Trojan.Win32.Swrort.3_a4bd7bb0e9

by malwarelabrobot on May 15th, 2014 in Malware Descriptions.

Trojan.Win32.Swrort.3.FD, mzpefinder_pcap_file.YR (Lavasoft MAS)
Behaviour: Trojan

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

Dynamic Analysis

Static Analysis

Network Activity

Map

Strings from Dumps

Removals

MD5: a4bd7bb0e962813689b6c4df9b8bbc7e
SHA1: 4ac00634557b292edf96aa235a0564c6427675a3
SHA256: 39e9c113bd268ed68b3eda788ca112b69c5b65c635fcd52584785df8399c4d9d
SSDeep: 196608:e8 2XOArIVaYyjv9umUx78BqbnTu2JBrwAHz:t36aYyEnV84XrtHz
Size: 8648632 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: Bandoo Media Inc.
Created at: 2013-05-30 11:09:10
Analyzed on: WindowsXP SP3 32-bit

Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):

imapi.exe:2100
mediabar.exe:204
patch_ff.exe:1660
%original file name%.exe:1476
jZipMediaBar.exe:1680
jZipMediaBar.exe:1308
jZipMediaBar.exe:460
regsvr32.exe:204
pack.exe:1980
DatamngrCoordinator.exe:1712
DatamngrCoordinator.exe:1388

The Trojan injects its code into the following process(es):

DatamngrUI.exe:1016
regsvr32.exe:1016
DatamngrCoordinator.exe:236

File activity

The process imapi.exe:2100 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%WinDir%\Temp\5z2vk2r6.TMP (146970 bytes)

The process mediabar.exe:204 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsx4\nsq8.tmp\jZipMediaBar.exe (18125 bytes)

The process patch_ff.exe:1660 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%WinDir%\Temp\nsj34.tmp\System.dll (11 bytes)
%WinDir%\Temp\nsj34\Helper.dll (14988 bytes)
%WinDir%\Temp\nsj34.tmp\registry.dll (784 bytes)
%WinDir%\Temp\nsu33.tmp (4571 bytes)

The Trojan deletes the following file(s):

%WinDir%\Temp\nsj34.tmp\registry.dll (0 bytes)
%WinDir%\Temp\nsj34.tmp\System.dll (0 bytes)
%WinDir%\Temp\nsj34.tmp (0 bytes)
%WinDir%\Temp\nsu32.tmp (0 bytes)

The process %original file name%.exe:1476 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\1B.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\1E.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4\nsq8.tmp\pack.exe (109567 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\B.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\ns23.tmp (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4\nsq8.tmp\mediabar.exe (76078 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\ns30.tmp (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\12.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\15.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\14.tmp (4545 bytes)
%Program Files%\Music Toolbar\Datamngr\x64 (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\10.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\21.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\D.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\ns22.tmp (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4\Starter.exe (1856 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\C.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\ns24.tmp (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\1F.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\F.tmp (4545 bytes)
%Program Files%\Music Toolbar\Datamngr\Uninstall.exe (3616 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\registry.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\ns2C.tmp (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\16.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\1D.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\11.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\1C.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\A.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\19.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsd2.tmp (336382 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\UserInfo.dll (4 bytes)
%Program Files%\Music Toolbar\Datamngr\Helper.dll (14988 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\13.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\9.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\install_statistics[1].xml (498 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\18.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\nsExec.dll (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\ns31.tmp (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\ns28.tmp (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\E.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4\Helper.dll (63950 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\17.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\1A.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\20.tmp (4545 bytes)

The Trojan deletes the following file(s):

%Program Files%\Music Toolbar\Datamngr\x64\mgrldr_u.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\1B.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\1E.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\UserInfo.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\ns30.tmp (0 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\IEBHO.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\12.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\15.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\14.tmp (0 bytes)
%Program Files%\Music Toolbar\Datamngr\x64 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\10.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\21.tmp (0 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\Internet Explorer Settings Update.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\D.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsi1.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\ns22.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\ns23.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\C.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\ns24.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\1F.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\F.tmp (0 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\mgrldr.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\registry.dll (0 bytes)
%Program Files%\Music Toolbar\Datamngr\mgrldr_u.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\16.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\1D.tmp (0 bytes)
%Program Files%\Music Toolbar\Datamngr\Internet Explorer Settings Update.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\11.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\1C.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\A.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\19.tmp (0 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\apcrtldr.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\B.tmp (0 bytes)
%Program Files%\Music Toolbar\Datamngr\SRToolBar (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\13.tmp (0 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\Datamngr.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\9.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\install_statistics[1].xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\18.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\System.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\nsExec.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\ns31.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\ns28.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\ns2C.tmp (0 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\setmgrc1.cfg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\E.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\17.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\1A.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\20.tmp (0 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\Internet Explorer Settings.exe (0 bytes)

The process jZipMediaBar.exe:1680 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsp2F.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp2F.tmp\toolbar.xml (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp2F.tmp\xml.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp2F.tmp\ocode.xml (203 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp2F.tmp\inetc.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\jzipmusictoolbar181-manifest.xml (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\DTX\Reporting\ReportingHelper.dll (6360 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp2F.tmp\UAC.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa2E.tmp (141005 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsp2F.tmp\System.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp2F.tmp\toolbar.xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp2F.tmp\xml.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp2F.tmp\ocode.xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp2F.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp2F.tmp\inetc.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp2F.tmp\UAC.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsk2D.tmp (0 bytes)

The process jZipMediaBar.exe:1308 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png (683 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\chevron.png (191 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png (336 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\vmnrsswin.xml (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\skin-yellow.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-calendar.png (566 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\add.png (653 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\notifylabel-right.png (267 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\searchresultstb.dll (19096 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\close-normal.png (585 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\8DFDF057024880D7A081AFBF6D26B92F (176 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\lock.png (316 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_14.png (270 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-search-pnlbtm.png (916 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\skin-orange.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\shadow-leftmenu.png (963 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\btn-search.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lichen.gif (153 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-aboutbox.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\panels.css (5 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxprefwin.xul (307 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnright-vista.png (309 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-buffering.gif (642 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\DTX\Reporting\ReportingHelper.dll (6360 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\icons.xml (6 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\uninstall.exe (6115 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\bluesky.gif (153 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\popupWeather.html (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\over-blue.png (163 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\install.ico (8 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-dollar.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-mdl_ff.png (179 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-launch-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\titlebar-right.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\alexabutton.css (596 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-off-r.png (312 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\collapse.png (264 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_06.png (316 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt-disable.png (832 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\rss.png (832 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\template.html (7 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\scroll.png (455 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_09.png (288 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-left.png (114 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-right.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchtheweb.png (664 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-playing.gif (854 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-on-r.png (278 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btn-widgets-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\imap.png (278 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\logo-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png (607 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\popupHTML.html (802 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\templateFF.html (6 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\search-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png (313 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\lib\en.js (14 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_iconPressed.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\button-splitter.png (264 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxpaneltransparent.xul (653 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\gameList.xsl (7 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\widget.jsw (6 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\widgets-square-16px.png (690 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt-over.png (892 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\categories-bg-gradient-grid.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\AccessControl.dll (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\apnuserid.dat (16 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_16.png (278 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png (916 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\mailcom.png (254 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png (7 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\gametype.xsl (681 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\blank.gif (55 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-stopped.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\ie-only.css (153 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\xml.dll (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\thumbs\tb_thumb_icon.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\na-t.png (5 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\about.xml (5 bytes)
%Documents and Settings%\%current user%\Application Data\jzipmusictoolbar181\guid.dat (38 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\custom.js (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\settings_stb_19x.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-divider.png (240 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-play-left-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-left-topglow.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-shop.png (233 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\trackid.dat (6 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\bg.gif (8 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png (279 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-connecting.gif (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-previous.png (476 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\vmn.css (8 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-left-middleglow.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\logo-separator.png (566 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-install.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-right.png (205 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchboxlite_end.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\plus.gif (157 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-scrollbar-trackend-y.png (964 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\preferences.xml (663 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\throbber.gif (825 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnback-vista.png (207 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\rsswin.xml (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-scrollbar-track-y.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-back.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\break.gif (582 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-pnl520x390.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\box-check.png (174 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\remove.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\arrow-dn.gif (46 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-up.gif (46 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\facebook.png (235 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\star.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemleft-vista.png (307 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\btn_ask_search.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\btn-settings-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchboxlite.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\as_guid.dat (38 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\8DFDF057024880D7A081AFBF6D26B92F (533 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\metacafe.gif (125 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\menul-bgon.png (179 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-play.png (248 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\components\windowmediator.js (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\initHTML.html (481 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-off-l.png (205 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchbox-pnlbtm.png (532 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\template.xml (810 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\popupWidgets.css (9 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scroll-bg.png (663 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\options\options-weather.gif (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight_lime.png (300 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-on-l.png (167 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\jquery.qtip.css (13 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\notifylabel-left.png (274 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_iconFF.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-pref.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-user-monitor.png (853 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.url.js (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\ask_logo_18x14.png (634 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\data\search\search.xsl (955 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxwin.xul (387 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\nsisFirewall.dll (8 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\yahoo.png (244 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-box-next.png (791 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\popupGames.html (10 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\it.js (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png (4 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\options-search.png (4 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\logo.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\searchresultsDx.dll (4992 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\rename.gif (223 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\ttlbar-left.png (266 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\edit-back.png (214 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-right.png (114 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\footer.htm (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\footer-short-left.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-wide-close-over.png (873 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\neterror.xhtml (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\video.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-btnover.png (179 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\rsstabdivider.gif (85 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton.css (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btn-start.png (342 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemleft.png (323 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\{6fcaba44-a441-481f-895e-bddfd81a6cc2}\geodata.xml (162 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight.png (811 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png (196 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\menuseparatorback.gif (165 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btn-widgets.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-right-resize.png (214 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt.png (893 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_18.png (312 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-middle22-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-left.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemright-vista.png (309 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png (205 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-add-over.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\inetc.dll (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\popupWidgets.html (14 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\btn-settings.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\microphone_16x.png (518 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\find-videos.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight_magenta.png (302 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\dislike_over.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\nsProcess.dll (4 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\arrow-up.gif (46 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-end.png (284 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\titlebar-middle.png (999 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\minus.gif (152 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\skin-lichen.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\movetarget.png (507 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\arrow-right.gif (46 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa26.tmp (152173 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ask_search_212wide.png (671 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\resize-box.gif (92 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\appid.dat (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\titlebar-left.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\found.png (902 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-dn.gif (46 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-down-white.png (982 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\appsfeatured-bg-gradient-grid.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-info.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\template.xml (144 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\widget.xml (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_10.png (250 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ajax-loader.gif (6 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.js (3312 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.RadioBeta\widget.xml (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\text-ellipsis.xml (423 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\sprite-dropdown.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\default.png (867 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\scroll-right.png (258 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\searchtheweb.png (664 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\gmail.png (741 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-bottom-middleglow.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-left22.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scroll-topwin.png (951 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\modules\nsDragAndDrop.js (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\toolbar.xml (14 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\modifyhot.png (149 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\popupGames.css (7 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\widgets-square-24px.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\modify.png (708 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\skin-bluelite.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\divider.png (134 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btn-mdl.png (205 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.qtip.min.js (1552 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-right-topglow.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\notifylabel-middle.png (203 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\dtuser.exe (27992 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-joystick24.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\logo-separator.png (582 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\separator.png (139 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_21.png (300 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_04.png (293 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\btn-close-grey.png (263 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\na-s.png (4 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight_blue.png (309 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\titlebar-right.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\searchbar\searchbar-background-middle.png (152 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\vimeo.gif (255 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-sml.png (211 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\aol.png (648 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-ico.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_12.png (173 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\proxy.html (354 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\toolbarsplitter.png (763 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\veoh.png (790 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\btn-widgets.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm-over.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_pref_icon.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight_yellow.png (309 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\pop.png (543 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-search.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-try-left-over.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\jzipmusictoolbar181\appid.dat (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\modify-save.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\62B5AF9BE9ADC1085C3C56EC07A82BF6 (224 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-start.png (352 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\search_icon.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\orange.gif (153 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxtransparentwin.xul (657 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_icon.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\websearch.png (853 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-news24.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\en.js (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\paneltemplate.html (5 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-greyover.png (457 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta.ico (1552 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\toolbar.htm (712 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menu_separator_white.png (133 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\topbar-inside-gradient.png (964 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\star_blank.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png (431 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-scrollbar-thumb-y.png (966 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png (643 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\move.gif (58 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-drag.png (486 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_02.png (248 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\System.dll (11 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-next-over.png (442 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\transparent_1px.gif (45 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\de.js (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\data\weather\icons.xml (6 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt-down.png (864 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-grey.png (283 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\locale.js (257 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-close-over.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\btn-close-greyover.png (444 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\popupWeather.css (7 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\blip.png (315 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-info-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\logo-about.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-pref-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\widget.js (6 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\na.png (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\over-orange.png (169 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-right-middleglow.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\gamecategory.xsl (700 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\widgets.png (447 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\reload.png (905 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\like_over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\grey.gif (152 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bullet-orange.gif (43 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\vmncode.js (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\ocode.xml (203 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\star_x_grey.png (328 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\apps-bg-gradient-grid.png (995 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\ioSpecial.ini (26 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\arrow-right-disabled.gif (46 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\panel-botm-noscroll.png (448 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png (460 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_13.png (277 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-addtoolbar-right.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\titlebar-left.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.RadioBeta\widget.jsw (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb-disable.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\btn_settings.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_11.png (284 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-thumb-on.png (402 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_15.png (344 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\ask_logo_24x20.png (682 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-thumb-over.png (380 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\62B5AF9BE9ADC1085C3C56EC07A82BF6 (126 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_iconPressedFF.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\icon_games.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\neterror.xhtml (344 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnback-down-vista.png (207 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\custom.js (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\widget.jsww (6 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-download.png (251 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_20.png (287 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\debugbar\debug.html (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\notifylabel_ff.png (210 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\skin.xml (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btn-mdl_ff.png (203 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\web.png (566 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btn-end.png (299 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\custom.css (8 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\popupAbout.css (907 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-right22-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\RSSLogo.png (7 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-Info.png (218 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-close.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png (649 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitem-splitter.png (136 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\featured-bg-btm-gradient.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-addtoolbar-left.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\jzipmusictoolbar181\apnuserid.dat (16 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\titlebar-middle.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\external.js (23936 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\gamethumb2-over.png (574 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-moredetails.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb-down.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\thumb-up.png (754 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\manifest.xml (2264 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\jzipmusictoolbar181-manifest.xml (9 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-add.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\jzipmusictoolbar181\geodata.xml (162 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemback-vista.png (209 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnleft-down-vista.png (310 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\bluelite.gif (153 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-top-middleglow.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\skin-grey.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-grey-over.png (457 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxpanel.xul (573 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png (532 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemback-down-vista.png (202 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\gameData.js (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-play.png (290 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\geolocation[1].xml (162 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\add.png (653 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btn_slider.png (763 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\css\dialog.css (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_19.png (299 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\searchbar\searchbar-background-left.png (286 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menu_separator_bar.png (129 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\rsspreview.html (241 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-Add.png (228 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\search-go.png (840 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\scripts\defscript.js.bak (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.uniform.min.js (9 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\loadingMid.gif (7 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\default.js (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\fr.js (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnleft-vista.png (307 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\apps-hover.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\close-hot.png (579 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\ico-check.png (248 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\UAC.dll (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-tags.png (209 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\like.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\main.html.bak (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\btn_settings_17padding_18pxheight.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\lastsearch-thumb-back.gif (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\toolbarsplitter.gif (76 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\radio.png (355 bytes)
%Documents and Settings%\%current user%\Application Data\jzipmusictoolbar181\trackid.dat (6 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\expand.png (303 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\sv.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\skin-bluesky.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\settings_stb_19x_over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchbox.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemright-down-vista.png (252 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\weather.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\tv.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-detailed-on.png (496 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\sysid.dat (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\btn-widgets-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\btn-search-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\logo_headphones_18h.png (992 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\button-splitter-down-vista.png (261 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.tinyscrollbar.min.js (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-wide-close.png (857 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\dtx.css (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\yellow.gif (153 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\settings.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\wmpstreamer.html (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-mdl-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-addtoolbar-left-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-right-bottomglow.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\data\search\engines.xml (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\main.html (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\edit-back-hot.png (217 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\button-splitter-vista.png (264 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\checkmark.png (309 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-try-left.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\cond999.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemleft-down-vista.png (289 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\dislike.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.RadioBeta\tb_icon.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\toolbar.xul (23936 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-left-bottomglow.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\options\options-main.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\emailnotifierproviders.xml (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\btn_music_16x.png (710 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\ie7-only.css (136 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\gamethumb-on.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-right-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menu_bg-basic.png (446 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\rsswin.xsl (7 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnright-down-vista.png (289 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\transparent.gif (49 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\options-weather.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\TRUSTe_about.png (5 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrowr-bluew5.png (205 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-left.png (204 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\images.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\scripts\defscript.js (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\menul-bgover.png (168 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\launchers.css (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\throbber.gif (825 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\dailymotion.gif (138 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\setting_stb_16x.png (999 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\loadingMid.gif (7 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\footer-short-middle.png (968 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-launch.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\footer-short-right.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\ttlbar-right.png (286 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\footer-short-left.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\youtube.png (608 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\es.js (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-mdl.png (210 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-download.png (692 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\hotmail.png (297 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\radiobeta-stopped.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btn-divider.png (205 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\Koyotesoft_Icon_16x16.png (723 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\twitter.png (721 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight_cyan.png (299 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\search.png (712 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\throbber.gif (825 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\rsschannelback.png (604 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxpanelwin.xul (407 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-next.png (471 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\dtx-test.css (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\options\options-search.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\scroll-left.png (257 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\footer-short-middle.png (968 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-mdl.png (118 bytes)
%Documents and Settings%\%current user%\Application Data\jzipmusictoolbar181\setupCfg.xml (569 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-play-left.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\modify.png (724 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png (160 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-right22.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\left-menu-hover.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scroll-bg-206.png (663 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\searchbar\searchbar-background-right.png (288 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\ebay.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.tinyscrollbar.js (5 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_08.png (328 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\modules\datastore.jsm (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\template.html.bak (7 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ask_search_215wide.png (671 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\options\options-weather.png (2 bytes)
%Documents and Settings%\%current user%\Application Data\jzipmusictoolbar181\sysid.dat (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-left22-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-detailed-over.png (451 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\footer-short-right.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-previous-over.png (440 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\InetLoad.dll (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-middle22.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\ttlbar-mdl.png (146 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\star_x_orange.png (367 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-mdl.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\TRUSTe_about.png (152 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_03.png (218 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_07.png (254 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-sml-drop.png (188 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\options\options-widgets.png (1 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\ocode.xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\UAC.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\inetc.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\nsisFirewall.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\ioSpecial.ini (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\AccessControl.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\System.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\xml.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsk25.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\nsProcess.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\toolbar.xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\InetLoad.dll (0 bytes)

The process jZipMediaBar.exe:460 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Application Data\jzipmusictoolbar181\trackid.dat (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh2B.tmp\UAC.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\trackid.dat (6 bytes)
%Documents and Settings%\%current user%\Application Data\jzipmusictoolbar181\setupCfg.xml (569 bytes)
%Documents and Settings%\%current user%\Application Data\jzipmusictoolbar181\apnuserid.dat (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\appid.dat (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\sysid.dat (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh2B.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh2B.tmp\xml.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\apnuserid.dat (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\jzipmusictoolbar181-manifest.xml (9 bytes)
%Documents and Settings%\%current user%\Application Data\jzipmusictoolbar181\geodata.xml (162 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh2B.tmp\toolbar.xml (14 bytes)
%Documents and Settings%\%current user%\Application Data\jzipmusictoolbar181\sysid.dat (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\uninstall.exe (6115 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh2B.tmp\inetc.dll (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\install.ico (8 bytes)
%Documents and Settings%\%current user%\Application Data\jzipmusictoolbar181\appid.dat (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsr2A.tmp (152173 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\DTX\Reporting\ReportingHelper.dll (6360 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh2B.tmp\ocode.xml (203 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh2B.tmp\AccessControl.dll (9 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\sysid.dat (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh2B.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh2B.tmp\System.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsc29.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh2B.tmp\xml.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\apnuserid.dat (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh2B.tmp\toolbar.xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh2B.tmp\inetc.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh2B.tmp\UAC.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\trackid.dat (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh2B.tmp\ocode.xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\appid.dat (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh2B.tmp\AccessControl.dll (0 bytes)

The process regsvr32.exe:1016 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Application Data\jzipmusictoolbar181\dtx.ini (15 bytes)

The process pack.exe:1980 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files%\Music Toolbar\Datamngr\Datamngr.dll (18247 bytes)
%Program Files%\Music Toolbar\Datamngr\DatamngrChrome.dll (2015 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\mgrldr_u.dll (24 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\Internet Explorer Settings Update.exe (11116 bytes)
%Program Files%\Music Toolbar\Datamngr\mgrldr.dll (20 bytes)
%Program Files%\Music Toolbar\Datamngr\Internet Explorer Settings Update.exe (10760 bytes)
%Program Files%\Music Toolbar\Datamngr\mgrldr_u.dll (425 bytes)
%Program Files%\Music Toolbar\Datamngr\DatamngrUI.exe (26064 bytes)
%Program Files%\Music Toolbar\Datamngr\apcrtldr.dll (5614 bytes)
%Program Files%\Music Toolbar\Datamngr\setmgrc1.cfg (31 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\setmgrc1.cfg (36 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\IEBHO.dll (20230 bytes)
%Program Files%\Music Toolbar\Datamngr\Internet Explorer Settings.exe (10714 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\Internet Explorer Settings.exe (8982 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\apcrtldr.dll (6128 bytes)
%Program Files%\Music Toolbar\Datamngr\IEBHO.dll (20154 bytes)
%Program Files%\Music Toolbar\Datamngr\DatamngrCoordinator.exe (26869 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\Datamngr.dll (18499 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\mgrldr.dll (24 bytes)
%Program Files%\Music Toolbar\Datamngr\favicon.ico (1 bytes)

The process DatamngrCoordinator.exe:1388 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\All Users\Application Data\Datamngr\S-1-5-21-1844237615-1960408961-1801674531-1003.cfg (3991 bytes)
%Documents and Settings%\All Users\Application Data\Datamngr\coordinator.cfg (1864 bytes)
%WinDir%\Temp\ad5c77d9\patch_ff.exe (72036 bytes)
%Documents and Settings%\All Users\Application Data\Datamngr\general.cfg (1 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\All Users\Application Data\Datamngr\S-1-5-21-1844237615-1960408961-1801674531-1003.cfg.bak (0 bytes)
%Documents and Settings%\All Users\Application Data\Datamngr\coordinator.cfg.bak (0 bytes)

Registry activity

The process imapi.exe:2100 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "EB 62 EC DA 54 EB 5F E6 31 4F 09 68 F9 3E 9C A9"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\Imapi]
"ControlFlags" = "1"
"Active" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\Imapi\ImapiSvc]
"BitNames" = " ImapiDebugError ImapiDebugWarning ImapiDebugTrace ImapiDebugInfo ImapiDebugX ImapiDebugSort"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\Imapi]
"LogSessionName" = "stdout"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\Imapi\ImapiSvc]
"Guid" = "8107d8e9-e323-49f5-bba2-abc35c243dca"

The process mediabar.exe:204 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "EE 06 C2 8A C4 EE E6 36 A3 7F 8F 3C F9 44 BA 64"

The process patch_ff.exe:1660 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "2B 5E EB D2 03 A5 6F 2D CA 40 F3 E5 41 FA 68 D5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Programs" = "%Documents and Settings%\All Users\Start Menu\Programs"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq27.tmp\nsProcess.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq27.tmp\xml.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq27.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsh2B.tmp\xml.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsh2B.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsp2F.tmp\xml.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsp2F.tmp\, , \??\%WinDir%\TEMP\nsj34.tmp\registry.dll,"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
"Desktop" = "%Documents and Settings%\%current user%\Desktop"
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\C]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\D]
"BaseClass" = "Drive"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Datamngr\General\patches]
"1" = "1"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\A]
"BaseClass" = "Drive"

The process %original file name%.exe:1476 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Datamngr\General]
"Country" = "UA"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro]
"debugger" = "tasklist.exe"

[HKLM\System\CurrentControlSet\Control\Session Manager\AppCertDlls]
"x86" = "%Program Files%\Music Toolbar\Datamngr\apcrtldr.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Datamngr\General]
"kapid" = "0"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Datamngr\General]
"kisid" = "102"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Datamngr\General]
"ie_ds_supported" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe]
"debugger" = "tasklist.exe"

[HKCU\Software\Microsoft\Internet Explorer\Main]
"Start Page" = "http://www.search.ask.com/?o=APN10646A&gct=hp&d=102-0&v=n12521-347&t=4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKLM\SOFTWARE\Datamngr\General]
"sitime" = "1400033497"
"clid" = "{29C31A57-F76D-4F59-8481-869763953B45}"

[HKLM\SOFTWARE\Datamngr]
"Version" = "5.0.0.12521"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe]
"debugger" = "tasklist.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe]
"debugger" = "tasklist.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main]
"FrameAuto" = "1"

[HKLM\SOFTWARE\Datamngr\General]
"ostype" = "win32"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Datamngr\General]
"UC" = "347"
"LN" = "en"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "70 7B 50 CE 37 47 E1 B4 1A 00 A0 1F 15 E1 7A 6A"

[HKLM\SOFTWARE\Datamngr\General]
"home" = "%Program Files%\Music Toolbar"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Datamngr\General]
"pver" = "5.0.0.12521"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Datamngr\General]
"iTime" = "2014-05-14"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Datamngr\General]
"osl" = "en-US"

[HKCU\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant" = "http://dts.search.ask.com/sidebar.html?src=ssb&gct=ds&appid=0&systemid=102"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"10" = "10"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe]
"debugger" = "tasklist.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1C 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe]
"debugger" = "tasklist.exe"

[HKCU\Software\Microsoft\Internet Explorer\Approved Extensions]
"{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}" = "51 66 7A 6C 4C 1D 3B 1B D5 D9 17 B9 E3 28 C4 06"

[HKLM\SOFTWARE\Datamngr\General]
"os_user_type" = "Admin"
"aw" = "No"

[HKCU\Software\Microsoft\Internet Explorer\Main]
"Use Search Asst" = "no"

[HKLM\SOFTWARE\Datamngr\General]
"ptype" = "n"

[HKLM\SOFTWARE\Datamngr]
"browser" = " ie ff cr"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Datamngr\General]
"osver" = "5.1"
"kbn" = "12521"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Datamngr\General]
"sysid" = "102"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Datamngr\General]
"iver" = "5.0.0.12521"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe]
"debugger" = "tasklist.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Datamngr\General]
"AppID" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}]
"Flags" = "1024"

[HKLM\SOFTWARE\Datamngr\General]
"Guid" = "{348A95A8-B9AB-D6CA-22E9-923BE6250C62}"
"ie_hp_supported" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip]
"debugger" = "tasklist.exe"

[HKCU\Software\Microsoft\Internet Explorer\Main]
"Search Bar" = "http://dts.search.ask.com/sidebar.html?src=ssb&gct=ds&appid=0&systemid=102"

[HKLM\SOFTWARE\Datamngr\General]
"UID" = "2923105757634559"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Programs" = "%Documents and Settings%\All Users\Start Menu\Programs"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe]
"debugger" = "tasklist.exe"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search]
"SearchAssistant" = "http://dts.search.ask.com/sidebar.html?src=ssb&gct=ds&appid=0&systemid=102"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan adds the reference to itself to be executed when a user logs on:

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"AutoRestartShell" = "1"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

"IntranetName" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"Appinit_Dlls"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

"AutoConfigURL"

The Trojan disables automatic startup of the application by deleting the following autorun value:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"removejZipdatamngr"

"removejZiptoolbar"

The process DatamngrUI.exe:1016 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "78 9E CD CE 10 9A A1 81 76 9D E0 DE 36 6A 9E B7"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

The process jZipMediaBar.exe:1680 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq27.tmp\nsProcess.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq27.tmp\xml.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq27.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsh2B.tmp\xml.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsh2B.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsp2F.tmp\xml.dll,"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1B 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "CD 12 91 85 28 2E B0 6F 21 44 85 41 28 52 44 0C"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process jZipMediaBar.exe:1308 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq27.tmp\nsProcess.dll,"

[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"apn_ptnrs" = "^AG7"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6fcaba44-a441-481f-895e-bddfd81a6cc2}]
"AppPath" = "C:\PROGRA~1\MUSICT~1\Datamngr\SRTOOL~1\IE"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{39E86821-A63F-45CA-90F8-B16B2B5F31AD}]
"Policy" = "3"

[HKCU\Software\APNDTX]
"Version" = "1.8.1.0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\jzipmusictoolbar181IE]
"EstimatedSize" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"ds" = "http://www.search.ask.com/web?o=APN10646&p2=^AG7^BND102^YY^UA&apn_uid=2923105757634559&apn_ptnrs=^AG7&tpid=JZP2-DTX&apn_dtid=^BND102^YY^UA&apn_dbr=&doi=2014-05-14&trgb=IE&psv=&gct=&q={searchTerms}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 19 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"CountryCode" = "UA"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\jzipmusictoolbar181IE]
"DisplayName" = "Music Toolbar for Internet Explorer (Dist. by Bandoo Media, Inc.)"

