_app.create_in_quick_launch_bar

geolocation.access_token

media.default_audio_capture_device

media.default_video_capture_Device

media.device_id_salt

remote_access.host_firewall_traversal

remote_access.host_require_two_factor

remote_access.host_domain

remote_access.host_talkgadget_prefix

remote_access.host_require_curtain

remote_access.host_allow_client_pairing

remote_access.host_allow_gnubby_auth

remote_access.host_allow_relayed_connection

remote_access.host_udp_port_range

printing.print_preview_sticky_settings

cloud_print.dialog_size.width

cloud_print.dialog_size.height

cloud_print.signin_dialog_size.width

cloud_print.signin_dialog_size.height

cloud_print.enabled

cloud_print.proxy_id

cloud_print.auth_token

cloud_print.xmpp_auth_token

cloud_print.email

cloud_print.print_system_settings

cloud_print.enable_job_poll

cloud_print.robot_refresh_token

cloud_print.robot_email

cloud_print.user_settings.connectNewPrinters

cloud_print.xmpp_ping_enabled

cloud_print.xmpp_ping_timeout_sec

cloud_print.user_settings.printers

cloud_print.submit_enabled

cloud_print.user_settings

net.max_connections_per_proxy

hardware.audio_capture_enabled

hardware.audio_capture_allowed_urls

hardware.video_capture_enabled

hardware.video_capture_allowed_urls

hotword.search_enabled_2

hotword.always_on_search_enabled

hotword.audio_logging_enabled

hotword.audio_history_enabled

hotword.previous_language

browser.clear_lso_data_enabled

browser.pepper_flash_settings_enabled

browser.disk_cache_dir

browser.disk_cache_size

browser.last_default_status

browser.media_cache_size

cros.system.releaseChannel

feedback.performance_tracing_enabled

background_contents.registered

browser.shown_autolaunch_infobar

auth.schemes

auth.disable_negotiate_cname_lookup

auth.enable_negotiate_port

auth.server_whitelist

auth.negotiate_delegate_whitelist

auth.gssapi_library_name

auth.allow_cross_origin_prompt

async_dns.enabled

custom_handlers.registered_protocol_handlers

custom_handlers.ignored_protocol_handlers

custom_handlers.policy.registered_protocol_handlers

custom_handlers.policy.ignored_protocol_handlers

custom_handlers.enabled

background_mode.enabled

hardware_acceleration_mode.enabled

policy.device_refresh_rate

message_center.showed_first_run_balloon

message_center.show_icon

message_center.was_forced_on_taskbar

browser.attempted_to_enable_autoupdate

media_galleries.gallery_id

media_galleries.remembered_galleries

media_galleries.last_scan_time

shelf_chrome_icon_index

gesture.max_separation_for_gesture_touches_in_pixels

gesture.semi_long_press_time_in_ms

gesture.tab_scrub_activation_delay_in_ms

gesture.fling_max_cancel_to_down_time_in_ms

gesture.fling_max_tap_gap_time_in_ms

overscroll.horizontal_threshold_complete

overscroll.vertical_threshold_complete

overscroll.minimum_threshold_start

overscroll.minimum_threshold_start_touchpad

overscroll.vertical_threshold_start

overscroll.horizontal_resist_threshold

overscroll.vertical_resist_threshold

ya.send_install

ya.last_welcome_page_version

ya.clids

ya.banerid

ya.update_failures

ya.update_last_failure

ya.welcome_page

ya.custom_cookies

ya.bar.ui

ya.bar.uuid

ya.bar.r1

ya.statistics.last_default_check_time

ya.statistics.enabled

ya.tab_finder_enabled_once

ya.crash_dumps_checkbox_was_set

ya.crash_dumps_checkbox_was_set_at_1_0_1084_5404

ya.disk.installer_etag

ya.vk.show_infobar

ya.vk.last_shown

ya.vk.clicks_left

ya.last_runned_version

ya.last_runned_partner_id

ya.education.enabled

ya.custo_education.enabled

ya.searchness.enabled

ya.all_sb_chunks_downloaded_time

ya.splitview.enabled

ya.splitview.visible

ya.sync.device.push_id

ya.sync.device.name

ya.block_flash

ya.extensions_to_replace

ya.mute_state

ya.background_animation.enabled

ya.background_animation.disable_on_low_battery

ya.notifications.extension_settings_migrated

ya.notifications.migrated_fb_token

ya.notifications.migrated_fb_token_expires_in

ya.notifications.migrated_vk_token

ya.notifications.migrated_vk_token_expires_in

ya.notifications.silent_mode_until

ya.notifications.silent_mode

ya.notifications.fb.enabled

ya.notifications.fb.show.comments

ya.notifications.fb.show.friend_requests

ya.notifications.fb.show.messages

ya.notifications.fb.view_content

ya.notifications.fb.num_invitations_shown

ya.notifications.fb.last_time_invitation_shown

ya.notifications.fb.share_accepted

ya.notifications.fb.last_share_propose_time

ya.notifications.vk.enabled

ya.notifications.vk.show.comments

ya.notifications.vk.show.friend_requests

ya.notifications.vk.show.messages

ya.notifications.vk.view_content

ya.notifications.vk.num_invitations_shown

ya.notifications.vk.last_time_invitation_shown

ya.notifications.vk.share_accepted

ya.notifications.vk.last_share_propose_time

ya.notifications.yamail.enabled

ya.notifications.yamail.view_content

show.comments

show.friend_requests

show.messages

omnibox-infobar-panel.enabled

omnibox-infobar-panel.disabled

searchness.disabled

ya.persist_state_updated

network_profile.warnings_left

network_profile.last_warning_time

ya.feedback.update_date

ya.smartback.dictionary_last_modified

torrents.open_mode

apps.app_launch_for_metro_restart

apps.app_launch_for_metro_restart_profile

apps.shortcuts_version

module_conflict.bubble_shown

settings.privacy.drm_salt

settings.privacy.drm_enabled

browser.allow_discard_tabs

browser.allow_discard_tabs_updated

profile.extensions.activity_log.num_consumers_active

proxy.quick_check_enabled

profile.browser_guest_enabled

profile.add_person_enabled

ya.show_newtab_search_arrow

ya.popup_block_enabled

ya.plugin_restricted_document_kinds

ya.custo_tab_activation_order_on_tab_close

ya.custo_ui_first_time_launch

easy_unlock.hardlock_state

password_bubble.timestamp

password_bubble.nopes

password_bubble.interactions

ya.tablo.snapshot_click_map

license_url

feedback.url

conf_policy_url

hXXp://legal.yandex.ru/browser_agreement/

hXXp://legal.yandex.ru/confidential/

SHELL32.dll

ole32.dll

OLEAUT32.dll

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

%s-%Iu

u\uX

Dictionary keys must be quoted.

Unsupported encoding. JSON must be UTF-8.

full-memory-crash-report

(0x%X)

Error (0x%X) while retrieving error. (0x%X)

(%d = %3.1f%%)

Histogram: %s recorded %d samples

(flags = 0x%x)

PlatformFile.UnknownErrors.Windows

user32.dll

0123456789

.syzygy

.thunks

Line: %i, column: %i, %s

D:\BuildAgent\work\9d1bc32700498ce4\src\out\Release\initialexe\browser.exe.pdb

browser.exe

ClearBreakpadPipeEnvironmentVariable

ClearCrashKeyValueImpl

SetCrashKeyValueImpl

SignalChromeElf

browser_elf.dll

WINMM.dll

VERSION.dll

SHLWAPI.dll

RegEnumKeyExW

RegQueryInfoKeyW

RegCreateKeyExW

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

GetAsyncKeyState

CloseWindowStation

CreateWindowStationW

SetProcessWindowStation

USER32.dll

GetProcessHeap

GetWindowsDirectoryW

CreateIoCompletionPort

GetProcessHandleCount

KERNEL32.dll

USERENV.dll

WTSAPI32.dll

GetCPInfo

SetNamedPipeHandleState

TransactNamedPipe

WaitNamedPipeW

zcÁ

.ccc]

.IDATx

.aU/@G

\]]]]_]^

.owO[

.RwuWee

o.yST

G.HIJ

]]][\^__^\]`

i.snh

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="Win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><dependency><dependentAssembly><assemblyIdentity type="win32" name="40.0.2214.3645" version="40.0.2214.3645" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>

0%1X2

0"0)040=0

9%:0:>:]:~:

5-5v5}5

4$4044484

1 1$1(1,10141

8,;0;4;8;<;

6(7,707\7

5$5(5,50545

2 2$2(2,2024282<2

1 1$1,1@1`1

7 7$7(7,707

registering_chrome

uninstalling_chrome_frame

eyndxstp.exe

{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}

app_host.exe

browser.dll

browser_child.dll

npbrowser_frame.dll

browser_frame_helper.dll

browser_frame_helper.exe

browser_launcher.exe

metro_driver.dll

new_browser.exe

old_browser.exe

delegate_execute.exe

nacl64.exe

setup.exe

InstallerSuccessLaunchCmdLine

YandexSSHTM

{45033924-ABD6-4063-AD60-71925CDE206E}

{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}

{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}

Browse the web

Software\Microsoft\Windows\CurrentVersion\Uninstall\Chromium

-chrome

-chromeframe

{8A69D345-D564-463C-AFF1-A69D9E530F96}

{430FD4D0-B729-4F61-AA34-91526481799D}

GoogleUpdateSetup.exe

CFEndTempOptOutCmd

CFOptInCmd

CFOptOutCmd

CFTempOptOutCmd

UninstallCmdLine

WebAccessible

3E40F524-16FA-440A-B919-B44AB355B174

service_update.exe

winrt_helper.dll

{5FAFC90A-D443-4E4F-B69B-DA1F8D553C6C}

d-d-%d

hXXp://browser.

%d.%d.%d

Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser

Google Chrome App Launcher

ChromeAppList

tSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher

{8BA986DA-5100-405E-AA35-86F34A02ACBF}

Google Chrome Frame

Google\Chrome Frame

Chrome in a Frame.

Uninstall Chrome Frame

Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame

\\.\pipe\GoogleCrashServices\

\\.\pipe\YandexCrashServices

error %u

ntdll.dll

chrome.exe

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_TEXT

HKEY_PERFORMANCE_NLSTEXT

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

pipe\

kernelbase.dll

eKey

gdi32.dll

xntdll.dll

wow_helper.exe"

shell32.dll

Reported Crashes.txt

testing_interface.dll

Origin Bound Certs

Certificate Revocation Lists

Custom Dictionary.txt

Login Data

Cached Theme.pak

Web Applications

pepflashplayer.dll

CHROME_METRO_NAV_SEARCH_REQUEST

CHROME_METRO_GET_CURRENT_TAB_INFO

CHROME_METRO_SETTINGS_COMMAND

gcswf32.dll

pdf.dll

yapdf.dll

yadocviewer.dll

npmedia_plugin.dll

pepper/libppeffects.dll

Crash Reports

crash_service.exe

script.log

resources.pak

${windows}

hunspecified-crash-key

%u.%s

reported

mscoree.dll

ADVAPI32.DLL

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

USER32.DLL

portuguese-brazilian

dbghelp.dll

rpcrt4.dll

crash_service.exe --max-reports=10

%s\%s.dmp

x-x-x-xx-xxxxxx

Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32

Software\Microsoft\Windows\CurrentVersion\Run

.Chrome_MessagePumpWindow_%p

Ndebug.log

.\debug.log

\StringFileInfo\xx\%ls

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Crash Reports\events\3316.crashed

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe

chrome_exe

40.0.2214.115

15.2.2214.3645

browser.exe_308:

.text

`.rdata

@.data

.rsrc

@.reloc

HtdHtHHHt.HH

j.Yf;

_tcPVj@

.PjRW

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\chrome_exe_main_win.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\client_util.cc

No valid Chrome version found

Failed to load Chrome DLL from

ChromeMain

RelaunchChromeBrowserWithNewCommandLineIfNeeded

Could not find exported function

allow-insecure-websocket-from-https-origin

disable-webgl

disable-web-security

enable-experimental-web-platform-features

enable-tcp-fastopen

enable-viewport

enable-viewport-meta

enable-vtune-support

enable-webgl-draft-extensions

enable-webgl-image-chromium

enable-web-midi

enable-webkit-find-restart

ignore-certificate-errors

remote-debugging-port

renderer-cmd-prefix

testing-fixed-http-port

testing-fixed-https-port

trace-upload-url

utility-cmd-prefix

zygote-cmd-prefix

disable-webrtc-hw-decoding

disable-webrtc-encryption

disable-webrtc-hw-encoding

enable-webrtc-hw-vp8-encoding

enable-webrtc-hw-h264-encoding

disable-webaudio

opera

1.3.21.115

%s-x-x

Chrome

0.0.0.0-devel

%s-%x

url-chunk

font_key_name

subresource_url

CHROME_MAIN_TIME

%x-%x

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\google_update_settings.cc

auto-launch-chrome

chrome

chrome-sxs

new-setup-exe

register-dev-chrome

register-url-protocol

rename-browser-exe

update-setup-exe

toast-results-key

Cannot initialize AppCommands from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_commands.cc

Failed to open key "

Skipping over key "

make-browser-default-after-import

silent-first-import

ya_permanent_state.brand_id

ya_permanent_state.base_host

ya_permanent_state.partner_id

ya_permanent_state.uninstall_survey_url

yandex.ru

iexplore.exe

googlechromeapphost

googlechromeframe

Cannot initialize an AppCommand from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_command.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\language_selector.cc

CHROME_BREAKPAD_PIPE_NAME

CHROME_BREAKPAD_EVENT_NAME

d:\buildagent\work\9d1bc32700498ce4\src\components\crash\app\breakpad_win.cc

NTDLL.DLL

kernel32.dll

d:\buildagent\work\9d1bc32700498ce4\src\sandbox\win\src\sandbox_policy_base.cc

CreateNamedPipeW

NtCreateKey

NtOpenKey

NtOpenKeyEx

AudioCaptureAllowedUrls

AutoSelectCertificateForUrls

ChromeFrameContentTypes

ChromeFrameRendererSettings

ChromeOsLockOnIdleSuspend

ChromeOsMultiProfileUserBehavior

ChromeOsReleaseChannel

ChromeOsReleaseChannelDelegated

CloudPrintProxyEnabled

CloudPrintSubmitEnabled

ContentPackManualBehaviorURLs

CookiesAllowedForUrls

CookiesBlockedForUrls

CookiesSessionOnlyForUrls

DefaultSearchProviderAlternateURLs

DefaultSearchProviderIconURL

DefaultSearchProviderImageURL

DefaultSearchProviderImageURLPostParams

DefaultSearchProviderInstantURL

DefaultSearchProviderInstantURLPostParams

DefaultSearchProviderKeyword

DefaultSearchProviderNewTabURL

DefaultSearchProviderSearchTermsReplacementKey

DefaultSearchProviderSearchURL

DefaultSearchProviderSearchURLPostParams

DefaultSearchProviderSuggestURL

DefaultSearchProviderSuggestURLPostParams

DeviceAllowRedeemChromeOsRegistrationOffers

DeviceLocalAccountAutoLoginBailoutEnabled

DeviceLocalAccountAutoLoginDelay

DeviceLocalAccountAutoLoginId

DeviceLoginScreenDefaultHighContrastEnabled

DeviceLoginScreenDefaultLargeCursorEnabled

DeviceLoginScreenDefaultScreenMagnifierType

DeviceLoginScreenDefaultSpokenFeedbackEnabled

DeviceLoginScreenDefaultVirtualKeyboardEnabled

DeviceLoginScreenPowerManagement

DeviceLoginScreenSaverId

DeviceLoginScreenSaverTimeout

DeviceMetricsReportingEnabled

DeviceStartUpUrls

DeviceUpdateHttpDownloadsEnabled

EnableAuthNegotiatePort

EnableDeprecatedWebPlatformFeatures

EnableOriginBoundCerts

EnableWebBasedSignin

EnterpriseWebStoreName

EnterpriseWebStoreURL

HideWebStoreIcon

HideWebStorePromo

ImagesAllowedForUrls

ImagesBlockedForUrls

ImportAutofillFormData

ImportBookmarks

ImportHistory

ImportHomepage

ImportSavedPasswords

ImportSearchEngine

JavaScriptAllowedForUrls

JavaScriptBlockedForUrls

KeyboardDefaultToFunctionKeys

MetricsReportingEnabled

NotificationsAllowedForUrls

NotificationsBlockedForUrls

PasswordManagerAllowShowPasswords

PasswordManagerEnabled

PluginsAllowedForUrls

PluginsBlockedForUrls

PopupsAllowedForUrls

PopupsBlockedForUrls

ProxyBypassList

ProxyPacUrl

RemoteAccessHostAllowClientPairing

RemoteAccessHostAllowGnubbyAuth

RemoteAccessHostAllowRelayedConnection

RemoteAccessHostDomain

RemoteAccessHostFirewallTraversal

RemoteAccessHostRequireCurtain

RemoteAccessHostRequireTwoFactor

RemoteAccessHostTalkGadgetPrefix

RemoteAccessHostUdpPortRange

RenderInChromeFrameList

ReportDeviceActivityTimes

ReportDeviceBootMode

ReportDeviceLocation

ReportDeviceNetworkInterfaces

ReportDeviceUsers

ReportDeviceVersionInfo

RestoreOnStartupURLs

ShowAppsShortcutInBookmarkBar

SuppressChromeFrameTurndownPrompt

TermsOfServiceURL

TouchVirtualKeyboardEnabled

URLBlacklist

URLWhitelist

VideoCaptureAllowedUrls

VirtualKeyboardEnabled

update_url

^update_url:

CHROME_VERSION

CHROME_SAFE_MODE

2676A9A2-D919-4FEE-9187-152100393AB2

ignore-urlfetcher-cert-requests

install-chrome-app

install-ephemeral-app-from-webstore

pack-extension-key

permission-request-api-url

promo-server-url

proxy-bypass-list

proxy-pac-url

remember-cert-error-decisions

spelling-service-feedback-url

try-chrome-again

variations-server-url

winhttp-proxy-resolver

ya-url-copy-safe-text

skip-first-import

plugins-metadata-server-url

windows8-search

allow-http-screen-capture

app-list-start-page-url

apps-checkout-url

apps-gallery-download-url

apps-gallery-url

apps-gallery-update-url

certificate-transparency-log

disable-extensions-http-throttling

disable-password-manager-reauthentication

disable-quic-port-selection

disable-save-password-bubble

disable-web-resources

enable-auth-negotiate-port

enable-npn-http

enable-quic-port-selection

enable-save-password-bubble

enable-sdch-over-https

enable-user-controlled-alternate-protocol-ports

enable-websocket-over-spdy

enable-website-settings-manager

explicitly-allowed-ports

extensions-not-webstore

help-url

40.0.2214.3645

CHROME_HEADLESS

CHROME_LOG_FILE

CHROME_METRO_CONNECTED

CHROMEOS_SESSION_LOG_DIR

CHROME_CRASHED

CHROME_RESTART

profile.ephemeral_mode

profile.icon_version

session.restore_on_startup

session.restore_on_startup_migrated

session.startup_urls_migration_time

session.restore_to_homepage_if_empty

profile.exited_cleanly

profile.exit_type

profile.managed.custodian_email

profile.managed.custodian_name

profile.managed.custodian_profile_image_url

profile.managed.custodian_profile_url

profile.managed.manual_hosts

profile.managed.manual_urls

profile.managed.second_custodian_email

profile.managed.second_custodian_name

profile.managed.second_custodian_profile_image_url

profile.managed.second_custodian_profile_url

profile.managed.shared_settings

session.startup_urls

session.urls_to_restore_on_startup

intl.app_locale

intl.charset_default

intl.accept_languages

intl.applied_brand_package_accept_languages

intl.static_encodings

webkit.webprefs.fonts.standard.Zyyy

webkit.webprefs.fonts.fixed.Zyyy

webkit.webprefs.fonts.serif.Zyyy

webkit.webprefs.fonts.sansserif.Zyyy

webkit.webprefs.fonts.cursive.Zyyy

webkit.webprefs.fonts.fantasy.Zyyy

webkit.webprefs.fonts.pictograph.Zyyy

webkit.webprefs.fonts.standard

webkit.webprefs.fonts.fixed

webkit.webprefs.fonts.serif

webkit.webprefs.fonts.sansserif

webkit.webprefs.fonts.cursive

webkit.webprefs.fonts.fantasy

webkit.webprefs.fonts.pictograph

webkit.webprefs.fonts.standard.Arab

webkit.webprefs.fonts.fixed.Arab

webkit.webprefs.fonts.serif.Arab

webkit.webprefs.fonts.sansserif.Arab

webkit.webprefs.fonts.standard.Cyrl

webkit.webprefs.fonts.fixed.Cyrl

webkit.webprefs.fonts.serif.Cyrl

webkit.webprefs.fonts.sansserif.Cyrl

webkit.webprefs.fonts.standard.Grek

webkit.webprefs.fonts.fixed.Grek

webkit.webprefs.fonts.serif.Grek

webkit.webprefs.fonts.sansserif.Grek

webkit.webprefs.fonts.standard.Jpan

webkit.webprefs.fonts.fixed.Jpan

webkit.webprefs.fonts.serif.Jpan

webkit.webprefs.fonts.sansserif.Jpan

webkit.webprefs.fonts.standard.Hang

webkit.webprefs.fonts.fixed.Hang

webkit.webprefs.fonts.serif.Hang

webkit.webprefs.fonts.sansserif.Hang

webkit.webprefs.fonts.cursive.Hang

webkit.webprefs.fonts.standard.Hans

webkit.webprefs.fonts.fixed.Hans

webkit.webprefs.fonts.serif.Hans

webkit.webprefs.fonts.sansserif.Hans

webkit.webprefs.fonts.standard.Hant

webkit.webprefs.fonts.fixed.Hant

webkit.webprefs.fonts.serif.Hant

webkit.webprefs.fonts.sansserif.Hant

webkit.webprefs.default_font_size

webkit.webprefs.default_fixed_font_size

webkit.webprefs.minimum_font_size

webkit.webprefs.minimum_logical_font_size

webkit.webprefs.javascript_enabled

webkit.webprefs.web_security_enabled

webkit.webprefs.javascript_can_open_windows_automatically

webkit.webprefs.loads_images_automatically

webkit.webprefs.plugins_enabled

webkit.webprefs.dom_paste_enabled

webkit.webprefs.shrinks_standalone_images_to_fit

webkit.webprefs.uses_universal_detector

webkit.webprefs.text_areas_are_resizable

webkit.webprefs.java_enabled

webkit.webprefs.tabs_to_links

webkit.webprefs.allow_displaying_insecure_content

webkit.webprefs.allow_running_insecure_content

safebrowsing.enabled

safebrowsing.extended_reporting_enabled

safebrowsing.proceed_anyway_disabled

safebrowsing.incident_report_sent

safebrowsing.incidents_sent

incognito.mode_availability

search.suggest_enabled

browser.confirm_to_quit

security.cookie_behavior

download.prompt_for_download

alternate_error_pages.enabled

dns_prefetching.startup_list

dns_prefetching.host_referral_list

spdy.disabled

net.http_server_properties

spdy.servers

spdy.alternate_protocol

protocol.disabled_schemes

instant_ui.zero_suggest_url_prefix

local_state.multiple_profile_prefs_version

dns_prefetching.enabled

net.network_prediction_options

hide_web_store_icon

browser.show_home_button

browser.show_ya_button

browser.show_tablo_on_click

browser.last_session_empty

browser.session_empty

browser.use_mouse_gestures

browser.enable_page_expiration

browser.do_not_count_page_expiration_infobar_closings

profile.recently_selected_encodings

browser.clear_data.browsing_history

browser.clear_data.download_history

browser.clear_data.cache

browser.clear_data.cookies

browser.clear_data.passwords

browser.clear_data.form_data

browser.clear_data.hosted_apps_data

browser.clear_data.content_licenses

browser.enable_spellchecking

browser.speechinput_censor_results

browser.speechinput_tray_notification_shown_contexts

browser.enabled_labs_experiments

ya.experiments_edited_by_user

ya.distrib_default_experiments

browser.enable_autospellcorrect

history.saving_disabled

ya.settings.text_wrap

history.deleting_enabled

settings.force_safesearch

settings.history_recorded

browser.clear_data.time_period

browser.last_clear_browsing_data_time

extensions.theme.pack

extensions.theme.id

extensions.theme.images

extensions.theme.colors

extensions.theme.tints

extensions.theme.properties

extensions.ui.developer_mode

extensions.commands

plugins.last_internal_directory

plugins.plugins_list

plugins.plugins_disabled

plugins.plugins_disabled_exceptions

plugins.plugins_enabled

plugins.migrated_to_pepper_flash

plugins.removed_old_component_pepper_flash_settings

plugins.show_details

plugins.allow_outdated

plugins.always_authorize

plugins.metadata

plugins.resource_cache_update

browser.check_default_browser

browser.default_browser_setting_enabled

browser.custom_chrome_frame

profile.content_settings.plugin_whitelist

profile.block_third_party_cookies

profile.clear_site_data_on_exit

partition.default_zoom_level

profile.default_zoom_level

partition.per_host_zoom_levels

profile.per_host_zoom_levels

autofill.data_model_default

autofill.pay_without_wallet

autofill.wallet_location_disclosure

autofill.save_data

autofill.wallet_shipping_same_as_billing

autofill.generated_card_bubble_times_shown

autofill.rac_dialog_defaults

breadcrumbs.enabled

push_to_call.enabled

push_to_call.wasenabled

ya.disk.want_install

context_translate.enabled

context_translate.translate_words

enable_deprecated_web_platform_features

import_last_source_browser

import_autofill_form_data

import_bookmarks

import_history

import_home_page

import_saved_passwords

import_cookies

import_last_session

import_extensions

import_speed_dial

import_other

ya.statistics.import_rollback

ya.import_new_source_type

ya.import_new_source_profile

import_search_engine

profile.avatar_index

profile.using_default_name

profile.name

profile.using_default_avatar

profile.using_gaia_avatar

profile.managed_user_id

profile.gaia_info_update_time

profile.gaia_info_picture_url

profile.avatar_bubble_tutorial_shown

printing.enabled

printing.print_preview_disabled

profile.managed.default_filtering_behavior

profile.managed_user_creation_allowed

profile.managed_users

profile.reset_prompt_memento

message_center.disabled_extension_ids

message_center.disabled_system_component_ids

message_center.welcome_notification_dismissed

message_center.welcome_notification_dismissed_local

message_center.welcome_notification_previously_popped_up

message_center.welcome_notification_expiration_timestamp

fullscreen.allowed

local_discovery.notifications_enabled

prefs.preference_reset_time

ya.prefetch.latest_update_list

ya.tablo_pins.instance_id

gcm.channel_enabled

gcm.push_messaging_registration_count

easy_unlock.allowed

easy_unlock.enabled

easy_unlock.pairing

easy_unlock.proximity_required

easy_unlock.show_tutorial

zerosuggest.cachedresults

signin.error_stats_update_time

ssl.rev_checking.enabled

ssl.rev_checking.required_for_local_anchors

ssl.version_min

ssl.version_max

ssl.version_fallback_min

ssl.cipher_suites.blacklist

ssl.ssl_record_splitting.disabled

ssl.ssl_blocking_bypassed

user_experience_metrics.reporting_enabled

profile.last_used

profile.last_active_profiles

profile.profiles_created

profile.info_cache

profile.created_by_version

profile.reset_prompt_mementos

user_experience_metrics.stability.page_load_count

user_experience_metrics.stability.renderer_crash_count

user_experience_metrics.stability.extension_renderer_crash_count

user_experience_metrics.stability.renderer_hang_count

user_experience_metrics.stability.child_process_crash_count

user_experience_metrics.stability.other_user_crash_count

user_experience_metrics.stability.kernel_crash_count

user_experience_metrics.stability.system_unclean_shutdowns

user_experience_metrics.stability.plugin_stats2

uninstall_metrics.page_load_count

uninstall_metrics.last_launch_time_sec

uninstall_metrics.last_observed_running_time_sec

browser.suppress_default_browser_prompt_for_version

browser.window_placement

browser.window_placement_popup

task_manager.window_placement

browser.app_window_placement

renderer.memory_cache.size

download.default_directory

download.default_directory_display_name

download.extensions_to_open

download.directory_upgrade

download.open_pdf_in_system_reader

savefile.default_directory

savefile.type

select_file_dialogs.allowed

filebrowser.tasks.default_by_mime_type

filebrowser.tasks.default_by_suffix

selectfile.last_directory

browser.hung_plugin_detect_freq

browser.plugin_message_response_timeout

spellcheck.dictionary

spellcheck.use_spelling_service

protocol_handler.excluded_schemes

safe_browsing.client_key

safe_browsing.wrapped_key

options_window.last_tab_index

certificate_manager_window.last_tab_index

browser.show_omnibox_share_buttons

browser.last_redirect_origin

shutdown.type

shutdown.num_processes

shutdown.num_processes_slow

restart.last.session.on.shutdown

was.restarted

relaunch.mode

extensions.disabled

plugins.disable_plugin_finder

ntp.app_page_names

ntp.collapsed_open_tabs

ntp.collapsed_foreign_sessions

ntp.collapsed_recently_closed_tabs

ntp.collapsed_snapshot_document

ntp.collapsed_sync_promo

ntp.date_resource_server

ntp.most_visited_blacklist

ntp.promo_desktop_session_found

ntp.promo_resource_cache_update

ntp.shown_bookmarks_folder

ntp.shown_page

ntp.tips_resource_server

ntp.webstore_enabled

devtools.adb_key

devtools.disabled

devtools.discover_usb_devices

devtools.edited_files

devtools.file_system_paths

devtools.open_docked

devtools.port_forwarding_enabled

devtools.port_forwarding_default_set

devtools.port_forwarding_config

google.services.password_hash

invalidation_service.use_gcm_channel

sync_promo.startup_count

sync_promo.user_skipped

sync_promo.show_on_first_run_allowed

sync_promo.show_ntp_bubble

browser.web_app.create_on_desktop

browser.web_app.create_in_apps_menu

browser.web_app.create_in_quick_launch_bar

geolocation.access_token

media.default_audio_capture_device

media.default_video_capture_Device

media.device_id_salt

remote_access.host_firewall_traversal

remote_access.host_require_two_factor

remote_access.host_domain

remote_access.host_talkgadget_prefix

remote_access.host_require_curtain

remote_access.host_allow_client_pairing

remote_access.host_allow_gnubby_auth

remote_access.host_allow_relayed_connection

remote_access.host_udp_port_range

printing.print_preview_sticky_settings

cloud_print.dialog_size.width

cloud_print.dialog_size.height

cloud_print.signin_dialog_size.width

cloud_print.signin_dialog_size.height

cloud_print.enabled

cloud_print.proxy_id

cloud_print.auth_token

cloud_print.xmpp_auth_token

cloud_print.email

cloud_print.print_system_settings

cloud_print.enable_job_poll

cloud_print.robot_refresh_token

cloud_print.robot_email

cloud_print.user_settings.connectNewPrinters

cloud_print.xmpp_ping_enabled

cloud_print.xmpp_ping_timeout_sec

cloud_print.user_settings.printers

cloud_print.submit_enabled

cloud_print.user_settings

net.max_connections_per_proxy

hardware.audio_capture_enabled

hardware.audio_capture_allowed_urls

hardware.video_capture_enabled

hardware.video_capture_allowed_urls

hotword.search_enabled_2

hotword.always_on_search_enabled

hotword.audio_logging_enabled

hotword.audio_history_enabled

hotword.previous_language

browser.clear_lso_data_enabled

browser.pepper_flash_settings_enabled

browser.disk_cache_dir

browser.disk_cache_size

browser.last_default_status

browser.media_cache_size

cros.system.releaseChannel

feedback.performance_tracing_enabled

background_contents.registered

browser.shown_autolaunch_infobar

auth.schemes

auth.disable_negotiate_cname_lookup

auth.enable_negotiate_port

auth.server_whitelist

auth.negotiate_delegate_whitelist

auth.gssapi_library_name

auth.allow_cross_origin_prompt

async_dns.enabled

custom_handlers.registered_protocol_handlers

custom_handlers.ignored_protocol_handlers

custom_handlers.policy.registered_protocol_handlers

custom_handlers.policy.ignored_protocol_handlers

custom_handlers.enabled

background_mode.enabled

hardware_acceleration_mode.enabled

policy.device_refresh_rate

message_center.showed_first_run_balloon

message_center.show_icon

message_center.was_forced_on_taskbar

browser.attempted_to_enable_autoupdate

media_galleries.gallery_id

media_galleries.remembered_galleries

media_galleries.last_scan_time

shelf_chrome_icon_index

gesture.max_separation_for_gesture_touches_in_pixels

gesture.semi_long_press_time_in_ms

gesture.tab_scrub_activation_delay_in_ms

gesture.fling_max_cancel_to_down_time_in_ms

gesture.fling_max_tap_gap_time_in_ms

overscroll.horizontal_threshold_complete

overscroll.vertical_threshold_complete

overscroll.minimum_threshold_start

overscroll.minimum_threshold_start_touchpad

overscroll.vertical_threshold_start

overscroll.horizontal_resist_threshold

overscroll.vertical_resist_threshold

ya.send_install

ya.last_welcome_page_version

ya.clids

ya.banerid

ya.update_failures

ya.update_last_failure

ya.welcome_page

ya.custom_cookies

ya.bar.ui

ya.bar.uuid

ya.bar.r1

ya.statistics.last_default_check_time

ya.statistics.enabled

ya.tab_finder_enabled_once

ya.crash_dumps_checkbox_was_set

ya.crash_dumps_checkbox_was_set_at_1_0_1084_5404

ya.disk.installer_etag

ya.vk.show_infobar

ya.vk.last_shown

ya.vk.clicks_left

ya.last_runned_version

ya.last_runned_partner_id

ya.education.enabled

ya.custo_education.enabled

ya.searchness.enabled

ya.all_sb_chunks_downloaded_time

ya.splitview.enabled

ya.splitview.visible

ya.sync.device.push_id

ya.sync.device.name

ya.block_flash

ya.extensions_to_replace

ya.mute_state

ya.background_animation.enabled

ya.background_animation.disable_on_low_battery

ya.notifications.extension_settings_migrated

ya.notifications.migrated_fb_token

ya.notifications.migrated_fb_token_expires_in

ya.notifications.migrated_vk_token

ya.notifications.migrated_vk_token_expires_in

ya.notifications.silent_mode_until

ya.notifications.silent_mode

ya.notifications.fb.enabled

ya.notifications.fb.show.comments

ya.notifications.fb.show.friend_requests

ya.notifications.fb.show.messages

ya.notifications.fb.view_content

ya.notifications.fb.num_invitations_shown

ya.notifications.fb.last_time_invitation_shown

ya.notifications.fb.share_accepted

ya.notifications.fb.last_share_propose_time

ya.notifications.vk.enabled

ya.notifications.vk.show.comments

ya.notifications.vk.show.friend_requests

ya.notifications.vk.show.messages

ya.notifications.vk.view_content

ya.notifications.vk.num_invitations_shown

ya.notifications.vk.last_time_invitation_shown

ya.notifications.vk.share_accepted

ya.notifications.vk.last_share_propose_time

ya.notifications.yamail.enabled

ya.notifications.yamail.view_content

show.comments

show.friend_requests

show.messages

omnibox-infobar-panel.enabled

omnibox-infobar-panel.disabled

searchness.disabled

ya.persist_state_updated

network_profile.warnings_left

network_profile.last_warning_time

ya.feedback.update_date

ya.smartback.dictionary_last_modified

torrents.open_mode

apps.app_launch_for_metro_restart

apps.app_launch_for_metro_restart_profile

apps.shortcuts_version

module_conflict.bubble_shown

settings.privacy.drm_salt

settings.privacy.drm_enabled

browser.allow_discard_tabs

browser.allow_discard_tabs_updated

profile.extensions.activity_log.num_consumers_active

proxy.quick_check_enabled

profile.browser_guest_enabled

profile.add_person_enabled

ya.show_newtab_search_arrow

ya.popup_block_enabled

ya.plugin_restricted_document_kinds

ya.custo_tab_activation_order_on_tab_close

ya.custo_ui_first_time_launch

easy_unlock.hardlock_state

password_bubble.timestamp

password_bubble.nopes

password_bubble.interactions

ya.tablo.snapshot_click_map

license_url

feedback.url

conf_policy_url

hXXp://legal.yandex.ru/browser_agreement/

hXXp://legal.yandex.ru/confidential/

SHELL32.dll

ole32.dll

OLEAUT32.dll

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

%s-%Iu

u\uX

Dictionary keys must be quoted.

Unsupported encoding. JSON must be UTF-8.

full-memory-crash-report

(0x%X)

Error (0x%X) while retrieving error. (0x%X)

(%d = %3.1f%%)

Histogram: %s recorded %d samples

(flags = 0x%x)

PlatformFile.UnknownErrors.Windows

user32.dll

0123456789

.syzygy

.thunks

Line: %i, column: %i, %s

D:\BuildAgent\work\9d1bc32700498ce4\src\out\Release\initialexe\browser.exe.pdb

browser.exe

ClearBreakpadPipeEnvironmentVariable

ClearCrashKeyValueImpl

SetCrashKeyValueImpl

SignalChromeElf

browser_elf.dll

WINMM.dll

VERSION.dll

SHLWAPI.dll

RegEnumKeyExW

RegQueryInfoKeyW

RegCreateKeyExW

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

GetAsyncKeyState

CloseWindowStation

CreateWindowStationW

SetProcessWindowStation

USER32.dll

GetProcessHeap

GetWindowsDirectoryW

CreateIoCompletionPort

GetProcessHandleCount

KERNEL32.dll

USERENV.dll

WTSAPI32.dll

GetCPInfo

SetNamedPipeHandleState

TransactNamedPipe

WaitNamedPipeW

zcÁ

.ccc]

.IDATx

.aU/@G

\]]]]_]^

.owO[

.RwuWee

o.yST

G.HIJ

]]][\^__^\]`

i.snh

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="Win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><dependency><dependentAssembly><assemblyIdentity type="win32" name="40.0.2214.3645" version="40.0.2214.3645" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>

0%1X2

0"0)040=0

9%:0:>:]:~:

5-5v5}5

4$4044484

1 1$1(1,10141

8,;0;4;8;<;

6(7,707\7

5$5(5,50545

2 2$2(2,2024282<2

1 1$1,1@1`1

7 7$7(7,707

registering_chrome

uninstalling_chrome_frame

eyndxstp.exe

{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}

app_host.exe

browser.dll

browser_child.dll

npbrowser_frame.dll

browser_frame_helper.dll

browser_frame_helper.exe

browser_launcher.exe

metro_driver.dll

new_browser.exe

old_browser.exe

delegate_execute.exe

nacl64.exe

setup.exe

InstallerSuccessLaunchCmdLine

YandexSSHTM

{45033924-ABD6-4063-AD60-71925CDE206E}

{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}

{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}

Browse the web

Software\Microsoft\Windows\CurrentVersion\Uninstall\Chromium

-chrome

-chromeframe

{8A69D345-D564-463C-AFF1-A69D9E530F96}

{430FD4D0-B729-4F61-AA34-91526481799D}

GoogleUpdateSetup.exe

CFEndTempOptOutCmd

CFOptInCmd

CFOptOutCmd

CFTempOptOutCmd

UninstallCmdLine

WebAccessible

3E40F524-16FA-440A-B919-B44AB355B174

service_update.exe

winrt_helper.dll

{5FAFC90A-D443-4E4F-B69B-DA1F8D553C6C}

d-d-%d

hXXp://browser.

%d.%d.%d

Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser

Google Chrome App Launcher

ChromeAppList

tSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher

{8BA986DA-5100-405E-AA35-86F34A02ACBF}

Google Chrome Frame

Google\Chrome Frame

Chrome in a Frame.

Uninstall Chrome Frame

Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame

\\.\pipe\GoogleCrashServices\

\\.\pipe\YandexCrashServices

error %u

ntdll.dll

chrome.exe

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_TEXT

HKEY_PERFORMANCE_NLSTEXT

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

pipe\

kernelbase.dll

eKey

gdi32.dll

xntdll.dll

wow_helper.exe"

shell32.dll

Reported Crashes.txt

testing_interface.dll

Origin Bound Certs

Certificate Revocation Lists

Custom Dictionary.txt

Login Data

Cached Theme.pak

Web Applications

pepflashplayer.dll

CHROME_METRO_NAV_SEARCH_REQUEST

CHROME_METRO_GET_CURRENT_TAB_INFO

CHROME_METRO_SETTINGS_COMMAND

gcswf32.dll

pdf.dll

yapdf.dll

yadocviewer.dll

npmedia_plugin.dll

pepper/libppeffects.dll

Crash Reports

crash_service.exe

script.log

resources.pak

${windows}

hunspecified-crash-key

%u.%s

reported

mscoree.dll

ADVAPI32.DLL

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

USER32.DLL

portuguese-brazilian

dbghelp.dll

rpcrt4.dll

crash_service.exe --max-reports=10

%s\%s.dmp

x-x-x-xx-xxxxxx

Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32

Software\Microsoft\Windows\CurrentVersion\Run

.Chrome_MessagePumpWindow_%p

Ndebug.log

.\debug.log

\StringFileInfo\xx\%ls

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Crash Reports\events\308.crashed

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe

chrome_exe

40.0.2214.115

15.2.2214.3645

browser.exe_3316_rwx_15A0A000_00078000:

h%C!$

BrowserManager.exe_3556:

.text

`.rdata

@.data

.rsrc

@.reloc

[email protected]

SShk~

<:%u4

t8Ht.HHt#

.FAy$

uIu

#t.Ht

.6.78.9:;

B.CDEFFG

j.Yf;

_tcPVj@

.PjRW

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

operator

GetProcessWindowStation

CryptoMaterial: this object does not support precomputation

\Local Storage\chrome-extension_mgkbofmmnlpcojllljenlamflhidfkna_0.localstorage

CREATE TABLE ItemTable(key TEXT,value BLOB NOT NULL);

INSERT INTO ItemTable(key,value) VALUES(?,?)

select id, short_name, url from keywords where sync_guid='

SQL error:

CHROME

FIREFOX

OPERA

OPERA_BLINK

SQLite format 3

REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYWITHOUTERELEASEATTACHAVINGROUPDATEBEGINNERECURSIVEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTRIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY

CREATE TABLE sqlite_master(

sql text

3.8.7

CREATE TEMP TABLE sqlite_temp_master(

search_url

.NET not found

d:d:d

hrcheck::operator =

.html key val

Ext   Url - Ok

TBrowserList::SetIEKeyInXPAsDefaultBrowser

b.CapPath is empty

Can't load library shell32.dll

Rigester Firefox as default browser with Mozilla's utils

Mozilla's helper.exe path:

windows-1251

implementation::Chrome::IsPreferencesFileHaveExtensions

web_url

chrome_settings_overrides

keyword

implementation::Chrome::ExtensionsManager::AppendExtension

implementation::Chrome::ExtensionsManager::GetGoogleChromeBrowserInstalledExtensionsIds

implementation::Chrome::ExtensionsManager::ReadExtensions

implementation::Chrome::ReadExtensions

ya.ru

yandex.ru

yandex.ua

yandex.kz

yandex.by

yandex.com

yandex.com.tr

mail.ru

rambler.ru

google.ru

google.com

bing.com

ru.yahoo.com

yahoo.com

symantec.com

mcafee.com

trendmicro.com.ru

esetnod32.ru

kaspersky.ru

vk.com

vkontakte.ru

odnoklassniki.ru

facebook.com

twitter.com

ask.fm

formspring.me

fb.com

ucoz.ru

liveinternet.ru

ShellExecuteEx

need check show-dlg.exe

Dangerous urls:

TKey::Monitor

RegOpenKeyEx

TKey::Continue

TKey::OnChange

TDefaultBrowserKey::TDefaultBrowserKey

Ok, key exist.

TDefaultBrowserKey::OnChange

TRegisteredApplicationKey::TRegisteredApplicationKey

Key created.

TRegisteredApplicationKey::OnChange

TInstalledApplicationKey::OnChange

TInstalledApplicationKey_User32::TInstalledApplicationKey_User32

Can't load locale.xml

Can't open Uninstall key.

RegEnumKeyEx

Can't load advapi32.dll

Function CreateProcessWithTokenW not found in advapi32.dll

cmdline:

Web Data file?

[email protected] dialog was opened

TMonitor::CheckBrowserExe

marked as installed, but .exe does not exist.

ChromeSetup.exe

YandexElement uptime

YandexElement installer finished. Call FindChanges at 3 sec.

OperaCrutchPath

Opera crutch:

template_url_data

Can't load Seeder.dll

GetHomepageUrl

SetHomepageUrl

GetStartPage not found in seeder.dll

ReleaseStartPage not found in seeder.dll

m_GetDfltQS res: !0, Id: 0, It maybe read GC QS error in seeder.dll

SearchEngine->Url is NULL, try to restore

Restored url is different:

dflt || url is NULL

Id not changed, but url is different.

QS not found, url:

values for URLSearchHooks

Url is NULL

Should not take not yandex Urls

application/x-moz-keywordsearch

backup error: Url is NULL.

, url:

Url is empty

SetCookie not found in seeder.dll

clck.yandex.ru

Can't get exe path from shortcut:

ImportDlgParams error.

BrowserManagerGUI.exe started, try to show...

No path to BrowserManagerGUI.exe.

BrowserManagerGUI.exe

show-dlg.exe terminated

[email protected] was

Windows Vista or later

Windows XP or Windows Server 2003

Version less than Windows XP

m_tnd.uID == 0

MakeVersionUrl

Mail.Ru -

Chrome - Google Chrome

@Mail.Ru -

Mail.Ru - Chrome Web Ma

- Google Chrome

@Mail.Ru - Chrome Web Ma

Yahoo Extension - Chrome Web Ma

Google Arama - Chrome Web Ma

- Chrome Web Ma

Yandex arama - Chrome Web Ma

Yandex - Chrome Web Ma

Chrome Web Ma

- Uygulamalar - Google Chrome

@Mail.Ru - Chrome Web Store - Google Chrome

MSN Homepage & Bing Search Engine - Chrome Web Ma

Google Search - Chrome Web Store - Google Chrome

Mail.Ru - Chrome Web Store - Google Chrome

- Chrome Web Store - Google Chrome

Yahoo Extension - Chrome Web Store - Google Chrome

Yandex arama - Chrome Web Store - Google Chrome

Yandex.Homepage - Chrome Web Store - Google Chrome

Yandex - Chrome Web Store - Google Chrome

MSN Homepage & Bing Search Engine - Chrome Web Store - Google Chrome

Opera'y

lan Web taray

Opera

Opera

NullRNG: NullRNG should only be passed to functions that don't need to generate random bytes

: this object doesn't support multiple channels

Line %d, Column %d

xx.xx.xxxx

d.d.d

Log started at: %s

Can't open key:

JustUtil::EnumKeys

JustUtil::RemoveKey

RegOpenKeyExW

Can't delete key.

Can't create key:

TEnvironment::Execute

Not Windows NT

%d.%d.%d.%d

vendor.xml

The key in Software\Yandex founded.

Try to check key under Vista

Key not exist.

The key in Software\AppDataLow\Yandex founded.

JustUtil::ExportDlgParams

JustUtil::ImportParams

JustUtil::ImportDlgParams

Microsoft Windows 98

SQLITE_

d-d-d d:d:d

d-d-d

failed to allocate %u bytes of memory

failed memory resize %u to %u bytes

API call with %s database connection pointer

922337203685477580

RowKey

GetProcessHeap

os_win.c:%d: (%lu) %s(%s) - %s

delayed %dms for lock/sharing conflict

%s-shm

%s%c%s

recovered %d pages from %s

recovered %d frames from WAL file %s

cannot limit WAL size: %s

invalid page number %d

Failed to read ptrmap key=%d

2nd reference to page %d

%d of %d pages missing from overflow list starting at %d

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

freelist leaf count too big on page %d

failed to get page %d

unable to get the page. error code=%d

Page %d:

On tree page %d cell %d:

btreeInitPage() returns error code %d

On page %d at right child:

Corruption detected in cell %d on page %d

Fragmentation of %d bytes reported as %d on page %d

Multiple uses for byte %d of page %d

Pointer map page %d is referenced

Page %d is never used

unknown database %s

Outstanding page count goes from %d to %d during this analysis

%s(%d)

%s-mjXXXXXX9XXz

MJ collide: %s

MJ delete: %s

FOREIGN KEY constraint failed

-mjX9X

unable to use function %s in the requested context

bind on a busy prepared statement: [%s]

zeroblob(%d)

FOREIGN KEY

%s constraint failed: %s

abort at %d in [%s]: %s

cannot open savepoint - SQL statements in progress

%s constraint failed

cannot release savepoint - SQL statements in progress

no such savepoint: %s

cannot commit transaction - SQL statements in progress

sqlite_temp_master

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

sqlite_master

cannot change %s wal mode from within a transaction

statement aborts at %d: [%s] %s

database table is locked: %s

cannot open value of type %s

cannot open table without rowid: %s

cannot open virtual table: %s

no such column: "%s"

cannot open view: %s

indexed

foreign key

cannot open %s column for writing

misuse of aliased aggregate %s

%s: %s.%s

%s: %s.%s.%s

%s prohibited in partial index WHERE clauses

%s: %s

%s prohibited in CHECK constraints

not authorized to use function: %s

%r %s BY term out of range - should be between 1 and %d

too many terms in %s BY clause

Expression tree is too large (maximum depth %d)

too many SQL variables

variable number must be between ?1 and ?%d

too many columns in %s

EXECUTE %s%s SUBQUERY %d

misuse of aggregate: %s()

hex literal too big: %s

%s%.*s"%w"

%.*s"%w"%s

sqlite_rename_trigger

sqlite_rename_table

sqlite_rename_parent

type='trigger' AND (%s)

%s OR name=%Q

sqlite_

there is already another table or index with this name: %s

table %s may not be altered

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

view %s may not be altered

sqlite_sequence

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

Cannot add a PRIMARY KEY column

UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q

sqlite_stat1

sqlite_altertab_%s

sqlite_stat3

CREATE TABLE %Q.%s(%s)

sqlite_stat4

DELETE FROM %Q.%s WHERE %s=%Q

SELECT tbl,idx,stat FROM %Q.sqlite_stat1

too many attached databases - max %d

database %s is already in use

unable to open database: %s

cannot detach database %s

no such database: %s

database %s is locked

sqlite_attach

sqlite_detach

%s cannot use variables

%s %T cannot reference objects in database %s

access to %s.%s.%s is prohibited

access to %s.%s is prohibited

object name reserved for internal use: %s

there is already an index named %s

duplicate column name: %s

too many columns on %s

table "%s" has more than one primary key

default value of column [%s] is not constant

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

PRIMARY KEY missing on table %s

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

CREATE %s %.*s

CREATE TABLE %Q.sqlite_sequence(name,seq)

view %s is circularly defined

sqlite_stat%d

UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

DELETE FROM %Q.sqlite_sequence WHERE name=%Q

table %s may not be dropped

sqlite_stat

use DROP VIEW to delete view %s

use DROP TABLE to delete table %s

number of columns in foreign key does not match the number of columns in the referenced table

foreign key on %s should reference only one column of table %T

unknown column "%s" in foreign key definition

cannot create a TEMP index on non-TEMP table "%s"

views may not be indexed

table %s may not be indexed

there is already a table named %s

virtual tables may not be indexed

sqlite_autoindex_%s_%d

index %s already exists

table %s has no column named %s

CREATE%s INDEX %.*s

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

no such index: %S

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

a JOIN clause is required before %s

%s.%s

unable to identify the object to be reindexed

%s.rowid

no such collation sequence: %s

duplicate WITH table name: %s

cannot modify %s because it is a view

table %s may not be modified

sqlite_source_id

sqlite_version

sqlite_compileoption_used

sqlite_log

sqlite_compileoption_get

foreign key mismatch - "%w" referencing "%w"

table %S has no column named %s

%d values for %d columns

table %S has %d columns but %d values were supplied

unable to open shared library [%s]

sqlite3_extension_init

sqlite3_

no entry point [%s] in shared library [%s]

automatic extension loading failed: %s

error during initialization: %s

defer_foreign_keys

foreign_key_list

foreign_key_check

foreign_keys

NULL value in %s.%s

*** in database %s ***

unsupported encoding: %s

malformed database schema (%s)