[HKCU\Software\Microsoft\Internet Explorer\Main]
"Start Page" = "http://www.search.ask.com/?o=APN10646A&gct=hp&d=102-0&v=n12521-347&t=4"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\${dtUserElevationPolicyID}]
"AppName" = "dtuser.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\APNDTX\{6fcaba44-a441-481f-895e-bddfd81a6cc2}]
"lastinstalled" = "IE"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKCU\Software\APNDTX\JZP2-DTX]
"trgb" = "IE"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"dateofinstall" = "2014-05-14"
"nt" = "http://www.search.ask.com/?o=APN10646&p2=^AG7^BND102^YY^UA&apn_uid=2923105757634559&apn_ptnrs=^AG7&tpid=JZP2-DTX&apn_dtid=^BND102^YY^UA&apn_dbr=&doi=2014-05-14&trgb=IE&psv=&gct=tab"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\jzipmusictoolbar181IE]
"NoRepair" = "1"
"NoModify" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\jzipmusictoolbar181IE]
"Comments" = "Dist. by Bandoo Media, Inc."

[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"o" = "APN10646"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"Locale" = "en_UA"

[HKCU\Software\jzipmusictoolbar181]
"Installer Language" = "1033"

[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"sysid" = "102"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6fcaba44-a441-481f-895e-bddfd81a6cc2}]
"Policy" = "3"

[HKCU\Software\APNDTX\JZP2-DTX]
"lastinstalled" = "IE"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6fcaba44-a441-481f-895e-bddfd81a6cc2}]
"AppName" = "uninstall.exe"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKCU\Software\APNDTX\{6fcaba44-a441-481f-895e-bddfd81a6cc2}\IE]
"DisplayName" = "Music Toolbar (Dist. by Bandoo Media, Inc.)"

[HKCU\Software\APNDTX\JZP2-DTX]
"Browsers" = "1-IE"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\jzipmusictoolbar181IE]
"InstallLocation" = "C:\PROGRA~1\MUSICT~1\Datamngr\SRTOOL~1\IE"
"DisplayIcon" = "C:\PROGRA~1\MUSICT~1\Datamngr\SRTOOL~1\IE\install.ico"

[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"apn_dtid" = "^BND102^YY^UA"
"apn_uid" = "2923105757634559"

[HKCU\Software\APNDTX\{6fcaba44-a441-481f-895e-bddfd81a6cc2}\IE]
"Path" = "C:\PROGRA~1\MUSICT~1\Datamngr\SRTOOL~1\IE"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{39E86821-A63F-45CA-90F8-B16B2B5F31AD}]
"AppPath" = "C:\PROGRA~1\MUSICT~1\Datamngr\SRTOOL~1\IE"

[HKCU\Software\APNDTX\IMH-LPD]
"lastinstalled-IE" = "JZP2-DTX"

[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"nthp_cr" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\jzipmusictoolbar181IE]
"DisplayVersion" = "1.8.1.0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"TrackID" = "BND102"
"AppID" = "0"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\${dtUserElevationPolicyID}]
"Policy" = "3"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{39E86821-A63F-45CA-90F8-B16B2B5F31AD}]
"AppName" = "dtuser.exe"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "2D BB 3C F6 AD B5 B2 15 4A DF 75 D0 B0 34 52 46"

[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"SB" = "http://www.search.ask.com/web?o=APN10646&p2=^AG7^BND102^YY^UA&apn_uid=2923105757634559&apn_ptnrs=^AG7&tpid=JZP2-DTX&apn_dtid=^BND102^YY^UA&apn_dbr=&doi=2014-05-14&trgb=IE&psv=&gct=sb&q={searchTerms}"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\jzipmusictoolbar181IE]
"UninstallString" = "C:\PROGRA~1\MUSICT~1\Datamngr\SRTOOL~1\IE\uninstall.exe /UN=IE /PID=JZP2-DTX /PCD=IMH"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\APNDTX]
"ToolbarID" = "Music Toolbar (Dist. by Bandoo Media, Inc.)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\${dtUserElevationPolicyID}]
"AppPath" = "C:\PROGRA~1\MUSICT~1\Datamngr\SRTOOL~1\IE"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"timeofinstall" = "2014-05-14T5:11:26"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\jzipmusictoolbar181IE]
"Publisher" = "IAC Search and Media"

[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"hpr_cr" = "http://www.search.ask.com/?o=APN10646&p2=^AG7^BND102^YY^UA&apn_uid=2923105757634559&apn_ptnrs=^AG7&tpid=JZP2-DTX&apn_dtid=^BND102^YY^UA&apn_dbr=&doi=2014-05-14&trgb=IE&psv=&gct=hp"

[HKCU\Software\APNDTX\IMH-LPD]
"lastinstalled" = "JZP2-DTX"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCU\Software\APNDTX\JZP2-DTX\IE\macro]
"hp" = "http://www.search.ask.com/?o=APN10646&p2=^AG7^BND102^YY^UA&apn_uid=2923105757634559&apn_ptnrs=^AG7&tpid=JZP2-DTX&apn_dtid=^BND102^YY^UA&apn_dbr=&doi=2014-05-14&trgb=IE&psv=&gct=hp"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

Adds a rule to the firewall Windows which allows any network activity:

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE]
"dtUser.exe" = "%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\dtuser.exe:*:Enabled:Music Toolbar (Dist. by Bandoo Media, Inc.) DTX Broker"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE]
"dtuser.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"AutoConfigURL"

[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"ITBarLayout"

The Trojan disables automatic startup of the application by deleting the following autorun value:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"NSIS.Library.RegTool.v1"

"NSIS.Library.RegTool.v3"

"NSIS.Library.RegTool.v2"

"NSIS.Library.RegTool.v5"

"NSIS.Library.RegTool.v4"

The process jZipMediaBar.exe:460 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq27.tmp\nsProcess.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq27.tmp\xml.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsq27.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsh2B.tmp\xml.dll,"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\jzipmusictoolbar181FF]
"DisplayIcon" = "C:\PROGRA~1\MUSICT~1\Datamngr\SRTOOL~1\install.ico"
"InstallLocation" = "C:\PROGRA~1\MUSICT~1\Datamngr\SRTOOL~1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"nt" = "http://www.search.ask.com/?o=APN10646&p2=^AG7^BND102^YY^UA&apn_uid=2923105757634559&apn_ptnrs=^AG7&tpid=JZP2-DTX&apn_dtid=^BND102^YY^UA&apn_dbr=&doi=2014-05-14&trgb=FF&psv=&gct=tab"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1A 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"o" = "APN10646"

[HKCU\Software\APNDTX\JZP2-DTX]
"Browsers" = "1-IE,2-FF"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\jzipmusictoolbar181FF]
"NoModify" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"apn_dtid" = "^BND102^YY^UA"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\APNDTX\{6fcaba44-a441-481f-895e-bddfd81a6cc2}]
"lastinstalled" = "FF"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"hp" = "http://www.search.ask.com/?o=APN10646&p2=^AG7^BND102^YY^UA&apn_uid=2923105757634559&apn_ptnrs=^AG7&tpid=JZP2-DTX&apn_dtid=^BND102^YY^UA&apn_dbr=&doi=2014-05-14&trgb=FF&psv=&gct=hp"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\jzipmusictoolbar181FF]
"DisplayVersion" = "1.8.1.0"

[HKCU\Software\APNDTX\IMH-LPD]
"lastinstalled-FF" = "JZP2-DTX"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\APNDTX\{6fcaba44-a441-481f-895e-bddfd81a6cc2}\FF]
"Path" = "C:\PROGRA~1\MUSICT~1\Datamngr\SRTOOL~1"

[HKCU\Software\jzipmusictoolbar181]
"Installer Language" = "1033"

[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"AppID" = "0"

[HKCU\Software\APNDTX\JZP2-DTX]
"lastinstalled" = "FF"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6fcaba44-a441-481f-895e-bddfd81a6cc2}]
"AppName" = "uninstall.exe"

[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"Locale" = "en_UA"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\jzipmusictoolbar181FF]
"Publisher" = "IAC Search and Media"
"NoRepair" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"ds" = "http://www.search.ask.com/web?o=APN10646&p2=^AG7^BND102^YY^UA&apn_uid=2923105757634559&apn_ptnrs=^AG7&tpid=JZP2-DTX&apn_dtid=^BND102^YY^UA&apn_dbr=&doi=2014-05-14&trgb=FF&psv=&gct=&q={searchTerms}"
"CountryCode" = "UA"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\jzipmusictoolbar181FF]
"UninstallString" = "C:\PROGRA~1\MUSICT~1\Datamngr\SRTOOL~1\uninstall.exe /UN=FF /PID=JZP2-DTX /PCD=IMH"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6fcaba44-a441-481f-895e-bddfd81a6cc2}]
"AppPath" = "C:\PROGRA~1\MUSICT~1\Datamngr\SRTOOL~1"

[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"apn_uid" = "2923105757634559"

[HKCU\Software\APNDTX]
"Version" = "1.8.1.0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"apn_ptnrs" = "^AG7"
"sysid" = "102"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "52 DC EE 7C 3A CA E2 92 BE B6 67 19 77 39 35 82"

[HKCU\Software\Microsoft\Internet Explorer\Main]
"Start Page" = "http://www.search.ask.com/?o=APN10646A&gct=hp&d=102-0&v=n12521-347&t=4"

[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"nthp_cr" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\jzipmusictoolbar181FF]
"EstimatedSize" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"hpr_cr" = "http://www.search.ask.com/?o=APN10646&p2=^AG7^BND102^YY^UA&apn_uid=2923105757634559&apn_ptnrs=^AG7&tpid=JZP2-DTX&apn_dtid=^BND102^YY^UA&apn_dbr=&doi=2014-05-14&trgb=FF&psv=&gct=hp"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"TrackID" = "BND102"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6fcaba44-a441-481f-895e-bddfd81a6cc2}]
"Policy" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\APNDTX]
"ToolbarID" = "Music Toolbar (Dist. by Bandoo Media, Inc.)"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\jzipmusictoolbar181FF]
"Comments" = "Dist. by Bandoo Media, Inc."

[HKCU\Software\APNDTX\{6fcaba44-a441-481f-895e-bddfd81a6cc2}\FF]
"DisplayName" = "Music Toolbar (Dist. by Bandoo Media, Inc.)"

[HKCU\Software\APNDTX\IMH-LPD]
"lastinstalled" = "JZP2-DTX"

[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"dateofinstall" = "2014-05-14"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\jzipmusictoolbar181FF]
"DisplayName" = "Music Toolbar for Firefox (Dist. by Bandoo Media, Inc.)"

[HKCU\Software\APNDTX\JZP2-DTX\FF\macro]
"timeofinstall" = "2014-05-14T5:11:33"
"SB" = "http://www.search.ask.com/web?o=APN10646&p2=^AG7^BND102^YY^UA&apn_uid=2923105757634559&apn_ptnrs=^AG7&tpid=JZP2-DTX&apn_dtid=^BND102^YY^UA&apn_dbr=&doi=2014-05-14&trgb=FF&psv=&gct=sb&q={searchTerms}"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process regsvr32.exe:1016 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "75 AA 68 DE 2C 66 3D 27 0B 4E A7 DF DE 09 3A DD"

[HKCR\CLSID\{6fcaba44-a441-481f-895e-bddfd81a6cc2}\InprocServer32]
"(Default)" = "C:\PROGRA~1\MUSICT~1\Datamngr\SRTOOL~1\IE\searchresultsDx.dll"

[HKCR\CLSID\{6fcaba44-a441-481f-895e-bddfd81a6cc2}]
"(Default)" = "Music Toolbar (Dist. by Bandoo Media, Inc.)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{6fcaba44-a441-481f-895e-bddfd81a6cc2}" = "Music Toolbar (Dist. by Bandoo Media, Inc.)"

[HKCR\CLSID\{6fcaba44-a441-481f-895e-bddfd81a6cc2}\InprocServer32]
"ThreadingModel" = "Apartment"

It registers itself as a Browser Helper Object (BHO) to ensure its automatic execution every time Internet Explorer is run. It does this by creating the following registry key(s)/entry(ies):

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6fcaba44-a441-481f-895e-bddfd81a6cc2}]
"(Default)" = "Music Toolbar (Dist. by Bandoo Media, Inc.)"

The process regsvr32.exe:204 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCR\SearchQUIEHelper.DNSGuard\CLSID]
"(Default)" = "{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}"

[HKCR\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}\1.0]
"(Default)" = "SearchQUIEBHO 1.0 Type Library"

[HKCR\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCR\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}\1.0\0\win32]
"(Default)" = "C:\PROGRA~1\MUSICT~1\Datamngr\IEBHO.dll"

[HKCR\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}]
"(Default)" = "Data Manager"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKCR\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}\InprocServer32]
"(Default)" = "C:\PROGRA~1\MUSICT~1\Datamngr\IEBHO.dll"

[HKCR\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}\1.0\HELPDIR]
"(Default)" = "C:\PROGRA~1\MUSICT~1\Datamngr"

[HKCR\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}\InprocServer32]
"(Default)" = "C:\PROGRA~1\MUSICT~1\Datamngr\IEBHO.dll"

[HKCR\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}\VersionIndependentProgID]
"(Default)" = "SearchQUIEHelper.UrlHelper"

[HKCR\SearchQUIEHelper.DNSGuard.1]
"(Default)" = "Data Manager"

[HKCR\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}\ProgID]
"(Default)" = "SearchQUIEHelper.UrlHelper.1"

[HKCR\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}]
"(Default)" = "IDNSGuard"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "1A D0 CD B0 EC 82 BD 3A BA 16 A0 96 34 86 2B A9"

[HKCR\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}\TypeLib]
"Version" = "1.0"

[HKCR\SearchQUIEHelper.DNSGuard.1\CLSID]
"(Default)" = "{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}"

[HKCR\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}\TypeLib]
"(Default)" = "{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}"

[HKCR\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}]
"(Default)" = "ErrorFilter Class"

[HKCR\SearchQUIEHelper.DNSGuard\CurVer]
"(Default)" = "SearchQUIEHelper.UrlHelper.1"

[HKCR\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\SearchQUIEHelper.DNSGuard]
"(Default)" = "Data Manager"

The Trojan deletes the following registry key(s):

[HKCR\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}\InprocServer32]
[HKCR\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}\InprocServer32]
[HKCR\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}\VersionIndependentProgID]
[HKCR\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}]
[HKCR\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}\Programmable]
[HKCR\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}]
[HKCR\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}\Programmable]
[HKCR\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}\ProgID]

The process pack.exe:1980 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "E9 AD 3A CB 05 C6 0E 70 FF 1D B2 23 3A 62 86 6F"

The process DatamngrCoordinator.exe:1712 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "B9 13 DD D8 74 75 50 D0 BC 57 4E AC A7 34 B4 BC"

[HKLM\SOFTWARE\Datamngr\General]
"srn0" = "DatamngrCoordinator"
"srn1" = "F06DEFF2-5B9C-490D-910F-35D3A9119622"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

The process DatamngrCoordinator.exe:236 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "94 6A 58 DF 4C 19 52 3E B5 9B 36 E0 F3 8F E8 93"

[HKLM\System\CurrentControlSet\Control\Session Manager\AppCertDlls]
"x64" = "c:\program files\music toolbar\datamngr\x64\apcrtldr.dll"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

The process DatamngrCoordinator.exe:1388 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "FD BB 3A 3D FB DB 51 48 29 AA 11 0B E4 CD 05 13"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

Dropped PE files

MD5	File path
6120161b49826105997454999ff27d35	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\DTX\Reporting\ReportingHelper.dll
fbda05aa26e02d38effb82294e83ea69	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsh2B.tmp\xml.dll
fbda05aa26e02d38effb82294e83ea69	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsp2F.tmp\xml.dll
05450face243b3a7472407b999b03a72	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsq27.tmp\nsProcess.dll
fbda05aa26e02d38effb82294e83ea69	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsq27.tmp\xml.dll
1a184501ac95b5df0abf1c5122bd3774	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsx4\Helper.dll
835e14e4af7a12b39871ce5bfb273553	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsx4\Starter.exe
bddffe3378cb4988e3617e73ea84fb9b	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsx4\nsq8.tmp\jZipMediaBar.exe
18a9043cd6b86c9b5e08289ca62e89af	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsx4\nsq8.tmp\mediabar.exe
ca71db86a269d10a3be1b5328dc1d261	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsx4\nsq8.tmp\pack.exe
1007c27c02ca2c6add61b4843230ab52	c:\Program Files\Music Toolbar\Datamngr\Datamngr.dll
cc7e312b7637cf5d1bbc12032790b46d	c:\Program Files\Music Toolbar\Datamngr\DatamngrChrome.dll
72cdb3f16c22f5537d2fa275fef105fb	c:\Program Files\Music Toolbar\Datamngr\DatamngrCoordinator.exe
27f740b92c5fe4cf7ace5a131362c8c4	c:\Program Files\Music Toolbar\Datamngr\DatamngrUI.exe
1a184501ac95b5df0abf1c5122bd3774	c:\Program Files\Music Toolbar\Datamngr\Helper.dll
bc77081dbc850fd4657dc76ae22dd27c	c:\Program Files\Music Toolbar\Datamngr\IEBHO.dll
b8c4309194c13efafbf54376b82ad0d7	c:\Program Files\Music Toolbar\Datamngr\Internet Explorer Settings.exe
541d52441b96386fd1928fc8e831820a	c:\Program Files\Music Toolbar\Datamngr\SRTOOL~1\IE\dtuser.exe
75e0f057c9fc088fdda0a751cc342d4b	c:\Program Files\Music Toolbar\Datamngr\SRTOOL~1\IE\searchresultsDx.dll
fe6b5a67543c47a3ccbc41c459e850fb	c:\Program Files\Music Toolbar\Datamngr\SRTOOL~1\IE\searchresultstb.dll
9ab17e528cd3e2b1e01cbc58676134c0	c:\Program Files\Music Toolbar\Datamngr\SRTOOL~1\IE\uninstall.exe
9ab17e528cd3e2b1e01cbc58676134c0	c:\Program Files\Music Toolbar\Datamngr\SRTOOL~1\uninstall.exe
e7c235e530ab3db3801d9db9621de904	c:\Program Files\Music Toolbar\Datamngr\Uninstall.exe
3365b3c1a2ae3f31a6fb2a63b696b4b8	c:\Program Files\Music Toolbar\Datamngr\apcrtldr.dll
5d201ec9adefed8029c6ae6f713e79eb	c:\Program Files\Music Toolbar\Datamngr\mgrldr.dll
271a1c80ee58749329fadc54aabfdcc0	c:\Program Files\Music Toolbar\Datamngr\setmgrc1.cfg
9c357edb3358189c4587923b4ec243dd	c:\WINDOWS\Temp\ad5c77d9\patch_ff.exe
2b7007ed0262ca02ef69d8990815cbeb	c:\WINDOWS\Temp\nsj34.tmp\registry.dll
1a184501ac95b5df0abf1c5122bd3774	c:\WINDOWS\Temp\nsj34\Helper.dll

HOSTS file anomalies

No changes have been detected.