%s - %s

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

unsupported file format

database schema is locked: %s

unknown or unsupported join type: %T %T%s%T

a NATURAL join may not have an ON or USING clause

RIGHT and FULL OUTER JOINs are not currently supported

cannot join using column %s - column not present in both tables

cannot have both ON and USING clauses in the same join

USE TEMP B-TREE FOR %s

COMPOUND SUBQUERIES %d AND %d %s(%s)

%s:%d

column%d

LIMIT clause should come after %s not before

ORDER BY clause should come after %s not before

SELECTs to the left and right of %s do not have the same number of result columns

multiple references to recursive table: %s

no such index: %s

table %s has %d values for %d columns

circular reference: %s

recursive reference in a subquery: %s

multiple recursive references: %s

too many references to "%s": max 65535

sqlite_sq_%p

no such table: %s

%s.%s.%s

SCAN TABLE %s%s%s

sqlite3_get_table() called with two or more incompatible queries

cannot create %s trigger on view: %S

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

cannot create INSTEAD OF trigger on table: %S

no such trigger: %S

no such column: %s

-- TRIGGER %s

cannot VACUUM - SQL statements in progress

PRAGMA vacuum_db.synchronous=OFF

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND coalesce(rootpage,1)>0

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND coalesce(rootpage,1)>0

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d

vtable constructor did not declare schema: %s

vtable constructor failed: %s

no such module: %s

automatic index on %s(%s)

table %s: xBestIndex returned an invalid plan

ANY(%s)

SUBQUERY %d

AS %s

TABLE %s

PRIMARY KEY

INDEX %s

COVERING INDEX %s

USING INTEGER PRIMARY KEY

%s.xBestIndex() malfunction

VIRTUAL TABLE INDEX %d:%s

at most %d tables in a join

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

SQL logic error or missing database

unknown operation

large file support is disabled

unknown database: %s

no such %s mode: %s

no such vfs: %s

%s mode not allowed: %s

misuse at line %d of [%.10s]

database corruption at line %d of [%.10s]

cannot open file at line %d of [%.10s]

C:\BuildAgent\work\aefcf70f046f33fb\Release\BrowserManager.pdb

GdiplusShutdown

gdiplus.dll

KERNEL32.dll

EnumChildWindows

USER32.dll

GDI32.dll

RegNotifyChangeKeyValue

RegCloseKey

RegEnumKeyExW

CryptImportKey

CryptDestroyKey

ADVAPI32.dll

ShellExecuteW

ShellExecuteExW

SHELL32.dll

ole32.dll

OLEAUT32.dll

SHLWAPI.dll

WS2_32.dll

VERSION.dll

PSAPI.DLL

GetCPInfo

RegDeleteKeyW

RegCreateKeyExW

zcÁ

GET /click/dtype=stred/pid=12/cid=72085/path=%s/* HTTP/1.1

User-Agent: curl/1.1

Host: clck.yandex.ru

Accept: *.*

.?AVPublicKey@CryptoPP@@

.?AV?$ASN1CryptoMaterial@VPublicKey@CryptoPP@@@CryptoPP@@

.?AVX509PublicKey@CryptoPP@@

.?AVTInstalledApplicationKey_User64@@

.?AVTInstalledApplicationKey_User32@@

.?AVTInstalledApplicationKey@@

.?AVTKey@@

.?AVTInstalledApplicationKey_Machine64@@

.?AVTInstalledApplicationKey_Machine32@@

.?AVTRegisteredApplicationKey@@

.?AVTDefaultBrowserKey@@

.PAVRSAFunction@CryptoPP@@

.?AUNoChannelSupport@BufferedTransformation@CryptoPP@@

<requestedExecutionLevel level='asInvoker' uiAccess='false' />

1"191[1}1

>">3>:>@>

8!9/939@9

7Œ:|:F;M;T;];d;k;

? ?$?(?,?0?4?

2%2U2

> >$>(>,>

2(272\2~2

004080<0

8 8$8(8,8

,?0?4?8?<?@?

3,383@3`3|3

combase.dll

kernel32.dll

mscoree.dll

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

portuguese-brazilian

USER32.DLL

BrowserManager.exe

Software\Microsoft\Windows\CurrentVersion\Run

InstallerSuccessLaunchCmdLine

.Version

locale.xml

Google Chrome

@Mail.Ru

Mozilla Firefox

Opera

{yandex:baseURL}

{google:baseURL}

google.ua

google.by

google.kz

google.com.tr

google.com.ua

google.com.by

go.mail.ru

%systemroot%\Microsoft.NET\Framework

%d.%d

change.list

{9B8F4903-6357-422b-9081-68D0FE17DFF5}

FIREFOX.EXE

IEXPLORE.EXE

OperaStable

Opera Developer

Nichrome

safari.exe

\URLAssociations

.html

Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice

SOFTWARE\Classes\Applications\iexplore.exe\shell\open\command

Software\Classes\.htm

Software\Classes\.html

URL:File Transfer Protocol

Software\Classes\ftp

@ieframe.dll,-905

Software\Classes\ftp\shell

Software\Classes\ftp\shell\open\command

"%1",,-1,0,,,,

Software\Classes\ftp\shell\open\ddeexec

URL:HyperText Transfer Protocol

Software\Classes\http

@ieframe.dll,-903

Software\Classes\http\shell

Software\Classes\http\shell\open\command

Software\Classes\http\shell\open\ddeexec

URL:HyperText Transfer Protocol with Privacy

Software\Classes\https

@ieframe.dll,-904

Software\Classes\https\shell

Software\Classes\https\shell\open\command

Software\Classes\https\shell\open\ddeexec

rShell32.dll

\uninstall\helper.exe /SetAsDefaultAppUser

SYSTEM\CurrentControlSet\services\Tcpip\Parameters

%SystemRoot%\system32\drivers\etc\

u\fixhosts.exe

MagicKey

{34700894-16CA-43a3-91E2-4A393296F164}

e\show-dlg.exe

statistics.xml

Software\Microsoft\Windows\CurrentVersion\Uninstall

SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall

loc.txt

tray_msg

{F6940649-CF51-4f0a-83A0-D75DD6F97DAD}-opt-m3-wnd-helper

{F6940649-CF51-4f0a-83A0-D75DD6F97DAD}-br_opt-m3-wnd-helper

{F6940649-CF51-4f0a-83A0-D75DD6F97DAD}-popup-m3-wnd-helper

{F6940649-CF51-4f0a-83A0-D75DD6F97DAD}-about-m3-wnd-helper

M3-{68AED032-01D8-4e68-9C75-AB6FD5E5D673}

{715F00D8-4727-4036-ACA6-4F8744777EB2}

.run-

.chrome.exe

{DB4DADFC-F3DC-476a-B164-2A39659FEAB6}

\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}

@ieframe.dll,-12512

hXXp://VVV.bing.com/search?q={searchTerms}&FORM=IE8SRC

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

rAdvapi32.dll

m3-new.log

BrowserManagerShow.exe

t\BrowserManagerShow.exe:res

\u2-ctrl.exe:res

{D60DE913-EB89-48d2-A455-9F6C687EEC97}-OnResolve

opera.exe

firefox.exe

kchromesetup.exe

eYandexElement.exe

Software\Opera Software

launcher.exe

VVV.google.com

search.live.com

com.tr

nredir.opera.com

\Web Data

hXXps://chrome.google.com/webstore/detail/

Seeder.dll

:\Seeder.dll

.google.

Software\Microsoft\Internet Explorer\URLSearchHooks

{CFBFAE00-17A6-11D0-99CB-00C04FD64497}

INSERT OR REPLACE INTO keywords (id, input_encodings, favicon_url, instant_url,keyword, short_name, prepopulate_id, url, suggest_url, sync_guid, show_in_default_list) VALUES('13','UTF-8','hXXp://VVV.yandex.ru/favicon.ico','','yandex.ru','%prod','15','hXXp://yandex.%dom/yandsearch?clid=%clid&text={searchTerms}','hXXp://suggest.yandex.%dom/suggest-ff.cgi?part={searchTerms}','', 1)

<SearchPlugin xmlns="hXXp://VVV.mozilla.org/2006/browser/search/">

<Url type="text/html" method="GET" template="hXXp://yandex.%dom/yandsearch?text={searchTerms}&from=os&clid=%clid"/>

<Url type="application/x-suggestions json" method="GET" template="hXXp://suggest.yandex.%dom/suggest-ff.cgi?part={searchTerms}"/>

<Url type="application/x-moz-keywordsearch" method="GET" template="hXXp://yandex.%dom/yandsearch?clid=œlid&text={searchTerms}"/>

URL=hXXp://yandex.ru/yandsearch?clid=%clid&text=%s

ru_logo.ico

en_logo.ico

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\%scopeId]

"URL"="hXXp://yandex.%dom/yandsearch?clid=%clid&text={searchTerms}"

"SuggestionsURL_JSON"="hXXp://suggest.yandex.%dom/suggest-ff.cgi?part={searchTerms}"

%scopeId

yandex.xml

%clid

œlid

; expires = Wed, 01 - Jan - 2020 00:00 : 00 GMT; Domain = .yandex.ru

.yandex.ru

extensions.json

prefs.js

Web Data

\Opera\Opera\widgets\widgets.dat

iexplore.exe

nichrome.exe

dragon.exe

browser.exe

tr-tr.facebook.com

mail.ru.lnk

{F6940649-CF51-4f0a-83A0-D75DD6F97DAD}-

Guard.Mail.ru

[email protected]

hXXp://download.cdn.yandex.net/bm/version.tr.rss

hXXp://download.cdn.yandex.net/bm/version.rss

hXXp://download.cdn.yandex.net/bm/version.kk.rss

hXXp://download.cdn.yandex.net/bm/version.uk.rss

hXXp://soft.export.yandex.ru/status.xml

https

hXXp://

yandex.net

dGuardMailRu.exe

MozillaDialogClass

OperaWindowClass

Opera

Use Opera as default web browser

Opera,

- Opera

Chrome_WidgetWin_0

Chrome_WidgetWin_1

Tercihler - Opera

Preferences - Opera

Ayarlar - Google Chrome

Settings - Google Chrome

- Nichrome

Mail.ru:

SOFTWARE\Google\Chrome\Extensions

shell32.dll

\StringFileInfo\xx\%s

SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

Microsoft Windows

Web Edition

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q246009

Microsoft Windows 95

Microsoft Windows Millennium Edition

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManager.exe

2.1.2.577

browser.exe_3120:

.text

`.rdata

@.data

.rsrc

@.reloc

HtdHtHHHt.HH

j.Yf;

_tcPVj@

.PjRW

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\chrome_exe_main_win.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\client_util.cc

No valid Chrome version found

Failed to load Chrome DLL from

ChromeMain

RelaunchChromeBrowserWithNewCommandLineIfNeeded

Could not find exported function

allow-insecure-websocket-from-https-origin

disable-webgl

disable-web-security

enable-experimental-web-platform-features

enable-tcp-fastopen

enable-viewport

enable-viewport-meta

enable-vtune-support

enable-webgl-draft-extensions

enable-webgl-image-chromium

enable-web-midi

enable-webkit-find-restart

ignore-certificate-errors

remote-debugging-port

renderer-cmd-prefix

testing-fixed-http-port

testing-fixed-https-port

trace-upload-url

utility-cmd-prefix

zygote-cmd-prefix

disable-webrtc-hw-decoding

disable-webrtc-encryption

disable-webrtc-hw-encoding

enable-webrtc-hw-vp8-encoding

enable-webrtc-hw-h264-encoding

disable-webaudio

opera

1.3.21.115

%s-x-x

Chrome

0.0.0.0-devel

%s-%x

url-chunk

font_key_name

subresource_url

CHROME_MAIN_TIME

%x-%x

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\google_update_settings.cc

auto-launch-chrome

chrome

chrome-sxs

new-setup-exe

register-dev-chrome

register-url-protocol

rename-browser-exe

update-setup-exe

toast-results-key

Cannot initialize AppCommands from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_commands.cc

Failed to open key "

Skipping over key "

make-browser-default-after-import

silent-first-import

ya_permanent_state.brand_id

ya_permanent_state.base_host

ya_permanent_state.partner_id

ya_permanent_state.uninstall_survey_url

yandex.ru

iexplore.exe

googlechromeapphost

googlechromeframe

Cannot initialize an AppCommand from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_command.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\language_selector.cc

CHROME_BREAKPAD_PIPE_NAME

CHROME_BREAKPAD_EVENT_NAME

d:\buildagent\work\9d1bc32700498ce4\src\components\crash\app\breakpad_win.cc

NTDLL.DLL

kernel32.dll

d:\buildagent\work\9d1bc32700498ce4\src\sandbox\win\src\sandbox_policy_base.cc

CreateNamedPipeW

NtCreateKey

NtOpenKey

NtOpenKeyEx

AudioCaptureAllowedUrls

AutoSelectCertificateForUrls

ChromeFrameContentTypes

ChromeFrameRendererSettings

ChromeOsLockOnIdleSuspend

ChromeOsMultiProfileUserBehavior

ChromeOsReleaseChannel

ChromeOsReleaseChannelDelegated

CloudPrintProxyEnabled

CloudPrintSubmitEnabled

ContentPackManualBehaviorURLs

CookiesAllowedForUrls

CookiesBlockedForUrls

CookiesSessionOnlyForUrls

DefaultSearchProviderAlternateURLs

DefaultSearchProviderIconURL

DefaultSearchProviderImageURL

DefaultSearchProviderImageURLPostParams

DefaultSearchProviderInstantURL

DefaultSearchProviderInstantURLPostParams

DefaultSearchProviderKeyword

DefaultSearchProviderNewTabURL

DefaultSearchProviderSearchTermsReplacementKey

DefaultSearchProviderSearchURL

DefaultSearchProviderSearchURLPostParams

DefaultSearchProviderSuggestURL

DefaultSearchProviderSuggestURLPostParams

DeviceAllowRedeemChromeOsRegistrationOffers

DeviceLocalAccountAutoLoginBailoutEnabled

DeviceLocalAccountAutoLoginDelay

DeviceLocalAccountAutoLoginId

DeviceLoginScreenDefaultHighContrastEnabled

DeviceLoginScreenDefaultLargeCursorEnabled

DeviceLoginScreenDefaultScreenMagnifierType

DeviceLoginScreenDefaultSpokenFeedbackEnabled

DeviceLoginScreenDefaultVirtualKeyboardEnabled

DeviceLoginScreenPowerManagement

DeviceLoginScreenSaverId

DeviceLoginScreenSaverTimeout

DeviceMetricsReportingEnabled

DeviceStartUpUrls

DeviceUpdateHttpDownloadsEnabled

EnableAuthNegotiatePort

EnableDeprecatedWebPlatformFeatures

EnableOriginBoundCerts

EnableWebBasedSignin

EnterpriseWebStoreName

EnterpriseWebStoreURL

HideWebStoreIcon

HideWebStorePromo

ImagesAllowedForUrls

ImagesBlockedForUrls

ImportAutofillFormData

ImportBookmarks

ImportHistory

ImportHomepage

ImportSavedPasswords

ImportSearchEngine

JavaScriptAllowedForUrls

JavaScriptBlockedForUrls

KeyboardDefaultToFunctionKeys

MetricsReportingEnabled

NotificationsAllowedForUrls

NotificationsBlockedForUrls

PasswordManagerAllowShowPasswords

PasswordManagerEnabled

PluginsAllowedForUrls

PluginsBlockedForUrls

PopupsAllowedForUrls

PopupsBlockedForUrls

ProxyBypassList

ProxyPacUrl

RemoteAccessHostAllowClientPairing

RemoteAccessHostAllowGnubbyAuth

RemoteAccessHostAllowRelayedConnection

RemoteAccessHostDomain

RemoteAccessHostFirewallTraversal

RemoteAccessHostRequireCurtain

RemoteAccessHostRequireTwoFactor

RemoteAccessHostTalkGadgetPrefix

RemoteAccessHostUdpPortRange

RenderInChromeFrameList

ReportDeviceActivityTimes

ReportDeviceBootMode

ReportDeviceLocation

ReportDeviceNetworkInterfaces

ReportDeviceUsers

ReportDeviceVersionInfo

RestoreOnStartupURLs

ShowAppsShortcutInBookmarkBar

SuppressChromeFrameTurndownPrompt

TermsOfServiceURL

TouchVirtualKeyboardEnabled

URLBlacklist

URLWhitelist

VideoCaptureAllowedUrls

VirtualKeyboardEnabled

update_url

^update_url:

CHROME_VERSION

CHROME_SAFE_MODE

2676A9A2-D919-4FEE-9187-152100393AB2

ignore-urlfetcher-cert-requests

install-chrome-app

install-ephemeral-app-from-webstore

pack-extension-key

permission-request-api-url

promo-server-url

proxy-bypass-list

proxy-pac-url

remember-cert-error-decisions

spelling-service-feedback-url

try-chrome-again

variations-server-url

winhttp-proxy-resolver

ya-url-copy-safe-text

skip-first-import

plugins-metadata-server-url

windows8-search

allow-http-screen-capture

app-list-start-page-url

apps-checkout-url

apps-gallery-download-url

apps-gallery-url

apps-gallery-update-url

certificate-transparency-log

disable-extensions-http-throttling

disable-password-manager-reauthentication

disable-quic-port-selection

disable-save-password-bubble

disable-web-resources

enable-auth-negotiate-port

enable-npn-http

enable-quic-port-selection

enable-save-password-bubble

enable-sdch-over-https

enable-user-controlled-alternate-protocol-ports

enable-websocket-over-spdy

enable-website-settings-manager

explicitly-allowed-ports

extensions-not-webstore

help-url

40.0.2214.3645

CHROME_HEADLESS

CHROME_LOG_FILE

CHROME_METRO_CONNECTED

CHROMEOS_SESSION_LOG_DIR

CHROME_CRASHED

CHROME_RESTART

profile.ephemeral_mode

profile.icon_version

session.restore_on_startup

session.restore_on_startup_migrated

session.startup_urls_migration_time

session.restore_to_homepage_if_empty

profile.exited_cleanly

profile.exit_type

profile.managed.custodian_email

profile.managed.custodian_name

profile.managed.custodian_profile_image_url

profile.managed.custodian_profile_url

profile.managed.manual_hosts

profile.managed.manual_urls

profile.managed.second_custodian_email

profile.managed.second_custodian_name

profile.managed.second_custodian_profile_image_url

profile.managed.second_custodian_profile_url

profile.managed.shared_settings

session.startup_urls

session.urls_to_restore_on_startup

intl.app_locale

intl.charset_default

intl.accept_languages

intl.applied_brand_package_accept_languages

intl.static_encodings

webkit.webprefs.fonts.standard.Zyyy

webkit.webprefs.fonts.fixed.Zyyy

webkit.webprefs.fonts.serif.Zyyy

webkit.webprefs.fonts.sansserif.Zyyy

webkit.webprefs.fonts.cursive.Zyyy

webkit.webprefs.fonts.fantasy.Zyyy

webkit.webprefs.fonts.pictograph.Zyyy

webkit.webprefs.fonts.standard

webkit.webprefs.fonts.fixed

webkit.webprefs.fonts.serif

webkit.webprefs.fonts.sansserif

webkit.webprefs.fonts.cursive

webkit.webprefs.fonts.fantasy

webkit.webprefs.fonts.pictograph

webkit.webprefs.fonts.standard.Arab

webkit.webprefs.fonts.fixed.Arab

webkit.webprefs.fonts.serif.Arab

webkit.webprefs.fonts.sansserif.Arab

webkit.webprefs.fonts.standard.Cyrl

webkit.webprefs.fonts.fixed.Cyrl

webkit.webprefs.fonts.serif.Cyrl

webkit.webprefs.fonts.sansserif.Cyrl

webkit.webprefs.fonts.standard.Grek

webkit.webprefs.fonts.fixed.Grek

webkit.webprefs.fonts.serif.Grek

webkit.webprefs.fonts.sansserif.Grek

webkit.webprefs.fonts.standard.Jpan

webkit.webprefs.fonts.fixed.Jpan

webkit.webprefs.fonts.serif.Jpan

webkit.webprefs.fonts.sansserif.Jpan

webkit.webprefs.fonts.standard.Hang

webkit.webprefs.fonts.fixed.Hang

webkit.webprefs.fonts.serif.Hang

webkit.webprefs.fonts.sansserif.Hang

webkit.webprefs.fonts.cursive.Hang

webkit.webprefs.fonts.standard.Hans

webkit.webprefs.fonts.fixed.Hans

webkit.webprefs.fonts.serif.Hans

webkit.webprefs.fonts.sansserif.Hans

webkit.webprefs.fonts.standard.Hant

webkit.webprefs.fonts.fixed.Hant

webkit.webprefs.fonts.serif.Hant

webkit.webprefs.fonts.sansserif.Hant

webkit.webprefs.default_font_size

webkit.webprefs.default_fixed_font_size

webkit.webprefs.minimum_font_size

webkit.webprefs.minimum_logical_font_size

webkit.webprefs.javascript_enabled

webkit.webprefs.web_security_enabled

webkit.webprefs.javascript_can_open_windows_automatically

webkit.webprefs.loads_images_automatically

webkit.webprefs.plugins_enabled

webkit.webprefs.dom_paste_enabled

webkit.webprefs.shrinks_standalone_images_to_fit

webkit.webprefs.uses_universal_detector

webkit.webprefs.text_areas_are_resizable

webkit.webprefs.java_enabled

webkit.webprefs.tabs_to_links

webkit.webprefs.allow_displaying_insecure_content

webkit.webprefs.allow_running_insecure_content

safebrowsing.enabled

safebrowsing.extended_reporting_enabled

safebrowsing.proceed_anyway_disabled

safebrowsing.incident_report_sent

safebrowsing.incidents_sent

incognito.mode_availability

search.suggest_enabled

browser.confirm_to_quit

security.cookie_behavior

download.prompt_for_download

alternate_error_pages.enabled

dns_prefetching.startup_list

dns_prefetching.host_referral_list

spdy.disabled

net.http_server_properties

spdy.servers

spdy.alternate_protocol

protocol.disabled_schemes

instant_ui.zero_suggest_url_prefix

local_state.multiple_profile_prefs_version

dns_prefetching.enabled

net.network_prediction_options

hide_web_store_icon

browser.show_home_button

browser.show_ya_button

browser.show_tablo_on_click

browser.last_session_empty

browser.session_empty

browser.use_mouse_gestures

browser.enable_page_expiration

browser.do_not_count_page_expiration_infobar_closings

profile.recently_selected_encodings

browser.clear_data.browsing_history

browser.clear_data.download_history

browser.clear_data.cache

browser.clear_data.cookies

browser.clear_data.passwords

browser.clear_data.form_data

browser.clear_data.hosted_apps_data

browser.clear_data.content_licenses

browser.enable_spellchecking

browser.speechinput_censor_results

browser.speechinput_tray_notification_shown_contexts

browser.enabled_labs_experiments

ya.experiments_edited_by_user

ya.distrib_default_experiments

browser.enable_autospellcorrect

history.saving_disabled

ya.settings.text_wrap

history.deleting_enabled

settings.force_safesearch

settings.history_recorded

browser.clear_data.time_period

browser.last_clear_browsing_data_time

extensions.theme.pack

extensions.theme.id

extensions.theme.images

extensions.theme.colors

extensions.theme.tints

extensions.theme.properties

extensions.ui.developer_mode

extensions.commands

plugins.last_internal_directory

plugins.plugins_list

plugins.plugins_disabled

plugins.plugins_disabled_exceptions

plugins.plugins_enabled

plugins.migrated_to_pepper_flash

plugins.removed_old_component_pepper_flash_settings

plugins.show_details

plugins.allow_outdated

plugins.always_authorize

plugins.metadata

plugins.resource_cache_update

browser.check_default_browser

browser.default_browser_setting_enabled

browser.custom_chrome_frame

profile.content_settings.plugin_whitelist

profile.block_third_party_cookies

profile.clear_site_data_on_exit

partition.default_zoom_level

profile.default_zoom_level

partition.per_host_zoom_levels

profile.per_host_zoom_levels

autofill.data_model_default

autofill.pay_without_wallet

autofill.wallet_location_disclosure

autofill.save_data

autofill.wallet_shipping_same_as_billing

autofill.generated_card_bubble_times_shown

autofill.rac_dialog_defaults

breadcrumbs.enabled

push_to_call.enabled

push_to_call.wasenabled

ya.disk.want_install

context_translate.enabled

context_translate.translate_words

enable_deprecated_web_platform_features

import_last_source_browser

import_autofill_form_data

import_bookmarks

import_history

import_home_page

import_saved_passwords

import_cookies

import_last_session

import_extensions

import_speed_dial

import_other

ya.statistics.import_rollback

ya.import_new_source_type

ya.import_new_source_profile

import_search_engine

profile.avatar_index

profile.using_default_name

profile.name

profile.using_default_avatar

profile.using_gaia_avatar

profile.managed_user_id

profile.gaia_info_update_time

profile.gaia_info_picture_url

profile.avatar_bubble_tutorial_shown

printing.enabled

printing.print_preview_disabled

profile.managed.default_filtering_behavior

profile.managed_user_creation_allowed

profile.managed_users

profile.reset_prompt_memento

message_center.disabled_extension_ids

message_center.disabled_system_component_ids

message_center.welcome_notification_dismissed

message_center.welcome_notification_dismissed_local

message_center.welcome_notification_previously_popped_up

message_center.welcome_notification_expiration_timestamp

fullscreen.allowed

local_discovery.notifications_enabled

prefs.preference_reset_time

ya.prefetch.latest_update_list

ya.tablo_pins.instance_id

gcm.channel_enabled

gcm.push_messaging_registration_count

easy_unlock.allowed

easy_unlock.enabled

easy_unlock.pairing

easy_unlock.proximity_required

easy_unlock.show_tutorial

zerosuggest.cachedresults

signin.error_stats_update_time

ssl.rev_checking.enabled

ssl.rev_checking.required_for_local_anchors

ssl.version_min

ssl.version_max

ssl.version_fallback_min

ssl.cipher_suites.blacklist

ssl.ssl_record_splitting.disabled

ssl.ssl_blocking_bypassed

user_experience_metrics.reporting_enabled

profile.last_used

profile.last_active_profiles

profile.profiles_created

profile.info_cache

profile.created_by_version

profile.reset_prompt_mementos

user_experience_metrics.stability.page_load_count

user_experience_metrics.stability.renderer_crash_count

user_experience_metrics.stability.extension_renderer_crash_count

user_experience_metrics.stability.renderer_hang_count

user_experience_metrics.stability.child_process_crash_count

user_experience_metrics.stability.other_user_crash_count

user_experience_metrics.stability.kernel_crash_count

user_experience_metrics.stability.system_unclean_shutdowns

user_experience_metrics.stability.plugin_stats2

uninstall_metrics.page_load_count

uninstall_metrics.last_launch_time_sec

uninstall_metrics.last_observed_running_time_sec

browser.suppress_default_browser_prompt_for_version

browser.window_placement

browser.window_placement_popup

task_manager.window_placement

browser.app_window_placement

renderer.memory_cache.size

download.default_directory

download.default_directory_display_name

download.extensions_to_open

download.directory_upgrade

download.open_pdf_in_system_reader

savefile.default_directory

savefile.type

select_file_dialogs.allowed

filebrowser.tasks.default_by_mime_type

filebrowser.tasks.default_by_suffix

selectfile.last_directory

browser.hung_plugin_detect_freq

browser.plugin_message_response_timeout

spellcheck.dictionary

spellcheck.use_spelling_service

protocol_handler.excluded_schemes

safe_browsing.client_key

safe_browsing.wrapped_key

options_window.last_tab_index

certificate_manager_window.last_tab_index

browser.show_omnibox_share_buttons

browser.last_redirect_origin

shutdown.type

shutdown.num_processes

shutdown.num_processes_slow

restart.last.session.on.shutdown

was.restarted

relaunch.mode

extensions.disabled

plugins.disable_plugin_finder

ntp.app_page_names

ntp.collapsed_open_tabs

ntp.collapsed_foreign_sessions

ntp.collapsed_recently_closed_tabs

ntp.collapsed_snapshot_document

ntp.collapsed_sync_promo

ntp.date_resource_server

ntp.most_visited_blacklist

ntp.promo_desktop_session_found

ntp.promo_resource_cache_update

ntp.shown_bookmarks_folder

ntp.shown_page

ntp.tips_resource_server

ntp.webstore_enabled

devtools.adb_key

devtools.disabled

devtools.discover_usb_devices

devtools.edited_files

devtools.file_system_paths

devtools.open_docked

devtools.port_forwarding_enabled

devtools.port_forwarding_default_set

devtools.port_forwarding_config

google.services.password_hash

invalidation_service.use_gcm_channel

sync_promo.startup_count

sync_promo.user_skipped

sync_promo.show_on_first_run_allowed

sync_promo.show_ntp_bubble

browser.web_app.create_on_desktop

browser.web_app.create_in_apps_menu

browser.web_app.create_in_quick_launch_bar

geolocation.access_token

media.default_audio_capture_device

media.default_video_capture_Device

media.device_id_salt

remote_access.host_firewall_traversal

remote_access.host_require_two_factor

remote_access.host_domain

remote_access.host_talkgadget_prefix

remote_access.host_require_curtain

remote_access.host_allow_client_pairing

remote_access.host_allow_gnubby_auth

remote_access.host_allow_relayed_connection

remote_access.host_udp_port_range

printing.print_preview_sticky_settings

cloud_print.dialog_size.width

cloud_print.dialog_size.height

cloud_print.signin_dialog_size.width

cloud_print.signin_dialog_size.height

cloud_print.enabled

cloud_print.proxy_id

cloud_print.auth_token

cloud_print.xmpp_auth_token

cloud_print.email

cloud_print.print_system_settings

cloud_print.enable_job_poll

cloud_print.robot_refresh_token

cloud_print.robot_email

cloud_print.user_settings.connectNewPrinters

cloud_print.xmpp_ping_enabled

cloud_print.xmpp_ping_timeout_sec

cloud_print.user_settings.printers

cloud_print.submit_enabled

cloud_print.user_settings

net.max_connections_per_proxy

hardware.audio_capture_enabled

hardware.audio_capture_allowed_urls

hardware.video_capture_enabled

hardware.video_capture_allowed_urls

hotword.search_enabled_2

hotword.always_on_search_enabled

hotword.audio_logging_enabled

hotword.audio_history_enabled

hotword.previous_language

browser.clear_lso_data_enabled

browser.pepper_flash_settings_enabled

browser.disk_cache_dir

browser.disk_cache_size

browser.last_default_status

browser.media_cache_size

cros.system.releaseChannel

feedback.performance_tracing_enabled

background_contents.registered

browser.shown_autolaunch_infobar

auth.schemes

auth.disable_negotiate_cname_lookup

auth.enable_negotiate_port

auth.server_whitelist

auth.negotiate_delegate_whitelist

auth.gssapi_library_name

auth.allow_cross_origin_prompt

async_dns.enabled

custom_handlers.registered_protocol_handlers

custom_handlers.ignored_protocol_handlers

custom_handlers.policy.registered_protocol_handlers

custom_handlers.policy.ignored_protocol_handlers

custom_handlers.enabled

background_mode.enabled

hardware_acceleration_mode.enabled

policy.device_refresh_rate

message_center.showed_first_run_balloon

message_center.show_icon

message_center.was_forced_on_taskbar

browser.attempted_to_enable_autoupdate

media_galleries.gallery_id

media_galleries.remembered_galleries

media_galleries.last_scan_time

shelf_chrome_icon_index

gesture.max_separation_for_gesture_touches_in_pixels

gesture.semi_long_press_time_in_ms

gesture.tab_scrub_activation_delay_in_ms

gesture.fling_max_cancel_to_down_time_in_ms

gesture.fling_max_tap_gap_time_in_ms

overscroll.horizontal_threshold_complete

overscroll.vertical_threshold_complete

overscroll.minimum_threshold_start

overscroll.minimum_threshold_start_touchpad

overscroll.vertical_threshold_start

overscroll.horizontal_resist_threshold

overscroll.vertical_resist_threshold

ya.send_install

ya.last_welcome_page_version

ya.clids

ya.banerid

ya.update_failures

ya.update_last_failure

ya.welcome_page

ya.custom_cookies

ya.bar.ui

ya.bar.uuid

ya.bar.r1

ya.statistics.last_default_check_time

ya.statistics.enabled

ya.tab_finder_enabled_once

ya.crash_dumps_checkbox_was_set

ya.crash_dumps_checkbox_was_set_at_1_0_1084_5404

ya.disk.installer_etag

ya.vk.show_infobar

ya.vk.last_shown

ya.vk.clicks_left

ya.last_runned_version

ya.last_runned_partner_id

ya.education.enabled

ya.custo_education.enabled

ya.searchness.enabled

ya.all_sb_chunks_downloaded_time

ya.splitview.enabled

ya.splitview.visible

ya.sync.device.push_id

ya.sync.device.name

ya.block_flash

ya.extensions_to_replace

ya.mute_state

ya.background_animation.enabled

ya.background_animation.disable_on_low_battery

ya.notifications.extension_settings_migrated

ya.notifications.migrated_fb_token

ya.notifications.migrated_fb_token_expires_in

ya.notifications.migrated_vk_token

ya.notifications.migrated_vk_token_expires_in

ya.notifications.silent_mode_until

ya.notifications.silent_mode

ya.notifications.fb.enabled

ya.notifications.fb.show.comments

ya.notifications.fb.show.friend_requests

ya.notifications.fb.show.messages

ya.notifications.fb.view_content

ya.notifications.fb.num_invitations_shown

ya.notifications.fb.last_time_invitation_shown

ya.notifications.fb.share_accepted

ya.notifications.fb.last_share_propose_time

ya.notifications.vk.enabled

ya.notifications.vk.show.comments

ya.notifications.vk.show.friend_requests

ya.notifications.vk.show.messages

ya.notifications.vk.view_content

ya.notifications.vk.num_invitations_shown

ya.notifications.vk.last_time_invitation_shown

ya.notifications.vk.share_accepted

ya.notifications.vk.last_share_propose_time

ya.notifications.yamail.enabled

ya.notifications.yamail.view_content

show.comments

show.friend_requests

show.messages

omnibox-infobar-panel.enabled

omnibox-infobar-panel.disabled

searchness.disabled

ya.persist_state_updated

network_profile.warnings_left

network_profile.last_warning_time

ya.feedback.update_date

ya.smartback.dictionary_last_modified

torrents.open_mode

apps.app_launch_for_metro_restart

apps.app_launch_for_metro_restart_profile

apps.shortcuts_version

module_conflict.bubble_shown

settings.privacy.drm_salt

settings.privacy.drm_enabled

browser.allow_discard_tabs

browser.allow_discard_tabs_updated

profile.extensions.activity_log.num_consumers_active

proxy.quick_check_enabled

profile.browser_guest_enabled

profile.add_person_enabled

ya.show_newtab_search_arrow

ya.popup_block_enabled

ya.plugin_restricted_document_kinds

ya.custo_tab_activation_order_on_tab_close

ya.custo_ui_first_time_launch

easy_unlock.hardlock_state

password_bubble.timestamp

password_bubble.nopes

password_bubble.interactions

ya.tablo.snapshot_click_map

license_url

feedback.url

conf_policy_url

hXXp://legal.yandex.ru/browser_agreement/

hXXp://legal.yandex.ru/confidential/

SHELL32.dll

ole32.dll

OLEAUT32.dll

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

%s-%Iu

u\uX

Dictionary keys must be quoted.

Unsupported encoding. JSON must be UTF-8.

full-memory-crash-report

(0x%X)

Error (0x%X) while retrieving error. (0x%X)

(%d = %3.1f%%)

Histogram: %s recorded %d samples

(flags = 0x%x)

PlatformFile.UnknownErrors.Windows

user32.dll

0123456789

.syzygy

.thunks

Line: %i, column: %i, %s

D:\BuildAgent\work\9d1bc32700498ce4\src\out\Release\initialexe\browser.exe.pdb

browser.exe

ClearBreakpadPipeEnvironmentVariable

ClearCrashKeyValueImpl

SetCrashKeyValueImpl

SignalChromeElf

browser_elf.dll

WINMM.dll

VERSION.dll

SHLWAPI.dll

RegEnumKeyExW

RegQueryInfoKeyW

RegCreateKeyExW

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

GetAsyncKeyState

CloseWindowStation

CreateWindowStationW

SetProcessWindowStation

USER32.dll

GetProcessHeap

GetWindowsDirectoryW

CreateIoCompletionPort

GetProcessHandleCount

KERNEL32.dll

USERENV.dll

WTSAPI32.dll

GetCPInfo

SetNamedPipeHandleState

TransactNamedPipe

WaitNamedPipeW

zcÁ

.ccc]

.IDATx

.aU/@G

\]]]]_]^

.owO[

.RwuWee

o.yST

G.HIJ

]]][\^__^\]`

i.snh

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="Win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><dependency><dependentAssembly><assemblyIdentity type="win32" name="40.0.2214.3645" version="40.0.2214.3645" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>

0%1X2

0"0)040=0

9%:0:>:]:~:

5-5v5}5

4$4044484

1 1$1(1,10141

8,;0;4;8;<;

6(7,707\7

5$5(5,50545

2 2$2(2,2024282<2

1 1$1,1@1`1

7 7$7(7,707

registering_chrome

uninstalling_chrome_frame

eyndxstp.exe

{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}

app_host.exe

browser.dll

browser_child.dll

npbrowser_frame.dll

browser_frame_helper.dll

browser_frame_helper.exe

browser_launcher.exe

metro_driver.dll

new_browser.exe

old_browser.exe

delegate_execute.exe

nacl64.exe

setup.exe

InstallerSuccessLaunchCmdLine

YandexSSHTM

{45033924-ABD6-4063-AD60-71925CDE206E}

{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}

{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}

Browse the web

Software\Microsoft\Windows\CurrentVersion\Uninstall\Chromium

-chrome

-chromeframe

{8A69D345-D564-463C-AFF1-A69D9E530F96}

{430FD4D0-B729-4F61-AA34-91526481799D}

GoogleUpdateSetup.exe

CFEndTempOptOutCmd

CFOptInCmd

CFOptOutCmd

CFTempOptOutCmd

UninstallCmdLine

WebAccessible

3E40F524-16FA-440A-B919-B44AB355B174

service_update.exe

winrt_helper.dll

{5FAFC90A-D443-4E4F-B69B-DA1F8D553C6C}

d-d-%d

hXXp://browser.

%d.%d.%d

Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser

Google Chrome App Launcher

ChromeAppList

tSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher

{8BA986DA-5100-405E-AA35-86F34A02ACBF}

Google Chrome Frame

Google\Chrome Frame

Chrome in a Frame.

Uninstall Chrome Frame

Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame

\\.\pipe\GoogleCrashServices\

\\.\pipe\YandexCrashServices

error %u

ntdll.dll

chrome.exe

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_TEXT

HKEY_PERFORMANCE_NLSTEXT

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

pipe\

kernelbase.dll

eKey

gdi32.dll

xntdll.dll

wow_helper.exe"

shell32.dll

Reported Crashes.txt

testing_interface.dll

Origin Bound Certs

Certificate Revocation Lists

Custom Dictionary.txt

Login Data

Cached Theme.pak

Web Applications

pepflashplayer.dll

CHROME_METRO_NAV_SEARCH_REQUEST

CHROME_METRO_GET_CURRENT_TAB_INFO

CHROME_METRO_SETTINGS_COMMAND

gcswf32.dll

pdf.dll

yapdf.dll

yadocviewer.dll

npmedia_plugin.dll

pepper/libppeffects.dll

Crash Reports

crash_service.exe

script.log

resources.pak

${windows}

hunspecified-crash-key

%u.%s

reported

mscoree.dll

ADVAPI32.DLL

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

USER32.DLL

portuguese-brazilian

dbghelp.dll

rpcrt4.dll

crash_service.exe --max-reports=10

%s\%s.dmp

x-x-x-xx-xxxxxx

Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32

Software\Microsoft\Windows\CurrentVersion\Run

.Chrome_MessagePumpWindow_%p

Ndebug.log

.\debug.log

\StringFileInfo\xx\%ls

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Crash Reports\events\3120.crashed

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe

chrome_exe

40.0.2214.115

15.2.2214.3645

browser.exe_3120_rwx_34B0A000_000F5000:

PSSSh

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):

BrowserManager.exe:3544
BrowserManager.exe:3556
BrowserManager.exe:3700
MSI23E3.tmp:2424
MSI23E3.tmp:3192
Yandex.exe:2956
YandexPackSetup.exe:1900
YandexPackSetup.exe:3380
sender.exe:2944
BrowserManagerShow.exe:3668
downloader.exe:612
downloader.exe:2100
rundll32.exe:3188
rundll32.exe:3300
rundll32.exe:1812
setup.exe:1836
MsiExec.exe:3368
MsiExec.exe:2936
MsiExec.exe:2652
MsiExec.exe:2020
MsiExec.exe:3088
MsiExec.exe:1400
MsiExec.exe:2160
MsiExec.exe:1880
elements64.exe:868
elements64.exe:3080
elements64.exe:4016
%original file name%.exe:1372
lite_installer.exe:2368
lite_installer.exe:1996
32ae6a225b45400b5695711fea8b1c8c.tmp:2132
u2-ctrl.exe:2596
u2-ctrl.exe:3616
yupdate-exec.exe:4008
yupdate-exec.exe:3660
yupdate-exec.exe:3376
yupdate-exec.exe:4048
yupdate-exec.exe:3124
yupdate-exec.exe:472
yupdate-exec.exe:3700
yupdate-exec.exe:3312
yupdate-ctrl.exe:2596
{0D136A26-C947-4287-995F-53C965D35271}.exe:2956
clidmgr.exe:3144
ybCF6E.tmp:1688
browser.exe:3612
browser.exe:3392
browser.exe:612
browser.exe:3552
browser.exe:3512
browser.exe:3860
browser.exe:3740
browser.exe:4000
browser.exe:3576
browser.exe:3520
browser.exe:3536
browser.exe:3952
browser.exe:3148
Delete the original Trojan file.
Delete or disinfect the following files created/modified by the Trojan:

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3-new.log (815 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences (207 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\fe48e668bc070b6eb695bcc951b8d603\browserconfig.properties (111 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\omni.ja_20150425082807.zip (44854 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\cookies.sqlite (3144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\cookies.sqlite-wal (4026 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\hosts (198 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\key (577 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js_20150425082811.backup (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\scut (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\show-dlg.exe.bcp (2498 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\dlgs (448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\scut-last (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Preferences (1005 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Preferences (1005 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\fe48e668bc070b6eb695bcc951b8d603\region.properties (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\change.list (2867 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\RYEY7BIH.txt (692 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal (6361 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\params (19855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Preferences (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\prfs (273 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\qs_bcp (1797 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\hp (748 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\features (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\backup00000.reg (3960 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\ui (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\seeder.dll (884 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\stat.2424.log (559 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\seed.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\downloader.3192.log (198176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexPackSetup.exe (503 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\info[2].rss (827 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\YandexPackSetup[2].exe (300295 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\yapin\Yandex.website (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\yapin\Yandex.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex.website (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex (2).lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_D3608457E1FE68B6E4E2A2305EEC5297 (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\GFK308WX.txt (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\828298824EA5549947C17DDABF6871F5_4A500E9AA7C5573906560F21D53A5861 (1312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\sprites[1].png (3503 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\JLROZ6MK.txt (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\jquery.min[1].js (71732 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\hit[1].gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\PH1JV527.txt (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\plagiatus[1].htm (2576 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\828298824EA5549947C17DDABF6871F5_4A500E9AA7C5573906560F21D53A5861 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D (1056 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\index_sprites[1].png (5351 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\collect[1].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\130[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\0Y7BFQ69.txt (220 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D (724 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\analytics[1].js (16603 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_D3608457E1FE68B6E4E2A2305EEC5297 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YandexElementsIE00000.log (232988 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{97DA2459-9AC9-49B0-BE2B-6F1E7E24D829}\YandexElementsIE.msi (41116 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D84E548583BE1EE7DB5A935821009D26_5B98B6CD6E69202676965CF5B0E2A7A7 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\1033\thm.wxl (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BAEBE581FCB73249406FC21094EA252E_BC0CE803EF41A748738619ED7838EEFC (1520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerPackage (61727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\state.rsm (1360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\1058\thm.wxl (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\wixstdba.dll (2725 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ÃÅ“ÃÂµÃÂ½ÃÂµÃÂ´ÃÂ¶ÃÂµÃ‘â‚¬_ÃÂ±Ã‘â‚¬ÃÂ°Ã‘Æ’ÃÂ·ÃÂµÃ‘â‚¬ÃÂ¾ÃÂ²_20150425082803.log (21372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\1055\thm.wxl (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\logo.png (852 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ÃÅ“ÃÂµÃÂ½ÃÂµÃÂ´ÃÂ¶ÃÂµÃ‘â‚¬_ÃÂ±Ã‘â‚¬ÃÂ°Ã‘Æ’ÃÂ·ÃÂµÃ‘â‚¬ÃÂ¾ÃÂ²_20150425082803_0_BrowserManagerPackage.log (152414 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\1049\thm.wxl (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\thm.xml (632 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.be\BrowserManagerInstaller.exe (66528 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\thm.wxl (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerInstaller.exe (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D84E548583BE1EE7DB5A935821009D26_5B98B6CD6E69202676965CF5B0E2A7A7 (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\BootstrapperApplicationData.xml (259 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\logoside.png (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BAEBE581FCB73249406FC21094EA252E_BC0CE803EF41A748738619ED7838EEFC (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\statisticsex.log (1006 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe:res (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3-ctrl.log (4215 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_84DF081C52E32C6CC02A8FC17AEFEC2C (1536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\downloader.log612 (2355448 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1504 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\info[1].rss (827 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\YandexPackSetup[1].exe (3018895 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_84DF081C52E32C6CC02A8FC17AEFEC2C (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\stat.log2100 (548 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\statistics[1] (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\fastdial\backgrounds.xml (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\cs\icons\yandex-130x52.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\product[8] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\product[1] (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\product[6] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\clckr[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\config[1] (456 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\product[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\ru\fastdial\config.dtd (607 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\clckr[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\applications\vb.json (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\product[7] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\migrate.ver (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\fastdial\backgrounds\earth.jpg (550 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\fastdial\clckr.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\fastdial\config.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\tr\fastdial\config.dtd (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\kk\fastdial\config.dtd (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\product[7] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\about\product.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\be\fastdial\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\search\dictionary.txt (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\cs\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\product[6] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\config[6] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\tr\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\passport\passport.xml (192 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\Install.log (50852 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\kk\about\product.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\be\about\product.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\product[8] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\config[3] (613 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\config[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\product[3] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\uk\fastdial\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\kk\fastdial\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\product[5] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\config[7] (456 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\en\icons\yandex-130x52.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\vb\fav\fav_full.xml (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\product[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\config[2] (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\statistics\statistics.xml (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\domaingroups[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\product[4] (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\product[5] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\uk\about\product.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\en\fastdial\config.dtd (456 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\domaingroups[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\statistics[1] (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\config[4] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\product[2] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\ru\fastdial\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\cs\fastdial\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\tr\icons\yandex-65x26.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\en\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\favorites[1] (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\config[5] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\en\fastdial\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\config[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\cs\icons\yandex-65x26.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\tr\icons\yandex-130x52.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\product[3] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\config[4] (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\product[4] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\ru\about\product.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\config[2] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\uk\fastdial\config.dtd (611 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\migrateFromBar (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\fastdial\backgrounds\wp_almost_white_small.jpeg (781 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\product[4] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\blocked_domains.json (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\config[5] (607 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\fastdial\domaingroups.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\cs\fastdial\config.dtd (607 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\product[3] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\config[3] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\tr\fastdial\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\backgrounds[1] (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\vb\fav\fav_lite.xml (575 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\product[3] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\config[6] (611 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\en\icons\yandex-65x26.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\ie\product.xml (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\backgrounds[1] (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\product[2] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\fastdial\blacklist.xml (702 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{D6C3F92D-6665-4B28-B9FA-73AAE84BFA2D}\locale\be\fastdial\config.dtd (613 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\locale\uk\yavideo.dtd (936 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_-sn_n.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\friendslocked.png (724 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\birth.png (559 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\accelerators[1] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\rambler[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\facebook_on.png (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\userinfo.dtd (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\tr\branding\yandex\search.dtd (629 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\slovari.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\ovc_-sn.png (534 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\ui.js (1099 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\birth_pin.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\groups.png (708 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\quote\quotelist.dtd (84 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\icons\icon.png (856 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\esync64.dll (809 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\news_feed.png (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_-ra_d.png (798 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\browser\browserconf.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\maps[1] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\quote\currency_down.png (570 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\nointernet\_music-nointernet.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\money.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\mailru.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\webmaster64.dll (2472 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_ ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\ui\now\images\b-wind_arrow.png (179 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\twitter[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\_\4E65815M2vf3ujtn2jbo66SmbWo.gif (872 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.BodyEscHandler.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\style.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\ovc_ ra.png (369 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\2-16.png (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\kk\altsearch.dtd (182 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\accelerators[2] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\be\typesquatting.dtd (683 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\mailru[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\be\altsearch.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_gr.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\mail[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.MainRenderer.js (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\userinfo.dtd (573 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\stardust.dll (458 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\typesquatting.messages.xml (718 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\kk\services.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\ru\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\icons\twitter-fresh.png (720 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\accelerators[3] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\pagetranslator\langs.xml (365 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_d.png (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\ru\slice\js\dtconverter.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\branding\ua\search.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml.zip (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\index.html (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\buttons\images\button-route.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\cs\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\kk\slice\network-error.html (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\maps[2] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\radio.dll (1727 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml.zip (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\mail[4] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\_\51qf_exXMsPx--9srpStfhZ9p3g.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\quote\stock_down.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\ovc_ra.png (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\locale\kk\campaign.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml.zip (13122 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\5-16.png (771 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\maps[2] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\locale\cs\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\locale\be\campaign.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\translator.dtd (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\market[1] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\ovc_ra.png (532 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\uk\slice\js\dtconverter.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\kk\branding\yandex\search.dtd (685 bytes)
%Program Files% (x86)\Yandex\Common\elements.exe (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\offline-19.png (705 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\cut-url.png (367 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\branding\tb\search.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\mc[1] (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\kk\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\ru\typesquatting.dtd (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\lingvo[1] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\toolbar\autoinst.xml (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\cs\logobutton\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\icons\twitter-locked.png (739 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\geolocation.dtd (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\mailru64.dll (1609 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\mail.dtd (633 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\ico-odnoklassniki-32.png (932 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_ts_ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\kk\typesquatting.dtd (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\locale\en\browseroffer.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\ic.dtd (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_ ra_n.png (679 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\brand\uk\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\subscription[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\bg75.png (109 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\uk\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\9-16.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\ru\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\en\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\pagetranslator.xml (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\esync[1] (439 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\noflash\img\b-music-noflash.png (520 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\moikrug.dtd (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_-ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\ui\messages\images\reply.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\_\X31pO5JJJKEifJ7sfvuf3mGeD_8.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\yandex[2] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\pagetranslator.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\main-adapter.js (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\locale\tr\facebook.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\brand\tb\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\locale\kk\vkontakte.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\maps.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bl.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\altsearch.dll (983 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\locale\be\direct.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\market[2] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.Renderer.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\brand\tb\stations.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\avatar-48.png (559 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\radio.xml (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\say-alternate.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\kk\browser\browserconf.dtd (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\ovc_gr.png (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\style.css (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\accelerators[1] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\maps[1] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\odnoklassniki[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\ua\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\campaign.xml (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_ra_d.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\defaults[1] (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\tr\slice\network-error.html (466 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\mail[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\money.dtd (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\gray-16.png (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\ua\translator\extrainfo.dtd (104 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\icons\metrika_16_key.png (698 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\ovc_ ra.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\town\townlist.dtd (82 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_sn_d.svg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\facebook[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\icons\webmaster.png (756 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\newsfeed.png (364 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\index.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\about\product.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\brand\ua\sblinks.dtd (369 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.localization.js (572 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\gmail.settings.dtd (55 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\icons\Direct_locked_2.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\esync.xml (476 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\follow-button-unfollow.png (762 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\locale\en\esync.dtd (335 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\webmaster.dll (551 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\uk\services.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\login.dtd (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\icons\warning.png (514 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\locale\uk\vkontakte.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\suggest-help.png (238 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\locale\kk\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\browserconf[1] (382 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\locale\uk\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\be\smartbox.dtd (836 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml.zip (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\0-16.png (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_ sn_d.png (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_ra_n.png (676 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\money.dtd (340 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\metrika.xml (901 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\skc_d-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\icons\mc\badge\active_hover.png (374 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\skc_d.png (896 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_ra_d.png (807 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\reply.png (255 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_sn_n.png (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\html\nosignal.gif (1138 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\main-logic.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\locale\uk\radio.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\applications\elements.json (168 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\ovc_-sn.png (395 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\html\network-error-cs.html (474 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\search\dictionary.txt (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\tr\mc.dtd (289 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\icons\ramblerlock.png (552 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\follow-button-following.png (747 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\campaign.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\_\w3fZdbIEslxR_9CQRR-ezRNUZ_Q.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\uk\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\tr\altsearch.dtd (142 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\ic.dtd (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\quote[1] (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\geolocation.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\facebook.dll (1805 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\accelerators[4] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\tb\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\translator.dtd (336 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\cs\altsearch.dtd (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\market[2] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\ru\slice\network-error.html (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\uk\altsearch.dtd (199 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\cy.messages.xml (915 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\subscription\add.png (779 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\quote\quotelist.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\en\smartbox.dtd (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\music.dtd (328 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\mail.dtd (482 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\pagetranslator\pagetranslator.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\yandex[1] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\quote.dtd (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\odnoklassniki.messages.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\sblinks.dtd (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\narod.png (739 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\translator.dtd (260 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bl.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\accelerators[2] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\profile[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\webmaster.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bl.png (927 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\campaign[1] (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\translator.dtd (346 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\be\slice\js\dtconverter.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\readability\readability.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\quote\quotelist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\ovc_ sn.png (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\common.dtd (188 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\smartbox64.dll (326 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\quote\export.dtd (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\cs\smartbox.dtd (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\town[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\textonly.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\quote.messages.xml (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\ru\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\main-logic.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\slovari[1] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\4-16.png (721 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\style-authpages.css (499 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\userinfo.dtd (533 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\noteslocked.png (552 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\brand\yandex\extra.dtd (413 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_ ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\brand\ua\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\common[2] (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\music.dtd (487 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\tb\userinfo\passport.dtd (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\vkontakte64.dll (2590 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml.zip (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\gmail.dll (2001 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\say-default.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\follow-button-over.png (819 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\geolocation.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\presets\http://bar.yandex.ru/packages/yandexbar.xml (126 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_ra_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\main_pin.png (795 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\mailru[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\locale\kk\odnoklassniki.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\icons\yavideo_off.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\html\network-error-en.html (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\ui\messages\images\read.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\metrika.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\money.dtd (362 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\icons\site_noauth.png (826 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\locale\en\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\moikrug.dtd (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\icons\reload.png (578 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\market.xml (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\locale\uk\campaign.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_ sn_n.png (671 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\yandex[1] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\kk\smartbox.dtd (812 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\lingvo[4] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\textonly.dtd (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\rambler.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_ sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_-ra_n.png (562 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\tr\gmail.links.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\nointernet\img\b-music-noinet.png (919 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_sn_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.Overlay.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\html\throbber.html (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\icons\rambler.png (428 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\ic\6.png (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\smartbox.png (643 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\be\mc.dtd (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\yandex.ico (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_ ra_d.png (907 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\kk\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\suggest-settings.png (334 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\ic.dtd (567 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\music\music.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\messagesmark.png (597 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\common[1] (570 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\mail\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\.manifest[1] (132 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\pipka.png (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\auth_overlay.png (216 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110\elements.exe (7726 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\twitter64.dll (1727 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\rambler.dll (1687 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\town\geobase.xml (1451 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\gmail.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\route-form\images\form-close.png (273 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_-ra_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\messages-bg-bottom.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\mail[2] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\maps[2] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\subscription\subscription.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\locale\ru\vkontakte.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\tr\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\ui.css (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\quote.dtd (674 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\nointernet\_music-nointernet.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\mailru.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\uk\branding\yandex\search.dtd (683 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\money.png (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\geolocation.dtd (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\tr\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\translator.dtd (274 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\common.dtd (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\friends_requests.png (887 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\market[2] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\uk\logobutton\logoconf.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\buttons\images\button-ball-all.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\ovc_ ra.png (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\games.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_n.png (569 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\be\services.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\friend.png (668 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\en\slice\throbber.html (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\ui\messages\images\mail-logo-uk.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_ sn_d.png (850 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\odnoklassniki[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\maps.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\ru\altsearch.dtd (467 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\audio.png (510 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\icons\browser.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\browseroffer.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\mail.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\direct64.dll (1060 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\slovari.xml (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\fg_n.png (386 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\skc_d.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\town\townlist.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\browseroffer64.dll (1651 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\smartbox.dll (1171 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\town\geobase.xml (747 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\money\money.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\lenta[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\autoinst[1] (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\messageslocked.png (614 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\ovc_ts_ra.png (714 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\mail\mail-menu.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\ObjectParser.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\locale\ru\metrika.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\ic[1] (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\accelerators[4] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\market[2] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\3-16.png (773 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\ui.ie9.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\ovc_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\cs\slice\js\dtconverter.js (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\twitter.messages.xml (742 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\mc.messages.xml (681 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\webmaster[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.MessageComposer.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\fotki[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\locale\ru\direct.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_ ra_d.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\noflash\_music-noflash.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\product[2] (475 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\locale\be\yavideo.dtd (938 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_-sn_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\mail.dtd (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\altsearch.xml (526 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\rambler.png (655 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\status.png (473 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\tr\slice\throbber.html (355 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\kk\mc.dtd (354 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\brand\yandex\sblinks.dtd (596 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\fav-0.png (248 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\brand\ua\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\textonly.xml (405 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\direct.dll (1295 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\sb64.dll (253 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\icons\gmail.png (507 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\kk\logobutton\logoconf.dtd (71 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_ ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\photo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\be\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\addressbox-search.png (592 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\login.xml (511 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\nointernet\music-nointernet.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\quote\quotelist.xml (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\shadow-5-round.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\ovc_-ra.png (470 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\skc_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\profile.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\music[1] (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\icons\off.png (454 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\icons\site_settings.png (707 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\style.css (980 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\altsearch.messages.xml (236 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\uk\typesquatting.dtd (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_ ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\Install.log (355206 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\logo.dtd (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\mail\mail.png (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\ovc_-ra.png (635 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\icons\campaign_locked2.png (831 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\main-ui.js (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\facebook.messages.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\geolocation[1] (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\userinfo[1] (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_ ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\profile.messages.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\style.css (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml.zip (3361 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\yandex.ico (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\uk\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\locale\en\yavideo.dtd (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\buttons\images\button-yellow.png (358 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\kk\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\selected-item.png (235 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\pagetranslator.messages.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\skc_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110\elements64.exe (10177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\radio[1] (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\ru\slice\throbber.html (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_-ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\icons\icon.png (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\locale\kk\radio.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\logo.dtd (140 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\groupsmark.png (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\ua\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\gray-bird-of-sadness.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_sn_d.png (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\lingvo.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\money.dtd (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\userinfo.xml (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\route-form\images\button-route.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\about\logo-ie-small.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\town\geobase.xml (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\moikrug[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\mail.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\lingvo[3] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.depends.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\pagetranslator\injector.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\stations.json (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\ic\3.png (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\avatar-overlay.png (109 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\icons\campaign-off.png (675 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\smartbox.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\dicts.png (562 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\browserconf[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_ra_n.png (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bl.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\quote.dtd (708 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\nointernet\_music-nointernet.ie.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\mail\folder.png (441 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\throbber-small.gif (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\icons\gmail32.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\ru\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\widget\http.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\uk\slice\network-error.html (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\links\links.dtd (268 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\groups.png (626 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\money.dtd (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\notes.png (415 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\traffic\red.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_sn_n.png (662 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\icons\mc\badge\hover.png (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\mail[5] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\statistics\statistics.xml (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\uk\mc.dtd (370 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml.zip (4545 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\AutofillFileds.dat (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\textonly.dtd (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\main-adapter.js (1960 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\pagetranslator.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\icons\loggedout.png (748 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\brand\tb\links\links.dtd (280 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\fotki\fotki.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\uk\slice\throbber.html (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\direct[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\icons\mailru_orange.png (880 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\tr\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\ovc_sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\profilelocked.png (674 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\messages.png (584 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\cs\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.Throbber.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\locale\be\radio.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\music.dtd (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\locale\be\facebook.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_-sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\html\network-error-be.html (530 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\logo.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\en\about\vendorlogo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\update.png (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\ru\services.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\facebook-service.png (367 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\quote\quote_up.png (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_n.png (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\logo[1] (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\main-logic.js (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\logobutton\logoconf.xml (324 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\brand\ua\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\noflash\_music-noflash.ie.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\html\network-error-kk.html (543 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\geobase.xsl (377 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\icons\icon.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\say-active-disabled.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\music\play.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_ sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\ic\1.png (176 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\locale\kk\facebook.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\locale\kk\esync.dtd (435 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\ru\smartbox.dtd (826 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\kk\slice\throbber.html (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\mail[3] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\ovc_sn.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\tr\logobutton\logoconf.dtd (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\brand\tb\sblinks.dtd (377 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bl-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\friends.png (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml.zip (5873 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\quote\quotelist.dtd (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\kk\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\direct.png (567 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\site.intervals.xml (238 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\shadow-pipka.png (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\readability\sprite-readability.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\widget\platform.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\translator[1] (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\locale\ru\site.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar.yandex.ru/packages/yandexbar.zip (26831 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.Message.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\tb\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\tb\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\buttons\images\button-ball-dis.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\uk\yndx_icon.png (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\counters.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\ovc_ts_ra.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\money[1] (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\readability\readability-print.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml.zip (18934 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\html\i\gray-bird-of-sadness.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\ic.dtd (876 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\weather\gray-16.png (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\userinfo.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\town\townlist.dtd (88 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\readability\readability.js (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\skc_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\uk\browser\browserconf.dtd (387 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\notifications_new.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\fg_n.png (681 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\mail.dtd (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\fotki.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\spam.png (798 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\textonly.dtd (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\geolocation.dtd (72 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\mail\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\buttons\images\button-red.png (348 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\radio.messages.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\icons\mailrunewmsg_orange.png (905 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\locale\ru\webmaster.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\slovari[1] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\traffic\yellow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\rambler.xml (899 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_sn_d-inverted.svg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\cs\branding\yandex\search.dtd (642 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\typesquatting.xml (670 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\8-16.png (696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\stardust64.dll (1964 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\tr\slice\js\dtconverter.js (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\ovc.png (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\buttons\images\button-plus.png (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\userinfo.dtd (581 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\yandex[1] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\userinfo.dtd (573 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\photo.png (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\odnoklassniki64.dll (1610 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\fg_n.png (494 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\tr\about\vendorlogo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_-sn_d.png (860 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\follow-button.png (813 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\cs\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\mail[1] (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\icons\mailrureload3.png (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\icons\mc\badge\anim_0.png (254 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\subscriptions.png (779 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\weather.png (633 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\metrics.png (541 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\favorities.png (412 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\quote\quotelist.dtd (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\ovc_gr.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\slovari[2] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\quote\gold_down.png (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_-ra_n.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\be\yndx_icon.png (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\site[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\fg_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml.zip (3361 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\locale\en\mailru.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\quote.xml (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\branding\yandex\search.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\be\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_ sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\maps.xml (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_ sn_n.png (694 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\search-inactive.png (614 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\moikrug.dtd (818 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\lingvo.xml (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\money[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ sn_n-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\ovc_gr.png (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\textonly.dtd (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\widget\xjsont.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\metrika[1] (901 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\smartbox.messages.xml (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\icon16.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\fav-yandex.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\locale\en\facebook.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\rambler64.dll (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\be\slice\network-error.html (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\maps[1] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\locale\en\direct.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\suggest-tab.png (229 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\suggest-ico-x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.xml.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\moikrug.dtd (810 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\addresses.png (636 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\slovari[2] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\altsearch[1] (467 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\locale\be\odnoklassniki.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\locale\ru\mailru.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\en\slice\network-error.html (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\locale\be\mailru.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\passport\passport.xml (181 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\birdie.png (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\market.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\en\logobutton\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\textonly.dtd (180 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\defaults[1] (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\route-form\images\route-a.png (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\kk\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\rt-by.png (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_-sn-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\html\style-authpages.css (444 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\_\8mHn_Rsr7nJcpTqMcpRQLGAlOAM.png (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\moikrug.dtd (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\locale\ru\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\translator[1] (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\fg_d.png (665 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\town.png (242 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\1-16.png (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\messages_2.png (414 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\icons\on.png (408 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\route-form\images\route-b.png (494 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\skc_n.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\messages_lock.png (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\quote\quotelist.xsl (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\locale\ru\yavideo.dtd (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\lingvo[2] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\html\noflash.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\messages.xml (293 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\locale\tr\yavideo.dtd (773 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\en\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\ru\yndx_icon.png (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\ru\branding\yandex\tutorial.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\accelerators[1] (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\maps[1] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\kk\slice\js\dtconverter.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\skc_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\ru\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_ ra_n.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\ovc.png (473 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\widget\slice-commands.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\locale\ru\campaign.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\ua\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\ovc_sn.png (590 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\webmaster.intervals.xml (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\site.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\brand\ua\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\geolocation[1] (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\vkontakte[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\notif.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\yandex[2] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\icons\typesquatting\icon.png (372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\be\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\streamplayer.exe (315 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_-ra_n.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\smartbox[1] (826 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\mail[3] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\ui\dayparts\images\opacity08.png (158 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\applications.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\esync[1] (476 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\search-icon.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\fg_d.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\en\yndx_icon.png (836 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\town\geobase.xml (1647 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\mail.dtd (735 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\notifications.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\userinfo\passport.dtd (189 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\ovc.png (397 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\ui\header\images\menu-open.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\locale\ru\esync.dtd (439 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\locale\cs\facebook.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\lingvo[1] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\videos.png (836 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\logo.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\ovc_ts_ra.png (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\gmail.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\ic\2.png (215 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\videoslocked.png (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\skc_d.png (802 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\yavideo.dll (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\questions.png (747 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\yandex-65x26.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\translator.dtd (249 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\ovc.png (298 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\facebook.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\1.png (137 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\login.dtd (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\quote\quote.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\textonly.messages.xml (277 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\translator.messages.xml (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\ovc_-ra.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\widget\twitter-api.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\facebook[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_ ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\tr\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\fotki.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\ic\0.png (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_-sn_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\main.png (732 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\direct[1] (739 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\moikrug.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\market.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\mail\logo.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\fg_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\disc.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\be\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.TabController.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\textonly.dtd (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\suggest-button.9.png (301 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\transform\messages.jsont (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\icons\twitter.png (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\readability\ready.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\quote\currency_up.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\music.dtd (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\ovc_gr.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\fg_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\yandex-130x52.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\icons\mailrunewmsg.png (827 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\ESyncHelper.exe (2275 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\about\background-ie.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\altsearch[1] (526 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\schedule.png (774 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_-ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\webmaster.xml (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\facebook64.dll (2354 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\en\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\tab-active-pipka.png (120 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_ ra_d.png (777 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_-sn_d.png (852 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\quote.dtd (845 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\en\icons\yandex.