Rootkit activity

Using the driver "\??\%Program Files%\Music Toolbar\Datamngr\setmgrc1.cfg" the Trojan controls operations with a system registry by installing the registry notifier.
The Trojan installs the following kernel-mode hooks:

ZwOpenProcess
ZwOpenThread

Propagation

VersionInfo

Company Name: Bandoo Media Inc.
Product Name: jZip
Product Version: 5.0.0.12521
Legal Copyright: Copyright (c) 2005 - 2014
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 5.0.0.12521
File Description: Music Toolbar Install
Comments:
Language: English (United States)

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	4096	28852	29184	4.49139	b7dd7ef0e5ad7002a5410c08a455d9a2
.rdata	36864	10930	11264	3.0441	8acc145fd5b0b8d5e29138559785c9da
.data	49152	425660	512	1.01815	7a21637804e89fb9667b4619ab7edba1
.ndata	475136	5050368	0	0	d41d8cd98f00b204e9800998ecf8427e
.rsrc	5525504	3232	3584	2.81296	ed37957238480d796b92df5a7aa6c82d
.reloc	5529600	4010	4096	3.77085	9225cbaaf622c5d4af73923852c16aa5

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL	IP
hxxp://websearch.ask.com/geolocation	199.36.100.106
hxxp://e6845.ce.akamaiedge.net/pca3-g5.crl
hxxp://e6845.ce.akamaiedge.net/CSC3-2010.crl
hxxp://www187.apnanalytics.com/tr.gif?anxa=APNImeshToolbar&anxe=SuccessfulInstall&anxt=2923105757634559&anxv=1.8.1.0&anxp=^AG7^BND102^YY^UA&tpid=JZP2-DTX&appid=0&sysid=102&psv=&installationResult=success&executionTime=0&TargetBrowser=IE&browsers=1-IE&locale=en_UA&homepageChoice=&defaultSearchChoice=&osDetail=5.1.1.sp3.x86&osArchitecture=32&ieVersionInstalled=6.0.2900.5512&ffVersionInstalled=&crVersionInstalled=&apn_dbr=IE&ie_ds=&ie_hpr=1&ff_crm=&ff_hpr=&cr_ds=&cr_hb=&cr_start=&ie_tbon=1&cr_tbon=&ff_tbon=&ie_tboff=0&ff_tboff=&cr_tboff=&ietbs=&fftbs=&crtbs=&OSlanguage=en
hxxp://www187.apnanalytics.com/tr.gif?anxa=APNImeshToolbar&anxe=SuccessfulInstall&anxt=2923105757634559&anxv=1.8.1.0&anxp=^AG7^BND102^YY^UA&tpid=JZP2-DTX&appid=0&sysid=102&psv=&installationResult=success&executionTime=0&TargetBrowser=FF&browsers=1-IE,2-FF&locale=en_UA&homepageChoice=&defaultSearchChoice=&osDetail=5.1.1.sp3.x86&osArchitecture=32&ieVersionInstalled=6.0.2900.5512&ffVersionInstalled=&crVersionInstalled=&apn_dbr=IE&ie_ds=&ie_hpr=1&ff_crm=&ff_hpr=&cr_ds=&cr_hb=&cr_start=&ie_tbon=1&cr_tbon=&ff_tbon=&ie_tboff=0&ff_tboff=&cr_tboff=&ietbs=&fftbs=&crtbs=&OSlanguage=en
hxxp://www187.apnanalytics.com/tr.gif?anxa=APNImeshToolbar&anxe=SuccessfulInstall&anxt=2923105757634559&anxv=1.8.1.0&anxp=^AG7^BND102^YY^UA&tpid=JZP2-DTX&appid=0&sysid=102&psv=&installationResult=fail&executionTime=0&TargetBrowser=CR&browsers=&locale=en_UA&homepageChoice=&defaultSearchChoice=&osDetail=5.1.1.sp3.x86&osArchitecture=32&ieVersionInstalled=6.0.2900.5512&ffVersionInstalled=&crVersionInstalled=&apn_dbr=IE&ie_ds=&ie_hpr=1&ff_crm=&ff_hpr=&cr_ds=&cr_hb=&cr_start=&ie_tbon=1&cr_tbon=&ff_tbon=&ie_tboff=0&ff_tboff=&cr_tboff=&ietbs=&fftbs=&crtbs=&OSlanguage=en
hxxp://preved.bandoobe.com/login	94.31.0.109
hxxp://a1015.g1.akamai.net/cdn/update/jzip.com/patches/1/patch_ff.exe
hxxp://preved.bandoobe.com/install_statistics.php	94.31.0.109
hxxp://csc3-2010-crl.verisign.com/CSC3-2010.crl	23.9.117.163
hxxp://service.bandoobe.com/install_statistics.php	94.31.0.109
hxxp://anx.apnanalytics.com/tr.gif?anxa=APNImeshToolbar&anxe=SuccessfulInstall&anxt=2923105757634559&anxv=1.8.1.0&anxp=^AG7^BND102^YY^UA&tpid=JZP2-DTX&appid=0&sysid=102&psv=&installationResult=fail&executionTime=0&TargetBrowser=CR&browsers=&locale=en_UA&homepageChoice=&defaultSearchChoice=&osDetail=5.1.1.sp3.x86&osArchitecture=32&ieVersionInstalled=6.0.2900.5512&ffVersionInstalled=&crVersionInstalled=&apn_dbr=IE&ie_ds=&ie_hpr=1&ff_crm=&ff_hpr=&cr_ds=&cr_hb=&cr_start=&ie_tbon=1&cr_tbon=&ff_tbon=&ie_tboff=0&ff_tboff=&cr_tboff=&ietbs=&fftbs=&crtbs=&OSlanguage=en	74.113.233.187
hxxp://download.cdn.bn-update-download.com/cdn/update/jzip.com/patches/1/patch_ff.exe	205.237.69.88
hxxp://crl.verisign.com/pca3-g5.crl	23.9.117.163
hxxp://anx.apnanalytics.com/tr.gif?anxa=APNImeshToolbar&anxe=SuccessfulInstall&anxt=2923105757634559&anxv=1.8.1.0&anxp=^AG7^BND102^YY^UA&tpid=JZP2-DTX&appid=0&sysid=102&psv=&installationResult=success&executionTime=0&TargetBrowser=IE&browsers=1-IE&locale=en_UA&homepageChoice=&defaultSearchChoice=&osDetail=5.1.1.sp3.x86&osArchitecture=32&ieVersionInstalled=6.0.2900.5512&ffVersionInstalled=&crVersionInstalled=&apn_dbr=IE&ie_ds=&ie_hpr=1&ff_crm=&ff_hpr=&cr_ds=&cr_hb=&cr_start=&ie_tbon=1&cr_tbon=&ff_tbon=&ie_tboff=0&ff_tboff=&cr_tboff=&ietbs=&fftbs=&crtbs=&OSlanguage=en	74.113.233.187
hxxp://anx.apnanalytics.com/tr.gif?anxa=APNImeshToolbar&anxe=SuccessfulInstall&anxt=2923105757634559&anxv=1.8.1.0&anxp=^AG7^BND102^YY^UA&tpid=JZP2-DTX&appid=0&sysid=102&psv=&installationResult=success&executionTime=0&TargetBrowser=FF&browsers=1-IE,2-FF&locale=en_UA&homepageChoice=&defaultSearchChoice=&osDetail=5.1.1.sp3.x86&osArchitecture=32&ieVersionInstalled=6.0.2900.5512&ffVersionInstalled=&crVersionInstalled=&apn_dbr=IE&ie_ds=&ie_hpr=1&ff_crm=&ff_hpr=&cr_ds=&cr_hb=&cr_start=&ie_tbon=1&cr_tbon=&ff_tbon=&ie_tboff=0&ff_tboff=&cr_tboff=&ietbs=&fftbs=&crtbs=&OSlanguage=en	74.113.233.187

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

ET POLICY User-Agent (NSIS_Inetc (Mozilla)) - Sometimes used by hostile installers
ET TROJAN Suspicious User-Agent (NSIS_DOWNLOAD)

Traffic

GET /pca3-g5.crl HTTP/1.1

Accept: */*

User-Agent: Microsoft-CryptoAPI/5.131.2600.5512

Host: crl.verisign.com

Connection: Keep-Alive

Cache-Control: no-cache

Pragma: no-cache


HTTP/1.1 200 OK

Server: Apache

ETag: "895f8ccd92dfec674c94f0d04d1b63bc:1396128308"

Last-Modified: Sat, 29 Mar 2014 21:25:08 GMT

Accept-Ranges: bytes

Content-Length: 533

Date: Wed, 14 May 2014 02:11:25 GMT

Connection: keep-alive

Content-Type: application/pkix-crl
0...0..0...*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U
....VeriSign Trust Network1:08..U...1(c) 2006 VeriSign, Inc. - For aut
horized use only1E0C..U...<VeriSign Class 3 Public Primary Certific
ation Authority - G5..140320000000Z..140630235959Z0...*.H.............
}...a.D[..8..i.....g8..S..tt..a.e.B]..v.l9.m.....~.G(l...G..#z{...Za..
F.q....2^X..w.i'.&..n...4v8. &|/Y.B..%..J..g0."k.0....A..7.)h...=5....
'Z........y.Ye.......M.._5.9..B.*.. [email protected]#...... UL.F......iDg..6...'
z$.E.E..*..g...2.@D.....&v...o..>..k1N...P...iHTTP/1.1 200 OK..Serv
er: Apache..ETag: "895f8ccd92dfec674c94f0d04d1b63bc:1396128308"..Last-
Modified: Sat, 29 Mar 2014 21:25:08 GMT..Accept-Ranges: bytes..Content
-Length: 533..Date: Wed, 14 May 2014 02:11:25 GMT..Connection: keep-al
ive..Content-Type: application/pkix-crl..0...0..0...*.H........0..1.0.
..U....US1.0...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1:0
8..U...1(c) 2006 VeriSign, Inc. - For authorized use only1E0C..U...<
;VeriSign Class 3 Public Primary Certification Authority - G5..1403200
00000Z..140630235959Z0...*.H.............}...a.D[..8..i.....g8..S..tt.
.a.e.B]..v.l9.m.....~.G(l...G..#z{...Za..F.q....2^X..w.i'.&..n...4v8. 
&|/Y.B..%..J..g0."k.0....A..7.)h...=5....'Z........y.Ye.......M.._5.9.
.B.*.. [email protected]#...... UL.F......iDg..6...'z$.E.E..*..g...2.@D.....&v...
o..>..k1N...P...i..<<< skipped >>>

GET /tr.gif?anxa=APNImeshToolbar&anxe=SuccessfulInstall&anxt=2923105757634559&anxv=1.8.1.0&anxp=^AG7^BND102^YY^UA&tpid=JZP2-DTX&appid=0&sysid=102&psv=&installationResult=success&executionTime=0&TargetBrowser=IE&browsers=1-IE&locale=en_UA&homepageChoice=&defaultSearchChoice=&osDetail=5.1.1.sp3.x86&osArchitecture=32&ieVersionInstalled=6.0.2900.5512&ffVersionInstalled=&crVersionInstalled=&apn_dbr=IE&ie_ds=&ie_hpr=1&ff_crm=&ff_hpr=&cr_ds=&cr_hb=&cr_start=&ie_tbon=1&cr_tbon=&ff_tbon=&ie_tboff=0&ff_tboff=&cr_tboff=&ietbs=&fftbs=&crtbs=&OSlanguage=en HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: anx.apnanalytics.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 204 No Content

Server: nginx/1.0.10

Date: Wed, 14 May 2014 02:11:27 GMT

Connection: close

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: max-age=0

POST /login HTTP/1.1

Content-Type: application/x-www-form-urlencoded

Content-Length: 1214

Accept: */*

User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

Host: preved.bandoobe.com

Connection: Keep-Alive

XML=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
HTTP/1.1 200 OK

Server: nginx

Date: Wed, 14 May 2014 02:11:33 GMT

Content-Type: text/xml

Connection: keep-alive

Keep-Alive: timeout=30

Content-Length: 1030

X-Server: web4

<?xml version="1.0" encoding="utf-8"?>..<secure_reply>..  
<data>w0CVUcFdIY0fRhQvcXmku4sxfa5 83iQTWFwH25neuFAAkZqYNsCVsgiXP
h0oFAZ3SPwP45LJH3lZsLu7tbFyyISZXZrjiozmIj1/ZUwW 5a9p4bI1WCyEP9NoLduiT7
duzFug7FnlAeHghFkVyb5An7I6y4F7MTCY6Xu6cVu52UZzmiPhdzWeydPTOYXZOFzNNynr
rwwzLoQqWGdU1E9FDzX4J44 IEWwGljlp0cwBH4r39SX/xGVaZggARXfBXRAK18BP5a3Yg
mIrhggpBv/iyVx3mtYYSjLVVtRiF/nc f3wGWR67FS4HTkV0s/R9OH33mVLuKvR707BtuG
AU5crqg2h4gTJfYfY9aFWgHXgVF10jt7BdJuoHSVieSLcNbJQmt8i1GND7Bi6XNxDZxlTx
Usq/hPCBtk3L2phBBUwtzzQPAeo/rT7iKDd3W5Oo3vV77zQJitVZQ7WXTR/6Ye5tBNksK3
PEB7wecNaWRHUarxhaY8FXvOTehDldLJvit36O0fFe8VsycvmaddzUlmyqDylmTsX0YZGo
b4TuU ztj/NlH51trPByKbKxXK/SdKr4oUSqxrP4lZoUUjyLhuQCq8T6udskQRWqEz9wJ 
VeBzS3UYjkHBPB4/A1CuIOmFEjTEXCLIjL6g3C0SJUEtD1SnWxSt6aX2UMbzeair0s214n
D2WUvauMNyv0u2dK10r27FbVaMLCVI 4WjkPKn9RwMkLkqlZYy69WyeBqIdR/gPj6 Rvg6
EkP8PmHvUMNheIkRH3OyDCICrnICFn/fX3AlPIybVuqknEydjEzSYRVYAibeEfH6EI3EyY
LbXGhY6T10JfW1o OL9od/VU5LzYe0nzlimqU WPP7t3nvG82HtJ85YpqlPljz 7d57xvN
h7SfOWKapT5Y8/u3ee8Q1oE HPYxIGORdcUNtOOxM=</data>..</secure_r
eply>..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 14 May 2014 02:11
:33 GMT..Content-Type: text/xml..Connection: keep-alive..Keep-Alive: t
imeout=30..Content-Length: 1030..X-Server: web4..<?xml version="1.0
" encoding="utf-8"?>..<secure_reply>..  <data>w0CVUcFdI
Y0fRhQvcXmku4sxfa5 83iQTWFwH25neuFAAkZqYNsCVsgiXPh0oFAZ3SPwP45LJH3lZsL
u7tbFyyISZXZrjiozmIj1/ZUwW 5a9p4bI1WCyEP9NoLduiT7duzFug7FnlAeHghFkVyb5
An7I6y4F7MTCY6Xu6cVu52UZzmiPhdzWeydPTOYXZOFzNNynrrwwzLoQqWGdU1E9FD

<<< skipped >>>

POST /install_statistics.php HTTP/1.1

Accept: */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0 (compatible; MSIE; Win32)

Host: service.bandoobe.com

Content-Length: 1626

Cache-Control: no-cache

XML=<secure_request><salt>102</salt><data>w0CVUcFdIY0fRhQvcXmku9udu ayQJCyNPSAJA8D3KSVmh/T8FQcjatxVhh5yZC1BIMRcnVi5noWtCBha5ko77P7z75v5J29jyjzqel akI6Z6KXFP BMPiqtF75QOXP/ /WVxym v83bO2V4nXlm8 1sKWk2O3mDe64C3 JpbAOtMiczM0WYdooc5DtsCKQoYgYgbge3Ew71EWWVjDcOa UuGUhzYFM4lTWaXcsztPhQWZb8HUa5xiYAStpnkOy0vOt0MJsU4A8565tHim4AZMo2K6fPUPZecGTOsXsBpVUrZrUtKR3aKVS/u/Xyi/7wmNVEBotLzjofn3nnHKE1cd3UnDYbYAVuCUe9tJGQOSOUuR4lHlUVdnaFypAmjAYJDl/kQp7Oz3jqgKzHjH4NP2 wA/Dh0e3oMD mVoxc5rVyBCS10/59k PYtQBwD6tw2LphdprA1mbnOwgEzfmRvyznRMm2e9k9wNqMbpG7u6Uk7sSvi9EaHlQplDebPT rTWHhpyC4A5O1GTl2PAhb z9Z8mYfrPwMZ04vVtugdJnz7YndK4lSmf4YDyomqDQPyXxuh7WtufAqgRFt8vAmLHSQxF3UgacrZoEdIU1yzGNjMuhQGKKUaAgz2uucV5DEryASSkmI38LdXuxjRpCqq7yftAuT8jZ/7E x2RSytFbW6b9LZpxPYLIG6FNZNtJ2PIKYW4eWF/Sc6wqegoy1kG0Bn6ZfFBo5DwrhzD0GECJp4XO8vAYi1dbx/tt4qvkaFmzVATrdrHWW16kl4D0aTc5AFp9GlR5qtFbX mHLBGseMLKwJODYKtk/FyuEvFhG2uKuVe484qVbf263pY1cDgs3N8yxju/HhZ74SJU4H5NfPeV2yh RPBO2ge iBuwRB5A/0MFSZFO/ 1ZDuOEWtOzqMIhWJ8KtjmCXu//pqtnDSmKGpX1yqP2U6Us8qFrWQYNwKsbVdGGKoqN6ms7dZimJ4nTAzs7vcyKW68VgLTMtuhskfTzIvSn3p6x6wBozrsymQGxgj5Chak3LkcOUn9ZhkmAGSGRK jFYvkNa0pstZIeOtJyVrC47i5 XY Au6TmalRRQutbpHFTFFh/mA3o7iaWmTx2MhWoGBSpechsFEGF1ZbFJwmZtgP/4cfd9o6dVoBqPvJS/JJy5GewvZKlxFCDRt/AMDElsEKohkxvfcvEzx35Aq39Qto82nV2Hav2M1PtlqwFpTXnse5/VTQNv
HTTP/1.1 200 OK

Server: nginx

Date: Wed, 14 May 2014 02:11:37 GMT

Content-Type: text/xml

Connection: keep-alive

Keep-Alive: timeout=30

Content-Length: 498

X-Server: web1

<?xml version="1.0" encoding="utf-8"?>..<secure_reply>..  
<data>w0CVUcFdIY0fRhQvcXmku4sxfa5 83iQTWFwH25neuGv RNVU ksAGKvjB
D7nK0UqnINiyRaQ/gsGfT0bMI FY/fx3jMsbC3ovqXRip1XNnu2jnQhe1Belc9uQbtZed3
EhmmloRksp5/ 1210f5uhD9cNoLI2 KURlrBXxyOrGirTHmMuJrA4Ru8xb96q8/rfKFhxq
/rNzbhc2FW0Ax0d0oCdRivenaEVMxB7flWgt60l0X8k5GDK0fT9RwqoL5ddqq1ph3 FPUQ
rZ9FB2FUqvleIOINRslj9noLD/wWDa8r3Gvs9NLqhAcOuc2m9tcFvNh7SfOWKapT5Y8/u3
ee8bzYe0nzlimqU WPP7t3nvG82HtJ85YpqlPljz 7d57xundkvi6wMbQCWYUWV9A3Lw==
</data>..</secure_reply>..HTTP/1.1 200 OK..Server: nginx..
Date: Wed, 14 May 2014 02:11:37 GMT..Content-Type: text/xml..Connectio
n: keep-alive..Keep-Alive: timeout=30..Content-Length: 498..X-Server: 
web1..<?xml version="1.0" encoding="utf-8"?>..<secure_reply&g
t;..  <data>w0CVUcFdIY0fRhQvcXmku4sxfa5 83iQTWFwH25neuGv RNVU ks
AGKvjBD7nK0UqnINiyRaQ/gsGfT0bMI FY/fx3jMsbC3ovqXRip1XNnu2jnQhe1Belc9uQ
btZed3EhmmloRksp5/ 1210f5uhD9cNoLI2 KURlrBXxyOrGirTHmMuJrA4Ru8xb96q8/r
fKFhxq/rNzbhc2FW0Ax0d0oCdRivenaEVMxB7flWgt60l0X8k5GDK0fT9RwqoL5ddqq1ph
3 FPUQrZ9FB2FUqvleIOINRslj9noLD/wWDa8r3Gvs9NLqhAcOuc2m9tcFvNh7SfOWKapT
5Y8/u3ee8bzYe0nzlimqU WPP7t3nvG82HtJ85YpqlPljz 7d57xundkvi6wMbQCWYUWV9
A3Lw==</data>..</secure_reply>....

GET /CSC3-2010.crl HTTP/1.1

Accept: */*

User-Agent: Microsoft-CryptoAPI/5.131.2600.5512

Host: csc3-2010-crl.verisign.com

Connection: Keep-Alive

Cache-Control: no-cache

Pragma: no-cache


HTTP/1.1 200 OK

Server: Apache

ETag: "8d8fe0ec23a0c5673604775301ecaf43:1400015710"

Last-Modified: Tue, 13 May 2014 21:15:10 GMT

Accept-Ranges: bytes

Content-Length: 126381

Date: Wed, 14 May 2014 02:11:26 GMT

Connection: keep-alive

Content-Type: application/pkix-crl
0....0.......0...*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1
.0...U....VeriSign Trust Network1;09..U...2Terms of use at hXXps://www
.verisign.com/rpa (c)101.0,..U...%VeriSign Class 3 Code Signing 2010 C
A..140513210003Z..140527210003Z0...q0!....c..k....D.k.....120708062201
Z0!... _...u.t.=.<.&...130218061114Z0!...&..].....P.k.:...120125130
117Z0!...7P.x....8.Q...s..130227010252Z0!...J.....Q..Y.[.....110404153
956Z0!...d...=..q!_...g9..130729145216Z0!...l.....h2<.H......120329
152211Z0!...q.9...`H.*.Y.C...120525202212Z0!...s...TM.......0...121221
080842Z0!...t..,.. ...eL.....130314222305Z0!...y..r.HW.v.....w..140423
054643Z0!..../u.......A..5...101214165045Z0!.....0.Xc...%...iM..121102
230226Z0!.......S.a&.X5t.E]..111206083350Z0!....c.(....B.[M83...140108
164517Z0!....A.Sv.....f,.....110609003155Z0!.....z......!.ID{]..101228
182208Z0!....b^......{d.J'...130102154110Z0!......0..........I..130912
181631Z0!....6e...~..T.......130131012247Z0!.........bD#*u......130226
223939Z0!.......@..'$.).;}\..130121172259Z0!....7.v..........n..120724
160733Z0!....P;.Y..d...c.(...120209181451Z0!.....].bb[.....!....140328
205453Z0!.....a...L`[email protected]
000242Z0!...........].{7.....120730000000Z0!...".......Z.V.,.e..121031
192224Z0!...'....[.1......g..130318195659Z0!...,GI.jH.|...J.....120518
121623Z0!...<%a.=.d.......O..120424164254Z0!...@........... .a..121
109212441Z0!...L.&L..o.8..=6....110311141238Z0!...L...5...s $.=.=..130
205142241Z0!...O.c.........t....130109132228Z0!...X.BS.G]T.l.w.i..<<< skipped >>>

GET /tr.gif?anxa=APNImeshToolbar&anxe=SuccessfulInstall&anxt=2923105757634559&anxv=1.8.1.0&anxp=^AG7^BND102^YY^UA&tpid=JZP2-DTX&appid=0&sysid=102&psv=&installationResult=success&executionTime=0&TargetBrowser=FF&browsers=1-IE,2-FF&locale=en_UA&homepageChoice=&defaultSearchChoice=&osDetail=5.1.1.sp3.x86&osArchitecture=32&ieVersionInstalled=6.0.2900.5512&ffVersionInstalled=&crVersionInstalled=&apn_dbr=IE&ie_ds=&ie_hpr=1&ff_crm=&ff_hpr=&cr_ds=&cr_hb=&cr_start=&ie_tbon=1&cr_tbon=&ff_tbon=&ie_tboff=0&ff_tboff=&cr_tboff=&ietbs=&fftbs=&crtbs=&OSlanguage=en HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: anx.apnanalytics.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 204 No Content

Server: nginx/1.0.10

Date: Wed, 14 May 2014 02:11:29 GMT

Connection: close

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: max-age=0

GET /geolocation HTTP/1.1

User-Agent: NSIS_DOWNLOAD

Host: websearch.ask.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Wed, 14 May 2014 02:11:21 GMT

Server: Apache

Content-Length: 162

Connection: close

Content-Type: text/xml;charset=UTF-8
<?xml version="1.0" encoding="UTF-8"?>.<geodata><locati
on country="UA" countryName="Ukraine" state="" city="Kharkiv" zipcode=
"" ip="193.138.244.231"/>.</geodata>...

GET /tr.gif?anxa=APNImeshToolbar&anxe=SuccessfulInstall&anxt=2923105757634559&anxv=1.8.1.0&anxp=^AG7^BND102^YY^UA&tpid=JZP2-DTX&appid=0&sysid=102&psv=&installationResult=fail&executionTime=0&TargetBrowser=CR&browsers=&locale=en_UA&homepageChoice=&defaultSearchChoice=&osDetail=5.1.1.sp3.x86&osArchitecture=32&ieVersionInstalled=6.0.2900.5512&ffVersionInstalled=&crVersionInstalled=&apn_dbr=IE&ie_ds=&ie_hpr=1&ff_crm=&ff_hpr=&cr_ds=&cr_hb=&cr_start=&ie_tbon=1&cr_tbon=&ff_tbon=&ie_tboff=0&ff_tboff=&cr_tboff=&ietbs=&fftbs=&crtbs=&OSlanguage=en HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: anx.apnanalytics.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 204 No Content

Server: nginx/1.0.10

Date: Wed, 14 May 2014 02:11:31 GMT

Connection: close

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: max-age=0

GET /cdn/update/jzip.com/patches/1/patch_ff.exe HTTP/1.1

Accept: */*

User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

Host: download.cdn.bn-update-download.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Apache

Last-Modified: Wed, 30 Apr 2014 10:33:20 GMT

Accept-Ranges: bytes

Content-Length: 564288

X-Stat-Server: web2

Content-Type: application/octet-stream

Cache-Control: max-age=2592000

Expires: Fri, 13 Jun 2014 02:11:34 GMT

Date: Wed, 14 May 2014 02:11:34 GMT

Connection: keep-alive
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......A{.c...0...0
...0.b<0...0.b,0...0...0...0...0...0..%0...0.."0...0Rich...0.......
.................PE..L...&..Q.................r.......B...9...........
[email protected].....@............................
.............................@........................................
........................................................text....p.....
..r.................. ..`.rdata...*.......,...v..............@[email protected]
[email protected].......@.....................
......rsrc...............................@[email protected]...................
[email protected].......................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
[email protected][email protected]...
..@..}[email protected]... M..........M........E...FQ.....NU
..M.......M...VT..U........FP..E...............E.P.M...H.@..E..P.E..E.
[email protected]}[email protected].}.j.W.E......E.....
[email protected][email protected][email protected] [email protected].
u.....@._^3.[.....L$...=G...i. @...T.....tUVW.q.3.;5.=G.sD..i. @...D..
S.....t.G.....t...O..t .....u...3....3...F. @..;5.=G.r.[_^...U..QQ<<< skipped >>>

The Trojan connects to the servers at the folowing location(s):

DatamngrCoordinator.exe_1388:

.text

`.rdata

@.data

.rsrc

@.reloc

t.Pj:

3|$83|$0

3|$@3|$4

\$,3\$43

.QZ^&

~$)~()|$

T$DRSSh

xSSSh

FTPjKS

FtPj;S

C.PjRV

.GFy,

8sqliu

u.VWh|

 2 34 567

<%u7j

X<%u2j

boost::filesystem::directory_iterator::operator

kernel32.dll

Visual C   CRT: Not enough memory to complete call to strerror.

Broken pipe

Inappropriate I/O control operation

Operation not permitted

portuguese-brazilian

GetProcessWindowStation

operator

CPPSQLITE_ERROR

SQLITE_DONE

SQLITE_ROW

SQLITE_RANGE

SQLITE_FORMAT

SQLITE_AUTH

SQLITE_NOLFS

SQLITE_MISUSE

SQLITE_MISMATCH

SQLITE_CONSTRAINT

SQLITE_TOOBIG

SQLITE_SCHEMA

SQLITE_EMPTY

SQLITE_PROTOCOL

SQLITE_CANTOPEN

SQLITE_FULL

SQLITE_NOTFOUND

SQLITE_CORRUPT

SQLITE_IOERR

SQLITE_INTERRUPT

SQLITE_READONLY

SQLITE_NOMEM

SQLITE_LOCKED

SQLITE_BUSY

SQLITE_ABORT

SQLITE_PERM

SQLITE_INTERNAL

SQLITE_ERROR

SQLITE_OK

%s[%d]: %s

select count(*) from sqlite_master where type='table' and name='%s'

large file support is disabled

SQL logic error or missing database

foreign_keys

sqlite_compileoption_get

sqlite_compileoption_used

sqlite_source_id

sqlite_version

sqlite_attach

sqlite_detach

sqlite_stat1

sqlite_rename_parent

sqlite_rename_trigger

sqlite_rename_table

RowKey

3.7.3

SQLite format 3

CREATE TABLE sqlite_master(

sql text

CREATE TEMP TABLE sqlite_temp_master(

REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY

922337203685477580

SQLITE_

?API call with %s database connection pointer

%s\etilqs_

OsError 0x%x (%u)

2nd reference to page %d

invalid page number %d

%s(%d)

keyinfo(%d

%r %s BY term out of range - should be between 1 and %d

Expression tree is too large (maximum depth %d)

too many SQL variables

variable number must be between ?1 and ?%d

too many columns in %s

%s OR name=%Q

type='trigger' AND (%s)

SELECT tbl, idx, stat FROM %Q.sqlite_stat1

access to %s.%s.%s is prohibited

access to %s.%s is prohibited

object name reserved for internal use: %s

sqlite_

duplicate column name: %s

too many columns on %s

unknown column "%s" in foreign key definition

number of columns in foreign key does not match the number of columns in the referenced table

foreign key on %s should reference only one column of table %T

a JOIN clause is required before %s

cannot modify %s because it is a view

table %s may not be modified

foreign key mismatch

error during initialization: %s

no entry point [%s] in shared library [%s]

unable to open shared library [%s]

sqlite3_extension_init

unknown or unsupported join type: %T %T%s%T

RIGHT and FULL OUTER JOINs are not currently supported

%s:%d

no such index: %s

UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d

sqlite_master

sqlite_temp_master

vtable constructor did not declare schema: %s

vtable constructor failed: %s

no such module: %s

table %s: xBestIndex returned an invalid plan

database corruption at line %d of [%.10s]

misuse at line %d of [%.10s]

cannot open file at line %d of [%.10s]

failed to allocate %u bytes of memory

failed memory resize %u to %u bytes

Recovered %d frames from WAL file %s

foreign key constraint failed

DELETE FROM %Q.%s WHERE tbl=%Q

CREATE TABLE %Q.%s(%s)

%s %T cannot reference objects in database %s

default value of column [%s] is not constant

UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d

%s - %s

malformed database schema (%s)

cannot join using column %s - column not present in both tables

cannot have both ON and USING clauses in the same join

a NATURAL join may not have an ON or USING clause

%s: %s

%s: %s.%s

%s: %s.%s.%s

misuse of aliased aggregate %s

not authorized to use function: %s

too many terms in %s BY clause

invalid name: "%s"

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

Failed to read ptrmap key=%d

failed to get page %d

%d of %d pages missing from overflow list starting at %d

freelist leaf count too big on page %d

Fragmentation of %d bytes reported as %d on page %d

Multiple uses for byte %d of page %d

Corruption detected in cell %d on page %d

On page %d at right child:

On tree page %d cell %d:

unable to get the page. error code=%d

btreeInitPage() returns error code %d

Page %d:

Outstanding page count goes from %d to %d during this analysis

Pointer map page %d is referenced

Page %d is never used

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

%s-mjX

unable to use function %s in the requested context

zeroblob(%d)

database %s is locked

cannot detach database %s

no such database: %s

no such collation sequence: %s

%s.%s

unknown database %s

bind on a busy prepared statement: [%s]

%.*s"%w"%s

%s%.*s"%w"

UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q

Cannot add a PRIMARY KEY column

automatic extension loading failed: %s

B}Tunable to close due to unfinished backup operation

d-d-d d:d:d

d:d:d

d-d-d

database schema is locked: %s

SELECTs to the left and right of %s do not have the same number of result columns

LIMIT clause should come after %s not before

ORDER BY clause should come after %s not before

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0

PRAGMA vacuum_db.synchronous=OFF

cannot VACUUM - SQL statements in progress

BmTunknown database: %s

misuse of aggregate: %s()

indexed columns are not unique

PRIMARY KEY must be unique

%s.%s may not be NULL

no such vfs: %s

%s-shm

constraint failed at %d in [%s]

abort at %d in [%s]: %s

database table is locked: %s

cannot change %s wal mode from within a transaction

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

cannot commit transaction - SQL statements in progress

cannot rollback transaction - SQL statements in progress

cannot %s savepoint - SQL statements in progress

no such savepoint: %s

cannot open savepoint - SQL statements in progress

statement aborts at %d: [%s] %s

sqlite3_get_table() called with two or more incompatible queries

%s ORDER BY

%s VIRTUAL TABLE INDEX %d:%s

%s USING PRIMARY KEY

%s VIA MULTI-INDEX UNION

%s WITH INDEX %s

cannot use index: %s

%s WITH AUTOMATIC INDEX

%s AS %s

TABLE %s

at most %d tables in a join

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

unsupported file format

no such trigger: %S

unable to open database: %s

database %s is already in use

too many attached databases - max %d

sqlite_sequence

there is already an index named %s

DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

no such index: %S

unable to identify the object to be reindexed

no such table: %s

sqlite_subquery_%p_

cannot create INSTEAD OF trigger on table: %S

cannot create %s trigger on view: %S

cannot open value of type %s

cannot open %s column for writing

no such column: "%s"

cannot open view: %s

cannot open virtual table: %s

indexed

foreign key

sqlite_altertab_%s

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

CREATE%s INDEX %.*s

table %s has no column named %s

sqlite_autoindex_%s_%d

index %s already exists

there is already a table named %s

virtual tables may not be indexed

views may not be indexed

table %s may not be indexed

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

table "%s" has more than one primary key

CREATE TABLE %Q.sqlite_sequence(name,seq)

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

CREATE %s %.*s

view %s is circularly defined

table %S has no column named %s

%d values for %d columns

table %S has %d columns but %d values were supplied

*** in database %s ***

unsupported encoding: %s

foreign_key_list

no such column: %s

there is already another table or index with this name: %s

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

view %s may not be altered

table %s may not be altered

-- TRIGGER %s

DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

DELETE FROM %s.sqlite_sequence WHERE name=%Q

use DROP VIEW to delete view %s

use DROP TABLE to delete table %s

table %s may not be dropped

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

E:\Work\SearchSuite\G13_Release\CGL\Libs\boost/exception/detail/exception_ptr.hpp

class std::basic_string,class std::allocator > __cdecl Tools::SystemTools::ReadStringFromRegistry(struct HKEY__ *,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &)

E:\Work\SearchSuite\G13_Release\CGL\Tools\SystemTools.cpp

void __cdecl Tools::SystemTools::WriteStringToRegistry(struct HKEY__ *,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &)

void __cdecl Tools::SystemTools::RemoveRegistryValue(struct HKEY__ *,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &)

unsigned long __cdecl Tools::SystemTools::GetMyExeName(class std::basic_string,class std::allocator > &)

E:\Work\SearchSuite\G13_Release\CGL\Tools\StringTools.cpp

E:\Work\SearchSuite\G13_Release\CGL\Tools\FileTools.cpp

keywords

SELECT value FROM meta WHERE key = 'version'

SELECT %s FROM keywords_backup ORDER BY id ASC

Not supported chrome db

CREATE TABLE %s AS SELECT %sFROM keywords ORDER BY id ASC

UPDATE meta SET value = ?WHERE key = 'Default Search Provider ID Backup Signature'

UPDATE meta SET value = %s WHERE key = 'Default Search Provider ID Backup'

UPDATE meta SET value = %s WHERE key = 'Default Search Provider ID'

E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Kipod\KipodTools\KipodTools.cpp

void __cdecl KipodTools::UpdateChromeBackupKeywordsTable(const class std::basic_string,class std::allocator > &)

DROP TABLE %s

select %s from %s where key = '%s';

select * from %s where %s = '%s';

update %s set %s = %d where key = '%s';

DELETE FROM keywords WHERE short_name = '%s';

INSERT INTO keywords (short_name, keyword, url, favicon_url, input_encodings, show_in_default_list, safe_for_autoreplace) VALUES ('%s', '%s', '%s', '', 'UTF-8', 1, 1);

SELECT active, userDisabled, appDisabled, softDisabled FROM addon WHERE id='%s'

UPDATE addon SET userDisabled='%s', appDisabled='%s', softDisabled='%s', active='%i' WHERE id='%s'

id || short_name || keyword || favicon_url || url || safe_for_autoreplace || originating_url || date_created || usage_count || input_encodings || show_in_default_list || suggest_url || prepopulate_id || autogenerate_keyword || logo_id || created_by_policy || instant_url || last_modified || sync_guid

id || short_name || keyword || favicon_url || url || safe_for_autoreplace || originating_url || date_created || usage_count || input_encodings || show_in_default_list || suggest_url || prepopulate_id || created_by_policy || instant_url || last_modified || sync_guid

id, short_name, keyword, favicon_url, url, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, show_in_default_list, suggest_url, prepopulate_id, autogenerate_keyword, logo_id, created_by_policy, instant_url, last_modified, sync_guid

id, short_name, keyword, favicon_url, url, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, show_in_default_list, suggest_url, prepopulate_id, created_by_policy, instant_url, last_modified, sync_guid

keywords_backup

E:\Work\SearchSuite\G13_Release\CGL\libs\boost/exception/detail/exception_ptr.hpp

e:\work\searchsuite\g13_release\searchsuite\client\kipodlogger\kipodlogger\SharedLogBuffer.hpp

{DB859B9F-5A74-439e-B1FA-1356ECBCF59A}

void __thiscall PTL::Interprocess::Event::Notify(const class std::basic_string,class std::allocator > &,bool)

E:\Work\SearchSuite\G13_Release\CGL\PTL/Observer/InterprocessEvent/InterprocessEvent.hpp

%d / %m / %y

%I : %M : %S %p

%m / %d / %y

%b %d %H : %M : %S %Y

unsupported version

asio.misc

asio.misc error

Open/Key

Service/Create, Path=%s, Reg=%s

Args=%s

../../../../CGL/Libs\boost/exception/detail/exception_ptr.hpp

IDdqdCtx/Connect, File=%s

Unsupported IDdqd version = 0x%x. Expected = 0x%x

IDdqd/Ctl Code = 0x%x

WStr::FromRsrc, ID=%u

%s*.%s

%s%u.%s

RegKey::%s %s, Access=0x%x

RegKey::%s %s

VMem/Alloc, Size=%u

HomoHeap/Init, Size=%u

HomoHeap/Alloc, Size=%u

Access violation. Address=0xX, access=%s

SEH Exception. Code=0xX, NumParams=%u, Addr=0xX

System error %u (0xX)

%s. Source=

[u/u/u u:u:u.u]

boost::too_few_args: format-string referred to more arguments than were passed

boost::too_many_args: format-string referred to less arguments than were passed

iddqd Protection Status = 0xX, Process=%u, Files=%u, Registry=%u

\Registry\Machine\System\ControlSetu\Services\%s

Cannot create HTTP request instance

Login to

Login request (not encrypted)

Login request (encrypted)

Update/patch exec timed out

Login successful, attempt to send stats to "

Url is empty, it means statistics will not be sent, but will be deleted

Exception in Login thread:

Unknown exception in Login thread

As I cannot login with url:

thread.entry_event

thread.exit_event

key does not exist. Attempt to create it

BrowserDefendert.job

BrowserDefender.job

BitGuard.job

Websteroids

bprotect.exe

browserprotect.exe

browserdefender.exe

bitguard.exe

bpsvc.exe

snapdo.exe

browsersafeguard.exe

protectedsearch.exe

stinst32.exe

stinst64.exe

searchprotection.exe

searchprotector.exe

searchsettings.exe

searchsettings64.exe

dprotectsvc.exe

utiljumpflip.exe

umbrella.exe

websteroids.exe

websteroidsservice.exe

RegOpenKeyTransactedW

E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Kipod\Coordinator\src\updateService\Statistic\CollectedItems.cpp

select url from keywords where short_name like '%s'

SQLite Error

E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Common\BrowserManagement\src\fire_fox.cpp

class std::vector,class std::allocator >,class std::allocator,class std::allocator > > > __cdecl `anonymous-namespace'::GetUrlList(const class std::basic_string,class std::allocator > &)

delete from engine_data where engineid = '%s';

update engine_data set value = '%s' where name = 'order' and value = '%s';

insert into engine_data (engineid, name, value) VALUES ('%s', 'order', '1');

DELETE FROM addon WHERE id='%s'

INSERT INTO addon (id, location, version, type, visible, active, userDisabled, appDisabled, pendingUninstall, descriptor, softDisabled) VALUES ('%s', 'app-profile', '%s', 'extension', 1, 1, 0, 0, 0, '%s', 0)

INSERT INTO addon (id, location, version, type, visible, active, userDisabled, appDisabled, pendingUninstall, descriptor) VALUES ('%s', 'app-profile', '%s', 'extension', 1, 1, 0, 0, 0, '%s')

unsupported exception

E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/string_path.hpp

Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag

E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/json_parser.hpp

E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/detail/json_parser_read.hpp

E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/detail/json_parser_write.hpp

E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/detail/ptree_implementation.hpp

update meta set value = %s where key = 'Default Search Provider ID';

SELECT * FROM keywords WHERE short_name = '%s' AND url = '%s';

E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Common\BrowserManagement\src\chrome.cpp

void __thiscall Chrome::UpdateChromeBackupKeywordsTable(const class std::basic_string,class std::allocator > &)

KeySize

: this object does't support a special last block

NullRNG: NullRNG should only be passed to functions that don't need to generate random bytes

: this object doesn't support multiple channels

is not a valid key length

%Y-%m-%d %H:%M:%S

UrlEscape failed

UrlEscape succeeded

CMD_LIST_SETTINGS called

CMD_LIST_FOLDERS called

CreateThread failed, GLE=%d.

%s/[d-d-d d_d_d]%s

Crash detected > attempt to %s address %x

Last Error: %d. %s

: this object doesn't support resynchronization

StreamTransformation: this object doesn't support random access

Boost.Variant internal error: 'which' out of range.

E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Kipod\Bin\Release\Coordinator.pdb

OLEAUT32.dll

RegCloseKey

ADVAPI32.dll

SHLWAPI.dll

WS2_32.dll

USER32.dll

GetProcessHeap

CreateIoCompletionPort

KERNEL32.dll

SHELL32.dll

ole32.dll

RegOpenKeyExW

RegCreateKeyExW

ReportEventW

RPCRT4.dll

SensApi.dll

WININET.dll

VERSION.dll

WTSAPI32.dll

GetCPInfo

ConnectNamedPipe

CreateNamedPipeW

DisconnectNamedPipe

WaitNamedPipeW

dbghelp.dll

PSAPI.DLL

ShellExecuteExW

SHFileOperationW

RegDeleteKeyW

RegQueryInfoKeyW

RegEnumKeyExW

RegOpenKeyW

UrlEscapeW

USERENV.dll

PeekNamedPipe

Coordinator.exe

??0?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@QAE@XZ

??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ@51

??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@51

??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ@51

?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ

?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ

?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ

?get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ

?get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ

?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ

?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ

?instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@A

?instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@A

?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@A

?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ

?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z

?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@detail@34@A

?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@detail@34@A

?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@634@A

.?AVwindows_file_codecvt@@

zcÁ

.?AVCppSQLite3Query@@

.?AVCppSQLite3Table@@

.?AVCppSQLite3Statement@@

.?AVCppSQLite3DB@@

.?AV?$clone_impl@VFailedToOpenRegistryKeyException@SystemTools@Tools@@@exception_detail@boost@@

.?AVFailedToOpenRegistryKeyException@SystemTools@Tools@@

.?AV?$sp_counted_impl_p@VHolder@?$HoldPolicy@V?$HandlePolicy@PAUHKEY__@@$0A@P6GJPAU1@@Z$1?RegCloseKey@@YGJ0@ZVRegCloseKeyChecker@Tools@@VOpenRegPolicy@4@@HTL@PTL@@Vshared_ptr@boost@@@Fast@Detail@HTL@PTL@@@detail@boost@@

.PAUErrorTag@SystemTools@Tools@@

.PAUPathTag@ErrorInfo@FileTools@Tools@@

.PAUErrorCodeTag@ErrorInfo@StringTools@Tools@@

.PAUErrorCodeDescription@ErrorInfo@StringTools@Tools@@

.PAUOSErrorCodeTag@ErrorInfo@FileTools@Tools@@

.PAUDestinationDirectoryTag@ErrorInfo@FileTools@Tools@@

.PAUDestinationFileNameTag@ErrorInfo@FileTools@Tools@@

.PAUIllegalFileNameCharTag@ErrorInfo@FileTools@Tools@@

.PAUFileNamePrefixTag@ErrorInfo@FileTools@Tools@@

.PAUFileNameRootTag@ErrorInfo@FileTools@Tools@@

.PAUFileNameSuffixTag@ErrorInfo@FileTools@Tools@@

.PAUFileNameExtTag@ErrorInfo@FileTools@Tools@@

.?AV?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@detail@serialization@boost@@

.?AV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@

.?AV?$singleton_wrapper@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@detail@serialization@boost@@

.?AV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@

.?AV?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@

.?AV?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@

.?AVException@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@

.PAUMessageTag@ErrorInfo@KipodLogger@@

.PAUWhatTag@PTL@@

.?AV?$clone_impl@VException@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@exception_detail@boost@@

.?AV?$sp_counted_impl_p@Vwindows_shared_memory@interprocess@boost@@@detail@boost@@

.?AUwincert_x64_token@detail@protection@kipod@@

.?AUwincert_x86_token@detail@protection@kipod@@

.?AUapcrtldr_x86_token@detail@protection@kipod@@

.?AUapcrtldr_x64_token@detail@protection@kipod@@

.?AVOperaStatistic@KipodStatistic@@

.?AVChromeStatistic@KipodStatistic@@

.?AV?$_Ref_count_obj@VOperaStatistic@KipodStatistic@@@tr1@std@@

.?AV?$_Ref_count_obj@VChromeStatistic@KipodStatistic@@@tr1@std@@

.?AVCppSQLite3Exception@@

.?AV?$sp_counted_impl_pd@PAUdelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@U?$do_heap_delete@Udelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@@detail@3@@detail@boost@@

.?AV?$sp_counted_impl_p@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@detail@boost@@

.?AU?$concrete_parser@U?$alternative@V?$action@V?$chset@_W@classic@spirit@boost@@Ua_escape@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@V?$action@U?$uint_parser@K$0BA@$03$03@classic@spirit@boost@@Ua_unicode@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$alternative@V?$action@U?$difference@U?$difference@Uanychar_parser@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@Ua_char@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$positive@U?$contiguous@U?$confix_parser@U?$chlit@D@classic@spirit@boost@@U?$kleene_star@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@U1234@Uunary_parser_category@234@Unon_nested@234@Unon_lexeme@234@@classic@spirit@boost@@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$sequence@U?$optional@U?$chlit@D@classic@spirit@boost@@@classic@spirit@boost@@U?$alternative@U?$chlit@D@classic@spirit@boost@@U?$sequence@U?$range@_W@classic@spirit@boost@@U?$kleene_star@Udigit_parser@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$sequence@V?$chset@_W@classic@spirit@boost@@U?$optional@V?$chset@_W@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@Ua_name@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$chlit@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_s@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$alternative@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$list_parser@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@U?$chlit@D@234@Uno_list_endtoken@234@Uplain_parser_category@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$alternative@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@V1234@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Uend_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@

.?AUdelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@

.?AU?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@

.?AVFireFox@@

.?AVJsonParserExecption@Json@KipodTools@@

.?AU?$do_heap_delete@Udelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@@detail@boost@@

.?AVOpera@@

.?AVChrome@@

.?AUNoChannelSupport@BufferedTransformation@CryptoPP@@

.?AVInvalidKeyLength@CryptoPP@@

.PAVBufferedTransformation@CryptoPP@@

.PAVRandomNumberGenerator@CryptoPP@@

.?AVsettings_pipe_failed@@

.PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@

.?AV?$VariableKeyLength@$0BA@$0BA@$0CA@$07$03$0A@@CryptoPP@@

.?AVSimpleKeyingInterface@CryptoPP@@

.?AV?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@

.?AV?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@

4(5.585_5

4%4x5

5&505:5~5

4-4}4

1,2024282<2

9 9$9(9,9094989

3 3$3(3,3034383<3@3

0%1s1

<&=5=&>8>

7ˆ8=8\8

?"?(?.?4?:?@?

; <:<[<}<

9):0:7:_:

6#6'6 6/6

7 7*777\7

(0,0004080<0

6$7(7,7074787

? ?$?(?,?0?4?8?5X5D5W5c5
;!<&5&656&757
:1:8:?:{:
0[1&:6:&;5;
6:7@7&959
= =$=(=,=0=4=8=\=
; <)<.<3<
8%9u9
0%1U1
7-8}8
2%3u3
3%4U4
: :$:(:,:0:4:8:<:
<$=(=,=0=4=8=<=@=
6,686\6|6
3(343<3\3
8$8,888\8|8
5 505<5`5
0$0,080\0|0
pKERNEL32.DLL
mscoree.dll
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
ADVAPI32.DLL
WUSER32.DLL
777705555443332
5555443332
5555443332
Software\Microsoft\Windows\CurrentVersion\Run
duser32.dll
%s\%s%X%X
\cmd.exe
Web Server Edition
%1%.%2%.%3%
\/:*?"<>|
^<>:"/\|?*
\\?\UNC\
FirefoxExtension
ChromeDS
FirefoxHomepage
FirefoxSE
FirefoxDE
FirefoxKeyword
ChromeStartPages
ChromeStartPages32
ChromeHomepage
ChromePrefs
Firefox/ProtectionEnabled
Chrome/ProtectionEnabled
ff_nt_supported
ie_ds_supported
ff_ds_supported
chrome_ds_supported
ie_hp_supported
ff_hp_supported
chrome_hp_supported
http://www.search.ask.com/?o=APN10646A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4
{9BB47C17-9C68-4BB3-B188-DD9AF0FD2#sysid#}
Ask.com
http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN10646&apn_ptnrs=AG7&q=
http://www.search.ask.com/suggest.php?src=ieb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN10646&apn_ptnrs=AG7&qu=
Firefox/Extension
http://dts.search.ask.com/sr?l=dis&o=APN10646&qsrc=2870&apn_dtid=BND#sysid#&apn_ptnrs=JZP2-DTX&apn_uid=#uid#&gct=dns&gc=1&appid=#appid#&sysid=#sysid#&sver=3&q=
{AD130C31-2032-4F53-BB70-0BA27FBC95FB}
http://dts.search.ask.com/sr?src=ffb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_dtid=BND#sysid#&apn_ptnrs=AG7&apn_uid=#uid#&o=APN10646&q=
http://www.search.ask.com?o=APN10646A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4&tag=newtab
http://dts.search.ask.com/sr?src=crb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN10646&apn_ptnrs=AG7&q=
\extensions.sqlite
\extensions.sqlite-journal
Chrome/DefaultSearch
DefaultUrl
DefaultKeyword
\Web Data
\Web Data-journal
Firefox/Homepage
Firefox/HomepageAsked
user_pref("browser.startup.homepage", "$(Value)");
user_pref\("browser\.startup\.homepage", "([^"]*)"\);
\prefs.js
Firefox/SelectedSearch
Firefox/SelectedSearchAsked
user_pref("browser.search.selectedEngine", "$(Value)");
user_pref\("browser\.search\.selectedEngine", "([^"]*)"\);
Firefox/DefaultSearch
Firefox/DefaultSearchAsked
user_pref("browser.search.defaultenginename", "$(Value)");
user_pref\("browser\.search\.defaultenginename", "([^"]*)"\);
Firefox/UrlbarSearch
Firefox/UrlbarSearchAsked
user_pref("keyword.URL", "$(Value)");
user_pref\("keyword\.URL", "([^"]*)"\);
FFUrlbar search
DefaultSuggestionUrl
Chrome/Homepage
backup.homepage
Chrome homepage
Chrome/StartPages
backup.session.urls_to_restore_on_startup
Chrome Start Page
session.urls_to_restore_on_startup
Chrome/StartPagesFrom32Version
backup.session.startup_urls
Chrome Start Page Since 32 version
session.startup_urls
Chrome
404Url
DNSUrl
SearchUrl
NewTabUrl
RelatedSearchUrl
Firefox/BHO
Error404URL
DNSErrorURL
SearchURL
Firefox/BHO/NativeHelper
Firefox/BHO/DnsBHO
Firefox/BHO/SearchBHO
Firefox/BHO/MainBHO
Firefox/BHO/Error404BHO
Firefox/BHO/NewTabBHO
Firefox/BHO/SessionRestore
SOFTWARE\Mozilla\Mozilla Firefox
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe
SOFTWARE\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}
Chrome.exe
http://
%d.%d.%d.%d
\profiles.ini
\Mozilla\Firefox\
\Google\Chrome\User Data\Default
chrome-extension://%1%/config/skin/new-tab.html
\ChromeExtension
IX
{B358EFE4-A25E-4fd6-A2CA-71081B7CDB47}_%1%
\\.\pipe\DatamngrPipe
backup.homepage_is_newtabpage
backup.browser.show_home_button
backup.session.restore_on_startup
backup.extensions.ids
lchrome.exe
\Google\Chrome\User Data\Default\Preferences
\Google\Chrome\User Data\
\Google\Chrome\User Data\Default\Web Data
search_url
"%1%" : "%2%"
chrome_url_overrides
chrome-extension://%1%/%2%
opera.exe
session.restore_on_startup
\Opera\Opera\operaprefs.ini
\Opera\operaprefs_default.ini
\Opera\Opera\search.ini
\Opera\locale\%1%\search.ini
\Opera\Opera\toolbar\standard_toolbar.ini
Home URL
\Opera\Opera\sessions\autosave.win
Search Panel Toolbar.content
firefox.exe
\Mozilla\Firefox
\search.json
\search.sqlite
\extensions.ini
user_pref("browser.startup.homepage", "
user_pref("browser.startup.page",
user_pref("browser.search.selectedEngine", "
user_pref("browser.search.defaultenginename", "
user_pref("browser.search.order.1", "
user_pref("keyword.URL", "
user_pref("general.useragent.extra.%1%", "
user_pref("%1%.Updater.Enabled", "
xmlns:G="http://a9.com/-/spec/opensearch/1.1/" xmlns:moz="http://www.mozilla.org/2006/browser/search/"
Url[@type='text/html']
windows
Software\Datamngr\Chrome\DS
Software\Datamngr\Files\ChromeHomepage
Software\Mozilla\Mozilla Firefox
http\shell\open\command
software\Microsoft\Windows\shell\associations\urlassociations\http\userchoice
Software\Opera Software
Opera.exe
Software\Microsoft\Windows\CurrentVersion\Ext\Settings
extensions.ini
\install.rdf
xmlns:G="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:em="http://www.mozilla.org/2004/em-rdf#"
firefox
chrome
opera
G:Url[@type='text/html']
coordinator.cfg
lDatamngr\mgrldr.dll
Datamngr\x64\mgrldr.dll
Datamngr\x64\apcrtldr.dll
Datamngr\apcrtldr.dll
lcoordinator.cfg
general.cfg
DatamngrUI.exe
Global\F473573F-4750-4AA6-B7B0-4595E7DEA3E2
setmgrc1.cfg
\\.\Global\F06DEFF2-5B9C-490D-910F-35D3A9119622setmgrc1
F06DEFF2-5B9C-490D-910F-35D3A9119622
{5A08D1A5-925A-401D-AFE3-8D61426B0E3E}
Service failed. %s
ucsrss.exe
lsass.exe
services.exe
svchost.exe
Starting Datamngr Coordinator Service, version 5.0.0.12521 built Sun Apr 6 16:48:50 2014
stats.cfg
firefox/homepage
firefox/selectedsearch
chrome/homepage
chrome/defaultsearch
%3%
WinHttp.WinHttpRequest.5.1
5.0.0.12521
application/x-www-form-urlencoded
login_request
/login_reply/properties/node()
/login_reply/auto_update/pack_url/node()
/login_reply/patch_update/patch/node()
target_statistics_url
.XML=
SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls
Wincert\win32cert.dll
Wincert\win64cert.dll
%s failed w/err 0xlx
hAdvapi32.dll
bandoobe.com
/login
http://preved.%s
t{1112c7f9-2d8b-4550-bf47-68ef2e02ff20}
{d48c9ead-f59f-4dea-ac97-7065fea79f42}
{af6ac4f2-9825-4fb6-a600-92bc5361f209}
{23cd218f-af09-443f-bbb1-adb89fd5986d}
{9a95b751-bf3e-4ea8-a938-2d4d84cd4964}
{99079a25-328f-4bd4-be04-00955acaa0a7}
{28387537-e3f9-4ed7-860c-11e69af4a8a0}
{b7b37500-99b4-46ad-8bf3-2480bcedc38c}
{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}
search.fantastigames.com
dts.search-results.com
www.gotsearch.com
www.insertsearch.com
www.mlsearch.com
www.searchsupreme.com
www.newsearchtab.com
www.adoresearch.com
www.searchsheet.com
www.searchqu.com
www.searchnu.com
www.searchcore.net
search.lphant.net
search.lphant.com
search.shareazaweb.com
search.shareazaweb.net
search.bearshare.net
search.bearshare.com
search.imesh.com
search.imesh.net
%1%.%2%.%3%.%4%
PathToExe
user_pref("extensions.lastAppVersion", "
user_pref("extensions.lastPlatformVersion", "
user_pref("extensions.extensions.databaseSchema",
%s|%d|%d|%d
backup.pinned_tabs
https
%d.%d
Hlogfile.txt
dwinlogon.exe
Msxml2.DOMDocument.3.0
E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Common\json_parser\JsonPropertyTreeParser.cpp
!valueName.empty()
e:\work\searchsuite\g13_release\searchsuite\client\common\json_parser\JsonPropertyTreeParser.h
E:\Work\SearchSuite\G13_Release\CGL\libs\boost/optional/optional.hpp
!value.empty()
!p.empty() && "Empty path not allowed for put_child."
.E:\Work\SearchSuite\G13_Release\CGL\libs\boost/variant/detail/visitation_impl.hpp
!"Boost.Variant internal error: 'which' out of range."
E:\Work\SearchSuite\G13_Release\CGL\libs\boost/variant/detail/forced_return.hpp
!"#$%&'()* ,
{BA74CC18-07CA-4BD2-B6DD-7231A3A6A8F3}
{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}
{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}
Assertion failed: %s, file %s, line %d
l{BA74CC18-07CA-4BD2-B6DD-7231A3A6A8F3}
%Program Files%\Music Toolbar\Datamngr\DatamngrCoordinator.exe
DatamngrCoordinator.exe