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\userinfo.dtd (522 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\ui\header\images\menu-close.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\_\W5-XqgLHVy5pJiEpB8Add3J6zDk.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\lenta.messages.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_-sn_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\tb\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\lingvo.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\slovari[2] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\mailru.dll (1060 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\cs\services.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\cs\browser\browserconf.dtd (369 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\tr\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\locale\ru\odnoklassniki.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\about\logo-ie-medium.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\readability\applied.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\html\i\throbber.gif (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\uk\smartbox.dtd (858 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\extra.dtd (420 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\curtain.png (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\application.html (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\kk\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\logo.dtd (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\be\browser\browserconf.dtd (381 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\product[1] (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml.zip (7345 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\skc_n.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\be\branding\yandex\search.dtd (669 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_sn_n.png (659 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\locale\uk\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\yavideo.messages.xml (867 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\pagetranslator\loader.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\translator.dtd (350 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\ic.dtd (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\quote[1] (900 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\mail.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_ sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\icons\direct_.png (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\town\townlist.dtd (83 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_n.png (547 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\guest.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\icons\mc\icon.png (628 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\locale\uk\esync.dtd (451 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\be\logobutton\logoconf.dtd (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\fav.png (527 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_sn_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\accelerators\yandex.xml (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\uk\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\browseroffer[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\cs\typesquatting.dtd (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\site.messages.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\moikrug[1] (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\music.dtd (371 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\locale\tr\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\quote\quotelist.dtd (87 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\tr\yndx_icon.png (836 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\geolocation.dtd (75 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\ovc_ts_ra.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\common.dtd (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\video.png (543 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\traffic\green.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\ui.ie7.css (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\brand\ua\town\townlinks.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\gmail[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\advertising.png (799 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\ui\messages\images\delete.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\tr\smartbox.dtd (700 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\ovc_gr.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\videosmark.png (865 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\locale\cs\esync.dtd (438 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\icons\campaign-outofmoney.png (607 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\textonly[1] (405 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\main_lock.png (792 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\brand\tb\gmail.links.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\cs\slice\network-error.html (470 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\product[2] (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_-ra_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\be\slice\throbber.html (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\cs\yndx_icon.png (836 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\accelerators[3] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\icons\ramblersend.png (366 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\groupslocked.png (707 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\music[1] (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\main-ui.js (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\ie\product.xml (475 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\ic.dtd (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\ovc_ts_ra.png (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\6-16.png (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\fav-1.png (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\noflash\music-noflash.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\d-msg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\fg_d.png (983 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_-ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\main-adapter.js (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\cs\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\slovari.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\transform\overlay.jsont (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\browseroffer[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\friends_lock.png (795 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\uk\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\radio[1] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\town\townlinks.dtd (133 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\nointernet\img\b-music-logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\rambler[1] (899 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\google.png (856 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\icons\campaign-running.png (688 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music.messages.xml (510 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\gmail.settings[1] (55 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\logo.xml (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\locale\en\campaign.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\fotki[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\lenta.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\statistics[1] (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\mail[2] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\login.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\ovc_ ra.png (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\en\typesquatting.dtd (510 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml.zip (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\brand\ua\links\links.dtd (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\town.dtd (911 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\quote\quote_down.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\geobase.xml (2159 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\facebook.png (464 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\moikrug.messages.xml (946 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\webmaster[1] (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_ sn_n.png (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\locale\be\esync.dtd (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\pagetranslator[1] (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\twitter.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\sblinks[1] (596 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\en\branding\yandex\search.dtd (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_-sn_d.png (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\locale\kk\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\ru\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_-ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\cs\about\vendorlogo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\en\slice\js\dtconverter.js (537 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\tb\quote\export.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\moikrug\moikrug.png (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\brand\ua\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_sn_d.png (889 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\icons\msg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\cs\mc.dtd (299 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\typesquatting[1] (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\odnoklassniki.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\logobutton\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\html\network-error-tr.html (467 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\locale\ru\facebook.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\fg_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\locale\cs\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\icons\reload.png (407 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\locale\ru\radio.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\cy[1] (641 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\show_foto.png (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\say-disabled.png (906 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\browseroffer.dll (2630 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\uk\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\translator.xml (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\messages-bg-top.png (794 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\icons\direct.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\trash.png (213 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\facebook_lock.png (775 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\lingvo[4] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\translator\translator.png (636 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\icons\loggedin.png (592 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml.zip (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\cs\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\icons\browser_red_16.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\buttons\images\button-minus.png (237 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\money.messages.xml (519 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\geolocation.xml (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\cy.xml (641 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\locale\en\radio.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\ovc_sn.png (796 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\main-ui.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\cs\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.Search.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\7-16.png (645 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\search.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\en\logobutton\logoconf.dtd (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\notesmark.png (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\profile.png (448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\login[1] (511 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\yandex[2] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_-sn_n.png (880 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\locale\be\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\ovc_-sn.png (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\.manifest.mf (132 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\locale\en\odnoklassniki.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\buttons\images\button-green.png (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\ui\messages\images\spam.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.DiffTimer.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\gmail[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\yavideo.xml (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\addressbox-navigate.png (737 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.Translate.js (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\wall.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\site.setting.xsl (355 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\common.dtd (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\locale\tr\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_gr-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\market[1] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\tb\quote.xml (887 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\locale\tr\radio.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\ui\messages\images\mail-logo-en.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_d.png (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\locale\cs\radio.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\twitter[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\yavideo[1] (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\ovc_-sn.png (709 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\tr\typesquatting.dtd (520 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\en\services.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\icons\gmaillock.png (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\chelper\chelper.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\mc[1] (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\translator\extrainfo.dtd (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\icons\metrika_16.png (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\metrika.intervals.xml (259 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\quote\quotelist.dtd (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\mc.xml (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\yavideo64.dll (1217 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.ui.GetMore.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\quote\gold_up.png (658 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\icons\gmailsend.png (877 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ sn_d-inverted.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\retweet.png (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\yandex.png (577 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\events.png (781 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\calendar.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\site[1] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\locale\en\altsearch.dtd (117 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\ui\messages\images\mail-logo-ru.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\campaign[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\mail[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\ovc_sn.png (691 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\html\network-error-ru.html (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\money.dtd (580 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\locale\uk\odnoklassniki.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\about\logo-ie-large.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\note.png (339 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\wiki.png (534 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\ovc_ sn.png (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\html\noconnection.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\geolocation\geolocation.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\locale\uk\mailru.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\icons\suggest-favorite.png (466 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml.zip (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\twitlink.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\mail.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\town\townlinks.dtd (126 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\pagetranslator[1] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\ru\logobutton\logoconf.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\tb\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\logo.dtd (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\yavideo[1] (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_ sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_-ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\skc_n.png (720 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\photosmark.png (560 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\shadow-5-corner.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_-ra_d.png (857 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\sb.dll (1925 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0CB6A327-3D79-45FF-975A-D28B466CA89F}\locale\be\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\y.anim.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\iehistory.db (854 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\ovc_ra.png (360 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\tr\services.dtd (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\yandex[1] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\icons\virused.png (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_n.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\services[1] (196 bytes)
%Program Files% (x86)\Yandex\Common\elements64.exe (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\ic.dtd (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\login.dtd (787 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\cs\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml.zip (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\js\json.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\icons\error.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\defaults.dtd (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\locale\kk\yavideo.dtd (929 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\ui\menu\images\remove.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\accelerators[5] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\defaults[1] (1200 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\widget\utils.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\cs\icons\yandex.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\kk\yndx_icon.png (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\ui\header\images\mail-create.png (326 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\maps[3] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\photos.png (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\skc_d.png (634 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\icons\error.png (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\lingvo[3] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\accelerators[3] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_-sn_n.png (639 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\accelerators[3] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\tr\icons\yandex.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_-ra_d.png (823 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\ru\mc.dtd (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\profilemark.png (631 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\money.dtd (530 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\town\traffic\10-16.png (706 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\locale\kk\mailru.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\safebrowsing\safebrowsing.xml (251 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\smartbox[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\matches.png (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\locale\ru\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\userinfo.dtd (507 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\esync.messages.xml (567 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\locale\en\mc.dtd (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\image-search.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\del.png (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town.messages.xml (865 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\photoslocked.png (615 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\bkn_d.png (786 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\mail.dtd (541 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\slovari[2] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\common[1] (570 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\gmail64.dll (943 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\now\ovc_-ra.png (542 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\accelerators[2] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\esync.dll (1768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\bkn_ra_n.png (603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\lingvo[2] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\messages.png (480 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\common.dtd (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4D1F3533-8810-45BB-904A-B049679A2B85}\altsearch64.dll (2042 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{91F515CF-1AF2-43D0-90B2-C79C00475200}\icons\mailru.png (858 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\defaults[2] (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\about\logo-ie-tiny.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\locale\en\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\slovari[1] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\tr\logobutton\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\cs\logobutton\logoconf.dtd (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml.zip (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\town\geobase.xml (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\typesquatting[1] (670 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\tb\town\townlinks.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\mail\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\geolocation.dtd (129 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\fg_d-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{CC3EF4F0-6919-4F5B-B0F6-0322C768D0E6}\icons\mc\badge\active_press.png (316 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\opinions.png (639 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\events.png (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\say-active.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\locale\be\vkontakte.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\en\browser\browserconf.dtd (339 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\textonly[1] (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\bkn_ sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\friends.png (743 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\logo.dtd (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\share.png (753 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\icons\yavideo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\quote\stock_up.png (587 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\logo.messages.xml (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\ui.ie8.css (1294 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\market[1] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\logo[1] (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\about\vendorlogo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\accelerators[1] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\ovc_ sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\skc_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B3C68D31-1CEA-4174-90B1-055F83FE54BA}\brand\tb\gmail.settings.dtd (54 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{4C46E2D2-5236-4FEF-801D-DD13FC9EC231}\icons\yavideo_on.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AED8ECD4-CD4C-49F8-A619-86AD0B4D4B5E}\radio64.dll (2041 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\ru\quote.dtd (900 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\music\pause.png (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_ts_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\ua\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ABA7D0E9-19BB-402C-A527-6973622C495C}\odnoklassniki.dll (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\icons\cards.png (782 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\traffic\ui\route-form\images\form-close-hover.png (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\login[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{789DC240-F242-42B8-8A55-1CA83F24167C}\icons\site.png (707 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\throbber.gif (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png16\fg_d.png (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\brand\ua\town\townlinks.dtd (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\iehistory.db-journal (14816 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\ovc_ ra.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\locale\tr\esync.dtd (325 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\ovc_ sn.png (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\ru\browser\browserconf.dtd (382 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc_ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\mail.dtd (715 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\locale\uk\direct.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\locale\kk\direct.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\icons\friendsmark.png (678 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D6E64C3A-7F91-4E86-94D1-8CA3754015A5}\locale\ru\branding\yandex\search.dtd (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\no-more.png (491 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\html\network-error-uk.html (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\market[1] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\direct.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\noflash\img\b-music-logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\skc_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music\html\noflash\_music-noflash.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\kk\town\townlist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\login\auth.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\icons\Direct_locked_2_.png (748 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_ sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\metrika[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{3BA41B30-3294-4DD6-9DDD-DAF89C1AABF1}\direct.xml (739 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{10FFEA99-BF10-44AA-A9A5-8D7D8AF5C80F}\syncpage\sync\_\ZNKOGssGTwI6nNaZaFsAmYawp4M.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\twitter.dll (2393 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\en\twitter.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\ic\4.png (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\logo\logo.png (409 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\search-icon-big.png (442 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\quote.dtd (666 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\tr\browser\browserconf.dtd (343 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\bkn_ sn_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\mail\images\mail_128.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\yandex[2] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\be\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\slovari[1] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\widget\_debug.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\ovc_ra.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\locale\en\vkontakte.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\png19\ovc_ sn.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_ ra_n.png (986 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\notifications_lock.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg16\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\parts\bkn_-ra_n.png (846 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\accelerators[2] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\ic\5.png (213 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\en\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AF7B07A2-0318-47E4-9850-543C640D4F2B}\browseroffer.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\cs\slice\throbber.html (352 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\uk\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\tr\fotki.dtd (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\town[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\locale\be\quote.dtd (859 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\slice\i\tab-active.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{9B266BF6-8B8D-4ECE-9C7F-A42C1AC3B34A}\locale\be\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{74083021-9126-4718-B4EF-84317E2A1049}\vkontakte.dll (2080 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\town\weather\images\svg19\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\music.xml (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{77A7E3E5-430C-4450-8315-9CC5CA02170B}\icons\readability\hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{B03DB674-F06A-45D7-A07B-C44CB0C0E3CE}\locale\en\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{5B01283F-5640-4CCA-8767-D4958385AA28}\locale\uk\facebook.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\replace (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Extensions\external_extensions.json (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\19.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\5.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\8.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\7.jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\es.pak (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\pins\browser (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\15.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\tr.pak (266 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\browser.exe (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe (15068 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\11.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\icudtl.dat (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\en-US.pak (229 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\browser.dll (28403 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\18.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\pins\browser\yandex.website (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\9.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\7.jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\brand_skins.json (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\19.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\clidmgr.exe (151 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\15.jpg (789 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\xinput1_3.dll (81 bytes)
C:\Users\"%CurrentUserName%"\Desktop\Yandex.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\zh-TW.pak (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\pt-BR.pak (264 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\translator (992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\cs.pak (274 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Extensions\yandex_mail.crx (98 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\34.jpg (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\16.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\translator (992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\30.jpg (1011 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\gopnelejddjjkamjfblkcijjikkinnec\brand_settings.json (156 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\p2c-phone-schemes (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\18.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\nacl_irt_x86_32.nexe (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\plugins\npswf32_16_0_0_305.dll (793 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\browser.7z (323778 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\2.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\plugins\plugin.vch (372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\browser_elf.dll (133 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win1.jpg (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\smartback (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win2.jpg (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\nacl_irt_x86_64.nexe (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\de.pak (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\17.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\morphology\dictionary-ru-RU.mrf.sig (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\master_preferences (330 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\13.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\safebrowsing\download.png (437 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\pins\browser\16_32.en.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\31.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\master_preferences (330 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\yapdf.dll (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\partner-package.cab (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\yapr.dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\morphology\dictionary-ru-RU.mrf (17626 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\ffmpegsumo.dll (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\pins\fb\fb.ico (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\morphology\stop-words-ru-RU.list (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\33.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\extensions\antishock-prod.crx (13773 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\partner_config (122 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\pt-PT.pak (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\setup.exe (7345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\minwhite (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\pins\browser\Yandex.exe (103 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win3.jpg (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\bgeakjmfknncppbmgkkfbglnodccdecp\brand_settings.json (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\service_update.exe (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\10.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\33.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\10.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\extensions\yahelper.crx (1667 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\minwhite (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\libglesv2.dll (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\morphology\dictionary-ru-RU.mrf.sig (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\20.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\resources.pak (14999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\brand_config (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\14.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\Test\test-com (608 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\chua_list (896 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\brand_skins.json (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\3.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\3.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win2.jpg (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Extensions\yahelper.crx (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\wow_helper.exe (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\elokbjeafkcggjfjkakpchmcmhkhaofn\brand_settings.json (289 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\31.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\20.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\chua_list (896 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\ru.pak (417 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\yawp.dll (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\ja.pak (340 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\p2c-phone-schemes (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\9.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\registry (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\extensions\ihhcdinmaceokcdmbddlclfejhadgpgg.json (70 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\Test\test-com (608 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\yandex_browser_installer.log (409264 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\4.jpg (198 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\smartback (475 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\brand_settings.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\replace (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\14.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\bgeakjmfknncppbmgkkfbglnodccdecp\brand_settings.json (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\fr.pak (296 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\fcgfaidpicddcilhjhafmmcgfodijhjd\brand_settings.json (226 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\morphology\stop-words-ru-RU.list (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\kk.pak (319 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\5.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win1.jpg (799 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Extensions\plmneencfmbjfgbkfiinjelmngigejjh.json (76 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\yupdate-exec.exe (492 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\32.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\winrt_helper.dll (209 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\libegl.dll (211 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\rewrite_list (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\uk.pak (418 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\elokbjeafkcggjfjkakpchmcmhkhaofn\brand_settings.json (289 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\40.0.2214.3645.manifest (229 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\13.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\browser_child.dll (36738 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\plugins\npmedia_plugin.dll (907 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\fcgfaidpicddcilhjhafmmcgfodijhjd\brand_settings.json (226 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\crash_service.exe (454 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\12.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\6.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\d3dcompiler_46.dll (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\brand-package.cab (10815 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\dllyupdate.dll (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\6.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\11.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\libexif.dll (310 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\pins\fb\FBPinLauncher.exe (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Extensions\ihhcdinmaceokcdmbddlclfejhadgpgg.json (70 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Yandex\Yandex.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\8.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\gopnelejddjjkamjfblkcijjikkinnec\brand_settings.json (156 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\nacl64.exe (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\17.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\12.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\check_whitelist (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\brand_settings.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\4.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\it.pak (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\2.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\clids-yabrowser.xml (267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\partner_config (122 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win3.jpg (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\30.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\32.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\registry (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Yandex.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\pins\browser\16_32.ru.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\extensions\plmneencfmbjfgbkfiinjelmngigejjh.json (76 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\safebrowsing\download.png (437 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\rewrite_list (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\suspend_api_check.exe (244 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Extensions\antishock-prod.crx (5873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\browser_200_percent.pak (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\browser_100_percent.pak (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\16.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\show-dlg.exe (389 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\34.jpg (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\brand_config (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\check_whitelist (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source1836_15691\Browser-bin\40.0.2214.3645\Locales\zh-CN.pak (220 bytes)
C:\Windows\Installer\MSI182C.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (1506 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[7] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[6] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[8] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[5] (475 bytes)
%Program Files% (x86)\Yandex\Elements\bartab64.dll (1018 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Yandex\Toolbar\Install.log (8186 bytes)
%Program Files% (x86)\Yandex\Elements\barshims64.dll (126 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Yandex\Toolbar\Install.log (9208 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[4] (1 bytes)
%Program Files% (x86)\Yandex\Elements\barshims.dll (106 bytes)
%Program Files% (x86)\Yandex\Elements\bartab.dll (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[3] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[2] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[1] (475 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\WinReg.jsm (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\installer.js (3808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\manifest.mf (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\AddonManager.jsm (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\promise.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_13.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\netutils.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\config.js (887 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Top Sites (1932 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\vendorCookie.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\presets\http://bar.yandex.ru/presets/ua.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\nsIYaSearch.xpt (120 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-auth\pwdmng.jsm (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\direct.zip (21288 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\backup.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\fileutils.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\brand_prov.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonStatus.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\integration.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\misc.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_IGPqT9zFkZqBmb8 (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\compapi.js (3560 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\workers\barnavig.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\screenshotsGrabber.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\colors.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-7_8_0.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\WindowListener.jsm (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\branding.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\smartbox.zip (109915 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-advertisement.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\History (4588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\zigbert.rsa (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\ui (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\dayuse.js (2600 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\install.js (127 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\internalStructure.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\strutils.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\statistics.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\frontendHelper.js (3 bytes)
C:\Windows\Installer\MSIC6B6.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\chromeappsstore.sqlite-journal (3302 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\urlRewrite.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\workers\barnavig.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Web Data (24431 bytes)
C:\Windows\Installer\MSIB1D7.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\barplugin.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Local Storage\chrome-extension_pchfckkccldkbclgdepkaonamkignanh_0.localstorage (1187 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\promise.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Bookmarks (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\install.rdf (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vendor00000.xml (2510 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\Yandex.website (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\strutils.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Bookmarks (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\mailru.zip (24984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\backgroundImages.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native_comps.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\autoinst.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\database.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\History-journal (18998 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\auth.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Web Data-journal (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\sb.zip (60968 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\fastdial.js (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\barnavig.js (4592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Log4Moz.jsm (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\syncPinned.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\ycookie.js (196 bytes)
C:\Users\"%CurrentUserName%"\Favorites\Links\Mail.url (286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Bookmarks_20150425082735.backup (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\AddonManager.jsm (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\cachedres.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\strbundle.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_3.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\patterns.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\vendor\vendor.xml (998 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Local State (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\dayuse.js (2600 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonmgr.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\async.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Favicons-journal (32780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\database.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\zigbert.rsa (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\searchSuggest.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\async.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\DataURI.jsm (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\browseroffer.zip (52224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\databaseMigration.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\install.rdf (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_16.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\presets\http://bar.yandex.ru/presets/default-partner.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-auth\auth-manager.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\package-12111827.zip (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\safebrowsing.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_14.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\region.properties (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\strbundle.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\integration.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\manifest.mf (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Top Sites-journal (5062 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\lite_installer.exe (179 bytes)
C:\Windows\Installer\MSI24B0.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\Favorites\Links\Yandex.url (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\SimpleHTMLParser.jsm (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\compsusage.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_3_0.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\webmaster.zip (31120 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\vendor\vendor.xml (924 bytes)
C:\Windows\Installer\MSIC666.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Web Data (609 bytes)
C:\Windows\Installer\MSI225B.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\rambler.zip (21288 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Preferences_20150425082734.backup (67 bytes)
C:\Windows\Installer\MSIB119.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Bookmarks_20150425082734.backup (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\sysutils.js (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\nsYaSearch.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\dataprovider.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\chrome.manifest (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Stemmer.jsm (18672 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonfs.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\blacklist.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_kwedpkzQ1VhvkrS (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonmgr.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Foundation.jsm (938 bytes)
C:\Windows\Installer\MSIC677.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\legacy.js (3 bytes)
C:\Windows\Installer\MSIB1A6.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\xmlutils.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences_20150425082734.backup (33 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\statistics\downloads.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\preferences\yasearch.js (585 bytes)
C:\Windows\Installer\MSID8F4.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\package.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonfs.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\package.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\presets\http://bar.yandex.ru/presets/tb.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\mailruStat.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\dynamic-preferences\brand\ua\safebrowsing.js (915 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\clids.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\patterns.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_12.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\authAdapter.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\ecustom.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\SimpleProtocol.jsm (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\safeBrowsing.js (2 bytes)
C:\Windows\Installer\MSIC6D6.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\unit.js (680 bytes)
C:\Windows\Installer\MSIB487.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\WindowListener.jsm (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\contentEnvironment.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\presets\http://bar.yandex.ru/presets/default.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\zigbert.sf (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\defender.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Web Data-journal (7534 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pchfckkccldkbclgdepkaonamkignanh_0.localstorage-journal (14083 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\aboutSupport.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\app.js (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\clids-barie.xml (501 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\places.sqlite (9176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\ncparser.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\browserTheme.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150425082737.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\clids-yabrowser.xml (281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Favicons (5572 bytes)
C:\Windows\Installer\MSIB2F1.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\preset.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\gmail.zip (28224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150425082735.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Preferences_20150425082734.backup (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\npwidget.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_7_0.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\core.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\barnavig.js (4592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\misc.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\incoming.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\browserUsage.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\alarms.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\overlay_prov.js (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\ycookie.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal (5380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\task.js (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\WinReg.jsm (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\notifications.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\searchplugins\yandex.com-082735.xml (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\zigbert.sf (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\thumbsSuggest.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\fileutils.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Bookmarks (785 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\netutils.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Stemmer.jsm (18672 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\chrome\yasearch.jar (363925 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-7_6_0.js (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\stdout.log (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\altsearch.zip (41656 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\advertisement.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\favorites.db-journal (5062 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\pacman.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\install.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Favicons (4725 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Preferences.jsm (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\screenshots.js (392 bytes)
C:\Windows\Installer\MSIB1B7.tmp (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150425082736.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\odnoklassniki.zip (35448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\core.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-7_8_1.js (609 bytes)
C:\Windows\Installer\MSIB4B7.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-6_4_0.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Log4Moz.jsm (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\layout.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\slices.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\update.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (326 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\protocolSupport.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\browserconfig.properties (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\DataURI.jsm (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\History-journal (14544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\omni.ja_20150425082733.zip (44854 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\aboutSupport.js (3 bytes)
C:\Windows\Installer\MSI11C4.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\distribution.js (266 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Favicons-journal (32780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\xb.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\statistics.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\ecustom.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal (37022 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\sender.exe (308 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonStatus.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-auth\utils.jsm (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\favicons.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\clids-bm.xml (171 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\xbProtocol.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_6_0.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\branding.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\syncTopHistory.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Mozilla\Firefox\Profiles\zwvbr04l.default\thumbnails\05976510b5af1634c781955b205a201f.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\clids-vbie.xml (501 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_5_0.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Foundation.jsm (903 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_ncFyBZg7cNx6We2 (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js_20150425082735.backup (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\config.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_0.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\places.sqlite-wal (19187 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\chrome.manifest (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\nsSearchSuggestions.js (1928 bytes)
C:\Windows\Installer\MSIC6E7.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\usageHistory.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\sysutils.js (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\searchExample.js (196 bytes)
C:\Windows\Installer\MSI23E4.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\bookmarks.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Local Storage\chrome-extension_pchfckkccldkbclgdepkaonamkignanh_0.localstorage-journal (14083 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\thumbs.js (4056 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\cloudsource.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\passport.js (3 bytes)
C:\Windows\Installer\MSIFB94.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\radio.zip (42472 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\metrika.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\brandsvc.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\manifest.js (3 bytes)
C:\Windows\Installer\MSIB5F0.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\#Bar4IE.cab (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\bar.js (3560 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\bookmarksStat.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Favicons-journal (32780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\sliceapi.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-5_2_0.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-utils.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\mail.yandex.com_20150425082737.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\dynamic-preferences\safebrowsing.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\clids.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\default.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\chrome\yandex-vb.jar (64481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\preset-with-manifest.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\vkontakte.zip (36616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\twitter.zip (38624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Web Data-journal (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\sync.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\facebook.zip (28496 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-7_0_0.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Preferences.jsm (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\installer.js (3808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\task.js (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\yavideo.zip (41488 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\xmlutils.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (60926 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\First Run (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\dlqueue.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_9.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\favorites.db (523 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\SimpleProtocol.jsm (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_0_0.js (943 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\widgetlib.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\favorites.db-journal (5062 bytes)
C:\Windows\Installer\MSIC655.tmp (221 bytes)
C:\Windows\Installer\MSI217F.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\61c37af112f7a10c9042477feafd8419\esync.zip (160193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Bookmarks (785 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\anonymousStatistic.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-auth\authdefs.jsm (242 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_1_0.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected] (1 bytes)
C:\Windows\Installer\MSIFB16.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (7147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\preferences\yandex-vb.js (778 bytes)
C:\Windows\Installer\MSIC830.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Preferences_20150425082734.backup (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\SimpleHTMLParser.jsm (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_opera.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-button_theme_grey-no-transparent-l.ie.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-input.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_google-chrome.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-popupa_theme_ffffff.png (782 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hosts.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-restart-info.png (434 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_yandex-chrome.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-checkbox_theme_grey-l.png (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_type_hint.png (244 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\La6qi18Z8LwgnZdsAr1qy1GwCwo.gif (43 bytes)
C:\Windows\Installer\MSI323A.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-informer-close.png (527 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp_qs2.html (3 bytes)