DatamngrCoordinator.exe_236:


.text
`.rdata
@.data
.rsrc
@.reloc
t.Pj:
3|$83|$0
3|$@3|$4
\$,3\$43
.QZ^&
~$)~()|$
T$DRSSh
xSSSh
FTPjKS
FtPj;S
C.PjRV
.GFy,
8sqliu
u.VWh|
 2 34 567
<%u7j
X<%u2j
boost::filesystem::directory_iterator::operator  
kernel32.dll
Visual C   CRT: Not enough memory to complete call to strerror.
Broken pipe
Inappropriate I/O control operation
Operation not permitted
portuguese-brazilian
GetProcessWindowStation
operator
CPPSQLITE_ERROR
SQLITE_DONE
SQLITE_ROW
SQLITE_RANGE
SQLITE_FORMAT
SQLITE_AUTH
SQLITE_NOLFS
SQLITE_MISUSE
SQLITE_MISMATCH
SQLITE_CONSTRAINT
SQLITE_TOOBIG
SQLITE_SCHEMA
SQLITE_EMPTY
SQLITE_PROTOCOL
SQLITE_CANTOPEN
SQLITE_FULL
SQLITE_NOTFOUND
SQLITE_CORRUPT
SQLITE_IOERR
SQLITE_INTERRUPT
SQLITE_READONLY
SQLITE_NOMEM
SQLITE_LOCKED
SQLITE_BUSY
SQLITE_ABORT
SQLITE_PERM
SQLITE_INTERNAL
SQLITE_ERROR
SQLITE_OK
%s[%d]: %s
select count(*) from sqlite_master where type='table' and name='%s'
large file support is disabled
SQL logic error or missing database
foreign_keys
sqlite_compileoption_get
sqlite_compileoption_used
sqlite_source_id
sqlite_version
sqlite_attach
sqlite_detach
sqlite_stat1
sqlite_rename_parent
sqlite_rename_trigger
sqlite_rename_table
RowKey
3.7.3
SQLite format 3
CREATE TABLE sqlite_master(
sql text
CREATE TEMP TABLE sqlite_temp_master(
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY
922337203685477580
SQLITE_
?API call with %s database connection pointer
%s\etilqs_
OsError 0x%x (%u)
2nd reference to page %d
invalid page number %d
%s(%d)
keyinfo(%d
%r %s BY term out of range - should be between 1 and %d
Expression tree is too large (maximum depth %d)
too many SQL variables
variable number must be between ?1 and ?%d
too many columns in %s
%s OR name=%Q
type='trigger' AND (%s)
SELECT tbl, idx, stat FROM %Q.sqlite_stat1
access to %s.%s.%s is prohibited
access to %s.%s is prohibited
object name reserved for internal use: %s
sqlite_
duplicate column name: %s
too many columns on %s
unknown column "%s" in foreign key definition
number of columns in foreign key does not match the number of columns in the referenced table
foreign key on %s should reference only one column of table %T
a JOIN clause is required before %s
cannot modify %s because it is a view
table %s may not be modified
foreign key mismatch
error during initialization: %s
no entry point [%s] in shared library [%s]
unable to open shared library [%s]
sqlite3_extension_init
unknown or unsupported join type: %T %T%s%T
RIGHT and FULL OUTER JOINs are not currently supported
%s:%d
no such index: %s
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
sqlite_master
sqlite_temp_master
vtable constructor did not declare schema: %s
vtable constructor failed: %s
no such module: %s
table %s: xBestIndex returned an invalid plan
database corruption at line %d of [%.10s]
misuse at line %d of [%.10s]
cannot open file at line %d of [%.10s]
failed to allocate %u bytes of memory
failed memory resize %u to %u bytes
Recovered %d frames from WAL file %s
foreign key constraint failed
DELETE FROM %Q.%s WHERE tbl=%Q
CREATE TABLE %Q.%s(%s)
%s %T cannot reference objects in database %s
default value of column [%s] is not constant
UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d
%s - %s
malformed database schema (%s)
cannot join using column %s - column not present in both tables
cannot have both ON and USING clauses in the same join
a NATURAL join may not have an ON or USING clause
%s: %s
%s: %s.%s
%s: %s.%s.%s
misuse of aliased aggregate %s
not authorized to use function: %s
too many terms in %s BY clause
invalid name: "%s"
Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)
Failed to read ptrmap key=%d
failed to get page %d
%d of %d pages missing from overflow list starting at %d
freelist leaf count too big on page %d
Fragmentation of %d bytes reported as %d on page %d
Multiple uses for byte %d of page %d
Corruption detected in cell %d on page %d
On page %d at right child:
On tree page %d cell %d:
unable to get the page. error code=%d
btreeInitPage() returns error code %d
Page %d:
Outstanding page count goes from %d to %d during this analysis
Pointer map page %d is referenced
Page %d is never used
INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
%s-mjX
unable to use function %s in the requested context
zeroblob(%d)
database %s is locked
cannot detach database %s
no such database: %s
no such collation sequence: %s
%s.%s
unknown database %s
bind on a busy prepared statement: [%s]
%.*s"%w"%s
%s%.*s"%w"
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
Cannot add a PRIMARY KEY column
automatic extension loading failed: %s
B}Tunable to close due to unfinished backup operation
d-d-d d:d:d
d:d:d
d-d-d
database schema is locked: %s
SELECTs to the left and right of %s do not have the same number of result columns
LIMIT clause should come after %s not before
ORDER BY clause should come after %s not before
INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'
SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'
SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0
PRAGMA vacuum_db.synchronous=OFF
cannot VACUUM - SQL statements in progress
BmTunknown database: %s
misuse of aggregate: %s()
indexed columns are not unique
PRIMARY KEY must be unique
%s.%s may not be NULL
no such vfs: %s
%s-shm
constraint failed at %d in [%s]
abort at %d in [%s]: %s
database table is locked: %s
cannot change %s wal mode from within a transaction
SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid
cannot commit transaction - SQL statements in progress
cannot rollback transaction - SQL statements in progress
cannot %s savepoint - SQL statements in progress
no such savepoint: %s
cannot open savepoint - SQL statements in progress
statement aborts at %d: [%s] %s
sqlite3_get_table() called with two or more incompatible queries
%s ORDER BY
%s VIRTUAL TABLE INDEX %d:%s
%s USING PRIMARY KEY
%s VIA MULTI-INDEX UNION
%s WITH INDEX %s
cannot use index: %s
%s WITH AUTOMATIC INDEX
%s AS %s
TABLE %s
at most %d tables in a join
SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid
unsupported file format
no such trigger: %S
unable to open database: %s
database %s is already in use
too many attached databases - max %d
sqlite_sequence
there is already an index named %s
DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
no such index: %S
unable to identify the object to be reindexed
no such table: %s
sqlite_subquery_%p_
cannot create INSTEAD OF trigger on table: %S
cannot create %s trigger on view: %S
cannot open value of type %s
cannot open %s column for writing
no such column: "%s"
cannot open view: %s
cannot open virtual table: %s
indexed
foreign key
sqlite_altertab_%s
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
CREATE%s INDEX %.*s
table %s has no column named %s
sqlite_autoindex_%s_%d
index %s already exists
there is already a table named %s
virtual tables may not be indexed
views may not be indexed
table %s may not be indexed
AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY
table "%s" has more than one primary key
CREATE TABLE %Q.sqlite_sequence(name,seq)
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
CREATE %s %.*s
view %s is circularly defined
table %S has no column named %s
%d values for %d columns
table %S has %d columns but %d values were supplied
*** in database %s ***
unsupported encoding: %s
foreign_key_list
no such column: %s
there is already another table or index with this name: %s
UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q
UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');
UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
view %s may not be altered
table %s may not be altered
-- TRIGGER %s
DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
DELETE FROM %s.sqlite_sequence WHERE name=%Q
use DROP VIEW to delete view %s
use DROP TABLE to delete table %s
table %s may not be dropped
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
E:\Work\SearchSuite\G13_Release\CGL\Libs\boost/exception/detail/exception_ptr.hpp
class std::basic_string,class std::allocator > __cdecl Tools::SystemTools::ReadStringFromRegistry(struct HKEY__ *,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &)
E:\Work\SearchSuite\G13_Release\CGL\Tools\SystemTools.cpp
void __cdecl Tools::SystemTools::WriteStringToRegistry(struct HKEY__ *,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &)
void __cdecl Tools::SystemTools::RemoveRegistryValue(struct HKEY__ *,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &)
unsigned long __cdecl Tools::SystemTools::GetMyExeName(class std::basic_string,class std::allocator > &)
E:\Work\SearchSuite\G13_Release\CGL\Tools\StringTools.cpp
E:\Work\SearchSuite\G13_Release\CGL\Tools\FileTools.cpp
keywords
SELECT value FROM meta WHERE key = 'version'
SELECT %s FROM keywords_backup ORDER BY id ASC
Not supported chrome db
CREATE TABLE %s AS SELECT %sFROM keywords ORDER BY id ASC
UPDATE meta SET value = ?WHERE key = 'Default Search Provider ID Backup Signature'
UPDATE meta SET value = %s WHERE key = 'Default Search Provider ID Backup'
UPDATE meta SET value = %s WHERE key = 'Default Search Provider ID'
E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Kipod\KipodTools\KipodTools.cpp
void __cdecl KipodTools::UpdateChromeBackupKeywordsTable(const class std::basic_string,class std::allocator > &)
DROP TABLE %s
select %s from %s where key = '%s';
select * from %s where %s = '%s';
update %s set %s = %d where key = '%s';
DELETE FROM keywords WHERE short_name = '%s';
INSERT INTO keywords (short_name, keyword, url, favicon_url, input_encodings, show_in_default_list, safe_for_autoreplace) VALUES ('%s', '%s', '%s', '', 'UTF-8', 1, 1);
SELECT active, userDisabled, appDisabled, softDisabled FROM addon WHERE id='%s'
UPDATE addon SET userDisabled='%s', appDisabled='%s', softDisabled='%s', active='%i' WHERE id='%s'
id || short_name || keyword || favicon_url || url || safe_for_autoreplace || originating_url || date_created || usage_count || input_encodings || show_in_default_list || suggest_url || prepopulate_id || autogenerate_keyword || logo_id || created_by_policy || instant_url || last_modified || sync_guid
id || short_name || keyword || favicon_url || url || safe_for_autoreplace || originating_url || date_created || usage_count || input_encodings || show_in_default_list || suggest_url || prepopulate_id || created_by_policy || instant_url || last_modified || sync_guid
id, short_name, keyword, favicon_url, url, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, show_in_default_list, suggest_url, prepopulate_id, autogenerate_keyword, logo_id, created_by_policy, instant_url, last_modified, sync_guid
id, short_name, keyword, favicon_url, url, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, show_in_default_list, suggest_url, prepopulate_id, created_by_policy, instant_url, last_modified, sync_guid
keywords_backup
E:\Work\SearchSuite\G13_Release\CGL\libs\boost/exception/detail/exception_ptr.hpp
e:\work\searchsuite\g13_release\searchsuite\client\kipodlogger\kipodlogger\SharedLogBuffer.hpp
{DB859B9F-5A74-439e-B1FA-1356ECBCF59A}
void __thiscall PTL::Interprocess::Event::Notify(const class std::basic_string,class std::allocator > &,bool)
E:\Work\SearchSuite\G13_Release\CGL\PTL/Observer/InterprocessEvent/InterprocessEvent.hpp
%d / %m / %y
%I : %M : %S %p
%m / %d / %y
%b %d %H : %M : %S %Y
unsupported version
asio.misc
asio.misc error
Open/Key
Service/Create, Path=%s, Reg=%s
Args=%s
../../../../CGL/Libs\boost/exception/detail/exception_ptr.hpp
IDdqdCtx/Connect, File=%s
Unsupported IDdqd version = 0x%x. Expected = 0x%x
IDdqd/Ctl Code = 0x%x
WStr::FromRsrc, ID=%u
%s*.%s
%s%u.%s
RegKey::%s %s, Access=0x%x
RegKey::%s %s
VMem/Alloc, Size=%u
HomoHeap/Init, Size=%u
HomoHeap/Alloc, Size=%u
Access violation. Address=0xX, access=%s
SEH Exception. Code=0xX, NumParams=%u, Addr=0xX
System error %u (0xX)
%s. Source=
[u/u/u u:u:u.u]
boost::too_few_args: format-string referred to more arguments than were passed
boost::too_many_args: format-string referred to less arguments than were passed
iddqd Protection Status = 0xX, Process=%u, Files=%u, Registry=%u
\Registry\Machine\System\ControlSetu\Services\%s
Cannot create HTTP request instance
Login to
Login request (not encrypted)
Login request (encrypted)
Update/patch exec timed out
Login successful, attempt to send stats to "
Url is empty, it means statistics will not be sent, but will be deleted
Exception in Login thread:
Unknown exception in Login thread
As I cannot login with url:
thread.entry_event
thread.exit_event
key does not exist. Attempt to create it
BrowserDefendert.job
BrowserDefender.job
BitGuard.job
Websteroids
bprotect.exe
browserprotect.exe
browserdefender.exe
bitguard.exe
bpsvc.exe
snapdo.exe
browsersafeguard.exe
protectedsearch.exe
stinst32.exe
stinst64.exe
searchprotection.exe
searchprotector.exe
searchsettings.exe
searchsettings64.exe
dprotectsvc.exe
utiljumpflip.exe
umbrella.exe
websteroids.exe
websteroidsservice.exe
RegOpenKeyTransactedW
E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Kipod\Coordinator\src\updateService\Statistic\CollectedItems.cpp
select url from keywords where short_name like '%s'
SQLite Error
E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Common\BrowserManagement\src\fire_fox.cpp
class std::vector,class std::allocator >,class std::allocator,class std::allocator > > > __cdecl `anonymous-namespace'::GetUrlList(const class std::basic_string,class std::allocator > &)
delete from engine_data where engineid = '%s';
update engine_data set value = '%s' where name = 'order' and value = '%s';
insert into engine_data (engineid, name, value) VALUES ('%s', 'order', '1');
DELETE FROM addon WHERE id='%s'
INSERT INTO addon (id, location, version, type, visible, active, userDisabled, appDisabled, pendingUninstall, descriptor, softDisabled) VALUES ('%s', 'app-profile', '%s', 'extension', 1, 1, 0, 0, 0, '%s', 0)
INSERT INTO addon (id, location, version, type, visible, active, userDisabled, appDisabled, pendingUninstall, descriptor) VALUES ('%s', 'app-profile', '%s', 'extension', 1, 1, 0, 0, 0, '%s')
unsupported exception
E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/string_path.hpp
Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag
E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/json_parser.hpp
E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/detail/json_parser_read.hpp
E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/detail/json_parser_write.hpp
E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/detail/ptree_implementation.hpp
update meta set value = %s where key = 'Default Search Provider ID';
SELECT * FROM keywords WHERE short_name = '%s' AND url = '%s';
E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Common\BrowserManagement\src\chrome.cpp
void __thiscall Chrome::UpdateChromeBackupKeywordsTable(const class std::basic_string,class std::allocator > &)
KeySize
: this object does't support a special last block
NullRNG: NullRNG should only be passed to functions that don't need to generate random bytes
: this object doesn't support multiple channels
is not a valid key length
%Y-%m-%d %H:%M:%S
UrlEscape failed
UrlEscape succeeded
CMD_LIST_SETTINGS called
CMD_LIST_FOLDERS called
CreateThread failed, GLE=%d.
%s/[d-d-d d_d_d]%s
Crash detected > attempt to %s address %x
Last Error: %d. %s
: this object doesn't support resynchronization
StreamTransformation: this object doesn't support random access
Boost.Variant internal error: 'which' out of range.
E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Kipod\Bin\Release\Coordinator.pdb
OLEAUT32.dll
RegCloseKey
ADVAPI32.dll
SHLWAPI.dll
WS2_32.dll
USER32.dll
GetProcessHeap
CreateIoCompletionPort
KERNEL32.dll
SHELL32.dll
ole32.dll
RegOpenKeyExW
RegCreateKeyExW
ReportEventW
RPCRT4.dll
SensApi.dll
WININET.dll
VERSION.dll
WTSAPI32.dll
GetCPInfo
ConnectNamedPipe
CreateNamedPipeW
DisconnectNamedPipe
WaitNamedPipeW
dbghelp.dll
PSAPI.DLL
ShellExecuteExW
SHFileOperationW
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyW
UrlEscapeW
USERENV.dll
PeekNamedPipe
Coordinator.exe
??0?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@QAE@XZ
??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ@51
??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@51
??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ@51
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ
?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ
?get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ
?get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@A
?instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@A
?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@A
?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@detail@34@A
?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@detail@34@A
?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@634@A
.?AVwindows_file_codecvt@@
zcÁ
.?AVCppSQLite3Query@@
.?AVCppSQLite3Table@@
.?AVCppSQLite3Statement@@
.?AVCppSQLite3DB@@
.?AV?$clone_impl@VFailedToOpenRegistryKeyException@SystemTools@Tools@@@exception_detail@boost@@
.?AVFailedToOpenRegistryKeyException@SystemTools@Tools@@
.?AV?$sp_counted_impl_p@VHolder@?$HoldPolicy@V?$HandlePolicy@PAUHKEY__@@$0A@P6GJPAU1@@Z$1?RegCloseKey@@YGJ0@ZVRegCloseKeyChecker@Tools@@VOpenRegPolicy@4@@HTL@PTL@@Vshared_ptr@boost@@@Fast@Detail@HTL@PTL@@@detail@boost@@
.PAUErrorTag@SystemTools@Tools@@
.PAUPathTag@ErrorInfo@FileTools@Tools@@
.PAUErrorCodeTag@ErrorInfo@StringTools@Tools@@
.PAUErrorCodeDescription@ErrorInfo@StringTools@Tools@@
.PAUOSErrorCodeTag@ErrorInfo@FileTools@Tools@@
.PAUDestinationDirectoryTag@ErrorInfo@FileTools@Tools@@
.PAUDestinationFileNameTag@ErrorInfo@FileTools@Tools@@
.PAUIllegalFileNameCharTag@ErrorInfo@FileTools@Tools@@
.PAUFileNamePrefixTag@ErrorInfo@FileTools@Tools@@
.PAUFileNameRootTag@ErrorInfo@FileTools@Tools@@
.PAUFileNameSuffixTag@ErrorInfo@FileTools@Tools@@
.PAUFileNameExtTag@ErrorInfo@FileTools@Tools@@
.?AV?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@detail@serialization@boost@@
.?AV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@
.?AV?$singleton_wrapper@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@detail@serialization@boost@@
.?AV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@
.?AV?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@
.?AV?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@
.?AVException@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@
.PAUMessageTag@ErrorInfo@KipodLogger@@
.PAUWhatTag@PTL@@
.?AV?$clone_impl@VException@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@exception_detail@boost@@
.?AV?$sp_counted_impl_p@Vwindows_shared_memory@interprocess@boost@@@detail@boost@@
.?AUwincert_x64_token@detail@protection@kipod@@
.?AUwincert_x86_token@detail@protection@kipod@@
.?AUapcrtldr_x86_token@detail@protection@kipod@@
.?AUapcrtldr_x64_token@detail@protection@kipod@@
.?AVOperaStatistic@KipodStatistic@@
.?AVChromeStatistic@KipodStatistic@@
.?AV?$_Ref_count_obj@VOperaStatistic@KipodStatistic@@@tr1@std@@
.?AV?$_Ref_count_obj@VChromeStatistic@KipodStatistic@@@tr1@std@@
.?AVCppSQLite3Exception@@
.?AV?$sp_counted_impl_pd@PAUdelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@U?$do_heap_delete@Udelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@@detail@3@@detail@boost@@
.?AV?$sp_counted_impl_p@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@detail@boost@@
.?AU?$concrete_parser@U?$alternative@V?$action@V?$chset@_W@classic@spirit@boost@@Ua_escape@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@V?$action@U?$uint_parser@K$0BA@$03$03@classic@spirit@boost@@Ua_unicode@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$alternative@V?$action@U?$difference@U?$difference@Uanychar_parser@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@Ua_char@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$positive@U?$contiguous@U?$confix_parser@U?$chlit@D@classic@spirit@boost@@U?$kleene_star@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@U1234@Uunary_parser_category@234@Unon_nested@234@Unon_lexeme@234@@classic@spirit@boost@@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$sequence@U?$optional@U?$chlit@D@classic@spirit@boost@@@classic@spirit@boost@@U?$alternative@U?$chlit@D@classic@spirit@boost@@U?$sequence@U?$range@_W@classic@spirit@boost@@U?$kleene_star@Udigit_parser@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$sequence@V?$chset@_W@classic@spirit@boost@@U?$optional@V?$chset@_W@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@Ua_name@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$chlit@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_s@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$alternative@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$list_parser@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@U?$chlit@D@234@Uno_list_endtoken@234@Uplain_parser_category@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$alternative@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@V1234@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Uend_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@
.?AUdelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@
.?AU?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@
.?AVFireFox@@
.?AVJsonParserExecption@Json@KipodTools@@
.?AU?$do_heap_delete@Udelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@@detail@boost@@
.?AVOpera@@
.?AVChrome@@
.?AUNoChannelSupport@BufferedTransformation@CryptoPP@@
.?AVInvalidKeyLength@CryptoPP@@
.PAVBufferedTransformation@CryptoPP@@
.PAVRandomNumberGenerator@CryptoPP@@
.?AVsettings_pipe_failed@@
.PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$VariableKeyLength@$0BA@$0BA@$0CA@$07$03$0A@@CryptoPP@@
.?AVSimpleKeyingInterface@CryptoPP@@
.?AV?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@
.?AV?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@
P
4(5.585_5
4%4x5
5&505:5~5
4-4}4
1,2024282<2
9 9$9(9,9094989
3 3$3(3,3034383<3@3
0%1s1
<&=5=&>8>
7ˆ8=8\8
?"?(?.?4?:?@?
; <:<[<}<
9):0:7:_:
6#6'6 6/6
7 7*777\7
(0,0004080<0
6$7(7,7074787
? ?$?(?,?0?4?8?5X5D5W5c5
;!<&5&656&757
:1:8:?:{:
0[1&:6:&;5;
6:7@7&959
= =$=(=,=0=4=8=\=
; <)<.<3<
8%9u9
0%1U1
7-8}8
2%3u3
3%4U4
: :$:(:,:0:4:8:<:
<$=(=,=0=4=8=<=@=
6,686\6|6
3(343<3\3
8$8,888\8|8
5 505<5`5
0$0,080\0|0
pKERNEL32.DLL
mscoree.dll
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
ADVAPI32.DLL
WUSER32.DLL
777705555443332
5555443332
5555443332
Software\Microsoft\Windows\CurrentVersion\Run
duser32.dll
%s\%s%X%X
\cmd.exe
Web Server Edition
%1%.%2%.%3%
\/:*?"<>|
^<>:"/\|?*
\\?\UNC\
FirefoxExtension
ChromeDS
FirefoxHomepage
FirefoxSE
FirefoxDE
FirefoxKeyword
ChromeStartPages
ChromeStartPages32
ChromeHomepage
ChromePrefs
Firefox/ProtectionEnabled
Chrome/ProtectionEnabled
ff_nt_supported
ie_ds_supported
ff_ds_supported
chrome_ds_supported
ie_hp_supported
ff_hp_supported
chrome_hp_supported
http://www.search.ask.com/?o=APN10646A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4
{9BB47C17-9C68-4BB3-B188-DD9AF0FD2#sysid#}
Ask.com
http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN10646&apn_ptnrs=AG7&q=
http://www.search.ask.com/suggest.php?src=ieb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN10646&apn_ptnrs=AG7&qu=
Firefox/Extension
http://dts.search.ask.com/sr?l=dis&o=APN10646&qsrc=2870&apn_dtid=BND#sysid#&apn_ptnrs=JZP2-DTX&apn_uid=#uid#&gct=dns&gc=1&appid=#appid#&sysid=#sysid#&sver=3&q=
{AD130C31-2032-4F53-BB70-0BA27FBC95FB}
http://dts.search.ask.com/sr?src=ffb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_dtid=BND#sysid#&apn_ptnrs=AG7&apn_uid=#uid#&o=APN10646&q=
http://www.search.ask.com?o=APN10646A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4&tag=newtab
http://dts.search.ask.com/sr?src=crb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN10646&apn_ptnrs=AG7&q=
\extensions.sqlite
\extensions.sqlite-journal
Chrome/DefaultSearch
DefaultUrl
DefaultKeyword
\Web Data
\Web Data-journal
Firefox/Homepage
Firefox/HomepageAsked
user_pref("browser.startup.homepage", "$(Value)");
user_pref\("browser\.startup\.homepage", "([^"]*)"\);
\prefs.js
Firefox/SelectedSearch
Firefox/SelectedSearchAsked
user_pref("browser.search.selectedEngine", "$(Value)");
user_pref\("browser\.search\.selectedEngine", "([^"]*)"\);
Firefox/DefaultSearch
Firefox/DefaultSearchAsked
user_pref("browser.search.defaultenginename", "$(Value)");
user_pref\("browser\.search\.defaultenginename", "([^"]*)"\);
Firefox/UrlbarSearch
Firefox/UrlbarSearchAsked
user_pref("keyword.URL", "$(Value)");
user_pref\("keyword\.URL", "([^"]*)"\);
FFUrlbar search
DefaultSuggestionUrl
Chrome/Homepage
backup.homepage
Chrome homepage
Chrome/StartPages
backup.session.urls_to_restore_on_startup
Chrome Start Page
session.urls_to_restore_on_startup
Chrome/StartPagesFrom32Version
backup.session.startup_urls
Chrome Start Page Since 32 version
session.startup_urls
Chrome
404Url
DNSUrl
SearchUrl
NewTabUrl
RelatedSearchUrl
Firefox/BHO
Error404URL
DNSErrorURL
SearchURL
Firefox/BHO/NativeHelper
Firefox/BHO/DnsBHO
Firefox/BHO/SearchBHO
Firefox/BHO/MainBHO
Firefox/BHO/Error404BHO
Firefox/BHO/NewTabBHO
Firefox/BHO/SessionRestore
SOFTWARE\Mozilla\Mozilla Firefox
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe
SOFTWARE\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}
Chrome.exe
http://
%d.%d.%d.%d
\profiles.ini
\Mozilla\Firefox\
\Google\Chrome\User Data\Default
chrome-extension://%1%/config/skin/new-tab.html
\ChromeExtension
IX
{B358EFE4-A25E-4fd6-A2CA-71081B7CDB47}_%1%
\\.\pipe\DatamngrPipe
backup.homepage_is_newtabpage
backup.browser.show_home_button
backup.session.restore_on_startup
backup.extensions.ids
lchrome.exe
\Google\Chrome\User Data\Default\Preferences
\Google\Chrome\User Data\
\Google\Chrome\User Data\Default\Web Data
search_url
"%1%" : "%2%"
chrome_url_overrides
chrome-extension://%1%/%2%
opera.exe
session.restore_on_startup
\Opera\Opera\operaprefs.ini
\Opera\operaprefs_default.ini
\Opera\Opera\search.ini
\Opera\locale\%1%\search.ini
\Opera\Opera\toolbar\standard_toolbar.ini
Home URL
\Opera\Opera\sessions\autosave.win
Search Panel Toolbar.content
firefox.exe
\Mozilla\Firefox
\search.json
\search.sqlite
\extensions.ini
user_pref("browser.startup.homepage", "
user_pref("browser.startup.page",
user_pref("browser.search.selectedEngine", "
user_pref("browser.search.defaultenginename", "
user_pref("browser.search.order.1", "
user_pref("keyword.URL", "
user_pref("general.useragent.extra.%1%", "
user_pref("%1%.Updater.Enabled", "
xmlns:G="http://a9.com/-/spec/opensearch/1.1/" xmlns:moz="http://www.mozilla.org/2006/browser/search/"
Url[@type='text/html']
windows
Software\Datamngr\Chrome\DS
Software\Datamngr\Files\ChromeHomepage
Software\Mozilla\Mozilla Firefox
http\shell\open\command
software\Microsoft\Windows\shell\associations\urlassociations\http\userchoice
Software\Opera Software
Opera.exe
Software\Microsoft\Windows\CurrentVersion\Ext\Settings
extensions.ini
\install.rdf
xmlns:G="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:em="http://www.mozilla.org/2004/em-rdf#"
firefox
chrome
opera
G:Url[@type='text/html']
coordinator.cfg
lDatamngr\mgrldr.dll
Datamngr\x64\mgrldr.dll
Datamngr\x64\apcrtldr.dll
Datamngr\apcrtldr.dll
lcoordinator.cfg
general.cfg
DatamngrUI.exe
Global\F473573F-4750-4AA6-B7B0-4595E7DEA3E2
setmgrc1.cfg
\\.\Global\F06DEFF2-5B9C-490D-910F-35D3A9119622setmgrc1
F06DEFF2-5B9C-490D-910F-35D3A9119622
{5A08D1A5-925A-401D-AFE3-8D61426B0E3E}
Service failed. %s
ucsrss.exe
lsass.exe
services.exe
svchost.exe
Starting Datamngr Coordinator Service, version 5.0.0.12521 built Sun Apr 6 16:48:50 2014
stats.cfg
firefox/homepage
firefox/selectedsearch
chrome/homepage
chrome/defaultsearch
%3%
WinHttp.WinHttpRequest.5.1
5.0.0.12521
application/x-www-form-urlencoded
login_request
/login_reply/properties/node()
/login_reply/auto_update/pack_url/node()
/login_reply/patch_update/patch/node()
target_statistics_url
.XML=
SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls
Wincert\win32cert.dll
Wincert\win64cert.dll
%s failed w/err 0xlx
hAdvapi32.dll
bandoobe.com
/login
http://preved.%s
t{1112c7f9-2d8b-4550-bf47-68ef2e02ff20}
{d48c9ead-f59f-4dea-ac97-7065fea79f42}
{af6ac4f2-9825-4fb6-a600-92bc5361f209}
{23cd218f-af09-443f-bbb1-adb89fd5986d}
{9a95b751-bf3e-4ea8-a938-2d4d84cd4964}
{99079a25-328f-4bd4-be04-00955acaa0a7}
{28387537-e3f9-4ed7-860c-11e69af4a8a0}
{b7b37500-99b4-46ad-8bf3-2480bcedc38c}
{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}
search.fantastigames.com
dts.search-results.com
www.gotsearch.com
www.insertsearch.com
www.mlsearch.com
www.searchsupreme.com
www.newsearchtab.com
www.adoresearch.com
www.searchsheet.com
www.searchqu.com
www.searchnu.com
www.searchcore.net
search.lphant.net
search.lphant.com
search.shareazaweb.com
search.shareazaweb.net
search.bearshare.net
search.bearshare.com
search.imesh.com
search.imesh.net
%1%.%2%.%3%.%4%
PathToExe
user_pref("extensions.lastAppVersion", "
user_pref("extensions.lastPlatformVersion", "
user_pref("extensions.extensions.databaseSchema",
%s|%d|%d|%d
backup.pinned_tabs
https
%d.%d
Hlogfile.txt
dwinlogon.exe
Msxml2.DOMDocument.3.0
E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Common\json_parser\JsonPropertyTreeParser.cpp
!valueName.empty()
e:\work\searchsuite\g13_release\searchsuite\client\common\json_parser\JsonPropertyTreeParser.h
E:\Work\SearchSuite\G13_Release\CGL\libs\boost/optional/optional.hpp
!value.empty()
!p.empty() && "Empty path not allowed for put_child."
.E:\Work\SearchSuite\G13_Release\CGL\libs\boost/variant/detail/visitation_impl.hpp
!"Boost.Variant internal error: 'which' out of range."
E:\Work\SearchSuite\G13_Release\CGL\libs\boost/variant/detail/forced_return.hpp
!"#$%&'()* ,
{BA74CC18-07CA-4BD2-B6DD-7231A3A6A8F3}
{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}
{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}
Assertion failed: %s, file %s, line %d
l{BA74CC18-07CA-4BD2-B6DD-7231A3A6A8F3}
%Program Files%\Music Toolbar\Datamngr\DatamngrCoordinator.exe
DatamngrCoordinator.exe

DatamngrCoordinator.exe_236_rwx_00030000_00001000:


%Program Files%\Music Toolbar\Datamngr\mgrldr.dll

DatamngrUI.exe_1016:


.text
`.rdata
@.data
.rsrc
@.reloc
8%uNP
tùX
SSSSh
3|$83|$0
3|$@3|$4
\$,3\$43
~$)~()|$
.QZ^&
.GFy,
8sqliu
u.VWhl
 2 34 567
T$DRSSh
xSSSh
FTPjKS
FtPj;S
C.PjRV
<%u7j
X<%u2j
CPPSQLITE_ERROR
SQLITE_DONE
SQLITE_ROW
SQLITE_RANGE
SQLITE_FORMAT
SQLITE_AUTH
SQLITE_NOLFS
SQLITE_MISUSE
SQLITE_MISMATCH
SQLITE_CONSTRAINT
SQLITE_TOOBIG
SQLITE_SCHEMA
SQLITE_EMPTY
SQLITE_PROTOCOL
SQLITE_CANTOPEN
SQLITE_FULL
SQLITE_NOTFOUND
SQLITE_CORRUPT
SQLITE_IOERR
SQLITE_INTERRUPT
SQLITE_READONLY
SQLITE_NOMEM
SQLITE_LOCKED
SQLITE_BUSY
SQLITE_ABORT
SQLITE_PERM
SQLITE_INTERNAL
SQLITE_ERROR
SQLITE_OK
%s[%d]: %s
select count(*) from sqlite_master where type='table' and name='%s'
large file support is disabled
SQL logic error or missing database
foreign_keys
sqlite_compileoption_get
sqlite_compileoption_used
sqlite_source_id
sqlite_version
sqlite_attach
sqlite_detach
sqlite_stat1
sqlite_rename_parent
sqlite_rename_trigger
sqlite_rename_table
RowKey
3.7.3
SQLite format 3
CREATE TABLE sqlite_master(
sql text
CREATE TEMP TABLE sqlite_temp_master(
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY
922337203685477580
SQLITE_
?API call with %s database connection pointer
%s\etilqs_
OsError 0x%x (%u)
2nd reference to page %d
invalid page number %d
%s(%d)
keyinfo(%d
%r %s BY term out of range - should be between 1 and %d
Expression tree is too large (maximum depth %d)
too many SQL variables
variable number must be between ?1 and ?%d
too many columns in %s
%s OR name=%Q
type='trigger' AND (%s)
SELECT tbl, idx, stat FROM %Q.sqlite_stat1
access to %s.%s.%s is prohibited
access to %s.%s is prohibited
object name reserved for internal use: %s
sqlite_
duplicate column name: %s
too many columns on %s
unknown column "%s" in foreign key definition
number of columns in foreign key does not match the number of columns in the referenced table
foreign key on %s should reference only one column of table %T
a JOIN clause is required before %s
cannot modify %s because it is a view
table %s may not be modified
foreign key mismatch
error during initialization: %s
no entry point [%s] in shared library [%s]
unable to open shared library [%s]
sqlite3_extension_init
unknown or unsupported join type: %T %T%s%T
RIGHT and FULL OUTER JOINs are not currently supported
%s:%d
no such index: %s
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
sqlite_master
sqlite_temp_master
vtable constructor did not declare schema: %s
vtable constructor failed: %s
no such module: %s
table %s: xBestIndex returned an invalid plan
database corruption at line %d of [%.10s]
misuse at line %d of [%.10s]
cannot open file at line %d of [%.10s]
failed to allocate %u bytes of memory
failed memory resize %u to %u bytes
Recovered %d frames from WAL file %s
foreign key constraint failed
DELETE FROM %Q.%s WHERE tbl=%Q
CREATE TABLE %Q.%s(%s)
%s %T cannot reference objects in database %s
default value of column [%s] is not constant
UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d
%s - %s
malformed database schema (%s)
cannot join using column %s - column not present in both tables
cannot have both ON and USING clauses in the same join
a NATURAL join may not have an ON or USING clause
%s: %s
%s: %s.%s
%s: %s.%s.%s
misuse of aliased aggregate %s
not authorized to use function: %s
too many terms in %s BY clause
invalid name: "%s"
Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)
Failed to read ptrmap key=%d
failed to get page %d
%d of %d pages missing from overflow list starting at %d
freelist leaf count too big on page %d
Fragmentation of %d bytes reported as %d on page %d
Multiple uses for byte %d of page %d
Corruption detected in cell %d on page %d
On page %d at right child:
On tree page %d cell %d:
unable to get the page. error code=%d
btreeInitPage() returns error code %d
Page %d:
Outstanding page count goes from %d to %d during this analysis
Pointer map page %d is referenced
Page %d is never used
INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
%s-mjX
unable to use function %s in the requested context
zeroblob(%d)
database %s is locked
cannot detach database %s
no such database: %s
no such collation sequence: %s
%s.%s
unknown database %s
bind on a busy prepared statement: [%s]
%.*s"%w"%s
%s%.*s"%w"
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
Cannot add a PRIMARY KEY column
automatic extension loading failed: %s
B}Tunable to close due to unfinished backup operation
d-d-d d:d:d
d:d:d
d-d-d
database schema is locked: %s
SELECTs to the left and right of %s do not have the same number of result columns
LIMIT clause should come after %s not before
ORDER BY clause should come after %s not before
INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'
SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'
SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0
PRAGMA vacuum_db.synchronous=OFF
cannot VACUUM - SQL statements in progress
BmTunknown database: %s
misuse of aggregate: %s()
indexed columns are not unique
PRIMARY KEY must be unique
%s.%s may not be NULL
no such vfs: %s
%s-shm
constraint failed at %d in [%s]
abort at %d in [%s]: %s
database table is locked: %s
cannot change %s wal mode from within a transaction
SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid
cannot commit transaction - SQL statements in progress
cannot rollback transaction - SQL statements in progress
cannot %s savepoint - SQL statements in progress
no such savepoint: %s
cannot open savepoint - SQL statements in progress
statement aborts at %d: [%s] %s
sqlite3_get_table() called with two or more incompatible queries
%s ORDER BY
%s VIRTUAL TABLE INDEX %d:%s
%s USING PRIMARY KEY
%s VIA MULTI-INDEX UNION
%s WITH INDEX %s
cannot use index: %s
%s WITH AUTOMATIC INDEX
%s AS %s
TABLE %s
at most %d tables in a join
SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid
unsupported file format
no such trigger: %S
unable to open database: %s
database %s is already in use
too many attached databases - max %d
sqlite_sequence
there is already an index named %s
DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
no such index: %S
unable to identify the object to be reindexed
no such table: %s
sqlite_subquery_%p_
cannot create INSTEAD OF trigger on table: %S
cannot create %s trigger on view: %S
cannot open value of type %s
cannot open %s column for writing
no such column: "%s"
cannot open view: %s
cannot open virtual table: %s
indexed
foreign key
sqlite_altertab_%s
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
CREATE%s INDEX %.*s
table %s has no column named %s
sqlite_autoindex_%s_%d
index %s already exists
there is already a table named %s
virtual tables may not be indexed
views may not be indexed
table %s may not be indexed
AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY
table "%s" has more than one primary key
CREATE TABLE %Q.sqlite_sequence(name,seq)
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
CREATE %s %.*s
view %s is circularly defined
table %S has no column named %s
%d values for %d columns
table %S has %d columns but %d values were supplied
*** in database %s ***
unsupported encoding: %s
foreign_key_list
no such column: %s
there is already another table or index with this name: %s
UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q
UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');
UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
view %s may not be altered
table %s may not be altered
-- TRIGGER %s
DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
DELETE FROM %s.sqlite_sequence WHERE name=%Q
use DROP VIEW to delete view %s
use DROP TABLE to delete table %s
table %s may not be dropped
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
E:\Work\SearchSuite\G13_Release\CGL\Libs\boost/exception/detail/exception_ptr.hpp
class std::basic_string,class std::allocator > __cdecl Tools::SystemTools::ReadStringFromRegistry(struct HKEY__ *,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &)
E:\Work\SearchSuite\G13_Release\CGL\Tools\SystemTools.cpp
void __cdecl Tools::SystemTools::WriteStringToRegistry(struct HKEY__ *,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &)
void __cdecl Tools::SystemTools::RemoveRegistryValue(struct HKEY__ *,const class std::basic_string,class std::allocator > &,const class std::basic_string,class std::allocator > &)
unsigned long __cdecl Tools::SystemTools::GetMyExeName(class std::basic_string,class std::allocator > &)
E:\Work\SearchSuite\G13_Release\CGL\Tools\StringTools.cpp
E:\Work\SearchSuite\G13_Release\CGL\Tools\FileTools.cpp
keywords
SELECT value FROM meta WHERE key = 'version'
SELECT %s FROM keywords_backup ORDER BY id ASC
Not supported chrome db
CREATE TABLE %s AS SELECT %sFROM keywords ORDER BY id ASC
UPDATE meta SET value = ?WHERE key = 'Default Search Provider ID Backup Signature'
UPDATE meta SET value = %s WHERE key = 'Default Search Provider ID Backup'
UPDATE meta SET value = %s WHERE key = 'Default Search Provider ID'
E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Kipod\KipodTools\KipodTools.cpp
void __cdecl KipodTools::UpdateChromeBackupKeywordsTable(const class std::basic_string,class std::allocator > &)
DROP TABLE %s
select %s from %s where key = '%s';
select * from %s where %s = '%s';
update %s set %s = %d where key = '%s';
DELETE FROM keywords WHERE short_name = '%s';
INSERT INTO keywords (short_name, keyword, url, favicon_url, input_encodings, show_in_default_list, safe_for_autoreplace) VALUES ('%s', '%s', '%s', '', 'UTF-8', 1, 1);
SELECT active, userDisabled, appDisabled, softDisabled FROM addon WHERE id='%s'
UPDATE addon SET userDisabled='%s', appDisabled='%s', softDisabled='%s', active='%i' WHERE id='%s'
id || short_name || keyword || favicon_url || url || safe_for_autoreplace || originating_url || date_created || usage_count || input_encodings || show_in_default_list || suggest_url || prepopulate_id || autogenerate_keyword || logo_id || created_by_policy || instant_url || last_modified || sync_guid
id || short_name || keyword || favicon_url || url || safe_for_autoreplace || originating_url || date_created || usage_count || input_encodings || show_in_default_list || suggest_url || prepopulate_id || created_by_policy || instant_url || last_modified || sync_guid
id, short_name, keyword, favicon_url, url, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, show_in_default_list, suggest_url, prepopulate_id, autogenerate_keyword, logo_id, created_by_policy, instant_url, last_modified, sync_guid
id, short_name, keyword, favicon_url, url, safe_for_autoreplace, originating_url, date_created, usage_count, input_encodings, show_in_default_list, suggest_url, prepopulate_id, created_by_policy, instant_url, last_modified, sync_guid
keywords_backup
E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Kipod\KipodTools\IETools.cpp
bool __cdecl KipodTools::IETools::`anonymous-namespace'::UnlockKey(struct HKEY__ *)
bool __cdecl KipodTools::IETools::`anonymous-namespace'::LockKey(struct HKEY__ *)
Only Internet Explorer code should write this user setting. See http://go.microsoft.com/fwlink/?LinkId=159651 for more details.
WTSAPI32.dll
E:\Work\SearchSuite\G13_Release\CGL\libs\boost/exception/detail/exception_ptr.hpp
E:\Work\SearchSuite\G13_Release\CGL\PTL/Observer/InterprocessEvent/InterprocessEvent.hpp
boost::filesystem::directory_iterator::operator  
kernel32.dll
Can't terminate a sub-expression with an alternation operator |.
A regular expression can start with the alternation operator |.
Alternation operators are not allowed inside a DEFINE block.
More than one alternation operator | was encountered inside a conditional expression.
A repetition operator cannot be applied to a zero-width assertion.
Invalid alternation operators within (?...) block.
The \c and \C escape sequences are not supported by POSIX basic regular expressions: try the Perl syntax instead.
Found a closing repetition operator } with no corresponding {.
The repeat operator " " cannot start a regular expression.
The repeat operator "?" cannot start a regular expression.
The repeat operator "*" cannot start a regular expression.
right-curly-bracket
left-curly-bracket
0123456789
Unmatched quantified repeat operator { or \{.
Invalid preceding regular expression prior to repetition operator.
unsupported version
Visual C   CRT: Not enough memory to complete call to strerror.
GetProcessWindowStation
Broken pipe
Inappropriate I/O control operation
Operation not permitted
portuguese-brazilian
operator
%d / %m / %y
%I : %M : %S %p
%m / %d / %y
%b %d %H : %M : %S %Y
backup.homepage
backup.homepage_is_newtabpage
backup.browser.show_home_button
backup.session.restore_on_startup
backup.session.urls_to_restore_on_startup
backup.extensions.ids
RegOpenKeyTransactedW
RegCreateKeyTransactedW
RegDeleteKeyTransactedW
RegDeleteKeyExW
unsupported exception
../../../../CGL/Libs\boost/property_tree_typed/string_path.hpp
Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag
../../../../CGL/Libs\boost/property_tree_typed/json_parser.hpp
../../../../CGL/Libs\boost/property_tree_typed/detail/json_parser_read.hpp
../../../../CGL/Libs\boost/property_tree_typed/detail/json_parser_write.hpp
../../../../CGL/Libs\boost/property_tree_typed/detail/ptree_implementation.hpp
%s|%d|%d|%d
backup.pinned_tabs
boost::too_few_args: format-string referred to more arguments than were passed
boost::too_many_args: format-string referred to less arguments than were passed
SELECT internal_id FROM addon WHERE id='%s'
INSERT INTO addon (id, location, type, visible, active, userDisabled, appDisabled, descriptor, softDisabled, pendingUninstall) VALUES ('%s', 'app-profile', 'extension', 1, 1, 0, 0, '%s', 0, 0)
UPDATE addon SET userDisabled='%i', appDisabled='%i', softDisabled='%i', active='%i' WHERE id='%s'
e:\work\searchsuite\g13_release\searchsuite\client\kipodlogger\kipodlogger\SharedLogBuffer.hpp
{DB859B9F-5A74-439e-B1FA-1356ECBCF59A}
../../../../CGL\PTL/Observer/InterprocessEvent/InterprocessEvent.hpp
void __thiscall PTL::Interprocess::Event::Notify(const class std::basic_string,class std::allocator > &,bool)
../../../../CGL/Libs\boost/exception/detail/exception_ptr.hpp
E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Kipod\KipodUI\KipodUI\Protector\KeyProtect.cpp
class std::basic_string,class std::allocator > __thiscall ProtectKeyInfo::GetDisplayRealValue(void) const
yahoo.com
ask.com
imesh web search
.default-search.net
.search-results.com
.search.ask.com
.unthreat.com
.fantastigames.com
.gotsearch.com
.insertsearch.com
.mlsearch.com
.searchsupreme.com
.newsearchtab.com
.adoresearch.com
.searchsheet.com
.searchqu.com
.searchnu.com
.searchcore.net
.lphant.net
.lphant.com
.shareazaweb.com
.shareazaweb.net
.bearshare.net
.bearshare.com
.imesh.com
.imesh.net
KeySize
: this object does't support a special last block
NullRNG: NullRNG should only be passed to functions that don't need to generate random bytes
: this object doesn't support multiple channels
is not a valid key length
E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/detail/ptree_implementation.hpp
E:\Work\SearchSuite\G13_Release\CGL\libs\boost/property_tree_typed/string_path.hpp
Boost.Variant internal error: 'which' out of range.
%Y-%m-%d %H:%M:%S
UrlEscape failed
UrlEscape succeeded
E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Kipod\Bin\Release\DataMngrUI.pdb
GetProcessHeap
KERNEL32.dll
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
USER32.dll
GDI32.dll
RegDeleteKeyW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegNotifyChangeKeyValue
RegEnumKeyW
ADVAPI32.dll
SHELL32.dll
ole32.dll
OLEAUT32.dll
SensApi.dll
WININET.dll
VERSION.dll
ImageGetCertificateData
CertGetCertificateContextProperty
ImageEnumerateCertificates
CertGetNameStringW
CertFreeCertificateContext
CRYPT32.dll
imagehlp.dll
UrlIsW
UrlEscapeW
SHLWAPI.dll
COMCTL32.dll
USERENV.dll
WaitNamedPipeW
GetCPInfo
PeekNamedPipe
RegOpenKeyW
ShellExecuteExW
SHFileOperationW
DataMngrUI.exe
??0?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@QAE@XZ
??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ@51
??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@51
??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ@51
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ
?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ
?get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@XZ
?get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@23@A
?instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@A
?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@3@A
?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@detail@34@A
?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@detail@34@A
?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@634@A
.?AVCppSQLite3Query@@
.?AVCppSQLite3Table@@
.?AVCppSQLite3Statement@@
.?AVCppSQLite3DB@@
.?AV?$clone_impl@VFailedToOpenRegistryKeyException@SystemTools@Tools@@@exception_detail@boost@@
.?AVFailedToOpenRegistryKeyException@SystemTools@Tools@@
.PAUErrorTag@SystemTools@Tools@@
.PAUPathTag@ErrorInfo@FileTools@Tools@@
.PAUErrorCodeTag@ErrorInfo@StringTools@Tools@@
.PAUErrorCodeDescription@ErrorInfo@StringTools@Tools@@
.PAUOSErrorCodeTag@ErrorInfo@FileTools@Tools@@
.PAUDestinationDirectoryTag@ErrorInfo@FileTools@Tools@@
.PAUDestinationFileNameTag@ErrorInfo@FileTools@Tools@@
.PAUIllegalFileNameCharTag@ErrorInfo@FileTools@Tools@@
.PAUFileNamePrefixTag@ErrorInfo@FileTools@Tools@@
.PAUFileNameRootTag@ErrorInfo@FileTools@Tools@@
.PAUFileNameSuffixTag@ErrorInfo@FileTools@Tools@@
.PAUFileNameExtTag@ErrorInfo@FileTools@Tools@@
.?AV?$sp_counted_impl_p@VHolder@?$HoldPolicy@V?$HandlePolicy@PBU_CERT_CONTEXT@@$0A@P6GHPBU1@@Z$1?CertFreeCertificateContext@@YGH0@ZVCloseResultPolicy@Default@HTL@PTL@@VCreatePolicy@456@@HTL@PTL@@Vshared_ptr@boost@@@Fast@Detail@HTL@PTL@@@detail@boost@@
.PAUMessageTag@ErrorInfo@@
.?AVwindows_file_codecvt@@
zcÁ
.?AV?$sp_counted_impl_pd@PAUdelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@U?$do_heap_delete@Udelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@@detail@3@@detail@boost@@
.?AV?$sp_counted_impl_p@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@detail@boost@@
.?AU?$concrete_parser@U?$alternative@V?$action@V?$chset@_W@classic@spirit@boost@@Ua_escape@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@V?$action@U?$uint_parser@K$0BA@$03$03@classic@spirit@boost@@Ua_unicode@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$alternative@V?$action@U?$difference@U?$difference@Uanychar_parser@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@Ua_char@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$positive@U?$contiguous@U?$confix_parser@U?$chlit@D@classic@spirit@boost@@U?$kleene_star@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@U1234@Uunary_parser_category@234@Unon_nested@234@Unon_lexeme@234@@classic@spirit@boost@@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$sequence@U?$optional@U?$chlit@D@classic@spirit@boost@@@classic@spirit@boost@@U?$alternative@U?$chlit@D@classic@spirit@boost@@U?$sequence@U?$range@_W@classic@spirit@boost@@U?$kleene_star@Udigit_parser@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$sequence@V?$chset@_W@classic@spirit@boost@@U?$optional@V?$chset@_W@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@Ua_name@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$chlit@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_s@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$alternative@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$list_parser@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@U?$chlit@D@234@Uno_list_endtoken@234@Uplain_parser_category@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$alternative@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@V1234@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Uend_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@
.?AUdelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@
.?AU?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@
.?AVJsonParserExecption@Json@KipodTools@@
.?AU?$do_heap_delete@Udelete_data@?$thread_specific_ptr@V?$weak_ptr@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@boost@@@boost@@@detail@boost@@
.?AVCppSQLite3Exception@@
.?AV?$singleton_wrapper@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@detail@serialization@boost@@
.?AV?$singleton@V?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@@serialization@boost@@
.?AV?$extended_type_info_typeid@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@serialization@boost@@
.?AV?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@@detail@serialization@boost@@
.?AV?$oserializer@Vbinary_oarchive@archive@boost@@V?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@detail@archive@boost@@
.?AV?$sp_counted_impl_p@Vwindows_shared_memory@interprocess@boost@@@detail@boost@@
.PAUMessageTag@ErrorInfo@KipodLogger@@
.PAUWhatTag@PTL@@
.?AV?$clone_impl@VException@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@@exception_detail@boost@@
.?AVException@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@
.?AV?$Event@VNewLogEvent@KipodLogger@@$0A@@?$Interprocess@UInterprocessName@KipodLogger@@Vwindows_shared_memory@interprocess@boost@@VEmptyErrorPolicy@PTL@@ULowIntegrityLevelAccessPolicy@2@@PTL@@
.?AVProtectChromeDBInfo@@
.?AVProtectKeyInfo@@
.?AV?$sp_counted_impl_p@VHolder@?$HoldPolicy@V?$HandlePolicy@PAUHKEY__@@$0A@P6GJPAU1@@Z$1?RegCloseKey@@YGJ0@ZVRegCloseKeyChecker@Tools@@VOpenRegPolicy@4@@HTL@PTL@@Vshared_ptr@boost@@@Fast@Detail@HTL@PTL@@@detail@boost@@
.?AV?$_Ref_count@V?$ProtectedValues@VUrlLess@Protection@KipodTools@@_W@Protection@KipodTools@@@tr1@std@@