C:\Windows\Installer\MSI3925.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-yandex-browser__icon.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_common.ie6.css (7288 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_common.ie8.css (6984 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\ff.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\uk_dlg_install_error.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\u2-ctrl.exe (495 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-yandex-browser__icon.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\tr_dlg_before_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\locale.xml (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_opt.html (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\jquery.min.js (7192 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_opera-new.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-alert.png (152 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-switch_theme_toggle-s-grey.ie9.png (127 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\common.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_yandex-internet.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\ch.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_common.ie9.css (5952 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-switch_theme_toggle-m-grey.ie9.png (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\tr_dlg_install_error.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\ie.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\upd.zip (189 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-yandex-logo_lang_en.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\_common.js (14864 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp_qs2_guard.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\br_opt.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\uk_sizes.xml (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-alert.png (152 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\bad_ie.xml (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hosts.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_common.ie8.css (6776 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\tr_sizes.xml (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-select-grey-fade.ie.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\show.js (1 bytes)
C:\Windows\Installer\MSI351B.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-popupa__close.png (376 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hosts.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\rc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-popupa__close.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp_qs2_guard.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\dlg_before_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_opt.html (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-checkbox_theme_grey-tick.gif (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_opt.html (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\scut.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-tool-name.png (501 bytes)
C:\Windows\Installer\MSI34FA.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp_qs_guard.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_yandex-browser.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_browser_opera.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-yandex-logo_lang_ru.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\version.rss (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\qs2.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-button_theme_grey-l.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\dlg_install_error.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp2.html (3 bytes)
C:\Windows\Installer\MSI3701.tmp (167 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-yandex-logo_lang_en.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-checkbox_theme_grey-tick.gif (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-tool-name.png (501 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\hp_qs2.js (821 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_yandex.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_comodo-dragon.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_internet-mailru.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\opt.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\sf.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hosts.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_type_hint.ie6.png (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\mc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_common.css (4592 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\oc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_ie.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\about.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\tr_dlg_after_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_browser_yandex.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-alert__icon.png (452 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-button_theme_grey-no-transparent-l.ie.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-button_theme_grey-l.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\dc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\gc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-popupa_theme_ffffff.png (782 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-restart-info.png (434 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-informer-close.png (527 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\logo.png (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\sizes.xml (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\yupdate-exec.exe (495 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-select-grey-fade.ie.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-yandex-browser__cancel.png (376 bytes)
C:\Windows\Installer\MSI321A.tmp (151 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\popup.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-input.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\dlg_after_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-switch_theme_toggle-m-grey.ie9.png (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\uk_dlg_after_install.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-yandex-browser__cancel.png (376 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_browser_fx.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\uk_dlg_before_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\_common.js (15336 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp_qs_guard.html (3 bytes)
C:\Windows\Installer\MSI3392.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\dlg_after_install.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_chromium.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_qs2.html (3 bytes)
C:\Windows\Installer\MSI31BB.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_fx.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_opt.html (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_common.ie7.css (6776 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_common.css (5856 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_opt.html (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\hp2.js (1 bytes)
C:\Windows\Installer\MSI3AB0.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_common.ie9.css (4592 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_opt.html (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_rambler-nichrome.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\cpy.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlgs.zip (459 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\logo_big.png (848 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\logo_big.png (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hosts.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\tr_dlg_after_install.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-select-grey-selected.ie.png (465 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-checkbox_theme_grey-l.png (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-select-grey-selected.ie.png (465 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_safari.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_type_hint.ie6.png (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\ico_def.ico (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\uk_dlg_after_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\op.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_browser_ie.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\jquery.min.js (7192 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_common.ie7.css (6984 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp_qs.html (3 bytes)
C:\Windows\Installer\MSI3945.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-alert__icon.png (452 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\yc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_common.ie6.css (6888 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\hp_qs.js (820 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_type_hint.png (244 bytes)
C:\Windows\Installer\MSI3878.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-yandex-logo_lang_ru.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\La6qi18Z8LwgnZdsAr1qy1GwCwo.gif (43 bytes)
C:\Windows\Installer\MSI39B5.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hosts.html (3 bytes)
%Program Files% (x86)\Yandex\FastDial\fastdial64.dll (146 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Yandex\VB\Install.log (3990 bytes)
%Program Files% (x86)\Yandex\FastDial\fastdial.dll (146 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Yandex\VB\Install.log (3852 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\skc_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_-sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\10-16.png (706 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\favicon.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_sn_n.png (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\skc_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\.manifest.mf (132 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\readability (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\style.css (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\icons\logindialog\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_-sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\quote\quotelist.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\quote\quotelist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_ ra.png (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\vLV2RFKX8s67kUoFpg2qwLkBEIk.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\currency_down.png (570 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\30UGBquvFO2YEoZdzUGiTFKarLU.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\8mM517Xu-xUh_e_5YdDztnBFfxY.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\skc_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\q3xr3wR_Yg_zr9sfIINzZLCTdwE.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\town\townlist.dtd (88 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\U0h5laCla0RWhXA2HIlO7izWrgg.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\mail-logo-en.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-ui\b-spinner\images\20.gif.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialshims.dll.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\pX_YaGn4Yr_lAhpb7JdMwBPIaAY.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\ic\1.png (176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\login\auth.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\fg_d-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\noflash\img\b-music-noflash.png (520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ts_ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\mail\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\messages\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet\music-nointernet.html.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\town\townlist.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialframe.dll.patch (511 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\main-adapter.js (1960 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\geolocation.dtd (129 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music.xml (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_sn_n.png (662 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\index.html.patch (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\geobase.xml (2159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\geolocation.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_sn.png (590 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\route-form\images\button-route.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_-ra_d.png (857 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\require-config.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_ sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\_1tfIBlbbO-sFZX3BSjgbsFLIaE.png (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\translator\translator.png (636 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\moikrug.dtd (810 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-libs\polyfills.js.patch (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\LnyndjXnnnf0-TBiILsn2xomtFE.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_-sn-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialframe64.dll.patch (1728 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_ra_n.png (676 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\stardust.dll.patch (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\4-16.png (721 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\main-adapter.js (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\ic.dtd (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\textonly.dtd (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\bbQ1jlb4T8Jy-s_k1Nz6W3nWt7g.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\RlCxSpz6nMOlD7d9slWYf-6j8Jw.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\town\townlinks.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-green.png (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_ sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\userinfo.dtd (507 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\login.dtd (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\6FdgwygQ_TzvldBXoorX_18X3OI.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\fg_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\mail.dtd (541 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\translator.dtd (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_ sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\translator.messages.xml (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bl.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_ts_ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\fotki.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\geolocation.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_common.ie7.css.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\pagetranslator\pagetranslator.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_ra.png (532 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_-ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_ sn_n.png (671 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\moikrug.dtd (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_ ra.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\f7-fSnZIoEUNKpSJWJW98kU5x9U.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\main-logic.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\temporary-files\{906CE4F9-3BFD-45CB-823E-5C2AC28D8230} (26786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_ sn_d.png (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\userinfo.dtd (467 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_-sn_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\OJF8v3B9B1iuTlzjl4Upnf3NpuQ.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\LYWMGttYOnp54g3peDbHFvecIZg.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\ui\dayparts\images\opacity08.png (158 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\geobase.xml (2159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\moikrug.messages.xml (946 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\readability\readability.js (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_-ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\fg_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-ui\b-spinner\images\45.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\chelper\chelper.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\pCHi2EbFGprgWW3mMpMtDX54NQM.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\require-config.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\login.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\header\images\mail-create.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\money.dtd (530 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\ua\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bl.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\nointernet\_music-nointernet.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\readability\readability.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\0.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\skc_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\quote\gold_down.png (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet\_music-nointernet.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\ua\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_-ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\ovc_-sn.png (709 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barframe.dll.patch (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-libs\require.min.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\logo.dtd (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\subscription\add.png (779 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\town\geobase.xml (1451 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\ic\2.png (215 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\music\pause.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\7akVtjosFy0SIZK5kndXmRwXc6k.png (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\9-16.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\common.dtd (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\main-adapter.js (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\moikrug\moikrug.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\zO38-_sA_u6ACecTf3a7S276UCQ.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\buttons\images\button-green.png (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\6qtB0Q9FVAmOWwOK3V5JVI5ojcI.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\translator.dtd (260 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\quote\export.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\brand\ua\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_-sn.png (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-ui\b-spinner\images\20.gif.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\8-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_-ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\YCbcsQcGggriiKTU5E8gjUWGekA.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\ovc_-sn.png (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\skc_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_ ra_d.png (907 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\main-adapter.js (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\ic.dtd (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-ra_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\_music-noflash.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_-ra_n.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\f7-fSnZIoEUNKpSJWJW98kU5x9U.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\OEjMVquR-FlJrxPp3R2w3SiSo3I.png (272 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\readability\sprite-readability.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\QzU0ufhPTrD0S8e0bpVNvGRkS7s.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\J7daNOyAa24zy3Ir-wWKTeQNeuo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\userinfo.dtd (573 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\town.dtd (911 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_d.png (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\HuoOcff43SvB1OVXDmTAAXmFs0g.png (782 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\buttons\images\button-yellow.png (358 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\quote.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\gold_down.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\town.png (242 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\ovc_ sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\fg_n.png (681 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\music.dtd (371 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\brand\ua\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\LYWMGttYOnp54g3peDbHFvecIZg.svg (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\ic\0.png (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\music\play.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\money.messages.xml (519 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\userinfo\passport.dtd.patch (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bl.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_ sn.png (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\7-16.png (645 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\img\b-music-noflash.png (520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_ ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_ sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc.png (473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\FIg7sp49R7Bbg3paJlGfzrP03rE.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\branding.zip (786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-ui\b-spinner\images\20-dark.gif.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bl-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\Vyyv32J6Ora9svqZCYF-XSVU4Zc.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_ sn_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\main-ui.js (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\fg_d.png (665 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc.png (298 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_-ra_d.png (823 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\textonly.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\cXyECx_vgE9llIxJCsRweD2uMuc.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\logo.dtd (140 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_-ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\2-16.png (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\ic.dtd (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_ ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\header\images\menu-open.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ra_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\t1Xoc_X9L745EI77VThFTlLoR9I.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\vLV2RFKX8s67kUoFpg2qwLkBEIk.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\mail.dtd (633 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\style.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\4-16.png (721 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_-ra_n.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Common\elements.exe.patch (1764 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\translator.dtd (249 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\ovc_gr.png (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\money.dtd (340 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\5BIrw26AROzc9J3IurJFbak0Jro.gif.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\brand\ua\town\townlinks.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bl.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\common.dtd (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\main-ui.js (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\lALn2ERV0sQzCaiJB-rdgHrL2JI.png (643 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\userinfo\userinfolinks.dtd (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_ sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\WhpZGK4ilmcwDg2k1xoCV1INn1M.png (173 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\login.dtd (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\2.png (215 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\skc_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_gr.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\moikrug.messages.xml (946 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\textonly.dtd (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\OEjMVquR-FlJrxPp3R2w3SiSo3I.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\town\townlist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\money.dtd (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_ ra.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\pDyNDX-HZwcZsvKc7CchzqPMfjU.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\B2U5JTSkrM1iy2QyFZIn43s5WIw.svg (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_-ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\ovc_ ra.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\defaults.dtd (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\readability\hover.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_ ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\town\townlinks.dtd (126 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\tb\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\skc_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\style.css.patch (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\epVOh1xBimDwi8BSMFWMEy7gE6E.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\style.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-ui\b-spinner\images\b-spinner.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\bGTLQ3lgAfg8aeK6thx3QUyAaP4.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_-ra_n.png (846 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\pagetranslator.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\Common\elements.exe (441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\tb\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\HuoOcff43SvB1OVXDmTAAXmFs0g.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_ sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\RVzdJ9OJh0AWiuUZ2gi5Dwus4aw.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\quote.xml (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\quote.dtd (666 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\fotki\fotki.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\translator.messages.xml (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\messages.xml (293 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_sn_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-yellow.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\mail.dtd (482 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\newtab.html.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\FzWyVFQkBJObPTziVE3nwUX-sFE.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\fotki.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bl.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-ui\b-spinner\images\b-spinner.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\geobase.xsl (377 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-ra_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\YDmSge45ykmToGfqY4MTD1rQ3bw.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\ovc_-ra.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\8Tybci2Ic-b9EusnAqnwjdWOCYU.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ra-inverted.svg.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\ovc_ts_ra.png (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\8rm3VzQm1-ENXVTt0z7lr0UyMfI.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ sn_n-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\mail\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\basepackage.zip.patch (1295 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\textonly.dtd (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\route-form\images\form-close.png (273 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\music\music.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\userinfo.xml (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\cy.messages.xml (915 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\bartab64.dll.patch (449 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\translator\extrainfo.dtd (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\OYPSMBgQcfcSMrYzBPOaVjHEDcE.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\Z89ijsO17istBi7uzfluWEm_lBs.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\QZwxmXJnFKgedMKrAEej8n07z5k.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\newtab.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-ui\b-spinner\images\b-spinner.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_ sn_n.png (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\messages\images\read.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_n.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\B_GHi1n15TIonEBlfjSOiyj2Km4.svg (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\readability\readability-print.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\FzWyVFQkBJObPTziVE3nwUX-sFE.svg (148 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\header\images\menu-close.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_sn_d.png (889 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_sn_n.png (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\buttons\images\button-minus.png (237 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_common.css.patch (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-ball-dis.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_common.css (902 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_-ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\images\mail_128.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\quote_down.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_-sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\mail.dtd (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\hCvqPleRwNIKexdlpUBO-I_8Toc.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\fg_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\ovc_ra.png (532 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music.messages.xml (510 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_gr.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\mLXSAWhA--vCjoHGBhYVNaCqDLg.svg (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\YCbcsQcGggriiKTU5E8gjUWGekA.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\quote\currency_down.png (570 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\fg_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\pagetranslator\pagetranslator.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\quote\quotelist.dtd (87 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_ sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\main-ui.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\textonly.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_ ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_-ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\readability\hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\moikrug.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\skc_d-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\HHaZUbXWoxJcOwRCNSx4RcMW1wM.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\skc_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\B_GHi1n15TIonEBlfjSOiyj2Km4.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\money\money.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\2DXe1pPd42HjUa8oyCJHpO9dZ64.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\B2U5JTSkrM1iy2QyFZIn43s5WIw.svg (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\tb\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\skc_n.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\HHaZUbXWoxJcOwRCNSx4RcMW1wM.svg.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\ui.js (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\route-form\images\button-route.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\bbQ1jlb4T8Jy-s_k1Nz6W3nWt7g.png (839 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\read.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_-ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\gDhz2dKv8qVaZ-NZ4RtfpEiqP2w.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\9-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\ovc.png (473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\town\geobase.xml (1451 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_d.png (786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\userinfo\userinfolinks.dtd (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\sSvtvw1vSraqkkgdSjmCcyf7Nwo.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\cy.messages.xml (915 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\ovc_ra.png (360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\nointernet\music-nointernet.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_ sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\translator.dtd (260 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\town\townlinks.dtd (133 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\mOgNznzQgwqm21KZjo3hk5YUGWU.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\6.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\town\townlinks.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\route-form\images\route-b.png (494 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\currency_up.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\pagetranslator.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barshims64.dll (1138 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\town\geobase.xml (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\userinfo\userinfolinks.dtd (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_ sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\logo.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_ ra_d.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_gr.png (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\auth_overlay.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\readability\ready.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_ ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\quote\quote_up.png (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_ra_n.png (603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\fg_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\money.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\mail\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\vLV2RFKX8s67kUoFpg2qwLkBEIk.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\IeJDy6oBct5hJLx8v2axIJnqgJg.png (388 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_-ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\3.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_-sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\fg_n.png (681 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\route-form\images\route-a.png (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\skc_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\main-logic.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\textonly.dtd (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\common.dtd (188 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\RVzdJ9OJh0AWiuUZ2gi5Dwus4aw.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\translator\extrainfo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\userinfo.dtd (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\D_bdPNqv6HJlssMZjqrlv7FqetY.png (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_-sn_n.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\icons\logindialog\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\4.png (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\logo.messages.xml (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\logo.dtd (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\ui\now\images\b-wind_arrow.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\mail\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\logo.xml (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\8DjdBETc_zk-FtrdVtsq91CY0kU.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ sn_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\quote.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\ic.dtd (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\index.html.patch (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\ovc_ra.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\psDFj5dDAgXPPU-mVe-RPid0mc0.png (715 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\u6UuL0myn5QAc_jBy_VOr6h-fe4.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-ui\b-spinner\images\28.gif (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\bGTLQ3lgAfg8aeK6thx3QUyAaP4.png (972 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\style.css.patch (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\noflash\_music-noflash.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_ra_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\login.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet\img\b-music-noinet.png (919 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\5BIrw26AROzc9J3IurJFbak0Jro.gif (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\WPY8f52_KOx1hza1XbGCi6umItk.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\fg_d-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\defaults.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\ovc_ts_ra.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\pagetranslator\langs.xml (365 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ra_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\5.png (213 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\quote\quotelist.dtd (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_ ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\delete.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\pagetranslator.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\quote_up.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\stock_down.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\favicon.png (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\textonly.dtd (180 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\quote\quotelist.xml (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\img\b-music-logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\login.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\PudDxssXdb8JdlcekuwRV8FSHVM.png (465 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\blank.gif (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\money.dtd (580 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\mail-logo-uk.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_ sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_ sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\quote\quotelist.xsl.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\OYPSMBgQcfcSMrYzBPOaVjHEDcE.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_d.png (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_-sn_d.png (860 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\userinfo\userinfolinks.dtd (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\hmwMDVFmRjsNKU_RJNONzYBQsUQ.png (216 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\money.messages.xml (519 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\quote.dtd (859 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\XMoIiA5FZyikn3LZNNAeV9CQDxk.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bl-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\quote\export.dtd (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\stardust.dll (458 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\main-logic.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_ ra_d.png (777 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\N8KgL5vlefdSVZld4rrAZOv6td0.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_ ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\geolocation.dtd (129 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\YDmSge45ykmToGfqY4MTD1rQ3bw.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\IeJDy6oBct5hJLx8v2axIJnqgJg.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\elements-ru.8.9.1.5100.x64.delta.8.7.0.3110[1].zip (40293 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\XMoIiA5FZyikn3LZNNAeV9CQDxk.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\textonly.messages.xml (277 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\SgutBd0LU4K_hlDET4mn_5dBTcw.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_ sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\quote.dtd (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\town.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\buttons\images\button-red.png (348 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\logo.dtd (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\fotki.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_ ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\mail\mail-menu.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\noflash\img\b-music-logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_ ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\6FdgwygQ_TzvldBXoorX_18X3OI.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_ra_n.png (603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\pagetranslator.xml (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\ic.dtd (876 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\mail\maillinks.dtd.patch (34 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-green.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\fake.xml (608 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\3mHjWkgL_5EBDiCqQNBYtJ0gdTk.png (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-route.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\images\mail_128.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\header\images\menu-open.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\QZwxmXJnFKgedMKrAEej8n07z5k.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\quote\currency_up.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\blank.gif (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\mail-logo-en.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_sn_d.png (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-minus.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\userinfo.dtd (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\subscription\subscription.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\mLXSAWhA--vCjoHGBhYVNaCqDLg.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\userinfo\userinfolinks.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\Ueu6ImmUtuXnUg1yF2XdPlHBjl4.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\style.css (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\Ueu6ImmUtuXnUg1yF2XdPlHBjl4.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\fg_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\n1rMK7Xj0goEMV7ryTTbeIMFKJo.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\readability\readability-print.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\ovc_sn.png (590 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_gr.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\textonly.dtd (180 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_ts_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\attach-ico.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\q3xr3wR_Yg_zr9sfIINzZLCTdwE.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\ic.dtd (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\newtab.html.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\La6qi18Z8LwgnZdsAr1qy1GwCwo.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\login.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\town\townlist.dtd (88 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_-sn-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\ic.dtd (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_ sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_ts_ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\n1rMK7Xj0goEMV7ryTTbeIMFKJo.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\ua\town\townlinks.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\fg_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdial.zip (983 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\tb\userinfo\passport.dtd (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\geolocation.xml (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-libs\polyfills.js.patch (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\smJm5iFAtam9l7LrZUH-DhaLQH0.png (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\userinfo\userinfolinks.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\town\townlist.dtd (83 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\quote\quotelist.dtd (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\1-16.png (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-plus.png (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\logo.dtd (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\quote\quotelist.dtd (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\skc_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\logo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_ sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\oL9859A-5vIMHo11ArMir5KkeLc.png (316 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\OJF8v3B9B1iuTlzjl4Upnf3NpuQ.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\hCvqPleRwNIKexdlpUBO-I_8Toc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\geolocation.dtd (72 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\rEDlHGGyFWrULyWdRTFs5UTS1PA.png (976 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\9-16.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\brand\ua\translator\extrainfo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\psDFj5dDAgXPPU-mVe-RPid0mc0.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\translator.xml (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\Cs5BseJ6glqWdmXvSRCGh7Wzjo.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_sn_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\translator.dtd (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\gold_up.png (658 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\_music-noflash.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_-sn_d.png (852 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\KPnz247WBDVCwXmztn7XWxi1dqI.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-ball-all.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_gr.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\M0l9QwOFqrxbai_uKwym7mnjg7s.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\translator.dtd (346 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_ra_d.png (807 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\textonly.messages.xml (277 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\skc_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet\_music-nointernet.ie.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-ui\b-spinner\images\45.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\h1oQ0mYlczivIuzRfLNbU7TkmWM.png (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\town\geobase.xml (1647 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\N8KgL5vlefdSVZld4rrAZOv6td0.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\ovc_ sn.png (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\buttons\images\button-plus.png (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_gr-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barframe64.dll (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\jgFkBCE-RZAAZ9yPtanIQikHjO0.svg.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\fg_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\skc_d.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\noflash\_music-noflash.ie.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\jquery.js (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\mail.dtd (482 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\.manifest.mf (132 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\WHjFOxvA2An3CNqNgdI31oAB0sk.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\favorites.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\userinfo\userinfolinks.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\rQyMR-dTD-QwlKU1_uHVI_6jnXw.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\skc_d.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\town.dtd (911 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\pCHi2EbFGprgWW3mMpMtDX54NQM.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\buttons\images\button-route.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-libs\sizzle.js.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\readability\ready.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\textonly.xml (405 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\auth_overlay.png (216 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\moikrug.dtd (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\q3xr3wR_Yg_zr9sfIINzZLCTdwE.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-sn_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\tb\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\OEjMVquR-FlJrxPp3R2w3SiSo3I.png (272 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\nointernet\_music-nointernet.ie.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\skc_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\6FdgwygQ_TzvldBXoorX_18X3OI.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_ sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\ic\5.png (213 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\J7daNOyAa24zy3Ir-wWKTeQNeuo.png (576 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\translator.messages.xml.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\weather\gray-16.png (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdial64.dll (1350 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_ ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\fg_d.png (983 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_ sn.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_sn.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\cy.xml (641 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\7-16.png (645 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-sn_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\geolocation.dtd (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\skc_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\HtlgdvpTqGiTOfnycOmfS0aD8So.png (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_ ra_n.png (679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\geolocation\geolocation.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\sSvtvw1vSraqkkgdSjmCcyf7Nwo.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\tb\quote.xml (887 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_ ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_ ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bl.png (927 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\route-form\images\form-close-hover.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-libs\sizzle.js.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\MaIoSE198uzo6p3SmzgF9C5DwGQ.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\quote\quotelist.dtd (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\fotki\fotki.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet\_music-nointernet.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_-sn_n.png (639 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\readability\applied.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\defaults.dtd (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_ sn_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-ui\b-spinner\images\45.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\FOLu1ETT62D1LNcU-3sIz9N1IeQ.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\messages\images\spam.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\translator.dtd (350 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\town\townlist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\FwRhzXrrYgJtsGITD_YiU0Dtuk0.png (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\quote\gold_up.png (658 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\fg_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_ ra_n.png (986 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\KPnz247WBDVCwXmztn7XWxi1dqI.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\town\townlist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\moikrug.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\spam.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_-ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_-sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\skc_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\U0h5laCla0RWhXA2HIlO7izWrgg.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\fn7tv3d9HtkFU7iJjQKO1ayPMJo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\index.html.patch (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\chelper\chelper.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\0-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\6-16.png (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\vb-ru.2.18.0.5151.x64.delta.2.16.0.3147[1].zip (12433 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\La6qi18Z8LwgnZdsAr1qy1GwCwo.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\translator.dtd (336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\smJm5iFAtam9l7LrZUH-DhaLQH0.png (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\readability\sprite-readability.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\8mM517Xu-xUh_e_5YdDztnBFfxY.png (982 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\vb-ru[1].xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\stardust64.dll (1964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\noflash\_music-noflash.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_ sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\A_A_8kwnWdRuEKSsINIh1KKRTPU.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\logo\logo.png (409 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-plus.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\login.dtd (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\brand\ua\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\7akVtjosFy0SIZK5kndXmRwXc6k.png.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\HHaZUbXWoxJcOwRCNSx4RcMW1wM.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_-ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\u6UuL0myn5QAc_jBy_VOr6h-fe4.svg (529 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\fg_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_ts_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_ra_n.png (676 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_-ra_n.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\menu\images\remove.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_common.ie9.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\6qtB0Q9FVAmOWwOK3V5JVI5ojcI.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\SgutBd0LU4K_hlDET4mn_5dBTcw.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_d.png (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-ui\b-spinner\images\20-dark.gif.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\readability\applied.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\userinfo.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\elements-ru[1].xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\yadisk.zip (900 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\money.dtd (362 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\Cs5BseJ6glqWdmXvSRCGh7Wzjo.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_n.png (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\M0l9QwOFqrxbai_uKwym7mnjg7s.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_gr.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\logo.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\lenta.messages.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\d38awltCX2VgnCb75FuAk7ypnNk.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\pagetranslator\loader.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\logo.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\5_YBT2TOn0eJAO4VlPA2e644YEY.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\money.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_-sn_d.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\rZ9cub6wgvpWuc-F5gKU_pYGEfg.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\FIg7sp49R7Bbg3paJlGfzrP03rE.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_gr.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_sn_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\mOgNznzQgwqm21KZjo3hk5YUGWU.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\town\townlist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\skc_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_-sn.png (709 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\fg_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\login.dtd (787 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\town\townlist.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\translator\translator.png (636 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\smJm5iFAtam9l7LrZUH-DhaLQH0.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\v6iQMoknRy8vcEf3ugJmQ-5wUIQ.png (192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\moikrug.dtd (810 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\RlCxSpz6nMOlD7d9slWYf-6j8Jw.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\login.dtd (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\readability\readability.js (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_-ra_d.png (798 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\ggWlFuB9d-Zuqq9zOjCpTGRJxCM.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_-ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\sovetnik.zip (2513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\logo.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_-ra_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\h1oQ0mYlczivIuzRfLNbU7TkmWM.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\rZ9cub6wgvpWuc-F5gKU_pYGEfg.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\ovc_gr.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\tb\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_ ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_common.ie9.css.patch (67 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\read.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\favicon.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\lALn2ERV0sQzCaiJB-rdgHrL2JI.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\logo.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_-ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\skc_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_-ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\skc_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\geolocation.dtd (75 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\quote.dtd (708 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\O1O9BufqLBgcOuBVjcTEsQxoej0.png (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\ovc.png (397 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\dN3Z8lWVPQSY91sGfjNPrnMqwaE.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_ sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\geolocation.dtd (75 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_-sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\textonly.xml (405 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\userinfo.messages.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\skc_d.png (802 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\IeJDy6oBct5hJLx8v2axIJnqgJg.png (388 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\main-adapter.js (1960 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_-sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\bartab.dll.patch (551 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\mail\folder.png (441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\ovc_ ra.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\music.dtd (328 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\stock_up.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\quote\quotelist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\1.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\userinfo.dtd (581 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\moikrug.dtd (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\ui.js.patch (1176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\dN3Z8lWVPQSY91sGfjNPrnMqwaE.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\ua\translator\extrainfo.dtd (104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\ovc_ts_ra.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\geobase.xsl (377 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_d.png (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-libs\require.min.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-ra_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\1-16.png (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\header\images\menu-open.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\town\geobase.xml (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_-sn_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_-sn_n.png (880 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\10-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\tb\town\townlinks.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_ ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_d.png (786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\gray-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\ic\6.png (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\geolocation.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\4.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_sn_d.png (889 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\logo.dtd (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_ts_ra.png (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\geolocation.xml (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\Common\elements.exe.patch (1764 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\readability\sprite-readability.png.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\logo.messages.xml (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet\img\b-music-logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\town\townlist.dtd (83 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\userinfo\passport.dtd (189 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\mail\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\textonly.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_-ra_d.png (823 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\chelper\chelper.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\ic.dtd (567 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\main-logic.js (706 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_sn_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\money.dtd (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\money\money.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\reply.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\skc_d-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\weather\gray-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\town\townlist.dtd (82 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\cy.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\translator.xml (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\ovc_ ra.png (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\qC_PdL0Ak0WR8_18wFtdA2FwOf4.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\quote\export.dtd (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\header\images\menu-close.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_-ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\logo.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\translator.dtd (336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\ui\dayparts\images\opacity08.png (158 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\quote\quotelist.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\sSvtvw1vSraqkkgdSjmCcyf7Nwo.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\userinfo.dtd (519 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_ sn_n.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\music\music.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\pDyNDX-HZwcZsvKc7CchzqPMfjU.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_ts_ra.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\FwRhzXrrYgJtsGITD_YiU0Dtuk0.png (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\lALn2ERV0sQzCaiJB-rdgHrL2JI.png (643 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\town\townlist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\messages\images\mail-logo-ru.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\currency_up.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\main-ui.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\translator\translator.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\quote.xml.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\FOLu1ETT62D1LNcU-3sIz9N1IeQ.png (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_ sn_d.png (850 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\ui\dayparts\images\opacity08.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\mail\folder.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\D_bdPNqv6HJlssMZjqrlv7FqetY.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\SdPm0jvigN6hcrCoZYxpZ0cZ9JY.png (218 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\brand\ua\town\townlinks.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_gr.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_ra.png (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\geolocation.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\login.xml (511 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_ra_n.png (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\translator.dtd (274 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ ra_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\music\play.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_ ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\moikrug.dtd (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bl.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\quote.dtd (708 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\gDhz2dKv8qVaZ-NZ4RtfpEiqP2w.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\readability\readability.js.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\mail\mail-menu.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\fg_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\QZwxmXJnFKgedMKrAEej8n07z5k.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bl.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\MaIoSE198uzo6p3SmzgF9C5DwGQ.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\nointernet\img\b-music-logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_-ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\ovc_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\buttons\images\button-ball-dis.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\logindialog\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\quote.messages.xml (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\money.dtd (340 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\skc_n.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\mkfxKG5Ahs_33yt9pgsBXKbtnUo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\gray-16.png (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\offline-19.png (705 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\logo.dtd (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\buttons\images\button-ball-all.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\quote\quotelist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\ic.dtd (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\textonly.xml.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\readability\readability.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\route-form\images\route-b.png (494 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\iG8q08OxQz2nkkl6BRGGlXFWtjU.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\route-form\images\route-a.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_ ra_n.png (679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\yWSEQKZzite-8MoQ6YKWdObUP4E.png (151 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\main-logic.js (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\mjAIUH_QW6TPQtFga9ZLNIEY0lg.svg (719 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\textonly.dtd (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\stardust64.dll (1858 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\7-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\ic\4.png (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\skc_d.png (896 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\userinfo.dtd (522 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\userinfo\passport.dtd (173 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\LnyndjXnnnf0-TBiILsn2xomtFE.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\A_A_8kwnWdRuEKSsINIh1KKRTPU.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\ovc_ sn.png (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_-sn_n.png (639 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_ sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\common.dtd (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\ic\3.png (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\moikrug.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\quote\quotelist.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\skc_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\10-16.png (706 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\fg_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_ ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\fotki.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\ui\route-form\images\form-close-hover.png (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\data.zip.patch (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\fg_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\quote.dtd (666 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\mail.dtd (735 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\_music-noflash.css.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\iFjn01ugU1GyG0iHwFsofKRnDeM.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\_music-noflash.ie.css.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\mail-logo-ru.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\nointernet\img\b-music-noinet.png (919 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_-ra_n.png (562 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\skc_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_-ra.png (635 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\fotki.dtd (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\logo.dtd (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\tdmsMBtcvKXyb9p8ym5lfO3DXkQ.png (199 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\favorites.xml (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_-sn_d.png (860 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\translator\extrainfo.dtd (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\userinfo.dtd (573 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\pagetranslator\langs.xml (365 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barframe64.dll.patch (1412 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_ sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\ovc_gr.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\lenta.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\logo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\quote.dtd (900 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\mLXSAWhA--vCjoHGBhYVNaCqDLg.svg (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\mail\logo.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\logo.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\town\geobase.xml (747 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_sn_d.svg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\style.css.patch (106 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\readability\readability-print.css.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\ua\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\3-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\2.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\music.dtd (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet\img\b-music-noinet.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\skc_d.png (634 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_n.png (569 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_common.ie7.css (980 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\quote\quote.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_-sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\moikrug\moikrug.png (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\5-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\stock_down.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\rQyMR-dTD-QwlKU1_uHVI_6jnXw.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\ovc_ sn.png (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\index.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\quote\quotelist.dtd (84 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\WHjFOxvA2An3CNqNgdI31oAB0sk.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\main-adapter.js.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\ic.dtd (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\OYPSMBgQcfcSMrYzBPOaVjHEDcE.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\geolocation.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\common.dtd (188 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\geobase.xsl.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\fg_n.png (386 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\ovc_ ra.png (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_ ra_n.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ sn_d-inverted.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdial.dll.patch (2196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\Common\elements64.exe (1163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\geolocation.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_-sn_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_ sn.png (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\ic\5.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_ sn_n.png (694 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\ovc_ts_ra.png (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_n.png (547 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_ sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\8rm3VzQm1-ENXVTt0z7lr0UyMfI.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_-ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\WPY8f52_KOx1hza1XbGCi6umItk.png (376 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\mail\mail.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_ ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\ggWlFuB9d-Zuqq9zOjCpTGRJxCM.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-red.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\5_YBT2TOn0eJAO4VlPA2e644YEY.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\messages\images\mail-logo-en.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\mv7_d3S--K8m-52iWzjEsPZHaA4.svg (986 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\readability\readability.css.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\ovc_-sn.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\quote\quotelist.dtd.patch (34 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\Vyyv32J6Ora9svqZCYF-XSVU4Zc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\N8KgL5vlefdSVZld4rrAZOv6td0.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\hCvqPleRwNIKexdlpUBO-I_8Toc.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\offline-19.png (705 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\jquery.js (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-libs\polyfills.js.patch (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\HtlgdvpTqGiTOfnycOmfS0aD8So.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\geolocation\geolocation.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\8DjdBETc_zk-FtrdVtsq91CY0kU.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\ua\translator\extrainfo.dtd (104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_ ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\0-16.png (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\favicon.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\pagetranslator.messages.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\mail\mail.png (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\money.dtd (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_gr.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\cXyECx_vgE9llIxJCsRweD2uMuc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\skc_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\moikrug.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\8DjdBETc_zk-FtrdVtsq91CY0kU.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-ui\b-spinner\images\28.gif (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\pagetranslator\injector.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\weather\gray-16.png (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_-ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\ovc_-ra.png (470 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\route-form\images\route-b.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\iG8q08OxQz2nkkl6BRGGlXFWtjU.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\fg_d.png (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\main-adapter.js.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\PudDxssXdb8JdlcekuwRV8FSHVM.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\ui\now\images\b-wind_arrow.png (179 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_-ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\skc_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\userinfo.xml (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ sn_n-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\logo.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\B_GHi1n15TIonEBlfjSOiyj2Km4.svg (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\geolocation.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_n.png (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\quote\quotelist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\_1tfIBlbbO-sFZX3BSjgbsFLIaE.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\main-ui.js.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\qPLYva7Gqc4z8eRTw-G50C80M5w.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\1-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_-ra_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\offline-19.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\translator.dtd (346 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\ovc_ ra.png (369 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\newtab.html (101 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\ovc_-sn.png (395 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_-sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\skc_n.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\quote\quotelist.dtd (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\quote.dtd (674 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\town.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdial64.dll.patch (1923 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\cXyECx_vgE9llIxJCsRweD2uMuc.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\ua\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\ui.js (472 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\fg_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\FEj0besueLlZr3fanjXLNpNvecA.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bkn_-sn_d.png (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\index.html (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\textonly.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_ sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\ovc_sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barshims.dll (1961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\5-16.png (771 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\music\pause.png (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\money.dtd (580 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bl.png (927 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\header\images\mail-create.png (326 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\ua\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_ts_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\bl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\img\b-music-noflash.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\tb\quote\export.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\logo.dtd (140 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\fg_n.png (494 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\userinfo.dtd (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet\_music-nointernet.ie.css.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_-sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\fg_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\menu\images\remove.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_-ra_d.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\pX_YaGn4Yr_lAhpb7JdMwBPIaAY.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\.manifest.mf.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\music.dtd (328 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\route-form\images\form-close.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_n.png (569 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\ovc_gr.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_-ra-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_-ra_n.png (846 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_ ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\ovc.png (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_-ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\.update.xml (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\PudDxssXdb8JdlcekuwRV8FSHVM.png (465 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\skc_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\noflash\music-noflash.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\town\townlist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\ic.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\common-ui\b-spinner\images\20.gif.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\J_kxuf5tD5_oT3zFsj_RdNpltno.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\oL9859A-5vIMHo11ArMir5KkeLc.png (316 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\money\money.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\geolocation.dtd (72 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\kk\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bl.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\nointernet\_music-nointernet.css.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\cy.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\logo.xml (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\main-adapter.js.patch (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\main-logic.js.patch (1176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\reply.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_ ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bl.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\require-config.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_ sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\quote\stock_up.png (587 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_-sn_n.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\j6jpzsnwlO6IPc-YfB0sgdOJ3sE.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\money.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\logo\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\fg_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-ball-all.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\userinfo.dtd (533 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\stardust64.dll.patch (903 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\quote.dtd (845 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\main-ui.js.patch (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ra.svg.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\favicon.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\pagetranslator\injector.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\epVOh1xBimDwi8BSMFWMEy7gE6E.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\music.dtd (487 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\ovc_ sn.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\pagetranslator\loader.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\pagetranslator\pagetranslator.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_-sn.png (395 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-libs\require.min.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-libs\sizzle.js.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\uk\mail.dtd (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\userinfo\passport.dtd.patch (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_-sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_sn_n.png (659 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\jgFkBCE-RZAAZ9yPtanIQikHjO0.svg (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\logo.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\quote\quotelist.xsl (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\ua\mail\maillinks.dtd.patch (34 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\quote\stock_down.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\textonly.dtd (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\B2U5JTSkrM1iy2QyFZIn43s5WIw.svg.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\skc_n.png (720 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\geolocation.dtd (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\translator\extrainfo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_ra_d.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\main-logic.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\RzYvI7d3s99rTwAZUd4u2BoyF-8.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music.xml (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\geolocation.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\music-noflash.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\brand\ua\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\ovc_gr.png (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ ra_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\music.dtd (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\bkn_ra_n.png (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\FIg7sp49R7Bbg3paJlGfzrP03rE.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_-sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_-sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_-sn-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\tb\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\logo.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_common.ie9.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_-ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_ ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\brand\ua\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\login\auth.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\brand\ua\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\3-16.png (773 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\messages\images\reply.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\HAaHli8IySZ-JG5GCu6d1e_EhHY.png (180 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\ovc_ts_ra.png (714 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_ra.png (360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\messages\images\mail-logo-uk.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\gold_up.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\cs\common.dtd (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\temporary-files\{6AD73966-35A9-402E-8875-473DED2279F9} (76377 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_ ra_d.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\ovc_sn.png (691 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\ovc.png (298 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_ts_ra.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\bkn_ra_d.png (807 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_-sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-ball-dis.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_-sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\6-16.png (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_ sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\favicon.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\common-ui\b-spinner\images\28.gif (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\brand\ua\translator\extrainfo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\ovc_-ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\ovc_-sn.png (534 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\pagetranslator.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\mail.dtd (715 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\quote.messages.xml (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\ovc_-ra.png (635 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialshims64.dll (1098 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\cs\icons\logindialog\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\jquery.js.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_sn_d-inverted.svg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_ts_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\quote.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ sn_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\favicon.ico.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\fg_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\ru\common.dtd (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\Common\elements64.exe.patch (1843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\quote.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\traffic\main-ui.js (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\route-form\images\button-route.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\fg_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\Z89ijsO17istBi7uzfluWEm_lBs.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\town\geobase.xml (747 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\translator.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\quote.dtd (859 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialshims64.dll.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\skc_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\30UGBquvFO2YEoZdzUGiTFKarLU.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\parts\bkn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\quote\quotelist.dtd (87 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png16\ovc_sn.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\4-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\GYMNZu4TKhloYL739B8cACsR7AQ.svg (986 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\ovc_-ra.png (542 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\3y0kod-qSv8niHqiuf1Y0IxgVlU.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\music\html\nointernet\_music-nointernet.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\epVOh1xBimDwi8BSMFWMEy7gE6E.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ ra-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\HtlgdvpTqGiTOfnycOmfS0aD8So.png (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_-sn_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\HuoOcff43SvB1OVXDmTAAXmFs0g.png (782 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_sn_d.svg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\en\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\oL9859A-5vIMHo11ArMir5KkeLc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\traffic\ui\buttons\images\button-route.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\header\images\mail-refresh.png (944 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\quote.xml (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\common-ui\b-spinner\images\20-dark.gif.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\music-noflash.html.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\userinfo.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\ru\userinfo.dtd.patch (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\money.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\mail\ui\messages\images\delete.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\iG8q08OxQz2nkkl6BRGGlXFWtjU.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\geolocation.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\be\logo.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\default.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\6-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\ovc_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\menu\images\remove.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\RMgCqWYYpM8hT-lQBStHX86s-sQ.png (929 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\now\ovc_ra.png (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\fg_d.png (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bkn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\logo\logo.png (409 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_sn-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\userinfo.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ts_ra-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Common\elements64.exe.patch (1843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\fg_d.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\_music-noflash.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\parts\ovc_sn.png (796 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\moikrug.dtd (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\readability\applied.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\ua\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\music\music.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\bkn_-sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\bkn_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\ua\town\townlinks.dtd (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\tUcYJofZiuqIDLQCePK0a5EQQbM.png (152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\8-16.png (696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\kk\textonly.dtd (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town.messages.xml (865 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\.update.xml (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\fg_d.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\quote\currency_down.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\be\moikrug.dtd (818 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\ovc_ sn-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\locale\tr\common.dtd (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\RMgCqWYYpM8hT-lQBStHX86s-sQ.png (929 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\fotki.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\RMgCqWYYpM8hT-lQBStHX86s-sQ.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\tr\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\quote\quote_down.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg19\ovc_ ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\J_kxuf5tD5_oT3zFsj_RdNpltno.svg (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\f7-fSnZIoEUNKpSJWJW98kU5x9U.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\translator\extrainfo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg16\ovc_gr-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\bkn_ ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\now\ovc_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png19\bkn_sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\favicon.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\tfgMYzMit9gnbrINme1tVATR_Hw.png (158 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\U0h5laCla0RWhXA2HIlO7izWrgg.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\quote\quotelist.dtd (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\png16\bkn_-sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\pagetranslator\langs.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\old\layout\_\8Tybci2Ic-b9EusnAqnwjdWOCYU.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\icons\town\traffic\2-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\en\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\mail\ui\messages\images\delete.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\town\weather\images\svg16\bl-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10678\new\layout\_\FwRhzXrrYgJtsGITD_YiU0Dtuk0.png.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\brand\ua\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\music\html\noflash\img\b-music-logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_ sn_n.png (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\new\locale\uk\geolocation.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\png19\bkn_sn_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\town\weather\images\svg19\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir868_10665\old\icons\town\traffic\2-16.png (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-AAB01.tmp\32ae6a225b45400b5695711fea8b1c8c.tmp (1609 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{0D136A26-C947-4287-995F-53C965D35271}.exe (28086 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\lite_installer.exe.log (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-8MR7L.tmp\_isetup\_shfoldr.dll (47 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advego Plagiatus\Advego Plagiatus.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-8MR7L.tmp\_isetup\_setup64.tmp (6 bytes)
%Program Files% (x86)\Advego Plagiatus\unins000.exe (819 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advego Plagiatus\Ãƒâ€žÃƒÂ¥ÃƒÂ¨ÃƒÂÃƒÂ±ÃƒÂ²ÃƒÂ ÃƒÂ«ÃƒÂ«ÃƒÂ¨ÃƒÂ°ÃƒÂ®ÃƒÂ¢ÃƒÂ ÃƒÂ²ÃƒÂ¼ Advego Plagiatus.lnk (1 bytes)
%Program Files% (x86)\Advego Plagiatus\unins000.dat (6768 bytes)
%Program Files% (x86)\Advego Plagiatus\plagiatus.exe (291 bytes)
%Program Files% (x86)\Advego Plagiatus\is-THL29.tmp (24822 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advego Plagiatus\Ãƒâ€˜ÃƒÂ ÃƒÂ©ÃƒÂ² Advego Plagiatus ÃƒÂ¢ ÃƒË†ÃƒÂÃƒÂ²ÃƒÂ¥ÃƒÂ°ÃƒÂÃƒÂ¥ÃƒÂ²ÃƒÂ¥.url (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-8MR7L.tmp\downloader.exe (673 bytes)
%Program Files% (x86)\Advego Plagiatus\is-6M45N.tmp (29529 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\u2-ctrl.log (3869 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\bm\in_work_0.xml (795 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\bm\statistics.xml (6665 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\bm\appinfo.xml (11758 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\res (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yabrowser\statistics.xml (278 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yupdate-exec-statistic.log (2445 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\u2-exec-bm.log (5214 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yupdate-exec-yabrowser.log (2845 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yabrowser\appinfo.xml (3492 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yupdate-exec.log (11791 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\u2-exec-statistic.log (2050 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\u2-exec.log (1776 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\praetorian\appinfo.xml (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\barie\statistics.xml (1095 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yupdate-ctrl.log (131958 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\vbie\statistics.xml (310 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\vbie\appinfo.xml (1622 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\barie\appinfo.xml (1997 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BE432C2EE45E016635C9B13C029DA7E7 (391 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\clids.xml (267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Tar214.tmp (2712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BrandFile (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ybCF6E.tmp (87080 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Cab213.tmp (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 (656 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BE432C2EE45E016635C9B13C029DA7E7 (744 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\PartnerFile (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\lite_installer.log (24770 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\install[1].txt (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_D4D20.tmp\BRAND_YANDEX (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_D4D20.tmp\BRAND_UA-UK (691 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_D4D20.tmp\setup.exe (17754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_D4D20.tmp\BRAND_KZ (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_D4D20.tmp\BRAND_TB (435 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_D4D20.tmp\BRAND_INT (322 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_D4D20.tmp\SETUP.EX_ (396 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_D4D20.tmp\BRAND_BY (787 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_D4D20.tmp\BROWSER.PACKED.7Z (61755 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_D4D20.tmp\BRAND_UA-RU (811 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\workers\workersConfigData.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\get_cookies.js (716 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\utils\logger.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\force_update_workers.js (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\workers\storage.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\messages\baseListener.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\messages\workersListener.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\messages\messagesHub.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\update_workers.js (669 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\watch_cookies.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\get_homepage_url.js (654 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\browser.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\utils\url.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\get_cookie.js (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\third_party\lodash.min.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\messages\RequestMessage.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\remove_cache_entry.js (713 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\messages\MessageSource.js (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\workers\config.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\utils\network.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\get_config_data.js (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\DECODED_MESSAGE_CATALOGS (348 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\main.js (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\messages\tabsListener.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\watch_idle.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\messages\Message.js (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\workers\supervisor.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\get_idle.js (638 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\messages\ResponseMessage.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\yandex.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\restart_worker.js (809 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\handlers\add_cache_entry.js (719 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\DECODED_IMAGES (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\manifest.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\utils\filesystem.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\messages\Notification.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\app\workers\storageUpdater.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\_locales\ru\messages.json (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\CRX_INSTALL\scripts\base\define.js (318 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\debug.log (121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-48.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_frFHjzexYbcyeAv (1045 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\data_0 (845660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\data_1 (216464 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\data_2 (110200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\data_3 (15776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\.usage (1400 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\E4F6.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network Action Predictor (3946 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Tablo Cache\data_0 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Tablo Cache\data_1 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Tablo Cache\data_2 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Tablo Cache\data_3 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\24B3.tmp (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\ihhcdinmaceokcdmbddlclfejhadgpgg\0.2.1_0 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_aH06YhVV4RRPvWv (524 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\94AF.tmp (94 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Visited Links (3608 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\000003.log (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\000003.log (101527 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Extension Blacklist_new (11876 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\6EE2.tmp (5621 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000004 (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000005 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000006 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000007 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000000 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000001 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000002 (698 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000003 (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000008 (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network Action Predictor-journal (12878 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\000003.log (15446 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\000003.log (94 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\6B96.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Images_new (204 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\lhbpmoijjppjnkgelgdemkidbedaijhp\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\MANIFEST-000001 (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cookies-journal (22682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\FF55.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\MANIFEST-000002 (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\lhbpmoijjppjnkgelgdemkidbedaijhp\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\ja\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_RvyDWzKrvFYbw2h (75 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Cookies-journal (2799 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\XR9GAIZH4G5OW72YWOVT.temp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\plmneencfmbjfgbkfiinjelmngigejjh\0.8.9_0\main\platform\chrome\icons (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\000003.log (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\000003.log (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\000003.log (2054 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\index (368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Storage\chrome-extension_emghafiiokbjdgphaofindndbcicinae_0.localstorage-journal (28992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-64.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000017 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_vYAHAnaPLgrT6NR (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000015 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000014 (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Top Sites (1952 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000011 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\ja\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000019 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000018 (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_iVXU4gPTUdQfXC8 (140 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\6C81.tmp (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\cs\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\QuotaManager (6924 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\D097.tmp (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000027 (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000024 (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000022 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000023 (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000020 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000021 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\6F42.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Login Data (734 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_SSJp2l1JsDUhJCH (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\es\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Bloom_new (139868 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\manifest.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_GUXtrAN584oXg9W (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000016 (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\fr\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\pt_BR\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Yandex Download_new (204 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\37A7.tmp (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\6F41.tmp (106623 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Tablo Cache\index (368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000008 (37 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Resources\extension\bgeakjmfknncppbmgkkfbglnodccdecp\settings.json (1706 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_2NDRZ8OaOlNmUcq (465 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000013 (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000012 (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\ihhcdinmaceokcdmbddlclfejhadgpgg\0.2.1_0\scripts\app\handlers (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\22D1.tmp (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000010 (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_JgileEHod7EdS7h (11965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\zh_CN\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Data (14121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\7D51.tmp (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\O8MGLTQXIW2RSBYNZ4KL.temp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Login Data-journal (576 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-48.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\00\00000001 (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\GPUCache\index (368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\README (166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\000003.log (96340 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\en\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\antishock-prod.crx (5873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\FBB.tmp (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\5862.tmp (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\History-journal (25708 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\tr\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\2541.tmp (80 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\000003.log (497 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Shortcuts (304 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-64.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_Jhc34ejLwish7wO (985 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\FF25.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\DD10.tmp (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\9F8A.tmp (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\000003.log (5068 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\6F41.tmp (6841 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Fraud_new (12236 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\de\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\zh_CN\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\DCDA.tmp (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_GefAsl1WJcBursj (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\pt_BR\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000028 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_HsvafBIbL5F34P2 (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\4E9A.tmp (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_xZStiLq9zKTvAWe (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000026 (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000003 (94 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\en\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\A2A6.tmp (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_bEOdf9gS7XvwsNo (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\plmneencfmbjfgbkfiinjelmngigejjh\0.8.9_0\_locales (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000025 (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\C319.tmp (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-128.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\AC6E.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\6037.tmp (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Favicons (4294 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\000003.log (21210 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Current Tabs (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\uk\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\4FFC.tmp (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\000003.log (621 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\_locales\ru\messages.json (306 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\fr\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\zh_TW\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\pt\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Current Session (2084 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-128.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-16.png (375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\88AD.tmp (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\8C2.tmp (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\ru\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\00\00000000 (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000001 (32 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000009 (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\2540.tmp (152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\EDC2.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\4F5C.tmp (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\3E6E.tmp (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\C821.tmp (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\000003.log (41779 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Resources\extension\emghafiiokbjdgphaofindndbcicinae\skins.json (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Data-journal (6950 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\2ADD.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\History Provider Cache (486 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Storage\https_browser.yandex.ua_0.localstorage-journal (9647 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\manifest.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\tr\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\ihhcdinmaceokcdmbddlclfejhadgpgg\0.2.1_0\scripts\app\messages (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\000003.log (36797 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Download_new (123036 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\1E36.tmp (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\.usage (5016 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-16.png (375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\2E9A.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\QuotaManager-journal (63725 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\lhbpmoijjppjnkgelgdemkidbedaijhp\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\000F7F8FAB2D96E6F8CBD5C9A3B4EC90 (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Top Sites-journal (6616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\9433.tmp (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yabrowser\in_work_0.xml (504 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\GPUCache\data_3 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\GPUCache\data_2 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\GPUCache\data_1 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\GPUCache\data_0 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\zh_TW\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Bloom Prefix Set (1812 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\databases\Databases.db (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\plmneencfmbjfgbkfiinjelmngigejjh\0.8.9_0\main\platform\chrome\pages (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\.usage (24 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\lhbpmoijjppjnkgelgdemkidbedaijhp\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\lhbpmoijjppjnkgelgdemkidbedaijhp\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Shortcuts-journal (576 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\000F7F8FAB2D96E6F8CBD5C9A3B4EC90 (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_m9knxMytmGNSZCX (748 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Permanent State (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\de\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Resources\extension\emghafiiokbjdgphaofindndbcicinae\settings.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Favicons-journal (16064 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\databases\Databases.db-journal (576 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000002 (60 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\First Run (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\Yahelper.crx (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000006 (68 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000007 (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000004 (98 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000005 (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\pt\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\FF94.tmp (375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\2E0.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\es\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_30001\6EE2.tmp (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_pQq8LwH2qaflhxj (530 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\72EB.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\it\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\cs\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_hEDDsgvUjTwDiWl (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\it\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\plmneencfmbjfgbkfiinjelmngigejjh\0.8.9_0\main\antishock\ui (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\F7B.tmp (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_acizRwikDl0bGvI (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\manifest.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\uk\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\9B7C.tmp (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\ru\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\pages\log.html (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\pages\promo.html (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\background.js (17904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\_locales\.DS_Store (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\PromoPage\img\red_cross.png (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\common\defaults.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\PromoPage\img\trash.png (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\ListEditor\list_editor.xml (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\assessorContent.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\OptionsPage\options_page.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\content.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\assessorContent.css (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\third_party\requirejs\require.js (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\ListEditor\img\remove.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\OptionsPage\options_page.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\DECODED_IMAGES (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\ListEditor\list_editor.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\.DS_Store (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\PromoPage\promo_page.css (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\.DS_Store (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\third_party\.DS_Store (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\third_party\requirejs\.bower.json (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\PageOverlay\page_overlay.css (954 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\PromoPage\img\smile.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\pages\promo.js (6984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\pages\options.js (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\DECODED_MESSAGE_CATALOGS (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\LogPage\log_page.css (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\pages\options.html (459 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\PromoPage\img\notebook.png (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\updaterWorker.js (15904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\PageOverlay\page_overlay.xml (273 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\icons\complain-ad-16.png (214 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\PromoPage\img\layout.png (20800 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\PromoPage\promo_page.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\pages\log.js (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\platform\chrome\background.html (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_23356\CRX_INSTALL\main\antishock\ui\OptionsPage\img\logo-128.png (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\utils\logger.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\DECODED_MESSAGE_CATALOGS (348 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\watch_cookies.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\messages\MessageSource.js (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\get_cookies.js (716 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\messages\baseListener.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\messages\Message.js (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\restart_worker.js (809 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\utils\url.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\yandex.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\utils\filesystem.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\workers\storage.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\force_update_workers.js (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\base\define.js (318 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\get_homepage_url.js (654 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\get_config_data.js (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\utils\network.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\add_cache_entry.js (719 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\remove_cache_entry.js (713 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\messages\RequestMessage.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\messages\messagesHub.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\messages\Notification.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\workers\workersConfigData.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\update_workers.js (669 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\workers\supervisor.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\third_party\lodash.min.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\messages\workersListener.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\messages\tabsListener.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\workers\config.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\main.js (305 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\get_idle.js (638 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\browser.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\messages\ResponseMessage.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\DECODED_IMAGES (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\get_cookie.js (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_22128\CRX_INSTALL\scripts\app\handlers\watch_idle.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\PromoPage\img\trash.png (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\assessorContent.css (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\PromoPage\img\layout.png (20800 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\OptionsPage\options_page.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\third_party\requirejs\.bower.json (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\OptionsPage\img\logo-128.png (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\pages\options.html (459 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\_locales\.DS_Store (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\third_party\requirejs\require.js (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\PromoPage\img\smile.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\DECODED_IMAGES (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\PageOverlay\page_overlay.xml (273 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\pages\options.js (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\PageOverlay\page_overlay.css (954 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\pages\promo.html (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\assessorContent.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\background.js (17904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\pages\promo.js (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\ListEditor\list_editor.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\common\defaults.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\PromoPage\promo_page.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\pages\log.js (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\content.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\ListEditor\img\remove.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\ListEditor\list_editor.xml (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\PromoPage\img\notebook.png (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\pages\log.html (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\background.html (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\DECODED_MESSAGE_CATALOGS (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\OptionsPage\options_page.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\PromoPage\promo_page.css (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\PromoPage\img\red_cross.png (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\platform\chrome\icons\complain-ad-16.png (214 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3212_17132\CRX_INSTALL\main\antishock\ui\LogPage\log_page.css (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\FAP24DE.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#yastatic.net\settings.sxx (199 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\NCFMWW34\yastatic.net\yb.sxx (88 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx (10576 bytes)
Delete the following value(s) in the autorun key (How to Work with System Registry):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"Browser Manager" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManager.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"{12f34aee-538c-44d5-b33a-12213b7e0197}" = "C:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerInstaller.exe /quiet /burn.log.append C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ÃÅ“ÃÂµÃÂ½ÃÂµÃÂ´ÃÂ¶ÃÂµÃ‘â‚¬_ÃÂ±Ã‘â‚¬ÃÂ°Ã‘Æ’ÃÂ·ÃÂµÃ‘â‚¬ÃÂ¾ÃÂ²_20150425082803.log /burn.runonce"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"YandexElements" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110\elements64.exe /auto"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"YandexElements" = "%Program Files% (x86)\Yandex\Common\elements.exe /auto"
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.