.?AV?$ProtectedValues@VUrlLess@Protection@KipodTools@@_W@Protection@KipodTools@@
.?AV?$sp_counted_impl_p@VProtectKeyInfo@@@detail@boost@@
.?AV?$sp_counted_impl_p@VProtectChromeDBInfo@@@detail@boost@@
.?AUNoChannelSupport@BufferedTransformation@CryptoPP@@
.?AVInvalidKeyLength@CryptoPP@@
.PAVBufferedTransformation@CryptoPP@@
.PAVRandomNumberGenerator@CryptoPP@@
.?AVsettings_pipe_failed@@
.PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
3 4-434:4
6$71777>7
1024282<2
:$:(:,:0:
5%5s5
3<4N4
9%9X9
> >$>(>,>0>
5|6=7\7{7
2)2/262=2
7"7'7-71777;7
88l8
6%6s6
1!1(1?1}1
=#=/=9=[=
< <$<(<,<
3 3$3(3,303
01080?0{0
: ;);.;3;
&050&191
9 9%9*9/949^9
4!4&4 40454:4?4]4
13u3
13R3
> >$>(>,>0>4>8>
64787<7@7
80;=; <-<
?'?/?8???
1"3.34393?3
8"8)8.8<8
4$5)565@5[5
6%7S7
5%6U6
5-6}6
1 1$1(1,1014181<1@1
: :$:(:,:0:4:8:<:
5 5$5(5,5054585
> >$>(>,>0>$?(?0?4?8??,?8?@?`?
0$0,080\0|0
= =<=@=`=
7$8<8\8|8
777705555443332
5555443332
5555443332
Software\Microsoft\Windows\CurrentVersion\Run
duser32.dll
%s\%s%X%X
\cmd.exe
Web Server Edition
%1%.%2%.%3%
\/:*?"<>|
\\?\UNC\
SOFTWARE\Mozilla\Mozilla Firefox
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe
SOFTWARE\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}
Chrome.exe
http://
%d.%d.%d.%d
\profiles.ini
\Mozilla\Firefox\
\Google\Chrome\User Data\Default
chrome-extension://%1%/config/skin/new-tab.html
\ChromeExtension
NX
FirefoxExtension
ChromeDS
FirefoxHomepage
FirefoxSE
FirefoxDE
FirefoxKeyword
ChromeStartPages
ChromeStartPages32
ChromeHomepage
ChromePrefs
Firefox/ProtectionEnabled
Chrome/ProtectionEnabled
ff_nt_supported
ie_ds_supported
ff_ds_supported
chrome_ds_supported
ie_hp_supported
ff_hp_supported
chrome_hp_supported
http://www.search.ask.com/?o=APN10646A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4
{9BB47C17-9C68-4BB3-B188-DD9AF0FD2#sysid#}
Ask.com
http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN10646&apn_ptnrs=AG7&q=
http://www.search.ask.com/suggest.php?src=ieb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN10646&apn_ptnrs=AG7&qu=
Firefox/Extension
http://dts.search.ask.com/sr?l=dis&o=APN10646&qsrc=2870&apn_dtid=BND#sysid#&apn_ptnrs=JZP2-DTX&apn_uid=#uid#&gct=dns&gc=1&appid=#appid#&sysid=#sysid#&sver=3&q=
{AD130C31-2032-4F53-BB70-0BA27FBC95FB}
http://dts.search.ask.com/sr?src=ffb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_dtid=BND#sysid#&apn_ptnrs=AG7&apn_uid=#uid#&o=APN10646&q=
http://www.search.ask.com?o=APN10646A&gct=hp&d=#sysid#-#appid#&v=#ptype##kbn#-#uc#&t=4&tag=newtab
http://dts.search.ask.com/sr?src=crb&gct=ds&appid=#appid#&systemid=#sysid#&v=#ptype##kbn#-#uc#&apn_uid=#uid#&apn_dtid=BND#sysid#&o=APN10646&apn_ptnrs=AG7&q=
\extensions.sqlite
\extensions.sqlite-journal
Chrome/DefaultSearch
DefaultUrl
DefaultKeyword
\Web Data
\Web Data-journal
Firefox/Homepage
Firefox/HomepageAsked
user_pref("browser.startup.homepage", "$(Value)");
user_pref\("browser\.startup\.homepage", "([^"]*)"\);
\prefs.js
Firefox/SelectedSearch
Firefox/SelectedSearchAsked
user_pref("browser.search.selectedEngine", "$(Value)");
user_pref\("browser\.search\.selectedEngine", "([^"]*)"\);
Firefox/DefaultSearch
Firefox/DefaultSearchAsked
user_pref("browser.search.defaultenginename", "$(Value)");
user_pref\("browser\.search\.defaultenginename", "([^"]*)"\);
Firefox/UrlbarSearch
Firefox/UrlbarSearchAsked
user_pref("keyword.URL", "$(Value)");
user_pref\("keyword\.URL", "([^"]*)"\);
FFUrlbar search
DefaultSuggestionUrl
Chrome/Homepage
Chrome homepage
Chrome/StartPages
Chrome Start Page
session.urls_to_restore_on_startup
Chrome/StartPagesFrom32Version
backup.session.startup_urls
Chrome Start Page Since 32 version
session.startup_urls
Chrome
404Url
DNSUrl
SearchUrl
NewTabUrl
RelatedSearchUrl
Firefox/BHO
Error404URL
DNSErrorURL
SearchURL
Firefox/BHO/NativeHelper
Firefox/BHO/DnsBHO
Firefox/BHO/SearchBHO
Firefox/BHO/MainBHO
Firefox/BHO/Error404BHO
Firefox/BHO/NewTabBHO
Firefox/BHO/SessionRestore
Cannot open key
Cannot unlock key
Cannot open key for writing
Cannot set key value
Cannot lock key
Cannot delete key value
{B358EFE4-A25E-4fd6-A2CA-71081B7CDB47}_%1%
mscoree.dll
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
nKERNEL32.DLL
WUSER32.DLL
ADVAPI32.DLL
dHKEY_CURRENT_CONFIG
HKEY_DYN_DATA
HKEY_PERFORMANCE_DATA
HKEY_USERS
HKEY_LOCAL_MACHINE
HKEY_CURRENT_USER
HKEY_CLASSES_ROOT
i\\.\pipe\DatamngrPipe
software\Web Assistant\script_storage
software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\%1%\Software\Web Assistant
{5727BA47-5FC5-44ab-B609-C0970CF15406}
{F13AD5CD-5344-4c96-B8FD-F6C662E1927B}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings
DependentKey
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser
{2BD27A59-BA73-4145-81D5-CD090A36362A}
\Mozilla\Firefox
{6605194A-B02B-410a-9635-8A05D1C54AD2}
{9A3EF80D-A921-4ade-B08F-881B935E6E11}
{B9807B0E-54B5-4B8A-AB51-A450A8FA6572}
Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
{553E964D-8917-4D72-9D31-0456205A6BAF}L
{553E964D-8917-4D72-9D31-0456205A6BAF}R
Software\Mozilla\Mozilla Firefox
{7E27AA6B-B0FB-451E-8270-5488F8F09AC9}L
{7E27AA6B-B0FB-451E-8270-5488F8F09AC9}R
extensions.settings
\Google\Chrome\User Data\Default\Preferences
i{6326CE8F-6752-47CF-B20A-A0CF21154981}
Cannot create mutex to control KipodUI instance, error with code %d
@Advapi32.dll
https
Init %s
Current value changed to %s
%s: failed to get current value
\StringFileInfo\xx\CompanyName
Cannot get wow keys
Riched20.dll
Received event: kn - %s, nv - %s, size - %i
%s: set enabled %i
ILoad in %s
Load vn %s
Load ii %s
Opera
FireFox
Enable %i for %s
IVBoxHook.dll
\\.\VBoxMiniRdrDN
Changes for %s
E:\Work\SearchSuite\G13_Release\SearchSuite\Client\Common\json_parser\JsonPropertyTreeParser.cpp
!valueName.empty()
e:\work\searchsuite\g13_release\searchsuite\client\common\json_parser\JsonPropertyTreeParser.h
E:\Work\SearchSuite\G13_Release\CGL\libs\boost/optional/optional.hpp
!value.empty()
!p.empty() && "Empty path not allowed for put_child."
E:\Work\SearchSuite\G13_Release\CGL\libs\boost/variant/detail/visitation_impl.hpp
!"Boost.Variant internal error: 'which' out of range."
E:\Work\SearchSuite\G13_Release\CGL\libs\boost/variant/detail/forced_return.hpp
%d.%d
logfile.txt
!"#$%&'()* ,
{BA74CC18-07CA-4BD2-B6DD-7231A3A6A8F3}
{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}
{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}
Assertion failed: %s, file %s, line %d
o{BA74CC18-07CA-4BD2-B6DD-7231A3A6A8F3}
j{BA74CC18-07CA-4BD2-B6DD-7231A3A6A8F3}
%Program Files%\Music Toolbar\Datamngr\DatamngrUI.exe
Display the new toolbarMMusic Toolbar has detected an attempt to change your browser homepage settingJThis setting controls the website you see each time you open your browser.
%1%aMusic Toolbar has detected an attempt to change your default search and browser homepage settingsrThese settings control the website you see each time you open your browser and the searches made via your browser.
gMusic Toolbar protects your homepage setting from being automatically changed by different applications(Enable Music Toolbar homepage protectionmMusic Toolbar protects your default search setting from being automatically changed by different applications.Enable Music Toolbar default search protectionCMusic Toolbar protects your browser from enabling unwanted toolbars'Enable Music Toolbar toolbar protection{Music Toolbar protects your homepage and default search settings from being automatically changed by different applications;Enable Music Toolbar homepage and default search protectionSMusic Toolbar has blocked an attempt by
add a new add-on or extension to your browser4Enable Music Toolbar Add-on or Extensions protectionOMusic Toolbar protects your browser from enabling unwanted Add-on or Extensions$Display the new Add-on or Extensions Do not display the new Add-on or Extensions\An Add-on/Extension is a piece of software which is added into another software application.YMusic Toolbar has detected an attempt to enable a new Add-on or Extension on your browserFMusic Toolbar has blocked an attempt to
add a new extension to FirefoxMMusic Toolbar has blocked an attempt to
add a new add-on or extension to Chrome Distributed by Bandoo Media Inc.
5.0.0.12521
DatamngrUI.exe

explorer.exe_1216:


.text
`.data
.rsrc
@.reloc
ADVAPI32.dll
BROWSEUI.dll
GDI32.dll
KERNEL32.dll
NTDLL.DLL
msvcrt.dll
ole32.dll
OLEAUT32.dll
SHDOCVW.dll
SHELL32.dll
SHLWAPI.dll
USER32.dll
UxTheme.dll
FTSSh
t0SSh
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
SShwk
98~%SP
ExplorerStartMsgLoop
PSSh;
6SSSSh
SSSSh
SPSSSShL
u%SSh
t.WWWW
xpsp2res.dll
xpsp3res.dll
tbSSh
Software\Microsoft\Windows\CurrentVersion\Explorer\StartMenu\StartMenu
Software\Microsoft\Windows\CurrentVersion\Explorer\StartMenu\StartPanel
kernel32.dll
GetSystemWindowsDirectoryW
NetGetJoinInformation
WINMM.dll
SETUPAPI.dll
WINSTA.dll
OLEACC.dll
USERENV.dll
ntdll.dll
RegEnumKeyExW
RegNotifyChangeKeyValue
RegOpenKeyExA
RegEnumKeyW
RegCloseKey
RegCreateKeyW
RegQueryInfoKeyW
RegOpenKeyExW
RegCreateKeyExW
OffsetViewportOrgEx
GetViewportOrgEx
SetViewportOrgEx
SetProcessShutdownParameters
GetProcessHeap
GetWindowsDirectoryW
CreateIoCompletionPort
ShellExecuteExW
SHRegCloseUSKey
SHRegCreateUSKeyW
AssocQueryKeyW
SHRegOpenUSKeyW
SHDeleteKeyW
TileWindows
ExitWindowsEx
RegisterHotKey
UnregisterHotKey
EnumChildWindows
GetKeyState
GetAsyncKeyState
CascadeWindows
MsgWaitForMultipleObjects
EnumWindows
explorer.pdb
name="Microsoft.Windows.Shell.explorer"
version="5.1.0.0"
Windows Shell
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
publicKeyToken="6595b64144ccf1df"
]]"```^]]\
3333333330
3333330
333333334
)@.   '5 !*
.DEHHF>?/
2<===@@=
&$%Uooqkezs
['$$#%&(4
3333333333333333333
33333333333330
7'''')) 
3'')))33.
222`444(555
%%%{///-
000000000
00000000
`[66...00
0000000
`]66./.000
/./././././././.
66///0000
0000000000000
0000000000
6666,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,0.010.010.010.010.010.010.010.010.010.010.001
4366666666K,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6.010.010.010.010.010.010.010.010.010.010.000
:;<;:;<;:;<;:;<;:;<0
)   )   )   )   )
|2222'2'2'2'2'2'2'2'2'2'2'2'2'2'2'2',),),),),),),),),),),),),),),),),),),),),),, 
22222222222
3333333
.SB99;;;99twv}ut{oxt~
.SB;;;:::2:w}{{qddgghg
" """ """ """ """ "" #
""" """ """ "#
.SG>''';;9::p
:5:5:5:5:5:5:5:5:5:5#"
# # # # # # # # # # # # # # # # # # # # # ##$
( # # # # # # # # # # # # # # # # # # # # ###
1232123212321232123
(&(((&(((&(((&(((&((&&)
&(((&(((&(((&()
`,''')))
'4,4'4,4'4,4'4,4'4,4)(
55///0000
5555-5-5-5-5-5-5-5-5-5-5-5-5-5-5-5-0
555555555
55555555
5555555
14441444144414441
4343434343434343
5555555555555
5555555555
-,-,-,-,-,-,-,-,-,-,-*.
..............................JFJFJFJFJFJFJFJFJFJFJ.-
{22*2*2*2*2*2*2*2*2*2*2*2*2*2*2*2*.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-../
|ujjjjuhF..BBBBBBBBBBBBT
~j|F.BB*BBB*BBB*Bwop
&!!!&!!!&
44466666
44444444416
4446666
66666666
|= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= 
|= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= |= 
DDDDE%CTDD@
A%US$
%UUUU
%%UUU
33U
""2222!!
!"!"%UUR""
!""!"#2"""
"!!"#3"!"
dnnnnn:n.nfCnmddddd
////;/;;88
;888;;!/
!//!!;;^
:;:!::!!!
.88.88.8
.N.NN.M
::8.8...
:::!;;:!
//!!;888
.8.8.88...
:;!::!!;!//!;
!!;:!!::
.88..8..
!!:::/^!
!;/;!;;;!!!:
.8:!!!!^
!!:;:::..
/:!^^!;{8{../
...:::.-
**6***66*6**6566*5666 ,
6*6666*6*6 655*65
6*65 56*5 55  555 *5  6
555( 55 (5 5(  
76 5   66  555*677
6*6 5 5(5 (55( '5((5 (556 ('5
665**6(('S((((((S(((]('((@('SS((S(((((((6C-.NEC66S5sU
555(555(5((5(5(5(
5 5 5 5555 (555(555'(((5(5('55(((
((''('5'5(5('('('('('((''('(((@(((('&(((&
%&&%&&&&3>&3&3&33&3&3333&&3>3333
'(3&'&3&
3&33&&((
3323>33>%>3%>3>33>3%3&%
*5'(('((&@3(
,63%3>323>3%>&>33323>>%>
3(3'(((@@'5('@(@(&('(
>2>323%>3
75((((@3&333&3&&&%&3&&3&33>33%3>23%>3
>2%$32%>2>%>2$3>
3&%&&3&33>3>33
3>%>3%&3$23>23$2>2%$>2>
)4433((&(&('*
('((((''(**6(('' *
32323>3>
2$%>22%>%3' (
&(&''((5(5 *
'(&(&((&('''
&&%&3&&%3%
2%>22>22
5''3(((3(('&(&'&
3%%3%3%2#$
22$22$2%$22$2%2%$2%$2$222%$22
&>2$2$2$222$22$%%
:7'((('(3('(3(&(&
222222222222
22222222222222
222222222222222
22$22$22$22$
&(%3%&&&&3&&&3%3
222222222222222222
&&(&3(&(&'('((3'(&&
2222222
22$<$$2$22$%
&&(3(3('(&'
222"2212
22<2<22"
(&(3(3((
((565 ((( 6
333&33(&&
'(('('(('( 
 '&%%"$
2"2"22"2
2222<2"222
"2"22<2<22
2%('(3'32222?&'
2"2"2"121212<
2"2"2$"?
%%22%2
&3(3(3((&
"2"<"2<2<
<2<"<"<"<
1"?((&21
2%""22&&
2<2$$2222
'&('(3(''
((%%%"
5(3%"%
"2%5*67
))) ))))
""**<****"""
"*<<<<*"
#2#---2222-222442-
--&#-(-%
$/222(--444222!
#&-221269924999;
&$-22-($2%
#(2---222622212-
#2221299629968
#&--%#(2##!
-222422422426662-%
"2-##&
!##-#&#-&&#%---#---#&-219662%
$&-(151,44.9
&1242662-
-(..19.19
,4492.12
12-$-,-,
-, $$----
#%#-15/-&
-,(,,(,(,
$$11651566/,$&&
,2592&&&-
2466/!$$
""*<*"****""
) '????[
&&&$-556>>61,,5994511-
$(//$$$(6>6/,$,-$
#$-22692/,,$,-&
-266661..4514#
&,2-&&##
&-222,22--#
#&&---2-,-&$&(,,291.566..BNNNTNNNNNAABIAA88
&!#&!-##
&#--//11468>885882&
$266961$&--$&%
,1661,!-((#
&$,4255$,92
&$,44..&
""**""***""
"****<*<<**"
"**""""*""""
&-569./-,16522$
.BAA=86546888=AAAEAAEMNRMQQSWZZ\]gk__m__\
bTRHHHHHQQHQJQWJSSSSSSSSSSSSSSSSWWSSSS\\V]VZW8,.FW]\\]\]\]\\ZZ\\WFR>38(
.BTTkgn]ktvgmvvvvvmvvvsvzzzyzyzyzyyyzmkkkkkZSRA816;F87
yzyzyzym^Z]WN3   $&$.Wt\
""*"""****""""
"***"**""**<**"
$5612,.2,
&$$,,,5]
$]t.Ft
7%8U8
3 303<3]3
2<3
8 8$8(8,8084888<8}8
5%5,575{6
<,<0<4<8<
7 7$7(7,70747
rundll32.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartPage
Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
::{2559a1f6-21d7-11d4-bdaf-00c04f60b9f0}
::{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}
::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
::{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}
::{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}
::{D20EA4E1-3957-11d2-A40B-0C5020524153}
::{2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}
{208D2C60-3AEA-1069-A2D7-08002B30309D}
{20D04FE0-3AEA-1069-A2D8-08002B30309D}
Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites
{450D8FBA-AD25-11D0-98A8-0800361B1103}
CLSID\{2559a1f6-21d7-11d4-bdaf-00c04f60b9f0}
Software\Microsoft\Windows\CurrentVersion\RunOnce
Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
Software\Microsoft\Windows\CurrentVersion\Explorer\DontShowMeThisDialogAgain
Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\CleanupWiz
\\.\WMIDataDevice
Software\Microsoft\Windows\CurrentVersion\Run
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
Software\Microsoft\Windows NT\CurrentVersion\Windows
ExplorerIsShellMutex
desk.cpl
Software\Microsoft\Windows\CurrentVersion\Explorer
tourstart.exe
tourstart.exe,0
Microsoft.OfferTour
WINWORD.EXE
Software\Microsoft\Windows\CurrentVersion\Applets
Software\Microsoft\Windows\CurrentVersion\Applets\Tour
explorer.exe,9
Microsoft.FixScreenResolution
shell:::{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}
Software\Microsoft\Windows\CurrentVersion\Explorer\FileAssociation
Software\Microsoft\Windows NT\CurrentVersion
shell:::{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}
Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
DDEEXECUTESHORTCIRCUIT
http\shell
IEXPLORE.EXE
Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\Desktop
Software\Microsoft\Windows\CurrentVersion\RunOnceEx
comctl32.dll
Software\Microsoft\Windows\Internet Settings
AutoConfigURL
system.ini
AppEvents\Schemes\Apps\.Default\%s\.current
Software\Microsoft\Windows\CurrentVersion\Explorer\TrayNotify
MSShellRunDlgReady
res://mys.dll/mys.hta /explorer
mshta.exe
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Setup\Welcome
Software\Microsoft\Windows\CurrentVersion\Explorer\Tips
SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\MYS
cys.exe
SOFTWARE\Microsoft\Windows NT\CurrentVersion\srvWiz
install.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel
OUTLOOK.EXE
explorer.exe,16
iernonce.dll
WININET.DLL
UpdateURL
WindowsUpdate
HWND%x
Software\Microsoft\Windows\CurrentVersion\OemStartMenuData
fldrclnr.dll,Wizard_RunDLL
iexplore.exe
winbrand.dll
Software\Microsoft\Windows\CurrentVersion\Explorer\Remote\%d
shell32.dll
nusrmgr.cpl ,initialTask=ChangePicture
NewExeName
Windows
ediskeer.dll
timedate.cpl
Software\Microsoft\Windows\CurrentVersion\Explorer\Comdlg32\LastVisitedMRU
Software\Microsoft\Windows\CurrentVersion\Explorer\Comdlg32\OpenSaveMRU
Software\Microsoft\Windows\CurrentVersion\Explorer\Doc Find Spec MRU
Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU
Software\Microsoft\Internet Explorer\TypedURLs
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Calculator.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Games\Solitaire.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Paint.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\WordPad.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\Files and Settings Transfer Wizard.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Windows Movie Maker.lnk
%USERPROFILE%\Start Menu\Programs\Accessories\Tour Windows XP.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Windows Messenger.lnk
%USERPROFILE%\Start Menu\Programs\Windows Media Player.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\MSN.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Get Online with MSN.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Get Going with Tablet PC.lnk
%ALLUSERSPROFILE%\Start Menu\Set Program Access and Defaults.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Windows Journal.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Media Center\Media Center.lnk
%USERPROFILE%\Start Menu\Programs\Internet Explorer.lnk
Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel
TSAppCMP.DLL
netapi32.dll
%SystemRoot%\system32\restore\rstrui.exe
RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL ?0x%X?%s
RunDLL32.EXE
%s%d%s
Software\Microsoft\Windows\CurrentVersion\Policies\System
settings.dll
explorer.exe "
explorer.exe /e, "
WindowsLogon
WindowsLogoff
%s %s
Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count
uAppWiz.Cpl
\explorer.exe
Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu
::{20D04FE0-3AEA-1069-A2D8-08002B30309D}
taskmgr.exe
ShellExecute
Software\Microsoft\Windows\CurrentVersion\Explorer\AppKey\%d
\WindowsShell.Manifest
Get Online with MSN.lnk
Set Program Access and Defaults.lnk
Link%d
OEM%d
Software\Microsoft\Windows\CurrentVersion\SMDEn
::{D20EA4E1-3957-11d2-A40B-0C5020524152}
%WinDir%\explorer.exe
There is a file or folder on your computer called "%s" which could cause certain applications to not function correctly. Renaming it to "%s" would solve this problem. Would you like to rename it now?
Ca&scade Windows
Tile Windows &Horizontally
Tile Windows V&ertically
&Windows Security...
&Help and Support
&Log Off %s...
Windows Explorer
6.00.2900.5512 (xpsp.080413-2105)
EXPLORER.EXE
Windows
Operating System
6.00.2900.5512
Keep the &taskbar on top of other windows
To remove records of recently accessed documents, programs, and Web sites, click Clear.
Windows displays icons for active and urgent notifications, and hides inactive ones. You can change this behavior for items in the list below.
Select this option to use the menu style from earlier versions of Windows.
6There is not enough memory to complete this operation.8Unable to run command.
The folder '%1' has been removed.WMy Computer or Windows Explorer has not been properly initialized yet. Try again later.
&Undo %s
Windows is running in safe mode.
This special diagnostic mode of Windows enables you to fix a problem which may be caused by your network or hardware settings. Make sure these settings are correct in Control Panel, and then try starting Windows again. While in safe mode, some of your devices may not be available.
startRThere was an internal error and one of the windows you were using has been closed.
Restrictions{This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator.
&Show Open Windows
Windows was unable to change the display settings for the new configuration. Return the computer to the previous state, shut down Windows, and restart the computer in the desired configuration.
There may be a problem with your display settings if you continue. To safely change to a new configuration, you should shut down Windows and restart the computer in the desired configuration. Do you want to continue anyway?
This pre-release version of "Internet Explorer 4.0" Desktop/Explorer has expired. Please update to the latest release of "Internet Explorer 4.0" from WWW.MICROSOFT.COM
helpctr.exe>-FromStartHelp
Take a tour of Windows XP
NOpens a window where you can pick search options and work with search results.aOpens a central location for Help topics, tutorials, troubleshooting, and other support services.
/Opens a program, folder, document, or Web site.
Provides options for closing your programs and logging off, or for leaving your programs running and switching to another user.lProvides options for turning off or restarting your computer, or for activating Stand By or Hibernate modes.RDisconnects your session. You can reconnect to the session when you log on again.
&Windows Security
iOpens the My Documents folder, where you can store letters, reports, notes, and other kinds of documents./Displays recently opened documents and folders.KOpens the My Music folder, where you can store music and other audio files.]Opens the My Pictures folder, where you can store digital photos, images, and graphics files.zGives access to, and information about, the disk drives, cameras, scanners, and other hardware connected to your computer.MGives access to, and information about, folders and files on other computers.8Connects to other computers, networks, and the Internet.

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Scan a system with an anti-rootkit tool.
Terminate malicious process(es) (How to End a Process With the Task Manager):

imapi.exe:2100
mediabar.exe:204
patch_ff.exe:1660
%original file name%.exe:1476
jZipMediaBar.exe:1680
jZipMediaBar.exe:1308
jZipMediaBar.exe:460
regsvr32.exe:204
pack.exe:1980
DatamngrCoordinator.exe:1712
DatamngrCoordinator.exe:1388
Delete the original Trojan file.
Delete or disinfect the following files created/modified by the Trojan:

%WinDir%\Temp\5z2vk2r6.TMP (146970 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4\nsq8.tmp\jZipMediaBar.exe (18125 bytes)
%WinDir%\Temp\nsj34.tmp\System.dll (11 bytes)
%WinDir%\Temp\nsj34\Helper.dll (14988 bytes)
%WinDir%\Temp\nsj34.tmp\registry.dll (784 bytes)
%WinDir%\Temp\nsu33.tmp (4571 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\1B.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\1E.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4\nsq8.tmp\pack.exe (109567 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\B.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\ns23.tmp (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4\nsq8.tmp\mediabar.exe (76078 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\ns30.tmp (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\12.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\15.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\14.tmp (4545 bytes)
%Program Files%\Music Toolbar\Datamngr\x64 (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\10.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\21.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\D.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\ns22.tmp (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4\Starter.exe (1856 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\C.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\ns24.tmp (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\1F.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\F.tmp (4545 bytes)
%Program Files%\Music Toolbar\Datamngr\Uninstall.exe (3616 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\registry.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\ns2C.tmp (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\16.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\1D.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\11.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\1C.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\A.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\19.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsd2.tmp (336382 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\UserInfo.dll (4 bytes)
%Program Files%\Music Toolbar\Datamngr\Helper.dll (14988 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\13.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\9.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\install_statistics[1].xml (498 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\18.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\nsExec.dll (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\ns31.tmp (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4.tmp\ns28.tmp (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\E.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx4\Helper.dll (63950 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\17.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\1A.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\20.tmp (4545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp2F.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp2F.tmp\toolbar.xml (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp2F.tmp\xml.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp2F.tmp\ocode.xml (203 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp2F.tmp\inetc.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\jzipmusictoolbar181-manifest.xml (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\DTX\Reporting\ReportingHelper.dll (6360 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp2F.tmp\UAC.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa2E.tmp (141005 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png (683 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\chevron.png (191 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png (336 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\vmnrsswin.xml (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\skin-yellow.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-calendar.png (566 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\add.png (653 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\notifylabel-right.png (267 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\searchresultstb.dll (19096 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\close-normal.png (585 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\8DFDF057024880D7A081AFBF6D26B92F (176 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\lock.png (316 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_14.png (270 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-search-pnlbtm.png (916 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\skin-orange.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\shadow-leftmenu.png (963 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\btn-search.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lichen.gif (153 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-aboutbox.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\panels.css (5 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxprefwin.xul (307 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnright-vista.png (309 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-buffering.gif (642 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\icons.xml (6 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\uninstall.exe (6115 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\bluesky.gif (153 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\popupWeather.html (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\over-blue.png (163 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\install.ico (8 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-dollar.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-mdl_ff.png (179 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-launch-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\titlebar-right.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\alexabutton.css (596 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-off-r.png (312 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\collapse.png (264 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_06.png (316 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt-disable.png (832 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\rss.png (832 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\template.html (7 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\scroll.png (455 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_09.png (288 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-left.png (114 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-right.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchtheweb.png (664 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-playing.gif (854 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-on-r.png (278 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btn-widgets-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\imap.png (278 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\logo-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png (607 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\popupHTML.html (802 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\templateFF.html (6 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\search-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png (313 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\lib\en.js (14 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_iconPressed.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\button-splitter.png (264 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxpaneltransparent.xul (653 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\gameList.xsl (7 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\widget.jsw (6 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\widgets-square-16px.png (690 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt-over.png (892 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\categories-bg-gradient-grid.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\AccessControl.dll (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\apnuserid.dat (16 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_16.png (278 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png (916 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\mailcom.png (254 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png (7 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\gametype.xsl (681 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\blank.gif (55 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-stopped.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\ie-only.css (153 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\xml.dll (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\thumbs\tb_thumb_icon.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\na-t.png (5 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\about.xml (5 bytes)
%Documents and Settings%\%current user%\Application Data\jzipmusictoolbar181\guid.dat (38 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\custom.js (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\settings_stb_19x.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-divider.png (240 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-play-left-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-left-topglow.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-shop.png (233 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\trackid.dat (6 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\bg.gif (8 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png (279 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-connecting.gif (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-previous.png (476 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\vmn.css (8 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-left-middleglow.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\logo-separator.png (566 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-install.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-right.png (205 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchboxlite_end.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\plus.gif (157 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-scrollbar-trackend-y.png (964 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\preferences.xml (663 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\throbber.gif (825 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnback-vista.png (207 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\rsswin.xml (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-scrollbar-track-y.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-back.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\break.gif (582 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-pnl520x390.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\box-check.png (174 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\remove.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\arrow-dn.gif (46 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-up.gif (46 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\facebook.png (235 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\star.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemleft-vista.png (307 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\btn_ask_search.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\btn-settings-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchboxlite.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\as_guid.dat (38 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\8DFDF057024880D7A081AFBF6D26B92F (533 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\metacafe.gif (125 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\menul-bgon.png (179 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-play.png (248 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\components\windowmediator.js (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\initHTML.html (481 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-off-l.png (205 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchbox-pnlbtm.png (532 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\template.xml (810 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\popupWidgets.css (9 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scroll-bg.png (663 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\options\options-weather.gif (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight_lime.png (300 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\tab-on-l.png (167 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\jquery.qtip.css (13 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\notifylabel-left.png (274 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_iconFF.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-pref.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-user-monitor.png (853 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.url.js (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\ask_logo_18x14.png (634 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\data\search\search.xsl (955 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxwin.xul (387 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\nsisFirewall.dll (8 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\yahoo.png (244 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-box-next.png (791 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\popupGames.html (10 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\it.js (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png (4 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\options-search.png (4 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\logo.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\searchresultsDx.dll (4992 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\rename.gif (223 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\ttlbar-left.png (266 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\edit-back.png (214 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-right.png (114 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\footer.htm (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\footer-short-left.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-wide-close-over.png (873 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\neterror.xhtml (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\video.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-btnover.png (179 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\rsstabdivider.gif (85 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton.css (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btn-start.png (342 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemleft.png (323 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\{6fcaba44-a441-481f-895e-bddfd81a6cc2}\geodata.xml (162 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight.png (811 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png (196 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\menuseparatorback.gif (165 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btn-widgets.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-right-resize.png (214 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt.png (893 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_18.png (312 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-middle22-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-left.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemright-vista.png (309 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png (205 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-add-over.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\inetc.dll (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\popupWidgets.html (14 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\btn-settings.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\microphone_16x.png (518 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\find-videos.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight_magenta.png (302 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\dislike_over.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\nsProcess.dll (4 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\arrow-up.gif (46 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-end.png (284 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\titlebar-middle.png (999 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\minus.gif (152 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\skin-lichen.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\movetarget.png (507 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\arrow-right.gif (46 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa26.tmp (152173 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ask_search_212wide.png (671 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\resize-box.gif (92 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\appid.dat (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\titlebar-left.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\found.png (902 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-dn.gif (46 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-down-white.png (982 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\appsfeatured-bg-gradient-grid.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-info.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\template.xml (144 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\widget.xml (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_10.png (250 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ajax-loader.gif (6 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.js (3312 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.RadioBeta\widget.xml (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\text-ellipsis.xml (423 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\sprite-dropdown.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\default.png (867 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\scroll-right.png (258 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\searchtheweb.png (664 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\gmail.png (741 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-bottom-middleglow.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-left22.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scroll-topwin.png (951 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\modules\nsDragAndDrop.js (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\toolbar.xml (14 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\modifyhot.png (149 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\popupGames.css (7 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\widgets-square-24px.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\modify.png (708 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\skin-bluelite.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\divider.png (134 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btn-mdl.png (205 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.qtip.min.js (1552 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-right-topglow.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\notifylabel-middle.png (203 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\dtuser.exe (27992 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-joystick24.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\logo-separator.png (582 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\separator.png (139 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_21.png (300 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_04.png (293 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\btn-close-grey.png (263 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\na-s.png (4 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight_blue.png (309 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\titlebar-right.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\searchbar\searchbar-background-middle.png (152 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\vimeo.gif (255 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-sml.png (211 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\aol.png (648 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-ico.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_12.png (173 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\proxy.html (354 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\toolbarsplitter.png (763 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\veoh.png (790 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\btn-widgets.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm-over.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_pref_icon.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight_yellow.png (309 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\pop.png (543 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-search.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-try-left-over.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\jzipmusictoolbar181\appid.dat (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\modify-save.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\62B5AF9BE9ADC1085C3C56EC07A82BF6 (224 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-start.png (352 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\search_icon.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\orange.gif (153 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxtransparentwin.xul (657 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_icon.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\websearch.png (853 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-news24.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\en.js (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\paneltemplate.html (5 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-greyover.png (457 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta.ico (1552 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\toolbar.htm (712 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menu_separator_white.png (133 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\topbar-inside-gradient.png (964 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\star_blank.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png (431 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bg-scrollbar-thumb-y.png (966 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png (643 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\move.gif (58 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-drag.png (486 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_02.png (248 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\System.dll (11 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-next-over.png (442 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\transparent_1px.gif (45 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\de.js (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\data\weather\icons.xml (6 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollt-down.png (864 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-grey.png (283 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\locale.js (257 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-close-over.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\btn-close-greyover.png (444 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\popupWeather.css (7 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\blip.png (315 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-info-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\logo-about.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-pref-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\na.png (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\over-orange.png (169 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-right-middleglow.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\gamecategory.xsl (700 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\widgets.png (447 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\reload.png (905 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\like_over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\grey.gif (152 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\bullet-orange.gif (43 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\vmncode.js (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\ocode.xml (203 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\star_x_grey.png (328 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\apps-bg-gradient-grid.png (995 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\ioSpecial.ini (26 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\arrow-right-disabled.gif (46 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\panel-botm-noscroll.png (448 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png (460 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_13.png (277 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-addtoolbar-right.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\titlebar-left.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.RadioBeta\widget.jsw (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb-disable.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\btn_settings.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_11.png (284 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-thumb-on.png (402 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_15.png (344 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\ask_logo_24x20.png (682 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-thumb-over.png (380 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\62B5AF9BE9ADC1085C3C56EC07A82BF6 (126 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_iconPressedFF.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\icon_games.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\neterror.xhtml (344 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnback-down-vista.png (207 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\custom.js (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\com.djboxservice.dj.DJBox\widget.jsww (6 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-download.png (251 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_20.png (287 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\debugbar\debug.html (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\notifylabel_ff.png (210 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\skin.xml (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btn-mdl_ff.png (203 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\web.png (566 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btn-end.png (299 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\custom.css (8 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\popupAbout.css (907 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-right22-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\RSSLogo.png (7 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-Info.png (218 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-close.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png (649 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitem-splitter.png (136 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\featured-bg-btm-gradient.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-addtoolbar-left.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\jzipmusictoolbar181\apnuserid.dat (16 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\titlebar-middle.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\external.js (23936 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\gamethumb2-over.png (574 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-moredetails.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scrollb-down.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\thumb-up.png (754 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\manifest.xml (2264 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-add.png (1 bytes)
%Documents and Settings%\%current user%\Application Data\jzipmusictoolbar181\geodata.xml (162 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemback-vista.png (209 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnleft-down-vista.png (310 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\bluelite.gif (153 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-top-middleglow.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\skin-grey.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-close-grey-over.png (457 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxpanel.xul (573 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png (532 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemback-down-vista.png (202 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\gameData.js (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-play.png (290 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\geolocation[1].xml (162 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\add.png (653 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btn_slider.png (763 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\css\dialog.css (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_19.png (299 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\searchbar\searchbar-background-left.png (286 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menu_separator_bar.png (129 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\rsspreview.html (241 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\icon-Add.png (228 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\search-go.png (840 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\scripts\defscript.js.bak (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.uniform.min.js (9 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\loadingMid.gif (7 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\default.js (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\fr.js (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnleft-vista.png (307 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\apps-hover.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\close-hot.png (579 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\ico-check.png (248 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\UAC.dll (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-tags.png (209 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\like.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\main.html.bak (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\btn_settings_17padding_18pxheight.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\lastsearch-thumb-back.gif (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\toolbarsplitter.gif (76 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\radio.png (355 bytes)
%Documents and Settings%\%current user%\Application Data\jzipmusictoolbar181\trackid.dat (6 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\expand.png (303 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\sv.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\skin-bluesky.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\settings_stb_19x_over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\searchbox.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemright-down-vista.png (252 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\weather.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\tv.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-detailed-on.png (496 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\sysid.dat (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\btn-widgets-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\btn-search-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\logo_headphones_18h.png (992 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\button-splitter-down-vista.png (261 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.tinyscrollbar.min.js (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\btn-wide-close.png (857 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\dtx.css (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\yellow.gif (153 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\settings.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\wmpstreamer.html (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-mdl-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-addtoolbar-left-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-right-bottomglow.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\data\search\engines.xml (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\edit-back-hot.png (217 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\button-splitter-vista.png (264 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\checkmark.png (309 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-try-left.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\icons\cond999.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menuitemleft-down-vista.png (289 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\dislike.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\widgets\net.vmn.www.RadioBeta\tb_icon.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\toolbar.xul (23936 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\win-left-bottomglow.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\options\options-main.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\emailnotifierproviders.xml (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\btn_music_16x.png (710 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\css\ie7-only.css (136 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\gamethumb-on.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-right-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\menu_bg-basic.png (446 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\rsswin.xsl (7 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\btnright-down-vista.png (289 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\transparent.gif (49 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\options-weather.png (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\TRUSTe_about.png (5 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrowr-bluew5.png (205 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-left.png (204 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\images.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\menul-bgover.png (168 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\launchers.css (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\throbber.gif (825 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\dailymotion.gif (138 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\setting_stb_16x.png (999 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\loadingMid.gif (7 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\footer-short-middle.png (968 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-launch.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\footer-short-right.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\ttlbar-right.png (286 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\footer-short-left.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\youtube.png (608 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\locale\toolbar\es.js (2 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btnover-mdl.png (210 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ico-download.png (692 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\hotmail.png (297 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\radiobeta-stopped.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\bg-btn-divider.png (205 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\Koyotesoft_Icon_16x16.png (723 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\twitter.png (721 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\highlight_cyan.png (299 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\search.png (712 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\throbber.gif (825 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\rsschannelback.png (604 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\lib\dtxpanelwin.xul (407 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-next.png (471 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\dtx-test.css (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\options\options-search.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\scroll-left.png (257 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\footer-short-middle.png (968 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\win-btm-mdl.png (118 bytes)
%Documents and Settings%\%current user%\Application Data\jzipmusictoolbar181\setupCfg.xml (569 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-play-left.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\modify.png (724 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png (160 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-right22.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\left-menu-hover.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\scroll-bg-206.png (663 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\searchbar\searchbar-background-right.png (288 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\ebay.png (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\js\jquery.tinyscrollbar.js (5 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_08.png (328 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\content\modules\datastore.jsm (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\template.html.bak (7 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\ask_search_215wide.png (671 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\options\options-weather.png (2 bytes)
%Documents and Settings%\%current user%\Application Data\jzipmusictoolbar181\sysid.dat (3 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-left22-over.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\view-detailed-over.png (451 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\footer-short-right.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-previous-over.png (440 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq27.tmp\InetLoad.dll (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-dark-middle22.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\default\images\ttlbar-mdl.png (146 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\star_x_orange.png (367 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\btn-mdl.png (1 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\TRUSTe_about.png (152 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_03.png (218 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\uwa\border_07.png (254 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\lib\panels\images\arrow-sml-drop.png (188 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\IE\chrome\skin\options\options-widgets.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh2B.tmp\UAC.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh2B.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh2B.tmp\xml.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh2B.tmp\toolbar.xml (14 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\uninstall.exe (6115 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh2B.tmp\inetc.dll (784 bytes)
%Program Files%\Music Toolbar\Datamngr\SRTOOL~1\install.ico (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsr2A.tmp (152173 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh2B.tmp\ocode.xml (203 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh2B.tmp\AccessControl.dll (9 bytes)
%Documents and Settings%\%current user%\Application Data\jzipmusictoolbar181\dtx.ini (15 bytes)
%Program Files%\Music Toolbar\Datamngr\Datamngr.dll (18247 bytes)
%Program Files%\Music Toolbar\Datamngr\DatamngrChrome.dll (2015 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\mgrldr_u.dll (24 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\Internet Explorer Settings Update.exe (11116 bytes)
%Program Files%\Music Toolbar\Datamngr\mgrldr.dll (20 bytes)
%Program Files%\Music Toolbar\Datamngr\Internet Explorer Settings Update.exe (10760 bytes)
%Program Files%\Music Toolbar\Datamngr\mgrldr_u.dll (425 bytes)
%Program Files%\Music Toolbar\Datamngr\DatamngrUI.exe (26064 bytes)
%Program Files%\Music Toolbar\Datamngr\apcrtldr.dll (5614 bytes)
%Program Files%\Music Toolbar\Datamngr\setmgrc1.cfg (31 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\setmgrc1.cfg (36 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\IEBHO.dll (20230 bytes)
%Program Files%\Music Toolbar\Datamngr\Internet Explorer Settings.exe (10714 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\Internet Explorer Settings.exe (8982 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\apcrtldr.dll (6128 bytes)
%Program Files%\Music Toolbar\Datamngr\IEBHO.dll (20154 bytes)
%Program Files%\Music Toolbar\Datamngr\DatamngrCoordinator.exe (26869 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\Datamngr.dll (18499 bytes)
%Program Files%\Music Toolbar\Datamngr\x64\mgrldr.dll (24 bytes)
%Program Files%\Music Toolbar\Datamngr\favicon.ico (1 bytes)
%Documents and Settings%\All Users\Application Data\Datamngr\S-1-5-21-1844237615-1960408961-1801674531-1003.cfg (3991 bytes)
%Documents and Settings%\All Users\Application Data\Datamngr\coordinator.cfg (1864 bytes)
%WinDir%\Temp\ad5c77d9\patch_ff.exe (72036 bytes)
%Documents and Settings%\All Users\Application Data\Datamngr\general.cfg (1 bytes)
Remove the references to the Trojan by modifying the following registry value(s) (How to Work with System Registry):

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"AutoRestartShell" = "1"
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Permalink

Back to the blog

e-mail

Google+

Twitter

Facebook

Trojan.Win32.Swrort.3_a4bd7bb0e9

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet

Trojan.Win32.Swrort.3_a4bd7bb0e9

E-mail

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet