Trojan.Win32.SwrortProxy_0860194820

by malwarelabrobot on April 21st, 2015 in Malware Descriptions.

mzpefinder_pcap_file.YR, GenericEmailWorm.YR, TrojanSwrortProxy.YR, GenericInjector.YR (Lavasoft MAS)
Behaviour: Trojan, Worm, EmailWorm

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

Dynamic Analysis

Static Analysis

Network Activity

Map

Strings from Dumps

Removals

MD5: 0860194820af1f6f18759d763a06fc97
SHA1: 20c12bb6683e3db64b1e5d92cd60092c8b68ae9c
SHA256: 995ea293fe52b5d33a2823b99a52f8ec578d1ca1f8645b32b1da3b7c88a40e5c
SSDeep: 12288:99lh5vwDeug35qtYXppvhRv9QzH5q1CL cApwGQS:RnvwDeug35qtGvhRVQzH5q1CL jwGQS
Size: 816504 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: UPolyXv05_v6, BorlandDelphi30, BorlandDelphiv30, ACProtect141
Company: no certificate found
Created at: 2015-03-19 14:54:07
Analyzed on: Windows7Ada SP1 64-bit

Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

Behaviour	Description
EmailWorm	Worm can send e-mails.

Process activity

The Trojan creates the following process(es):

BrowserManager.exe:3904
BrowserManager.exe:3680
BrowserManager.exe:3596
Yandex.exe:824
lite_installer.exe:3812
lite_installer.exe:3628
YandexPackSetup.exe:3676
YandexPackSetup.exe:3388
sender.exe:3680
ybEDA8.tmp:4048
BrowserManagerShow.exe:3760
downloader.exe:2592
rundll32.exe:3148
rundll32.exe:1204
rundll32.exe:4004
setup.exe:4060
UmmyVideoDownloader.tmp:1860
MsiExec.exe:2288
MsiExec.exe:3476
MsiExec.exe:3900
MsiExec.exe:3940
MsiExec.exe:3796
MsiExec.exe:3920
MsiExec.exe:1860
MsiExec.exe:3848
%original file name%.exe:2784
elements64.exe:908
elements64.exe:1776
elements64.exe:3728
RegProto.exe:1916
UmmyVideoDownloader.exe:1828
u2-ctrl.exe:3548
u2-ctrl.exe:3572
yupdate-exec.exe:2592
yupdate-exec.exe:3364
yupdate-exec.exe:3492
yupdate-exec.exe:3320
yupdate-exec.exe:2412
yupdate-exec.exe:3852
yupdate-exec.exe:3848
yupdate-ctrl.exe:4088
yupdate-ctrl.exe:3176
{51426ABB-6DCB-40D0-9EA1-211122CE9025}.exe:3908
clidmgr.exe:3680
browser.exe:2964
browser.exe:2876
browser.exe:3036
browser.exe:4020
browser.exe:3888
browser.exe:3124
browser.exe:3320
browser.exe:3152
browser.exe:3060
browser.exe:3876
browser.exe:3520
browser.exe:3480
browser.exe:3776
MSI299D.tmp:3636
MSI299D.tmp:536

The Trojan injects its code into the following process(es):

downloader.exe:3396
UmmyVideoDownloader.exe:2084
yupdate-exec.exe:3932
browser.exe:2456
browser.exe:2488
browser.exe:3396
browser.exe:1060
browser.exe:3792
browser.exe:2752
browser.exe:2800
browser.exe:3932

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process BrowserManager.exe:3904 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3-new.log (1336 bytes)

The process BrowserManager.exe:3680 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\fe48e668bc070b6eb695bcc951b8d603\browserconfig.properties (111 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3-new.log (47998 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js_20150420095237.backup (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\omni.ja_20150420095226.zip (44854 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\cookies.sqlite-wal (4026 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\hosts (198 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\AS1C1Y37.txt (692 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\key (577 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\cookies.sqlite (3144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\scut (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\show-dlg.exe.bcp (2498 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\dlgs (448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\scut-last (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Preferences (1029 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Preferences (1029 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\fe48e668bc070b6eb695bcc951b8d603\region.properties (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\change.list (3866 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal (6361 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\params (17080 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Preferences (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\prfs (273 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\qs_bcp (1017 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\hp (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\features (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\backup00000.reg (4000 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\ui (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Cookies (422 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\qs (1365 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\seeder.dll (884 bytes)

The process BrowserManager.exe:3596 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3-new.log (817 bytes)

The process Yandex.exe:824 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\yapin\Yandex.website (497 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\yapin\Yandex.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex.website (497 bytes)

The process lite_installer.exe:3812 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{51426ABB-6DCB-40D0-9EA1-211122CE9025}.exe (28086 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\lite_installer.exe.log (709 bytes)

The process lite_installer.exe:3628 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\lite_installer.exe.log (525 bytes)

The process YandexPackSetup.exe:3676 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D84E548583BE1EE7DB5A935821009D26_5B98B6CD6E69202676965CF5B0E2A7A7 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\1033\thm.wxl (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BAEBE581FCB73249406FC21094EA252E_BC0CE803EF41A748738619ED7838EEFC (1520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerPackage (61727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ÃÅ“ÃÂµÃÂ½ÃÂµÃÂ´ÃÂ¶ÃÂµÃ‘â‚¬_ÃÂ±Ã‘â‚¬ÃÂ°Ã‘Æ’ÃÂ·ÃÂµÃ‘â‚¬ÃÂ¾ÃÂ²_20150420095211.log (21372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\state.rsm (1360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\1058\thm.wxl (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\wixstdba.dll (2725 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\1055\thm.wxl (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\logo.png (852 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\logoside.png (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\1049\thm.wxl (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197} (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\thm.xml (632 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.be\BrowserManagerInstaller.exe (66528 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\thm.wxl (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerInstaller.exe (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D84E548583BE1EE7DB5A935821009D26_5B98B6CD6E69202676965CF5B0E2A7A7 (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ÃÅ“ÃÂµÃÂ½ÃÂµÃÂ´ÃÂ¶ÃÂµÃ‘â‚¬_ÃÂ±Ã‘â‚¬ÃÂ°Ã‘Æ’ÃÂ·ÃÂµÃ‘â‚¬ÃÂ¾ÃÂ²_20150420095211_0_BrowserManagerPackage.log (153392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\BootstrapperApplicationData.xml (259 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BAEBE581FCB73249406FC21094EA252E_BC0CE803EF41A748738619ED7838EEFC (1 bytes)

The process YandexPackSetup.exe:3388 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YandexElementsIE00000.log (238614 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{97DA2459-9AC9-49B0-BE2B-6F1E7E24D829}\YandexElementsIE.msi (41116 bytes)

The process sender.exe:3680 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\statisticsex.log (1026 bytes)

The process ybEDA8.tmp:4048 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_3FF60.tmp\setup.exe (17754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_3FF60.tmp\BRAND_INT (322 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_3FF60.tmp\BRAND_UA-RU (811 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_3FF60.tmp\BROWSER.PACKED.7Z (61755 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_3FF60.tmp\BRAND_YANDEX (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_3FF60.tmp\BRAND_KZ (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_3FF60.tmp\BRAND_TB (435 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_3FF60.tmp\SETUP.EX_ (396 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_3FF60.tmp\BRAND_BY (787 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_3FF60.tmp\BRAND_UA-UK (691 bytes)

The process BrowserManagerShow.exe:3760 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe:res (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3-ctrl.log (4215 bytes)

The process downloader.exe:2592 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\downloader.log2592 (2374842 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_84DF081C52E32C6CC02A8FC17AEFEC2C (1536 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1212 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\seed.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\YandexPackSetup[1].exe (3072100 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\info[1].rss (827 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexPackSetup.exe (48009 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_84DF081C52E32C6CC02A8FC17AEFEC2C (1 bytes)

The process downloader.exe:3396 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\stat.log3396 (580 bytes)

The process rundll32.exe:3148 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110\elements.exe (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\config[5] (607 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\config[6] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\ie\product.xml (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\product[2] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\fastdial\backgrounds\earth.jpg (550 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\product[3] (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\config[2] (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\product[4] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\statistics\statistics.xml (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\applications\vb.json (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\config[4] (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\migrate.ver (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\config[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\statistics[1] (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\cs\icons\yandex-65x26.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\kk\fastdial\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\en\icons\yandex-65x26.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\product[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\favorites[1] (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\ru\fastdial\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\be\fastdial\config.dtd (613 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\product[5] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\config[4] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\product[3] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\backgrounds[1] (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\fastdial\config.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\Install.log (52004 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\fastdial\backgrounds\wp_almost_white_small.jpeg (781 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\config[3] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\tr\fastdial\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\product[7] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\ru\fastdial\config.dtd (607 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\vb\fav\fav_full.xml (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\kk\fastdial\config.dtd (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\product[2] (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\cs\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\en\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\product[8] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\backgrounds[1] (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\product[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\config[2] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\fastdial\blacklist.xml (702 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\product[6] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\statistics[1] (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\clckr[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\domaingroups[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\search\dictionary.txt (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\product[8] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\product[3] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\config[6] (611 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\en\fastdial\config.dtd (456 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\clckr[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\product[6] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\uk\fastdial\config.dtd (611 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\domaingroups[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\product[5] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\product[4] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\cs\icons\yandex-130x52.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\about\product.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\cs\fastdial\config.dtd (607 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\en\icons\yandex-130x52.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\tr\fastdial\config.dtd (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\product[9] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\passport\passport.xml (192 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\fastdial\clckr.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\uk\fastdial\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\config[1] (456 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\kk\about\product.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\product[7] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\be\fastdial\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\fastdial\domaingroups.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\migrateFromBar (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\be\about\product.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\blocked_domains.json (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\config[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\config[7] (456 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\en\fastdial\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\tr\icons\yandex-65x26.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\tr\icons\yandex-130x52.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\fastdial\backgrounds.xml (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\vb\fav\fav_lite.xml (810 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\product[3] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\config[5] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\cs\fastdial\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\uk\about\product.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\product[2] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\config[3] (613 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\ru\about\product.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\tr\about\product.dtd (1 bytes)

The process rundll32.exe:1204 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\Install.log (3918 bytes)

The process rundll32.exe:4004 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\lingvo[2] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\icons\campaign-running.png (688 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\tr\yndx_icon.png (836 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\icons\twitter-fresh.png (720 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\brand\tb\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\market[2] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\ui\header\images\menu-close.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\altsearch.dll (983 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\en\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ sn_n-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\ru\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\disc.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_ ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\altsearch[1] (526 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\icons\mc\badge\active_press.png (316 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\icons\Direct_locked_2_.png (748 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\market.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\images\mail_128.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\moikrug[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_-sn_n.png (880 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\ru\logobutton\logoconf.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\direct64.dll (1060 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\fg_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\ru\slice\js\dtconverter.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.Search.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\pagetranslator[1] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\locale\be\campaign.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\login.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\ovc_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\town\geobase.xml (747 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\icons\site.png (707 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\sb.dll (1925 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\ovc_gr.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\uk\slice\network-error.html (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_ sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\logobutton\logoconf.xml (324 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\cs\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\radio[1] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\icons\icon.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\about\logo-ie-large.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\yandex[2] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\say-alternate.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\ic.dtd (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\locale\kk\direct.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\icons\typesquatting\icon.png (372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\stardust.dll (458 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\_\8mHn_Rsr7nJcpTqMcpRQLGAlOAM.png (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\altsearch[1] (467 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\facebook_on.png (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\uk\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\fotki.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\nointernet\_music-nointernet.ie.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\friends.png (743 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\ui\menu\images\remove.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\photo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\brand\ua\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\search\dictionary.txt (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\locale\ru\facebook.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\noflash\_music-noflash.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\ovc_ sn.png (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\tr\logobutton\logoconf.dtd (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bl.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\logo\logo.png (409 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\slovari.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\rambler.png (655 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\accelerators[1] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\update.png (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\browseroffer64.dll (1651 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bl-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\locale\tr\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\fg_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\friends_lock.png (795 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\be\slice\js\dtconverter.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\tb\town\townlinks.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\icons\yavideo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml.zip (13122 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\textonly[1] (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\ic.dtd (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\icons\twitter-locked.png (739 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\mail[2] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_ ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\logobutton\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\mc[1] (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\index.html (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\tab-active.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\readability\hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\kk\mc.dtd (354 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\html\network-error-kk.html (543 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\locale\be\yavideo.dtd (938 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\fotki[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\tr\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\quote\quotelist.dtd (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\reply.png (255 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\locale\be\radio.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml.zip (5873 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\html\i\throbber.gif (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_ra_d.png (807 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\about\logo-ie-medium.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\fg_n.png (494 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\direct.dll (1295 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\webmaster.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\uk\mc.dtd (370 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\moikrug[1] (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\maps[2] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\links\links.dtd (268 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\accelerators[5] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.localization.js (572 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_ra_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\market[2] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\translator.dtd (249 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_sn_n.png (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\accelerators[3] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\locale\ru\webmaster.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\skc_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\mail[4] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\mail[1] (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\ovc_-ra.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\brand\tb\links\links.dtd (280 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_ ra_n.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\events.png (781 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\html\style-authpages.css (444 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\town\townlist.dtd (82 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\safebrowsing\safebrowsing.xml (251 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\webmaster.dll (551 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\maps.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\typesquatting.messages.xml (718 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\geolocation.xml (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\spam.png (798 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\uk\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\facebook[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\skc_n.png (720 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\skc_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\town\townlinks.dtd (126 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\money.dtd (530 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\brand\ua\sblinks.dtd (369 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\kk\yndx_icon.png (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\ic.dtd (567 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\logo.dtd (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\icons\browser.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\tr\icons\yandex.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\route-form\images\route-a.png (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\messages-bg-bottom.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\lenta.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\mailru.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\lingvo.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\lingvo[3] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\ic\2.png (215 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\esync64.dll (809 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\noflash\img\b-music-noflash.png (520 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\ua\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\ovc.png (397 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\fav-1.png (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\cs\yndx_icon.png (836 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\yavideo64.dll (1217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\product[1] (1428 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_-sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\locale\uk\esync.dtd (451 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\en\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\common.dtd (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\fav.png (527 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\cs\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\brand\yandex\extra.dtd (413 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\ic.dtd (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\image-search.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\icons\rambler.png (428 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\locale\kk\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\noflash\_music-noflash.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\moikrug.dtd (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\slovari[2] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\music.dtd (328 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml.zip (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\music\play.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\textonly.xml (405 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\ui\now\images\b-wind_arrow.png (179 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\site.messages.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\translator.messages.xml (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\icons\mailru_orange.png (880 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\geobase.xsl (377 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\yandex-65x26.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\altsearch.messages.xml (236 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\logo.messages.xml (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\quote\quotelist.xml (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\locale\ru\esync.dtd (439 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\groups.png (708 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\typesquatting.xml (670 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\town\geobase.xml (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\route-form\images\form-close.png (273 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\applications\elements.json (168 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\fotki[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\google.png (856 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\textonly.dtd (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\buttons\images\button-plus.png (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\notesmark.png (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\uk\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_ sn_d.png (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\translator\extrainfo.dtd (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_ ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\common[1] (570 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\tr\smartbox.dtd (700 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\icons\ramblersend.png (366 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\notif.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\lingvo[1] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\logo.xml (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\quote.dtd (708 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\locale\be\direct.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\cs\services.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\geolocation.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\yandex[1] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\browserconf[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\locale\kk\esync.dtd (435 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\kk\branding\yandex\search.dtd (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\en\branding\yandex\search.dtd (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\icons\loggedout.png (748 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\en\slice\js\dtconverter.js (537 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_-sn_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\_\ZNKOGssGTwI6nNaZaFsAmYawp4M.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\.manifest.mf (132 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\quote.dtd (845 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\ESyncHelper.exe (2275 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml.zip (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music.xml (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\icons\twitter.png (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\gmail.dll (2001 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.Renderer.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\messages.xml (293 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\show_foto.png (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\ui\messages\images\mail-logo-uk.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\trash.png (213 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\ua\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\brand\tb\gmail.links.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\locale\en\facebook.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\slovari[1] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\icons\gmail32.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\market[1] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\locale\cs\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\quote\quotelist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\addresses.png (636 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\locale\uk\direct.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\ui\header\images\menu-open.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\messages_lock.png (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\quote\quotelist.dtd (84 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\yavideo[1] (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\shadow-pipka.png (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\icons\campaign-outofmoney.png (607 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\direct.xml (739 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\photos.png (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\esync.messages.xml (567 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\mailru[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\maps.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\favorities.png (412 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\locale\kk\odnoklassniki.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\gmail.settings.dtd (55 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\odnoklassniki.dll (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\ic.dtd (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\addressbox-search.png (592 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\be\services.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\accelerators[4] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\quote\stock_down.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\ovc_gr.png (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\nointernet\img\b-music-noinet.png (919 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\ua\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml.zip (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\market.xml (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\locale\uk\yavideo.dtd (936 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\browserconf[2] (382 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\kk\altsearch.dtd (182 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\autoinst[1] (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\login.xml (511 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_ sn_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\ovc_gr.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\site[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\kk\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\locale\ru\direct.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\market[1] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\mail\logo.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\ru\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\icons\off.png (454 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_ra_n.png (603 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\icons\on.png (408 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\about\vendorlogo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\applications.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\cs\branding\yandex\search.dtd (642 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\_\W5-XqgLHVy5pJiEpB8Add3J6zDk.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\be\browser\browserconf.dtd (381 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\status.png (473 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\common.dtd (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\market[2] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\logo.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\accelerators[2] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\ui\dayparts\images\opacity08.png (158 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\ovc_gr.png (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\slovari[1] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\yandex[2] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\friends_requests.png (887 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\icons\Direct_locked_2.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\locale\kk\campaign.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\extra.dtd (420 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\mail[2] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\locale\ru\metrika.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\locale\en\browseroffer.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\messageslocked.png (614 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_ sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\geolocation[1] (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\subscriptions.png (779 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\gmail[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\rambler.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\cs\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\odnoklassniki.messages.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\icons\metrika_16.png (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\facebook-service.png (367 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\traffic\red.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\html\i\gray-bird-of-sadness.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\kk\browser\browserconf.dtd (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\ovc_ ra.png (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\quote[1] (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\ru\altsearch.dtd (467 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\yavideo.xml (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110\elements.exe (7726 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\webmaster.xml (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\quote.dtd (674 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\readability\sprite-readability.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\yandex[1] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\mail\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\1-16.png (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\en\twitter.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\main_pin.png (795 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\style.css (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_-ra_n.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\videoslocked.png (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\logo.dtd (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\browseroffer.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\index.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\locale\be\odnoklassniki.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\browseroffer[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\gmail.settings[1] (55 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\main-logic.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\uk\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\translator.dtd (350 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\mail.dtd (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\shadow-5-corner.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.MainRenderer.js (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\be\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\money.dtd (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\gmail64.dll (943 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\ovc_ sn.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\icons\warning.png (514 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\pagetranslator.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\lingvo[3] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\userinfo.dtd (522 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\tr\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\be\typesquatting.dtd (683 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\html\nosignal.gif (1138 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\stardust64.dll (1964 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\twitter.dll (2393 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\locale\ru\yavideo.dtd (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\widget\slice-commands.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\product[2] (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\town\townlist.dtd (83 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\icons\mc\badge\active_hover.png (374 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\userinfo.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_-ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\widget\_debug.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\main-adapter.js (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\yavideo.dll (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\login[1] (511 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\music.dtd (371 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\profile.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\music.dtd (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\kk\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\mail\folder.png (441 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\birth.png (559 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\slovari[2] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\maps.xml (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\events.png (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\traffic\green.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\cut-url.png (367 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\search-icon.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\locale\en\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\ic.dtd (876 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\site.setting.xsl (355 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\quote\quote_down.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\userinfo\passport.dtd (189 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\tr\typesquatting.dtd (520 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_n.png (547 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\icons\mc\icon.png (628 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\quote.xml (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_-sn_d.png (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\cy.messages.xml (915 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\noflash\music-noflash.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\tr\slice\js\dtconverter.js (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\site.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\town.png (242 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\pagetranslator[1] (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\tb\quote\export.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\geolocation.dtd (72 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\login\auth.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\defaults.dtd (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\html\network-error-ru.html (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\cs\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\translator.dtd (336 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\video.png (543 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\translator.dtd (346 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\ovc_ra.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\uk\typesquatting.dtd (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_ ra_n.png (679 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\fg_d.png (665 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\mail.dtd (735 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\locale\cs\esync.dtd (438 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\market[2] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\locale\tr\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\moikrug\moikrug.png (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\opinions.png (639 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\4-16.png (721 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\accelerators[1] (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\money[1] (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\smartbox[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\profile.messages.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\translator.dtd (274 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_ ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\icons\gmail.png (507 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\quote.dtd (900 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\ovc_sn.png (590 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\dicts.png (562 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\be\yndx_icon.png (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\mailru.dll (1060 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\logo.dtd (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\music\pause.png (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\noteslocked.png (552 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\kk\logobutton\logoconf.dtd (71 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\icons\error.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\Install.log (356654 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\nointernet\_music-nointernet.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\mail.dtd (633 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\skc_n.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\widget\xjsont.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\esync.dll (1768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\wall.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\brand\ua\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_-sn_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\logo.dtd (140 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\ui.css (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\branding\ua\search.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\curtain.png (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\smartbox.messages.xml (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_-sn_d.png (860 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\ua\translator\extrainfo.dtd (104 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\groups.png (626 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\kk\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\share.png (753 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110\elements64.exe (10226 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_-ra_d.png (857 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\locale\be\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\tb\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\rt-by.png (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\nointernet\music-nointernet.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\ui\messages\images\delete.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\widget\http.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.BodyEscHandler.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\geolocation.dtd (129 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\locale\en\esync.dtd (335 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\geolocation\geolocation.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml.zip (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\tb\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\money[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\accelerators[2] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\tr\about\vendorlogo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\ovc_-ra.png (470 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\money.dtd (362 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\html\network-error-cs.html (474 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\skc_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\about\logo-ie-small.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\html\noconnection.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\cs\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\brand\ua\links\links.dtd (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\town\geobase.xml (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\money.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\pagetranslator\langs.xml (365 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\town\geobase.xml (1647 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\_\51qf_exXMsPx--9srpStfhZ9p3g.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\mail[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml.zip (3361 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\quote\quote_up.png (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\yavideo[1] (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\buttons\images\button-green.png (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\icons\gmailsend.png (877 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\weather\gray-16.png (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\en\smartbox.dtd (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.GetMore.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\buttons\images\button-yellow.png (358 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\town[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bl.png (927 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\lingvo[4] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_-sn_n.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\mail.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\icons\reload.png (578 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\messages.png (584 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\transform\messages.jsont (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\mc[1] (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\uk\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\locale\tr\yavideo.dtd (773 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\cs\smartbox.dtd (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\cs\slice\js\dtconverter.js (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml.zip (4545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\smartbox[1] (826 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\ru\smartbox.dtd (826 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\translator[1] (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\AutofillFileds.dat (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bl.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\ui.ie7.css (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\locale\en\vkontakte.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\vkontakte64.dll (2590 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\locale\be\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\ovc_ts_ra.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_ sn_n.png (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\pagetranslator.messages.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\no-more.png (491 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\selected-item.png (235 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\about\background-ie.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\slovari.xml (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\mc.xml (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\suggest-favorite.png (466 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\browser\browserconf.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\geolocation.dtd (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\tr\mc.dtd (289 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\facebook_lock.png (775 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_ts_ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\mail[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\route-form\images\route-b.png (494 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\readability\readability.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_-ra_d.png (823 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\maps[1] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\widget\twitter-api.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\icons\webmaster.png (756 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\cs\mc.dtd (299 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\slovari.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\icons\browser_red_16.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\ru\services.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\defaults[1] (1200 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\follow-button-following.png (747 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\_\w3fZdbIEslxR_9CQRR-ezRNUZ_Q.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_-ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\ui\messages\images\reply.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\en\browser\browserconf.dtd (339 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\route-form\images\form-close-hover.png (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\yandex.ico (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\ui.ie9.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\locale\kk\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\5-16.png (771 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\narod.png (739 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\fg_d.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\yandex[2] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\d-msg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\facebook.png (464 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\textonly.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\0-16.png (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\cy[1] (641 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\logo.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\_\X31pO5JJJKEifJ7sfvuf3mGeD_8.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\pipka.png (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\rambler64.dll (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\product.xml (475 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\pagetranslator\loader.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\icons\mc\badge\anim_0.png (254 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\quote\stock_up.png (587 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\locale\uk\vkontakte.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\uk\services.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\gmail[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\quote\quote.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\notifications_lock.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\slovari[1] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\locale\uk\mailru.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\html\network-error-uk.html (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar.yandex.ru/packages/yandexbar.zip (26831 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\twitter.messages.xml (742 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\cs\icons\yandex.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\icons\icon.png (856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\common[2] (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\direct.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\tb\quote.xml (887 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml.zip (18934 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\services[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\ru\yndx_icon.png (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\money.messages.xml (519 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\ovc_sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\be\logobutton\logoconf.dtd (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_ sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\brand\tb\stations.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\quote\quotelist.dtd (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\geolocation.dtd (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\en\slice\throbber.html (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\say-disabled.png (906 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\follow-button-over.png (819 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\site.intervals.xml (238 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\music.dtd (487 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\subscription[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\campaign[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\slovari[2] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_-ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\locale\uk\campaign.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\ru\branding\yandex\tutorial.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\statistics\statistics.xml (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\cs\slice\network-error.html (470 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\en\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\mailru64.dll (1609 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\ico-odnoklassniki-32.png (932 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\quote\currency_down.png (570 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\textonly.dtd (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\skc_d.png (896 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\fg_n.png (386 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\brand\ua\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\metrika.intervals.xml (259 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\moikrug.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\common.dtd (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\ovc_ra.png (360 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_-ra_n.png (562 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\buttons\images\button-minus.png (237 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\ic\4.png (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\messages.png (480 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\search.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\nointernet\_music-nointernet.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\be\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\be\branding\yandex\search.dtd (669 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\widget\platform.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\throbber-small.gif (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\icons\campaign-off.png (675 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\gmail.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\photosmark.png (560 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\vkontakte[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\lenta[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\ua\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml.zip (3361 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\gray-bird-of-sadness.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\9-16.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_ ra_n.png (986 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\quote.dtd (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_ sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\lingvo[4] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\tb\userinfo\passport.dtd (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\ovc_-ra.png (542 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.Throbber.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\readability\readability.js (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_-sn_d.png (852 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\uk\slice\throbber.html (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\skc_d.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_-sn_n.png (639 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town.messages.xml (865 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\main.png (732 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\locale\kk\radio.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\locale\uk\radio.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_ ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\fav-0.png (248 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\ovc_ sn.png (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\noflash\img\b-music-logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\en\icons\yandex.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\maps[2] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\about\product.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\userinfo.dtd (533 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\market.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\market[1] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\skc_d.png (802 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\ic\0.png (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\cs\slice\throbber.html (352 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\be\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\icons\gmaillock.png (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\userinfo.xml (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.depends.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\slovari[2] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\be\altsearch.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\questions.png (747 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\throbber.gif (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\audio.png (510 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\.manifest[1] (132 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\odnoklassniki[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_ra_n.png (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\fg_d.png (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\subscription\add.png (779 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\facebook.messages.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\transform\overlay.jsont (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\locale\en\direct.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\cs\about\vendorlogo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\ic\6.png (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_-ra_d.png (798 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\friendslocked.png (724 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\twitlink.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\en\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\esync[1] (439 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\mailru.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\about\logo-ie-tiny.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\moikrug.dtd (810 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\metrika.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\tr\altsearch.dtd (142 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\ovc.png (298 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\locale\cs\facebook.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\lenta.messages.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\textonly.dtd (180 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\quote.dtd (859 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_n.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\search-icon-big.png (442 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\kk\slice\js\dtconverter.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\ovc_-sn.png (709 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\news_feed.png (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\textonly.dtd (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\logo[1] (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\webmaster[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.Message.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\uk\browser\browserconf.dtd (387 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\money.png (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\mail\mail.png (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_-sn_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\html\throbber.html (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\yandex[1] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\profilemark.png (631 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\fotki\fotki.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\brand\ua\town\townlinks.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\ic[1] (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\suggest-help.png (238 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\locale\kk\yavideo.dtd (929 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.xml.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\ui\header\images\mail-create.png (326 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\main-ui.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\quote\quotelist.xsl (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\fotki.dtd (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\cs\logobutton\logoconf.dtd (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\locale\en\mailru.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\maps[2] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\tr\services.dtd (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\uk\yndx_icon.png (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\locale\uk\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\kk\slice\throbber.html (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\be\smartbox.dtd (836 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\locale\en\radio.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\yandex.png (577 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\stations.json (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\metrika[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\locale\ru\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\quote\gold_down.png (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\buttons\images\button-ball-dis.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\money.dtd (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\userinfo.dtd (507 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\ovc_sn.png (691 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\locale\ru\vkontakte.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\quote\quotelist.dtd (87 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\common.dtd (188 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\direct[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\direct.png (567 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ sn_d-inverted.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\accelerators[3] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_-ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\yandex.ico (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\cards.png (782 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\textonly.dtd (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\moikrug.dtd (818 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\6-16.png (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\html\noflash.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_sn_d.png (889 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\textonly.dtd (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\tr\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\pagetranslator\pagetranslator.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_ ra_d.png (907 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\groupsmark.png (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\money.dtd (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\town\townlist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\smartbox.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\money\money.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\textonly.messages.xml (277 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\photo.png (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\ovc_ sn.png (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\twitter[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_ts_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\fg_d-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\say-default.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\esync[1] (476 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\photoslocked.png (615 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\streamplayer.exe (315 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\locale\kk\mailru.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\ui\messages\images\read.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\advertising.png (799 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\icons\direct.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\lingvo.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\music[1] (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\gmail.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\2-16.png (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\defaults[1] (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\ru\browser\browserconf.dtd (382 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_-ra_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\uk\smartbox.dtd (858 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\webmaster[1] (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\ovc_-ra.png (635 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_d.png (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\kk\smartbox.dtd (812 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\ru\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\mail.dtd (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\accelerators[2] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\slovari[1] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\en\about\vendorlogo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\ovc_ts_ra.png (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\logo.dtd (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\vkontakte.dll (2080 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\cs\logobutton\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\en\altsearch.dtd (117 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\ru\slice\network-error.html (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\videos.png (836 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\schedule.png (774 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_-ra_n.png (846 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml.zip (7345 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\town\geobase.xml (1451 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\logo[1] (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\en\logobutton\logoconf.dtd (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\ui\messages\images\mail-logo-en.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\maps[1] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\mail.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\friends.png (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\ovc_ts_ra.png (714 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\cs\typesquatting.dtd (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\brand\tb\gmail.settings.dtd (54 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\json.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\locale\cs\radio.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\locale\ru\odnoklassniki.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\iehistory.db-journal (14816 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\style.css (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_ra_d.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\radio.xml (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\quote.messages.xml (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\readability\applied.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\sb64.dll (253 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\twitter.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\main-adapter.js (1960 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\icons\virused.png (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\quote.dtd (666 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\facebook.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\twitter64.dll (1727 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\ovc_ ra.png (369 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_sn_n.png (662 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\webmaster.intervals.xml (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\ovc_-sn.png (395 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\calendar.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\metrika.xml (901 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\skc_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\profile[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\town[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\ru\slice\throbber.html (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\mail.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\readability\ready.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\avatar-48.png (559 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\ovc_ sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\moikrug.dtd (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bl.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.TabController.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\ovc_ra.png (532 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\tr\branding\yandex\search.dtd (629 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\quote\gold_up.png (658 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\fg_n.png (681 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_sn_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\locale\cs\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\ovc.png (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\ovc_sn.png (796 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\userinfo.dtd (581 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\product[1] (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\uk\slice\js\dtconverter.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\textonly[1] (405 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\ic\1.png (176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\accelerators[2] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\avatar-overlay.png (109 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\ru\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.DiffTimer.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\uk\altsearch.dtd (199 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\branding\tb\search.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\ru\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_-ra_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\uk\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\widget\utils.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_-ra_n.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\kk\slice\network-error.html (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_sn_d-inverted.svg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\branding\yandex\search.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_-ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\ovc_ts_ra.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\subscription\subscription.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\videosmark.png (865 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\accelerators[1] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\ui.js (1099 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\metrics.png (541 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\friend.png (668 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\rambler.dll (1687 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml.zip (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\sblinks[1] (596 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\town\townlist.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\campaign[1] (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\translator.dtd (260 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_ sn_n.png (671 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\pagetranslator.xml (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\altsearch.xml (526 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\say-active.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\geolocation[1] (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\fotki.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\rambler[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\main-ui.js (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\suggest-tab.png (229 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\ovc_ra.png (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\tr\logobutton\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\icons\site_noauth.png (826 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\yandex[1] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\ObjectParser.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\ovc.png (473 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\messagesmark.png (597 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\ru\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\messages-bg-top.png (794 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\userinfo[1] (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\kk\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\locale\ru\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\campaign.xml (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\suggest-ico-x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\cs\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\moikrug.messages.xml (946 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\ic\5.png (213 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\brand\yandex\sblinks.dtd (596 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\be\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\userinfo.dtd (573 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\common[1] (570 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\birdie.png (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\sblinks.dtd (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\tb\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music.messages.xml (510 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_sn_n.png (659 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\ui\messages\images\spam.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\icons\mc\badge\hover.png (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\radio.dll (1727 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\en\slice\network-error.html (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_n.png (569 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\quote\export.dtd (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\yandex.xml (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\ovc_sn.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\en\logobutton\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\fg_d.png (983 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\locale\uk\facebook.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_ sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\main-logic.js (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\translator.dtd (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_-sn-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\defaults[2] (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_-ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\market[1] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\en\mc.dtd (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\main-logic.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\main-adapter.js (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_gr.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\skc_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\ovc_ts_ra.png (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\mail.dtd (715 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\tr\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\music[1] (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\quote[1] (900 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\be\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\en\typesquatting.dtd (510 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.Translate.js (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\maps[1] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\ic.dtd (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\login.dtd (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_d.png (786 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_sn_d.svg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\locale\uk\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\moikrug.dtd (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\ovc_-sn.png (534 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\kk\typesquatting.dtd (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\radio[1] (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\kk\services.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\browseroffer[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\maps[3] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\tr\slice\network-error.html (466 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\del.png (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_sn_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\buttons\images\button-ball-all.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\ovc_-sn.png (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\money.dtd (580 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\ru\typesquatting.dtd (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\locale\kk\facebook.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\icons\site_settings.png (707 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\pagetranslator\injector.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\mail.dtd (482 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\brand\uk\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\buttons\images\button-route.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\ovc_gr.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\follow-button.png (813 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\8-16.png (696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\odnoklassniki[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\icons\campaign_locked2.png (831 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\locale\be\mailru.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\quote\currency_up.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\en\services.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\translator[1] (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\odnoklassniki.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\1.png (137 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\town\townlist.dtd (88 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\skc_d-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\mail\mail-menu.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\traffic\yellow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\facebook64.dll (2354 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\lingvo[2] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\locale\en\campaign.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\readability\readability-print.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\typesquatting[1] (670 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\geobase.xml (2159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\mail[5] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\tab-active-pipka.png (120 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml.zip (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml.zip (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\kk\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\lingvo.xml (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\ui\messages\images\mail-logo-ru.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\music\music.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\newsfeed.png (364 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\icons\mailrureload3.png (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\tr\slice\throbber.html (355 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\rambler[1] (899 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\ic\3.png (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\be\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\uk\logobutton\logoconf.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\mc.messages.xml (681 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\quote\quotelist.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\cy.xml (641 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\fg_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\skc_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\locale\ru\site.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\main-ui.js (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\browseroffer.dll (2630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\mail[3] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\html\network-error-be.html (530 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\yavideo.messages.xml (867 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\site[1] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\tr\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\common-ui\b-spinner\images\45.gif (1372 bytes)
%Program Files% (x86)\Yandex\Common\elements64.exe (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\shadow-5-round.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\icons\mailru.png (858 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\presets\http://bar.yandex.ru/packages/yandexbar.xml (126 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml.zip (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\nointernet\img\b-music-logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_ sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\guest.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_ra_n.png (676 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\money.dtd (340 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\icons\loggedin.png (592 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\webmaster64.dll (2472 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\locale\be\vkontakte.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\cs\browser\browserconf.dtd (369 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\ua\town\townlinks.dtd (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\yandex[2] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\matches.png (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\auth_overlay.png (216 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\be\mc.dtd (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\style.css (980 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\style.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\skc_n.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\mail[3] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\kk\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\html\network-error-tr.html (467 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\icons\reload.png (407 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\mailru[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\browseroffer.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\wiki.png (534 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\style-authpages.css (499 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\7-16.png (645 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_ ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\ovc_ ra.png (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\accelerators[3] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\10-16.png (706 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\icons\icon.png (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\icons\ramblerlock.png (552 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_sn_d.png (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_ sn_d.png (850 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\tr\browser\browserconf.dtd (343 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\mail.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\locale\tr\esync.dtd (325 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\profile.png (448 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\translator.xml (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\ru\mc.dtd (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.anim.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_ ra_d.png (777 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\translator\translator.png (636 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\icons\yavideo_on.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\brand\ua\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\cs\altsearch.dtd (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\friendsmark.png (678 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_n.png (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\brand\tb\sblinks.dtd (377 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\geolocation.dtd (75 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\note.png (339 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\notifications_new.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\retweet.png (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\offline-19.png (705 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\typesquatting[1] (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\altsearch64.dll (2042 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\login[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\mail\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\notes.png (415 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\mail[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\smartbox.png (643 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_gr-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml.zip (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\tr\gmail.links.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\rambler.xml (899 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\fg_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\facebook[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.Overlay.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\locale\ru\mailru.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\userinfo.dtd (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\locale\tr\facebook.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\town\townlinks.dtd (133 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\profilelocked.png (674 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\noflash\_music-noflash.ie.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\twitter[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\gray-16.png (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\en\yndx_icon.png (836 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\3-16.png (773 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\route-form\images\button-route.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\common.dtd (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\locale\be\facebook.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\smartbox.dll (1171 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\login.dtd (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\yandex-130x52.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\toolbar\autoinst.xml (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\mail.dtd (541 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\lingvo[1] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\uk\branding\yandex\search.dtd (683 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\tb\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\suggest-settings.png (334 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\messages_2.png (414 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\login.dtd (787 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\counters.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\accelerators[1] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\esync.xml (476 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\birth_pin.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\main_lock.png (792 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\mail\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\defaults[1] (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\passport\passport.xml (181 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\brand\ua\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\be\slice\network-error.html (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\icon16.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\music.dtd (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\campaign.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\msg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\follow-button-unfollow.png (762 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\chelper\chelper.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\application.html (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\ovc_ ra.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.MessageComposer.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\tb\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\smartbox64.dll (326 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\locale\en\odnoklassniki.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\say-active-disabled.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\statistics[1] (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\locale\uk\odnoklassniki.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\accelerators[3] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\locale\en\yavideo.dtd (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\geolocation.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\odnoklassniki64.dll (1610 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_d.png (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\icons\yavideo_off.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\product[1] (1428 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\locale\ru\campaign.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\icons\error.png (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\addressbox-navigate.png (737 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\quote\quotelist.dtd (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\bg75.png (109 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\userinfo.dtd (573 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\icons\mailrunewmsg_orange.png (905 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\accelerators[4] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\html\network-error-en.html (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\be\slice\throbber.html (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\icons\direct_.png (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\locale\be\esync.dtd (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\iehistory.db (854 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\fav-yandex.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\notifications.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_ sn_n.png (694 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\search-inactive.png (614 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\skc_d.png (634 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\en\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\ru\branding\yandex\search.dtd (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\locale\tr\radio.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\_\4E65815M2vf3ujtn2jbo66SmbWo.gif (872 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\radio64.dll (2041 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\radio.messages.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\suggest-button.9.png (301 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\ovc_ ra.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\locale\ru\radio.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\locale\kk\vkontakte.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\icons\mailrunewmsg.png (827 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\games.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\town.dtd (911 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\metrika[1] (901 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\buttons\images\button-red.png (348 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_ ra_d.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\direct[1] (739 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\icons\metrika_16_key.png (698 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\ui.ie8.css (1294 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\facebook.dll (1805 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\groupslocked.png (707 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\maps[1] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\pagetranslator.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\weather.png (633 bytes)

The process setup.exe:4060 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\replace (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\20.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\19.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\zh-TW.pak (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\pt-PT.pak (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\7.jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\d3dcompiler_46.dll (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\pins\browser (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\15.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\31.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe (15068 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\11.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\extensions\yahelper.crx (1667 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\11.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\gopnelejddjjkamjfblkcijjikkinnec\brand_settings.json (156 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\9.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\7.jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\morphology\stop-words-ru-RU.list (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\es.pak (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\brand_skins.json (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\19.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\brand-package.cab (10815 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\15.jpg (789 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\5.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\Desktop\Yandex.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\8.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\nacl_irt_x86_32.nexe (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\icudtl.dat (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\translator (992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\resources.pak (14999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\cs.pak (274 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\6.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\34.jpg (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\16.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\translator (992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\30.jpg (1011 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\browser_child.dll (36738 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\gopnelejddjjkamjfblkcijjikkinnec\brand_settings.json (156 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\p2c-phone-schemes (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\18.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\master_preferences (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\40.0.2214.3645.manifest (229 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\libegl.dll (211 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\browser_200_percent.pak (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\20.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\2.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\plugins\npmedia_plugin.dll (907 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\5.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win1.jpg (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Extensions\yandex_mail.crx (98 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\smartback (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win2.jpg (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\crash_service.exe (454 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\17.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\morphology\dictionary-ru-RU.mrf.sig (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\master_preferences (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\13.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\safebrowsing\download.png (437 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\browser.7z (323778 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\wow_helper.exe (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\tr.pak (266 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\p2c-phone-schemes (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\pins\browser\16_32.ru.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\partner-package.cab (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\fr.pak (296 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\morphology\dictionary-ru-RU.mrf (17626 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\18.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\browser_elf.dll (133 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\morphology\stop-words-ru-RU.list (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\33.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\extensions\antishock-prod.crx (13773 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\partner_config (122 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\setup.exe (7345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\minwhite (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\show-dlg.exe (389 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win3.jpg (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\bgeakjmfknncppbmgkkfbglnodccdecp\brand_settings.json (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\pins\browser\yandex.website (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\pins\browser\Yandex.exe (103 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\10.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\33.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\10.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\uk.pak (418 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\minwhite (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\yapr.dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\morphology\dictionary-ru-RU.mrf.sig (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\yapdf.dll (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\en-US.pak (229 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\kk.pak (319 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\brand_config (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\14.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\Test\test-com (608 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\chua_list (896 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\brand_skins.json (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\3.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\3.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\plugins\plugin.vch (372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win2.jpg (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\pins\browser\16_32.en.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\elokbjeafkcggjfjkakpchmcmhkhaofn\brand_settings.json (289 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\browser_100_percent.pak (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\31.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\pins\fb\fb.ico (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\ja.pak (340 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\yupdate-exec.exe (492 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\zh-CN.pak (220 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Extensions\yahelper.crx (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Extensions\external_extensions.json (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\browser.dll (28403 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\9.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\registry (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\extensions\ihhcdinmaceokcdmbddlclfejhadgpgg.json (70 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\Test\test-com (608 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\yandex_browser_installer.log (410724 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\4.jpg (198 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\smartback (475 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\brand_settings.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\replace (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\14.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\clidmgr.exe (151 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\yawp.dll (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\fcgfaidpicddcilhjhafmmcgfodijhjd\brand_settings.json (226 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\nacl_irt_x86_64.nexe (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\morphology (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\xinput1_3.dll (81 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\pins\fb\FBPinLauncher.exe (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win1.jpg (799 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Extensions\plmneencfmbjfgbkfiinjelmngigejjh.json (76 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\32.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\rewrite_list (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\elokbjeafkcggjfjkakpchmcmhkhaofn\brand_settings.json (289 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\winrt_helper.dll (209 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\13.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\fcgfaidpicddcilhjhafmmcgfodijhjd\brand_settings.json (226 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\bgeakjmfknncppbmgkkfbglnodccdecp\brand_settings.json (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\pt-BR.pak (264 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\browser.exe (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\libexif.dll (310 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\6.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\suspend_api_check.exe (244 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\16.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\morphology\dictionary-ru-RU.mrf (7547 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\de.pak (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Yandex\Yandex.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\8.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\libglesv2.dll (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\ru.pak (417 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\17.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe (828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\12.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\check_whitelist (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\brand_settings.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\extensions (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\plugins\npswf32_16_0_0_305.dll (793 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\4.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\service_update.exe (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\nacl64.exe (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\2.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\clids-yabrowser.xml (267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\partner_config (122 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win3.jpg (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\30.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\32.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\registry (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Yandex.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex (2).lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\extensions\plmneencfmbjfgbkfiinjelmngigejjh.json (76 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\safebrowsing\download.png (437 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\dllyupdate.dll (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\rewrite_list (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Extensions\antishock-prod.crx (5873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\12.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\ffmpegsumo.dll (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Extensions\ihhcdinmaceokcdmbddlclfejhadgpgg.json (70 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\34.jpg (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\brand_config (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\check_whitelist (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\it.pak (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\chua_list (896 bytes)

The process UmmyVideoDownloader.tmp:1860 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UmmyVideoDownloader\UmmyVideoDownloader.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\ya_distr_en.bmp (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\lang\is-37ID9.tmp (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\downloader.exe (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Tar6A47.tmp (2712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\lang\is-82QA9.tmp (642 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UmmyVideoDownloader\ÃÂ£ÃÂ´ÃÂ°ÃÂ»ÃÂ¸Ã‘â€šÃ‘Å’ UmmyVideoDownloader.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\lang\is-MKJUN.tmp (648 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 (656 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\yandex_browser_setup_tr.bmp (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\yandex_browser_setup.bmp (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\lang\is-B82HR.tmp (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\lang\is-I48RH.tmp (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\lang\is-CORPS.tmp (590 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\UmmyVideoDownloader.exe (1358 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\is-55F5G.tmp (33802 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\yandex_browser_setup_small.bmp (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\yandex_browser_banner_en.bmp (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\_isetup\_setup64.tmp (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\lang\is-D653H.tmp (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\SendHTTP.dll (849 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\RegProto.exe (98 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\helper.dll (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\lang\is-13215.tmp (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\lang\is-TTPL7.tmp (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\is-JA2MN.tmp (56865 bytes)
C:\Users\Public\Desktop\UmmyVideoDownloader.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\is-6VC1V.tmp (223127 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\lang\is-BC1UK.tmp (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\is-QU94F.tmp (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\lang\is-LA56L.tmp (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\yandex_browser_setup_tr_small.bmp (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Cab6A46.tmp (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\unins000.dat (19997 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\unins000.exe (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\is-JHA49.tmp (60 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\_isetup\_shfoldr.dll (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\ya_distr_ru.bmp (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\WizModernImage-IS.bmp (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\yandex_browser_banner_ru.bmp (673 bytes)

The process MsiExec.exe:2288 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_opera.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-button_theme_grey-no-transparent-l.ie.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_qs.html (3 bytes)
C:\Windows\Installer\MSI59E7.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-input.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_google-chrome.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-popupa_theme_ffffff.png (782 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hosts.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-restart-info.png (434 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_yandex-chrome.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-checkbox_theme_grey-l.png (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_type_hint.png (244 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-button_theme_grey-l.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-informer-close.png (527 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-yandex-browser__icon.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_common.ie6.css (7288 bytes)
C:\Windows\Installer\MSI6D11.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_common.ie8.css (6984 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\ff.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\uk_dlg_install_error.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\u2-ctrl.exe (495 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-yandex-browser__icon.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\tr_dlg_before_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\locale.xml (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_opt.html (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\jquery.min.js (7192 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vendor00000.xml (209 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_opera-new.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-alert.png (152 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-switch_theme_toggle-s-grey.ie9.png (127 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\common.js (2 bytes)
C:\Windows\Installer\MSI6CC2.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_yandex-internet.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\ch.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_common.ie9.css (5952 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_common.ie8.css (6776 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\tr_dlg_install_error.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\ie.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\upd.zip (189 bytes)
C:\Windows\Installer\MSI60CA.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-yandex-logo_lang_en.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\_common.js (14864 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp_qs2_guard.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\br_opt.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\uk_sizes.xml (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-alert.png (152 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\bad_ie.xml (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hosts.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-switch_theme_toggle-m-grey.ie9.png (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\tr_sizes.xml (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp2_guard.html (3 bytes)
C:\Windows\Installer\MSI6E1D.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-select-grey-fade.ie.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\show.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-popupa__close.png (376 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hosts.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\rc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-popupa__close.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp_qs2_guard.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\dlg_before_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_opt.html (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-checkbox_theme_grey-tick.gif (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_opt.html (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\scut.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-tool-name.png (501 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp_qs_guard.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_yandex-browser.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_browser_opera.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-yandex-logo_lang_ru.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\version.rss (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\qs2.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\La6qi18Z8LwgnZdsAr1qy1GwCwo.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-checkbox_theme_grey-tick.gif (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_browser_fx.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-yandex-logo_lang_en.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp_qs2.html (3 bytes)
C:\Windows\Installer\MSI4CEB.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-tool-name.png (501 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_qs.html (3 bytes)
C:\Windows\Installer\MSI688C.tmp (167 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\hp_qs2.js (821 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_yandex.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_comodo-dragon.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_internet-mailru.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\opt.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\sf.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hosts.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_type_hint.ie6.png (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\mc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_common.css (4592 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\oc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_ie.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\about.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\tr_dlg_after_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_browser_yandex.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-alert__icon.png (452 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-button_theme_grey-no-transparent-l.ie.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-button_theme_grey-l.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_common.ie7.css (6776 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\dc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp_guard.html (3 bytes)
C:\Windows\Installer\MSI429C.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-popupa_theme_ffffff.png (782 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-restart-info.png (434 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\dlg_install_error.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\logo.png (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\sizes.xml (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\yupdate-exec.exe (495 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-select-grey-fade.ie.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-yandex-browser__cancel.png (376 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\popup.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-input.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\dlg_after_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-switch_theme_toggle-m-grey.ie9.png (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\uk_dlg_after_install.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-yandex-browser__cancel.png (376 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\uk_dlg_before_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\clids-bm.xml (236 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\_common.js (15336 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\dlg_after_install.html (2 bytes)
C:\Windows\Installer\MSI4BA2.tmp (151 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_chromium.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_fx.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_opt.html (776 bytes)
C:\Windows\Installer\MSI6159.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_common.css (5856 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_opt.html (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\hp2.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_common.ie9.css (4592 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_opt.html (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_rambler-nichrome.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\cpy.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlgs.zip (459 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\logo_big.png (848 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\logo_big.png (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\gc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hosts.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-informer-close.png (527 bytes)
C:\Windows\Installer\MSI6B79.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\tr_dlg_after_install.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-select-grey-selected.ie.png (465 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-checkbox_theme_grey-l.png (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-select-grey-selected.ie.png (465 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_safari.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_type_hint.ie6.png (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\ico_def.ico (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\uk_dlg_after_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\op.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_browser_ie.png (2 bytes)
C:\Windows\Installer\MSI7436.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\jquery.min.js (7192 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_common.ie7.css (6984 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-alert__icon.png (452 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\yc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_common.ie6.css (6888 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\hp_qs.js (820 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_type_hint.png (244 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-yandex-logo_lang_ru.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\La6qi18Z8LwgnZdsAr1qy1GwCwo.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hosts.html (3 bytes)

The process MsiExec.exe:3476 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Bookmarks_20150420095142.backup (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\WinReg.jsm (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\installer.js (3808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\manifest.mf (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\AddonManager.jsm (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\promise.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_13.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\netutils.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\config.js (887 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Top Sites (1932 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\vendorCookie.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\presets\http://bar.yandex.ru/presets/ua.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\nsIYaSearch.xpt (120 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-auth\pwdmng.jsm (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal (37022 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\backup.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\fileutils.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\brand_prov.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonStatus.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\integration.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\misc.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\esync.zip (160193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\compapi.js (3560 bytes)
C:\Windows\Installer\MSI268E.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\workers\barnavig.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\screenshotsGrabber.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\colors.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-7_8_0.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\WindowListener.jsm (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\branding.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-advertisement.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\History (4588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\zigbert.rsa (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\ui (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\dayuse.js (2600 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\install.js (127 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\internalStructure.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\strutils.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\statistics.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\frontendHelper.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\mail.yandex.com_20150420095144.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\urlRewrite.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\workers\barnavig.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Web Data (24431 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\barplugin.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Local Storage\chrome-extension_pchfckkccldkbclgdepkaonamkignanh_0.localstorage (1187 bytes)
C:\Windows\Installer\MSI215D.tmp (221 bytes)
C:\Windows\Installer\MSI290F.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Bookmarks (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\install.rdf (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vendor00000.xml (2402 bytes)
C:\Windows\Installer\MSIB81E.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\strutils.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Bookmarks (2 bytes)
C:\Windows\Installer\MSI17EA.tmp (221 bytes)
C:\Windows\Installer\MSIBC07.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\backgroundImages.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native_comps.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\chromeappsstore.sqlite (59 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\autoinst.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\database.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\direct.zip (21288 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\auth.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Web Data-journal (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\altsearch.zip (41656 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\fastdial.js (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\barnavig.js (4592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Log4Moz.jsm (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\syncPinned.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\ycookie.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\radio.zip (42472 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\AddonManager.jsm (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\cachedres.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\strbundle.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_3.js (1 bytes)
C:\Windows\Installer\MSID2B8.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\patterns.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\vendor\vendor.xml (1176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Local State (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Web Data (609 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\dayuse.js (2600 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonmgr.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\async.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\places.sqlite (9176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Favicons-journal (32780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\database.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\zigbert.rsa (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\searchSuggest.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\async.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\DataURI.jsm (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\databaseMigration.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_16.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\presets\http://bar.yandex.ru/presets/default-partner.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-auth\auth-manager.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\package-12111827.zip (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\safebrowsing.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_14.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\region.properties (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\nsSearchSuggestions.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\integration.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\manifest.mf (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Top Sites-journal (5062 bytes)
C:\Windows\Installer\MSIB608.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\Favorites\Links\Yandex.url (292 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\SimpleHTMLParser.jsm (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\compsusage.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Preferences (246 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_3_0.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\vendor\vendor.xml (1102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\default.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Web Data (609 bytes)
C:\Windows\Installer\MSIF1A2.tmp (221 bytes)
C:\Windows\Installer\MSI2A1C.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\searchplugins\yandex.com-095142.xml (9 bytes)
C:\Windows\Installer\MSIB7BF.tmp (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\sysutils.js (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\nsYaSearch.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\dataprovider.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Stemmer.jsm (18672 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonfs.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\blacklist.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\lite_installer.exe (179 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonmgr.js (4 bytes)
C:\Windows\Installer\MSID259.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\chrome.manifest (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\legacy.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\xmlutils.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Preferences (348 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\statistics\downloads.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\preferences\yasearch.js (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\package.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Foundation.jsm (938 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\package.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\History (12611 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\presets\http://bar.yandex.ru/presets/tb.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\mailruStat.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\dynamic-preferences\brand\ua\safebrowsing.js (915 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\clids.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\patterns.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_12.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_NwZTjP6Fe2O47lZ (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\ecustom.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\SimpleProtocol.jsm (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\safeBrowsing.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Preferences (944 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Preferences_20150420095142.backup (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\unit.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\gmail.zip (28224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\WindowListener.jsm (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\contentEnvironment.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\presets\http://bar.yandex.ru/presets/default.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\zigbert.sf (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\defender.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pchfckkccldkbclgdepkaonamkignanh_0.localstorage-journal (14083 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Top Sites (1151 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\aboutSupport.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\favorites.db (523 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\strbundle.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\clids-barie.xml (679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\odnoklassniki.zip (35448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\ncparser.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\browserTheme.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\clids-yabrowser.xml (369 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Favicons (5572 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Favicons (5137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\authAdapter.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\preset.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js_20150420095142.backup (4 bytes)
C:\Windows\Installer\MSIBBC8.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\npwidget.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_7_0.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\core.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\barnavig.js (4592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\misc.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\incoming.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\browserUsage.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\alarms.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\twitter.zip (38624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\overlay_prov.js (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\ycookie.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal (5380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\task.js (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\WinReg.jsm (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Favicons (5137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\notifications.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\zigbert.sf (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\thumbsSuggest.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\fileutils.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Bookmarks (793 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected] (1 bytes)
C:\Windows\Installer\MSIB6B5.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\netutils.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Stemmer.jsm (18672 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\chrome\yasearch.jar (363925 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-7_6_0.js (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\stdout.log (40 bytes)
C:\Users\"%CurrentUserName%"\Favorites\Links\Mail.url (294 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\advertisement.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\favorites.db-journal (5062 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\pacman.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Mozilla\Firefox\Profiles\zwvbr04l.default\thumbnails\b0019c9b7dbb933ace6f72683a9503f4.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (7943 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\browseroffer.zip (52224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Favicons (4725 bytes)
C:\Windows\Installer\MSID247.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Preferences.jsm (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\screenshots.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\core.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-7_8_1.js (609 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-6_4_0.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Log4Moz.jsm (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\layout.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\slices.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\update.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\promise.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\protocolSupport.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\browserconfig.properties (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_oovdjHdrr1e7qjB (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\DataURI.jsm (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\install.rdf (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\vkontakte.zip (36616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\aboutSupport.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\distribution.js (266 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Favicons-journal (32780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\xb.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\statistics.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\ecustom.js (196 bytes)
C:\Windows\Installer\MSID403.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150420095144.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\mailru.zip (24984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\sender.exe (308 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonStatus.js (776 bytes)
C:\Windows\Installer\MSID2D8.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-auth\utils.jsm (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\favicons.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\clids-bm.xml (219 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\xbProtocol.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Preferences_20150420095142.backup (67 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\backup00000.reg (2196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_6_0.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\branding.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\syncTopHistory.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\app.js (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences_20150420095141.backup (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_5_0.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Foundation.jsm (903 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\rambler.zip (21288 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Preferences_20150420095142.backup (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\config.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_0.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\Yandex.website (497 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\places.sqlite-wal (19187 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\chromeappsstore.sqlite-journal (3302 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\chrome.manifest (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonfs.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\usageHistory.js (196 bytes)
C:\Windows\Installer\MSI299E.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\sysutils.js (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\searchExample.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\bookmarks.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150420095143.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\History-journal (18998 bytes)
C:\Windows\Installer\MSIBCE2.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Local Storage\chrome-extension_pchfckkccldkbclgdepkaonamkignanh_0.localstorage-journal (14083 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\thumbs.js (4056 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\cloudsource.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\passport.js (3 bytes)
C:\Windows\Installer\MSI14ED.tmp (221 bytes)
C:\Windows\Installer\MSID2A8.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\metrika.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\yavideo.zip (41488 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\brandsvc.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\History-journal (14544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\manifest.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\omni.ja_20150420095140.zip (44854 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\#Bar4IE.cab (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\bar.js (3560 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex.website (497 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\clids-vbie.xml (679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\bookmarksStat.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Favicons-journal (32780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\sliceapi.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-5_2_0.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-utils.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\smartbox.zip (109915 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\dynamic-preferences\safebrowsing.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\clids.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150420095142.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Bookmarks_20150420095142.backup (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\facebook.zip (28496 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\chrome\yandex-vb.jar (64481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\preset-with-manifest.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Web Data-journal (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\sync.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (326 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-7_0_0.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pchfckkccldkbclgdepkaonamkignanh_0.localstorage (1187 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Bookmarks (793 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\installer.js (3808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\task.js (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\webmaster.zip (31120 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\xmlutils.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Web Data-journal (7534 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\First Run (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\dlqueue.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_9.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\favorites.db (523 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\SimpleProtocol.jsm (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_0_0.js (943 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\install.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\widgetlib.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\favorites.db-journal (5062 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_f1QFIq4EN99B7ij (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\sb.zip (60968 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\anonymousStatistic.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-auth\authdefs.jsm (242 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_1_0.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Preferences.jsm (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\preferences\yandex-vb.js (778 bytes)
C:\Windows\Installer\MSID248.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (60229 bytes)
C:\Windows\Installer\MSIB937.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\SimpleHTMLParser.jsm (196 bytes)

The process MsiExec.exe:3900 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files% (x86)\Yandex\FastDial\fastdial.dll (146 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Yandex\VB\Install.log (3990 bytes)

The process MsiExec.exe:3940 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\Install.log (1442 bytes)

The process MsiExec.exe:3796 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Yandex\Toolbar\Install.log (9208 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[4] (1 bytes)
%Program Files% (x86)\Yandex\Elements\barshims.dll (106 bytes)
%Program Files% (x86)\Yandex\Elements\bartab.dll (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[3] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[2] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[1] (475 bytes)

The process MsiExec.exe:3920 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files% (x86)\Yandex\FastDial\fastdial64.dll (146 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Yandex\VB\Install.log (3990 bytes)

The process MsiExec.exe:1860 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Windows\Installer\MSI2353.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (1522 bytes)

The process MsiExec.exe:3848 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[7] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[6] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[8] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[5] (475 bytes)
%Program Files% (x86)\Yandex\Elements\bartab64.dll (1018 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Yandex\Toolbar\Install.log (8186 bytes)
%Program Files% (x86)\Yandex\Elements\barshims64.dll (126 bytes)

The process %original file name%.exe:2784 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4 (1480 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5080DC7A65DB6A5960ECD874088F3328_BC00434159DAE8351451CCE9C748F5D7 (1504 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\UmmyVideoDownloader.exe (55388 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D2B5168CDD0EBF4C0C8EA1C3A1FAE07F_7C71B7FDE72B29E5A0333876A274976E (1536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\UmmyVideoDownloader_setup[1].exe (1290996 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4 (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D2B5168CDD0EBF4C0C8EA1C3A1FAE07F_7C71B7FDE72B29E5A0333876A274976E (472 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5080DC7A65DB6A5960ECD874088F3328_BC00434159DAE8351451CCE9C748F5D7 (727 bytes)

The process elements64.exe:3728 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\money\money.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\0.png (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\pagetranslator.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\userinfo\passport.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\mail (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\currency_up.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\FwRhzXrrYgJtsGITD_YiU0Dtuk0.png (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\data.zip.patch (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\ovc_gr.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\logo.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\readability\readability-print.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\textonly.dtd (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialshims.dll.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\ovc_-sn.png (395 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_ts_ra.png (714 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\pCHi2EbFGprgWW3mMpMtDX54NQM.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\main-ui.js (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\moikrug.dtd (810 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_-sn_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\route-form\images\form-close.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\buttons\images\button-minus.png (237 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\skc_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_-ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\RlCxSpz6nMOlD7d9slWYf-6j8Jw.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\quote.dtd (674 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\bbQ1jlb4T8Jy-s_k1Nz6W3nWt7g.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\town\townlist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-ball-dis.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\moikrug.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\quote.messages.xml (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\money.messages.xml (519 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\iFjn01ugU1GyG0iHwFsofKRnDeM.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-ui\b-spinner\images\b-spinner.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_ ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\quote\quotelist.dtd (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\town.dtd (911 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-ui\b-spinner\images\28.gif (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\ovc_ts_ra.png (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\style.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\epVOh1xBimDwi8BSMFWMEy7gE6E.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialframe64.dll.patch (1728 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\town\townlist.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\B_GHi1n15TIonEBlfjSOiyj2Km4.svg (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_-ra.png (470 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\money.dtd (362 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\quote\quotelist.dtd.patch (34 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-libs\polyfills.js.patch (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\header\images\mail-create.png (326 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\lenta.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\oL9859A-5vIMHo11ArMir5KkeLc.png (316 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_-sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\ovc_sn.png (590 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\rZ9cub6wgvpWuc-F5gKU_pYGEfg.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\ic\2.png (215 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_ sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_-sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_ ra.png (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\pagetranslator (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\PudDxssXdb8JdlcekuwRV8FSHVM.png (465 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_common.css.patch (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\8-16.png (696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_ ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\quote.dtd (666 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\geobase.xsl (377 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_common.ie7.css.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bl.png (927 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\common.dtd (188 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\header\images\mail-refresh.png (944 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\userinfo.dtd (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\money.dtd (362 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\money.dtd (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\noflash\_music-noflash.ie.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\tb\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_sn_n.png (659 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\index.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\RVzdJ9OJh0AWiuUZ2gi5Dwus4aw.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-ui\b-spinner\images\45.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\cy.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\skc_n.png (720 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\8Tybci2Ic-b9EusnAqnwjdWOCYU.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\ic.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\mOgNznzQgwqm21KZjo3hk5YUGWU.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\main-adapter.js (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\J7daNOyAa24zy3Ir-wWKTeQNeuo.png (576 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\quote\export.dtd (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\style.css (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_ sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_ ra.png (369 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\YCbcsQcGggriiKTU5E8gjUWGekA.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_-ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\town.png (242 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\mail\maillinks.dtd.patch (34 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_ts_ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\moikrug.messages.xml (946 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\cy.messages.xml (915 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\mail\mail-menu.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\route-form\images\route-b.png (494 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\messages.xml (293 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\route-form\images\form-close-hover.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\images\mail_128.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barframe.dll.patch (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_ra_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-libs\polyfills.js.patch (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\HuoOcff43SvB1OVXDmTAAXmFs0g.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\read.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\town (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\QZwxmXJnFKgedMKrAEej8n07z5k.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_ sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\translator\translator.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\mOgNznzQgwqm21KZjo3hk5YUGWU.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\music\pause.png (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\messages\images\mail-logo-uk.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\town\geobase.xml (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\route-form\images\route-a.png (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_-ra-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\N8KgL5vlefdSVZld4rrAZOv6td0.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_-ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\quote.dtd (845 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\quote.dtd (666 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\pCHi2EbFGprgWW3mMpMtDX54NQM.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_-ra_n.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\N8KgL5vlefdSVZld4rrAZOv6td0.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\town (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\RMgCqWYYpM8hT-lQBStHX86s-sQ.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_-ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\geolocation.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\images\mail_128.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\ggWlFuB9d-Zuqq9zOjCpTGRJxCM.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\skc_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\Z89ijsO17istBi7uzfluWEm_lBs.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\favicon.png (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\quote.xml (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\skc_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\textonly.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\mail.dtd (541 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bl.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\town\townlist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\quote\quotelist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\hmwMDVFmRjsNKU_RJNONzYBQsUQ.png (216 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\logo.dtd (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\v6iQMoknRy8vcEf3ugJmQ-5wUIQ.png (192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\favicon.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\quote\quotelist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\n1rMK7Xj0goEMV7ryTTbeIMFKJo.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_sn_n.png (662 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\J_kxuf5tD5_oT3zFsj_RdNpltno.svg (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\ic.dtd (876 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-libs\sizzle.js.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\translator.dtd (274 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\ovc_ sn.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\noflash\img\b-music-noflash.png (520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\moikrug.dtd (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\ovc_ts_ra.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-sn_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\header\images\menu-close.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\route-form\images\form-close-hover.png (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\mail\mail-menu.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\branding.zip (786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\userinfo\userinfolinks.dtd (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_ts_ra.png (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\main-ui.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\skc_n.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\WHjFOxvA2An3CNqNgdI31oAB0sk.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\ua\town\townlinks.dtd (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialframe.dll.patch (511 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-route.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\town\geobase.xml (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_-sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash\_music-noflash.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\quote\quotelist.xml (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\noflash\_music-noflash.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\SgutBd0LU4K_hlDET4mn_5dBTcw.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\u6UuL0myn5QAc_jBy_VOr6h-fe4.svg (529 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\quote\quotelist.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\quote.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\ic.dtd (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\brand\ua (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\3-16.png (773 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\translator.dtd (249 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\moikrug.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_ ra_d.png (907 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\PudDxssXdb8JdlcekuwRV8FSHVM.png (465 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\mail\folder.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\quote_down.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\mail-logo-ru.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\QZwxmXJnFKgedMKrAEej8n07z5k.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\textonly.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\town\townlist.dtd (88 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\geolocation.xml (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\30UGBquvFO2YEoZdzUGiTFKarLU.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\logo.dtd (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Common\elements.exe.patch (1764 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_-ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\WHjFOxvA2An3CNqNgdI31oAB0sk.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\pagetranslator.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\skc_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\brand\ua\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\rQyMR-dTD-QwlKU1_uHVI_6jnXw.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\main-adapter.js (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ts_ra-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_ sn.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\ovc_ts_ra.png (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\FEj0besueLlZr3fanjXLNpNvecA.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\7akVtjosFy0SIZK5kndXmRwXc6k.png (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\SgutBd0LU4K_hlDET4mn_5dBTcw.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\GYMNZu4TKhloYL739B8cACsR7AQ.svg (986 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialframe.dll (924 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\logo\logo.png (409 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\mail\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash\music-noflash.html.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\ovc_gr.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\2-16.png (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\8-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\OJF8v3B9B1iuTlzjl4Upnf3NpuQ.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\jquery.js (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\quote\quotelist.dtd (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\style.css.patch (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\pCHi2EbFGprgWW3mMpMtDX54NQM.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_-ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\fg_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\9-16.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\FwRhzXrrYgJtsGITD_YiU0Dtuk0.png.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\ovc_gr.png (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\cy.xml (641 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\index.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\nointernet\img\b-music-noinet.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\2-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\quote\stock_down.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\textonly.messages.xml (277 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_-sn.png (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\logo.xml (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_ sn.png (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\town\townlist.dtd (82 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\ic.dtd (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\ui\dayparts\images\opacity08.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\tfgMYzMit9gnbrINme1tVATR_Hw.png (158 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bl.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\logo.dtd (140 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\logo\logo.png (409 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\pagetranslator.xml (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\ovc_-ra.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\fn7tv3d9HtkFU7iJjQKO1ayPMJo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\brand\ua\userinfo\userinfolinks.dtd (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\B2U5JTSkrM1iy2QyFZIn43s5WIw.svg.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_-sn_n.png (880 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_ sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash\_music-noflash.ie.css.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\LYWMGttYOnp54g3peDbHFvecIZg.svg (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\ovc_-ra.png (542 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\mail.dtd (735 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_-sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\geolocation.dtd (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_gr.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\gDhz2dKv8qVaZ-NZ4RtfpEiqP2w.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music.xml (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\skc_n.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\logo.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\favicon.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\1.png (176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-libs (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\blank.gif (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_-ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\readability\ready.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_ ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\logo.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\ovc_ra.png (360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\index.html.patch (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\login.xml (511 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\ovc.png (298 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\textonly.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\4-16.png (721 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\music\music.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\userinfo\userinfolinks.dtd (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\ovc_ra.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\basepackage.zip.patch (1295 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\newtab.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\YCbcsQcGggriiKTU5E8gjUWGekA.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\h1oQ0mYlczivIuzRfLNbU7TkmWM.png (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\town\geobase.xml (747 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\gold_down.png (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\bartab64.dll.patch (449 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\psDFj5dDAgXPPU-mVe-RPid0mc0.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\readability\applied.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_ (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-libs\require.min.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\logo.dtd (140 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\ovc_sn.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\newtab.html (101 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\WPY8f52_KOx1hza1XbGCi6umItk.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\translator.dtd (260 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\style.css.patch (106 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\mail\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\j6jpzsnwlO6IPc-YfB0sgdOJ3sE.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\YDmSge45ykmToGfqY4MTD1rQ3bw.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\ovc_sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_n.png (569 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\skc_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\fg_d.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\ovc_ ra.png (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\fg_d.png (983 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\vLV2RFKX8s67kUoFpg2qwLkBEIk.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\fg_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\currency_down.png (570 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\userinfo.dtd (573 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_-sn_d.png (852 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\delete.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\geolocation.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\textonly.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\tb\town\townlinks.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\translator\extrainfo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ ra_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\8-16.png (696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_-ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_ra_n.png (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_ sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\M0l9QwOFqrxbai_uKwym7mnjg7s.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\nointernet\_music-nointernet.ie.css.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\B2U5JTSkrM1iy2QyFZIn43s5WIw.svg (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_ts_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\.manifest.mf.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\fg_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\pagetranslator.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\N8KgL5vlefdSVZld4rrAZOv6td0.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\town\townlist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\fg_d.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barframe.dll (409 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\quote.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\common.dtd (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\RVzdJ9OJh0AWiuUZ2gi5Dwus4aw.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_ ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\fotki.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\skc_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_-sn_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\geolocation.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\common.dtd (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_ sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-red.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\bbQ1jlb4T8Jy-s_k1Nz6W3nWt7g.png (839 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\skc_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_-ra.png (635 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\quote\quotelist.dtd (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\stardust64.dll (1858 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\ovc.png (473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_-sn_n.png (639 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\skc_n.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\rZ9cub6wgvpWuc-F5gKU_pYGEfg.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialshims.dll (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\userinfo.dtd (522 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_-sn-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\gray-16.png (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\mail\folder.png (441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_sn_d-inverted.svg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\ui\now\images\b-wind_arrow.png (179 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\ua\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\currency_up.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\fotki.dtd (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\skc_d.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\main-logic.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_-sn.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\brand\ua\town\townlinks.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\main-ui.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\moikrug.dtd (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\fotki\fotki.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barshims64.dll (1138 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\messages\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\ic\1.png (176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\translator\extrainfo.dtd (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\tb\quote\export.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\main-adapter.js.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\readability\hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\iG8q08OxQz2nkkl6BRGGlXFWtjU.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\translator.dtd (336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\readability\readability.js.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\textonly.dtd (180 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_gr-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-libs\require.min.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\money.dtd (530 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\weather\gray-16.png (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\sovetnik.zip (2513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_n.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-ui\b-spinner\images\28.gif (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\music.dtd (487 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\moikrug.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_-ra_d.png (823 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bl.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_common.ie7.css (980 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\common.dtd (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\OEjMVquR-FlJrxPp3R2w3SiSo3I.png (272 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\ovc_-sn.png (534 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\mail-logo-ru.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\login.dtd (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\elements-ru[1].xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_ sn_n.png (694 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\town\townlinks.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\brand\ua\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\geobase.xsl (377 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\geolocation.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\nointernet\img\b-music-logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\LYWMGttYOnp54g3peDbHFvecIZg.svg (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\music.dtd (328 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\favicon.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\quote.dtd (708 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\cXyECx_vgE9llIxJCsRweD2uMuc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\fg_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\userinfo.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\pDyNDX-HZwcZsvKc7CchzqPMfjU.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\HAaHli8IySZ-JG5GCu6d1e_EhHY.png (180 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\mail\logo.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bl.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\FIg7sp49R7Bbg3paJlGfzrP03rE.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16 (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\fotki.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\quote.dtd (674 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\lenta.messages.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_ts_ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\readability\readability.js (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\brand\ua\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\t1Xoc_X9L745EI77VThFTlLoR9I.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\userinfo.dtd (573 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_ sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_-ra_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_ra.png (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\ovc_ sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_ ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_ ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\M0l9QwOFqrxbai_uKwym7mnjg7s.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\textonly.xml.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\8rm3VzQm1-ENXVTt0z7lr0UyMfI.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_-sn_d.png (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\3-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\n1rMK7Xj0goEMV7ryTTbeIMFKJo.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\music.dtd (328 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\translator.dtd (346 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_ sn_n.png (671 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\readability\ready.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\noflash\music-noflash.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\quote\gold_down.png (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\ic\5.png (213 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\mail\mail-menu.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\quote\quotelist.xsl (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\Cs5BseJ6glqWdmXvSRCGh7Wzjo.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\Ueu6ImmUtuXnUg1yF2XdPlHBjl4.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\noflash\_music-noflash.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\geolocation\geolocation.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\geolocation.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_common.ie9.css.patch (67 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\IeJDy6oBct5hJLx8v2axIJnqgJg.png (388 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\offline-19.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\geolocation\geolocation.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_-ra_n.png (846 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\money.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\brand\ua\translator\extrainfo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_ ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\f7-fSnZIoEUNKpSJWJW98kU5x9U.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\translator.dtd (346 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\vLV2RFKX8s67kUoFpg2qwLkBEIk.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_-ra_n.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\fg_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\A_A_8kwnWdRuEKSsINIh1KKRTPU.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\quote.dtd (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\require-config.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\8Tybci2Ic-b9EusnAqnwjdWOCYU.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\skc_d-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\images\mail_128.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\auth_overlay.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\5_YBT2TOn0eJAO4VlPA2e644YEY.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\fg_d.png (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\stock_up.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\readability\ready.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\ovc_ ra.png (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\LnyndjXnnnf0-TBiILsn2xomtFE.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\route-form\images\button-route.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\temporary-files\{5A8164B5-776E-4BC7-B99F-9336B8EBEF70} (76377 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\music.dtd (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\ic.dtd (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\ovc.png (397 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\_1tfIBlbbO-sFZX3BSjgbsFLIaE.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\XMoIiA5FZyikn3LZNNAeV9CQDxk.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\pagetranslator\injector.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\iG8q08OxQz2nkkl6BRGGlXFWtjU.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\quote\quotelist.xsl.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\nointernet\img (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_ra_d.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_-sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\textonly.dtd (180 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\messages\images\read.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\login.xml (511 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\fg_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\0-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\nointernet\_music-nointernet.css.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-libs\require.min.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-ui\b-spinner\images\20.gif.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_n.png (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\geolocation.dtd (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\IeJDy6oBct5hJLx8v2axIJnqgJg.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\5-16.png (771 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\brand\ua\town\townlinks.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\YDmSge45ykmToGfqY4MTD1rQ3bw.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\KPnz247WBDVCwXmztn7XWxi1dqI.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-ui\b-spinner\images\20-dark.gif.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bl-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_sn.png (691 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc.png (298 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\geolocation.dtd (129 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\translator\extrainfo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\money.dtd (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\geolocation.dtd (72 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\money.messages.xml (519 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash\img\b-music-logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\zO38-_sA_u6ACecTf3a7S276UCQ.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bl.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_ts_ra.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_ ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ ra_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\subscription\add.png (779 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\O1O9BufqLBgcOuBVjcTEsQxoej0.png (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\bGTLQ3lgAfg8aeK6thx3QUyAaP4.png (972 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_sn.png (590 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\pX_YaGn4Yr_lAhpb7JdMwBPIaAY.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\u6UuL0myn5QAc_jBy_VOr6h-fe4.svg (529 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\fg_d.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\logo.messages.xml (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_-ra_n.png (562 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\music\music.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\town.dtd (911 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\nointernet\_music-nointernet.ie.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\IeJDy6oBct5hJLx8v2axIJnqgJg.png (388 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\readability\hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\rQyMR-dTD-QwlKU1_uHVI_6jnXw.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ sn_d-inverted.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\logo.dtd (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\style.css.patch (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\quote.dtd (859 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\6FdgwygQ_TzvldBXoorX_18X3OI.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\LnyndjXnnnf0-TBiILsn2xomtFE.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\ic.dtd (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\buttons\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\quote\gold_up.png (658 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\8mM517Xu-xUh_e_5YdDztnBFfxY.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_ ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\textonly.dtd (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\jgFkBCE-RZAAZ9yPtanIQikHjO0.svg (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\quote\stock_up.png (587 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash\music-noflash.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_ sn_d.png (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdial.zip (983 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash\_music-noflash.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_gr.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\jquery.js.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\money\money.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-libs\sizzle.js.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\mail.dtd (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_ ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_ ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\buttons\images\button-yellow.png (358 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\30UGBquvFO2YEoZdzUGiTFKarLU.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_sn_n.png (662 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_-ra_d.png (798 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash\img\b-music-noflash.png (520 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Common\elements.exe (441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\translator.dtd (336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\delete.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\ua\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\quote (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_common.css (902 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\fg_n.png (494 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\header\images\mail-create.png (326 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\translator.dtd (350 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\J_kxuf5tD5_oT3zFsj_RdNpltno.svg (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\brand\ua\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\8DjdBETc_zk-FtrdVtsq91CY0kU.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_ sn_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\main-logic.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-minus.png (237 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bl.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\HtlgdvpTqGiTOfnycOmfS0aD8So.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\music\pause.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_-sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\town.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_ ra_d.png (777 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\ic.dtd (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\logo.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_ ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\translator.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\ua\town\townlinks.dtd (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\OJF8v3B9B1iuTlzjl4Upnf3NpuQ.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_-sn_n.png (639 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\mail\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_-ra.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\skc_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\ua (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\login\auth.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_d.png (786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\geolocation.dtd (72 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\10-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\4.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\main-logic.js (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\userinfo.dtd (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\pagetranslator\injector.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\main-adapter.js.patch (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-plus.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\WHjFOxvA2An3CNqNgdI31oAB0sk.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\YCbcsQcGggriiKTU5E8gjUWGekA.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\skc_d.png (634 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdial64.dll.patch (1923 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_ ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\route-form\images\route-a.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\skc_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_common.ie9.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\quote\quotelist.dtd (87 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_sn_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\textonly.dtd (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\epVOh1xBimDwi8BSMFWMEy7gE6E.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\fg_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\town\townlinks.dtd (133 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_ sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\FzWyVFQkBJObPTziVE3nwUX-sFE.svg (148 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\town\geobase.xml (1647 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\moikrug\moikrug.png (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\mail\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_-sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\XMoIiA5FZyikn3LZNNAeV9CQDxk.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\M0l9QwOFqrxbai_uKwym7mnjg7s.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_-ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\5BIrw26AROzc9J3IurJFbak0Jro.gif.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\route-form\images\form-close.png (273 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\translator.xml (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_ ra.png (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ sn_n-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\quote\quotelist.xml (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\psDFj5dDAgXPPU-mVe-RPid0mc0.png (715 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barframe64.dll (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_ra_n.png (676 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_-sn-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\geolocation.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdial64.dll (1350 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialframe64.dll (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\logo.xml (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\ua\mail\maillinks.dtd.patch (34 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_common.ie9.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash\_music-noflash.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-plus.png (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\MaIoSE198uzo6p3SmzgF9C5DwGQ.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\town\townlist.dtd (83 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\main-adapter.js.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\translator.messages.xml.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\skc_d.png (802 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\quote\currency_up.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\geolocation.dtd (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\defaults.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\music.dtd (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\9-16.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\newtab.html.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\skc_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\main-logic.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-libs\sizzle.js.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\main-adapter.js (1960 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\fake.xml (608 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_-sn_n.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\HtlgdvpTqGiTOfnycOmfS0aD8So.png (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\cXyECx_vgE9llIxJCsRweD2uMuc.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\textonly.dtd (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\cy.xml (641 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\WPY8f52_KOx1hza1XbGCi6umItk.png (376 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\userinfo.dtd.patch (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-green.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\ic.dtd (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\town\geobase.xml (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\fotki.dtd (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\quote\quotelist.dtd (87 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\mail\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\header\images\mail-create.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\B2U5JTSkrM1iy2QyFZIn43s5WIw.svg (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\YDmSge45ykmToGfqY4MTD1rQ3bw.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\messages\images\delete.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\FwRhzXrrYgJtsGITD_YiU0Dtuk0.png (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\dN3Z8lWVPQSY91sGfjNPrnMqwaE.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\mail.dtd (633 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\LYWMGttYOnp54g3peDbHFvecIZg.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\gray-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_-ra_n.png (846 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\gold_down.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-sn_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\favicon.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\Z89ijsO17istBi7uzfluWEm_lBs.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-yellow.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_-sn_d.png (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\3.png (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_ra.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\translator.xml (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\style.css (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\textonly.dtd (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-ball-dis.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\fg_n.png (681 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ ra-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ts_ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\messages\images\spam.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\5BIrw26AROzc9J3IurJFbak0Jro.gif (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bl.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\QZwxmXJnFKgedMKrAEej8n07z5k.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\town\townlist.dtd (82 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\3.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_-ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\OEjMVquR-FlJrxPp3R2w3SiSo3I.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-libs (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\mail\mail.png (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\Vyyv32J6Ora9svqZCYF-XSVU4Zc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\town\townlinks.dtd (126 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\ovc_gr.png (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\fg_d.png (665 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\tb\quote.xml (887 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ts_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\logo.dtd (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\mail.dtd (633 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\geolocation.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\nointernet\music-nointernet.html.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\readability\sprite-readability.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_-ra_d.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\quote\quote_down.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ra_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-ui\b-spinner\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\ui.js.patch (1176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\8rm3VzQm1-ENXVTt0z7lr0UyMfI.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\music.dtd (371 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\readability\readability.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\newtab.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bl.png (927 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\menu\images\remove.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\messages\images\mail-logo-en.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_-ra_d.png (823 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\HHaZUbXWoxJcOwRCNSx4RcMW1wM.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_ts_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\chelper\chelper.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\userinfo.dtd (515 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\quote (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_sn_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\HHaZUbXWoxJcOwRCNSx4RcMW1wM.svg.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\login.dtd (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\vLV2RFKX8s67kUoFpg2qwLkBEIk.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\QzU0ufhPTrD0S8e0bpVNvGRkS7s.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\skc_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\mail.dtd (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\fotki\fotki.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bl.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\main-ui.js (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\yadisk.zip (900 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\quote.dtd (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\10-16.png (706 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\mail.dtd (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\skc_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_-ra_d.png (857 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\D_bdPNqv6HJlssMZjqrlv7FqetY.png (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-libs\polyfills.js.patch (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_sn_n.png (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\common.dtd (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\mail\mail.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\music\music.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\skc_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\geolocation.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\town\townlist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\quote\export.dtd (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\ic.dtd (876 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\quote.dtd (900 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\.update.xml (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\5BIrw26AROzc9J3IurJFbak0Jro.gif (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_ sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\town\townlist.dtd (88 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\translator.dtd (249 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\index.html (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\geolocation\geolocation.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\login.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\smJm5iFAtam9l7LrZUH-DhaLQH0.png (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music.messages.xml (510 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\La6qi18Z8LwgnZdsAr1qy1GwCwo.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_gr.png (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_ra_n.png (603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\n1rMK7Xj0goEMV7ryTTbeIMFKJo.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\B_GHi1n15TIonEBlfjSOiyj2Km4.svg (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\buttons\images\button-ball-dis.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\ggWlFuB9d-Zuqq9zOjCpTGRJxCM.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_ sn.png (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\ic\3.png (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_-sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_-sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\quote\export.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\mail.dtd (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\1-16.png (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\rZ9cub6wgvpWuc-F5gKU_pYGEfg.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\moikrug.dtd (818 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_ ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\nointernet\_music-nointernet.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\Ueu6ImmUtuXnUg1yF2XdPlHBjl4.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_gr.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\fg_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_d.png (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\8DjdBETc_zk-FtrdVtsq91CY0kU.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\spam.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\moikrug\moikrug.png (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\mail\folder.png (441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_-ra_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\mOgNznzQgwqm21KZjo3hk5YUGWU.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\ovc_ sn.png (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_-ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_ sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\gDhz2dKv8qVaZ-NZ4RtfpEiqP2w.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\bbQ1jlb4T8Jy-s_k1Nz6W3nWt7g.png (839 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\messages\images\mail-logo-ru.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\B_GHi1n15TIonEBlfjSOiyj2Km4.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\RlCxSpz6nMOlD7d9slWYf-6j8Jw.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash\_music-noflash.ie.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_-ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\route-form\images\route-b.png (494 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\ovc_ ra.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\5.png (213 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\2-16.png (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\moikrug.dtd (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\favicon.ico.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\nointernet (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\7akVtjosFy0SIZK5kndXmRwXc6k.png.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\fg_n.png (386 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\music.dtd (487 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\moikrug.dtd (818 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-libs (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\common.dtd (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_-sn_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\route-form\images\form-close-hover.png (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_d.png (786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\f7-fSnZIoEUNKpSJWJW98kU5x9U.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\OJF8v3B9B1iuTlzjl4Upnf3NpuQ.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\quote\quotelist.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\reply.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\nointernet\img\b-music-logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_ sn_n.png (671 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_sn_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\logo.dtd (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\geobase.xsl.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\fg_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\ovc_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\geolocation.dtd (75 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\town (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_-sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\userinfo\passport.dtd.patch (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\login.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\messages\images\reply.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\userinfo.messages.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\A_A_8kwnWdRuEKSsINIh1KKRTPU.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\fg_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\money.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19 (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bl-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\route-form\images\form-close.png (273 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\ic.dtd (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\userinfo.dtd (515 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\userinfo\passport.dtd.patch (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\U0h5laCla0RWhXA2HIlO7izWrgg.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_ ra_n.png (986 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\ggWlFuB9d-Zuqq9zOjCpTGRJxCM.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\money.dtd (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\fg_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\header\images\menu-close.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\skc_d.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\pX_YaGn4Yr_lAhpb7JdMwBPIaAY.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\route-form\images\button-route.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_gr.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-ra_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\ovc_ sn.png (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\h1oQ0mYlczivIuzRfLNbU7TkmWM.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\ovc_-ra.png (470 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\quote\quotelist.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_-sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\buttons\images\button-ball-all.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\userinfo.dtd (460 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\ui\dayparts\images\opacity08.png (158 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ sn_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\mail\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\pagetranslator.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-sn_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\ovc_ts_ra.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\fg_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash\img (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_-sn_d.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_-ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\ic.dtd (567 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\tb\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\header\images\menu-open.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_n.png (547 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\logo.dtd (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\chelper\chelper.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\geolocation.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\quote.xml (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_n.png (569 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_ sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\ua\userinfo\userinfolinks.dtd (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_d.png (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_sn_d-inverted.svg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\userinfo.dtd (467 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\main-ui.js (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\route-form\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_sn_d.png (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\ua\translator\extrainfo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\mail-logo-uk.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_ ra_n.png (986 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\offline-19.png (705 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\brand\ua\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\logo.messages.xml (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\bartab.dll.patch (551 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\geolocation.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_gr.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash\img\b-music-noflash.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\OYPSMBgQcfcSMrYzBPOaVjHEDcE.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\skc_n.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\q3xr3wR_Yg_zr9sfIINzZLCTdwE.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\ovc_ra.png (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_-ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\mLXSAWhA--vCjoHGBhYVNaCqDLg.svg (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\FzWyVFQkBJObPTziVE3nwUX-sFE.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\h1oQ0mYlczivIuzRfLNbU7TkmWM.png (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\quote_up.png (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\0.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\quote\quote.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_-sn.png (395 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\auth_overlay.png (216 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-sn_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\gold_up.png (658 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bl.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\jquery.js (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\LnyndjXnnnf0-TBiILsn2xomtFE.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\skc_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_ sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_common.ie7.css (980 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\gold_up.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\pagetranslator\pagetranslator.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\quote.dtd (859 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\fg_d.png (665 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\ic.dtd (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_-ra.png (542 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_ sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\music\play.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\messages.xml (293 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\userinfo.dtd (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\readability\sprite-readability.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\nointernet\_music-nointernet.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\stock_down.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\attach-ico.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_ ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\bartab64.dll (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\offline-19.png (705 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\4.png (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\geolocation.xml (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_ra_d.png (807 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_sn.png (796 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\5_YBT2TOn0eJAO4VlPA2e644YEY.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\3y0kod-qSv8niHqiuf1Y0IxgVlU.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\readability\readability.js (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\cXyECx_vgE9llIxJCsRweD2uMuc.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\ic\0.png (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\stardust.dll (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\login.dtd (787 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\2.png (215 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_ sn_d.png (850 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\J7daNOyAa24zy3Ir-wWKTeQNeuo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_ sn_n.png (694 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\7-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_sn_d.svg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-ui\b-spinner\images\b-spinner.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\fg_n.png (681 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\epVOh1xBimDwi8BSMFWMEy7gE6E.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\bGTLQ3lgAfg8aeK6thx3QUyAaP4.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\HtlgdvpTqGiTOfnycOmfS0aD8So.png (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\PudDxssXdb8JdlcekuwRV8FSHVM.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_-sn-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-ui\b-spinner\images\20.gif.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\userinfo\userinfolinks.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_ ra_d.png (907 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\HuoOcff43SvB1OVXDmTAAXmFs0g.png (782 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\mail\mail.png (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\town\geobase.xml (1451 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bl-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\music.dtd (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_sn_d.png (889 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_sn_n.png (659 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\town\townlinks.dtd (133 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_-ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\tb (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\skc_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\skc_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\Cs5BseJ6glqWdmXvSRCGh7Wzjo.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\translator.messages.xml (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\music (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\6FdgwygQ_TzvldBXoorX_18X3OI.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\quote\quote_up.png (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-ui\b-spinner\images\45.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_ra.png (360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\FIg7sp49R7Bbg3paJlGfzrP03rE.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_sn-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\fg_d-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\login\auth.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\6qtB0Q9FVAmOWwOK3V5JVI5ojcI.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\mail.dtd (482 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\6.png (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\hCvqPleRwNIKexdlpUBO-I_8Toc.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_ sn.png (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\fg_n.png (386 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\pagetranslator.messages.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_-sn.png (709 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\cy.messages.xml (915 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\ui\now\images\b-wind_arrow.png (179 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\fg_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\skc_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\7-16.png (645 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\translator.dtd (260 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\readability\sprite-readability.png.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\town.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\data.zip (128885 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash\_music-noflash.css.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-ui\b-spinner\images\45.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\temporary-files\{A774563B-DE0F-4DB6-B20A-CAA304A701DA} (26786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16 (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\moikrug.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\Common\elements64.exe.patch (1843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\stardust.dll (458 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\music.dtd (371 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\1-16.png (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\gDhz2dKv8qVaZ-NZ4RtfpEiqP2w.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_-ra_n.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\Ueu6ImmUtuXnUg1yF2XdPlHBjl4.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barframe64.dll.patch (1412 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_ ra_n.png (679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\main-logic.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\logo.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\gray-16.png (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_-ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_-ra_d.png (798 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\skc_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\town\townlist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\psDFj5dDAgXPPU-mVe-RPid0mc0.png (715 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\readability\hover.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\Z89ijsO17istBi7uzfluWEm_lBs.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\D_bdPNqv6HJlssMZjqrlv7FqetY.png (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\hCvqPleRwNIKexdlpUBO-I_8Toc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_-sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town.messages.xml (865 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\OYPSMBgQcfcSMrYzBPOaVjHEDcE.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_ sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\RMgCqWYYpM8hT-lQBStHX86s-sQ.png (929 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\KPnz247WBDVCwXmztn7XWxi1dqI.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\logo\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-yellow.png (358 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\readability\applied.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ts_ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\common.dtd (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\oL9859A-5vIMHo11ArMir5KkeLc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_ ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\ua\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\fg_d.png (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\ua\translator\extrainfo.dtd (104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\quote.xml (887 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ra_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\HuoOcff43SvB1OVXDmTAAXmFs0g.png (782 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\pagetranslator.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\fotki\fotki.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_-ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\30UGBquvFO2YEoZdzUGiTFKarLU.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\favorites.xml (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\mLXSAWhA--vCjoHGBhYVNaCqDLg.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_ts_ra.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\mail-logo-en.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\yWSEQKZzite-8MoQ6YKWdObUP4E.png (151 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ sn-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\readability\readability-print.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\login.dtd (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ sn_n-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\nointernet\img\b-music-logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\0-16.png (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\userinfo.dtd (581 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_n.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\jgFkBCE-RZAAZ9yPtanIQikHjO0.svg.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\town\geobase.xml (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\brand\ua\town\townlinks.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\FOLu1ETT62D1LNcU-3sIz9N1IeQ.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\logo.dtd (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\stardust.dll.patch (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_ ra.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\ua\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\D_bdPNqv6HJlssMZjqrlv7FqetY.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\moikrug\moikrug.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\lALn2ERV0sQzCaiJB-rdgHrL2JI.png (643 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_-ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\J_kxuf5tD5_oT3zFsj_RdNpltno.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\money.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\HHaZUbXWoxJcOwRCNSx4RcMW1wM.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\readability (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_ sn_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\brand\ua\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdial.dll.patch (2196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_ ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc.png (473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\translator.dtd (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\q3xr3wR_Yg_zr9sfIINzZLCTdwE.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\geobase.xml (2159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\Common\elements.exe.patch (1764 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\basepackage.zip (800114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\RMgCqWYYpM8hT-lQBStHX86s-sQ.png (929 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\money.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_ sn_d.png (850 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\translator\translator.png (636 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\town.png (242 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\mkfxKG5Ahs_33yt9pgsBXKbtnUo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\route-form\images\route-a.png (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\quote.xml.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\mv7_d3S--K8m-52iWzjEsPZHaA4.svg (986 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_ sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\pagetranslator.xml (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\Cs5BseJ6glqWdmXvSRCGh7Wzjo.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\ic.dtd (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\ovc_-sn.png (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_-ra_n.png (562 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music.messages.xml (510 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\money.dtd (340 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\sSvtvw1vSraqkkgdSjmCcyf7Nwo.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_ ra_d.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\mail-logo-en.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\common.dtd (188 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\oL9859A-5vIMHo11ArMir5KkeLc.png (316 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\userinfo\userinfolinks.dtd (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\qPLYva7Gqc4z8eRTw-G50C80M5w.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_d.png (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\main-logic.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\translator.dtd (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\skc_d-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-red.png (348 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\nointernet\_music-nointernet.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\skc_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ra-inverted.svg.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\hCvqPleRwNIKexdlpUBO-I_8Toc.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\ui.js (472 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\login.dtd (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\pX_YaGn4Yr_lAhpb7JdMwBPIaAY.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\buttons\images\button-green.png (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\pagetranslator\langs.xml (365 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_sn_d.png (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\RVzdJ9OJh0AWiuUZ2gi5Dwus4aw.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_-sn.png (534 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-ra_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_-sn_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdial.dll (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\ovc_ sn.png (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\logo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\textonly.xml (405 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\readability\readability.css.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\.manifest.mf (132 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\brand\ua\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\userinfo\userinfolinks.dtd (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\quote\quotelist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\fg_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\favorites.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\subscription\subscription.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\pagetranslator\pagetranslator.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\fotki.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\userinfo.dtd (519 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_ sn_n.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\u6UuL0myn5QAc_jBy_VOr6h-fe4.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\dN3Z8lWVPQSY91sGfjNPrnMqwaE.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\userinfo.dtd (507 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\userinfo\userinfolinks.dtd (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\bGTLQ3lgAfg8aeK6thx3QUyAaP4.png (972 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\ua\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\userinfo\userinfolinks.dtd (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\ovc_ ra.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\A_A_8kwnWdRuEKSsINIh1KKRTPU.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\Vyyv32J6Ora9svqZCYF-XSVU4Zc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_ ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\login.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\WhpZGK4ilmcwDg2k1xoCV1INn1M.png (173 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\town\townlinks.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\Common\elements64.exe (1163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\5-16.png (771 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\fotki.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-ball-all.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\readability (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_ sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bl.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\main-adapter.js (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\skc_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\skc_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_gr.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_ ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_-ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_-ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\MaIoSE198uzo6p3SmzgF9C5DwGQ.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_gr.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_n.png (547 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\town\townlist.dtd (83 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\header\images\menu-close.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ sn_d-inverted.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\ovc.png (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\4-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\quote.dtd (845 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\geolocation.dtd (129 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\FzWyVFQkBJObPTziVE3nwUX-sFE.svg (148 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\6-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\nointernet\img\b-music-noinet.png (919 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\La6qi18Z8LwgnZdsAr1qy1GwCwo.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\buttons\images\button-red.png (348 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-ball-all.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\skc_n.png (720 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_ ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_-ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\SgutBd0LU4K_hlDET4mn_5dBTcw.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music.xml (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_ sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\money.dtd (580 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\J7daNOyAa24zy3Ir-wWKTeQNeuo.png (576 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\main-logic.js.patch (1176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_ sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_-ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ sn_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_gr.png (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_ ra_n.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_ts_ra.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\translator\extrainfo.dtd (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_ts_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\skc_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\ovc_ ra.png (369 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_ts_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\stardust64.dll.patch (903 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-minus.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\pagetranslator\loader.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\userinfo\userinfolinks.dtd (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_sn.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\style.css (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\3mHjWkgL_5EBDiCqQNBYtJ0gdTk.png (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\geolocation.dtd (75 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_-ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\quote_up.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barshims.dll (1961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\8mM517Xu-xUh_e_5YdDztnBFfxY.png (982 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-ui\b-spinner\images\b-spinner.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\ovc_sn.png (796 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\translator\translator.png (636 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\common.dtd (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\tb\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-route.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-ra_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\main-adapter.js (1960 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\8DjdBETc_zk-FtrdVtsq91CY0kU.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_-ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\blank.gif (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\userinfo.xml (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\moikrug.messages.xml (946 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_-sn_d.png (860 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\translator\extrainfo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\ua\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\fg_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\quote\quotelist.dtd (84 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\readability\readability-print.css.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_ra_n.png (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\logo.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\pagetranslator\loader.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_ sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\q3xr3wR_Yg_zr9sfIINzZLCTdwE.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\town\townlinks.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\mLXSAWhA--vCjoHGBhYVNaCqDLg.svg (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_ ra_d.png (777 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\newtab.html.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_-sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\spam.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_gr-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\OYPSMBgQcfcSMrYzBPOaVjHEDcE.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-ui\b-spinner\images\20-dark.gif.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\route-form\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\.update.xml (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_ ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\chelper\chelper.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\weather\gray-16.png (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\6-16.png (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\ovc_ts_ra.png (714 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\6FdgwygQ_TzvldBXoorX_18X3OI.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\buttons\images\button-plus.png (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\smJm5iFAtam9l7LrZUH-DhaLQH0.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\favicon.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\stock_up.png (587 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\userinfo.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\cy.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\main-ui.js.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\quote\quotelist.dtd (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\sSvtvw1vSraqkkgdSjmCcyf7Nwo.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\userinfo.dtd (533 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\0-16.png (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\textonly.dtd (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\8rm3VzQm1-ENXVTt0z7lr0UyMfI.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\icons\logindialog\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\8mM517Xu-xUh_e_5YdDztnBFfxY.png (982 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\pDyNDX-HZwcZsvKc7CchzqPMfjU.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\7-16.png (645 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\_1tfIBlbbO-sFZX3BSjgbsFLIaE.png (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-ui\b-spinner\images\28.gif (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\ic\4.png (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\ui\dayparts\images\opacity08.png (158 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\icons\logindialog\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_ ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\moikrug.dtd (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\moikrug.dtd (810 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\U0h5laCla0RWhXA2HIlO7izWrgg.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_gr.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\f7-fSnZIoEUNKpSJWJW98kU5x9U.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\MaIoSE198uzo6p3SmzgF9C5DwGQ.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\elements-ru.8.9.1.5100.x64.delta.8.7.0.3110[1].zip (40293 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\fg_d.png (983 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\ua\translator\extrainfo.dtd (104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\quote_down.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\route-form\images\route-b.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_common.css (1098 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\music\play.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\RzYvI7d3s99rTwAZUd4u2BoyF-8.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash\img\b-music-logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\textonly.messages.xml (277 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\2.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\pagetranslator\pagetranslator.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\mjAIUH_QW6TPQtFga9ZLNIEY0lg.svg (719 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\main-ui.js (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_ra_d.png (807 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\fg_n.png (494 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\10-16.png (706 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\3-16.png (773 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc.png (397 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\header\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\ui\now\images\b-wind_arrow.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_gr-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\userinfo\passport.dtd (189 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\readability (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_ra_d.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\town\geobase.xml (1647 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\skc_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\skc_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\logo.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_ts_ra.png (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\readability\readability.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_sn_d.svg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\lALn2ERV0sQzCaiJB-rdgHrL2JI.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_ sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\music\play.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\quote.messages.xml (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_ ra_n.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_ra.png (532 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\qC_PdL0Ak0WR8_18wFtdA2FwOf4.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\pDyNDX-HZwcZsvKc7CchzqPMfjU.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\fotki.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\6-16.png (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\fg_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\ui.js (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\music.dtd (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_-sn_d.png (852 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\town\townlinks.dtd (126 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_ sn_n.png (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_ (600 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\music\pause.png (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\iG8q08OxQz2nkkl6BRGGlXFWtjU.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-ui\b-spinner\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc.png (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_ sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\textonly.dtd (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\userinfo\userinfolinks.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\quote\currency_down.png (570 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\skc_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\rEDlHGGyFWrULyWdRTFs5UTS1PA.png (976 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\defaults.dtd (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\fg_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\6qtB0Q9FVAmOWwOK3V5JVI5ojcI.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town.messages.xml (865 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\translator.dtd (350 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_-sn_d.png (860 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\nointernet\music-nointernet.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\town\geobase.xml (747 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\route-form\images\button-route.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\read.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\1-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\ic.dtd (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\money.dtd (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\moikrug.dtd (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\fg_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_ ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_ sn_n.png (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\defaults.dtd (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_gr.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\skc_d.png (896 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_sn_n.png (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\ic\6.png (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\menu\images\remove.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\header\images\menu-open.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\quote\quotelist.dtd (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\quote\quotelist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\logo.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_ra_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\userinfo\passport.dtd (173 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\skc_d.png (634 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_gr.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\OEjMVquR-FlJrxPp3R2w3SiSo3I.png (272 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\pagetranslator.messages.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\money.dtd (340 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\pagetranslator\langs.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\geolocation.dtd (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\pagetranslator\injector.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_-sn_n.png (880 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\translator.messages.xml (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\SdPm0jvigN6hcrCoZYxpZ0cZ9JY.png (218 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\newtab.html (101 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\9-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\quote\quotelist.dtd (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\textonly.dtd (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\jgFkBCE-RZAAZ9yPtanIQikHjO0.svg (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\FIg7sp49R7Bbg3paJlGfzrP03rE.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\rQyMR-dTD-QwlKU1_uHVI_6jnXw.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\mail.dtd (482 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\FOLu1ETT62D1LNcU-3sIz9N1IeQ.png (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19 (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\ovc_-sn.png (709 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16 (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\d38awltCX2VgnCb75FuAk7ypnNk.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\money.dtd (530 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\_1tfIBlbbO-sFZX3BSjgbsFLIaE.png (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\favicon.png (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_ sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\2DXe1pPd42HjUa8oyCJHpO9dZ64.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\mail\logo.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\translator.dtd (274 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\quote.dtd (708 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\auth_overlay.png (216 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_gr.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_ ra.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\vb-ru[1].xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\geolocation.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\style.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\pagetranslator\loader.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-ra_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\buttons\images\button-route.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialshims64.dll (1098 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\town\townlist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\ua\town\townlinks.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_ ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_sn_d.png (889 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\nointernet (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\index.html.patch (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_sn_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\bartab.dll (1047 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\nointernet\_music-nointernet.ie.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_ ra_d.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ra.svg.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\logo.dtd (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_-ra_d.png (857 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\geolocation.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\userinfo\userinfolinks.dtd (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\quote.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\favorites.xml (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\weather\gray-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\login.dtd (787 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\town\geobase.xml (1451 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\stardust64.dll (1964 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialshims64.dll.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\money.dtd (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\skc_d.png (896 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_-ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\mail.dtd (715 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\tdmsMBtcvKXyb9p8ym5lfO3DXkQ.png (199 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\geobase.xml (2159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\main-ui.js.patch (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\nointernet\music-nointernet.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\login\auth.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\tb\userinfo\passport.dtd (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-ui\b-spinner\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\fg_d-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_n.png (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\textonly.dtd (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\FOLu1ETT62D1LNcU-3sIz9N1IeQ.png (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\pagetranslator.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\sSvtvw1vSraqkkgdSjmCcyf7Nwo.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\fg_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-green.png (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\7akVtjosFy0SIZK5kndXmRwXc6k.png (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_-sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\tb\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\money\money.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\fotki.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\ovc_sn.png (691 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\logindialog\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\quote\quotelist.dtd (84 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\smJm5iFAtam9l7LrZUH-DhaLQH0.png (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\1.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\money.dtd (580 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\main-ui.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\stock_down.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\quote\quotelist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\fg_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\town (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\tb\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\style.css (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\6.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\.manifest.mf (132 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_ sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\mail.dtd (735 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_sn_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\require-config.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\mail-logo-uk.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\ovc_-ra.png (635 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\ovc_ra.png (532 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\town\townlist.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\logo.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\header\images\menu-open.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\default.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\main-logic.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\reply.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_ra_n.png (603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\userinfo.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\pagetranslator\langs.xml (365 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_-ra_n.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\6qtB0Q9FVAmOWwOK3V5JVI5ojcI.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_ sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\favicon.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\textonly.xml (405 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\logo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Common\elements64.exe.patch (1843 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Common\elements64.exe (1163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\tUcYJofZiuqIDLQCePK0a5EQQbM.png (152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_sn_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\WPY8f52_KOx1hza1XbGCi6umItk.png (376 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_ ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-ui\b-spinner\images\20-dark.gif.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\skc_d.png (802 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\userinfo.xml (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_-sn_n.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\5-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\quote.dtd (900 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\nointernet\img\b-music-noinet.png (919 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\textonly.dtd (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_ sn_d.png (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\index.html (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\dN3Z8lWVPQSY91sGfjNPrnMqwaE.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\XMoIiA5FZyikn3LZNNAeV9CQDxk.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\mail.dtd (715 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\moikrug.dtd (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\mail.dtd (541 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bl.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\readability\applied.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\quote.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\fg_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\ovc_gr.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\logo.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\ic.dtd (567 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_ ra_n.png (679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\noflash (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\U0h5laCla0RWhXA2HIlO7izWrgg.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\nointernet\_music-nointernet.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\quote\quotelist.xsl (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\main-adapter.js (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\require-config.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\common.dtd (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\userinfo\userinfolinks.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\main-logic.js (706 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\menu\images\remove.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-ui\b-spinner\images\20.gif.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\nointernet\_music-nointernet.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\8Tybci2Ic-b9EusnAqnwjdWOCYU.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_-sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_ sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_-sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\4-16.png (721 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\Common\elements.exe (441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_ra_n.png (676 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\ua\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\vb-ru.2.18.0.5151.x64.delta.2.16.0.3147[1].zip (12433 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bl.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\lALn2ERV0sQzCaiJB-rdgHrL2JI.png (643 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_d.png (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\5.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\KPnz247WBDVCwXmztn7XWxi1dqI.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\logo.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\money.dtd (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\Vyyv32J6Ora9svqZCYF-XSVU4Zc.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\login.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\skc_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\currency_down.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\RlCxSpz6nMOlD7d9slWYf-6j8Jw.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\noflash\img\b-music-logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\index.html.patch (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\brand\ua\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\5_YBT2TOn0eJAO4VlPA2e644YEY.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\icons\logindialog\logo.png.patch (39 bytes)

The process UmmyVideoDownloader.exe:1828 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-821KI.tmp\UmmyVideoDownloader.tmp (50 bytes)

The process u2-ctrl.exe:3548 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\u2-ctrl.log (1529 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\res (1 bytes)

The process u2-ctrl.exe:3572 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\u2-ctrl.log (3909 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\bm\in_work_0.xml (795 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\bm\statistics.xml (6665 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\bm\appinfo.xml (11758 bytes)

The process yupdate-exec.exe:2592 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yupdate-exec-yabrowser.log (2925 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yabrowser\appinfo.xml (3492 bytes)

The process yupdate-exec.exe:3364 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yupdate-exec.log (11979 bytes)

The process yupdate-exec.exe:3492 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yabrowser\statistics.xml (278 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yupdate-exec-statistic.log (1055 bytes)

The process yupdate-exec.exe:3932 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\u2-exec.log (1792 bytes)

The process yupdate-exec.exe:3320 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yupdate-exec-statistic.log (6690 bytes)

The process yupdate-exec.exe:2412 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\u2-exec-bm.log (4252 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\bm\appinfo.xml (2964 bytes)

The process yupdate-exec.exe:3852 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\u2-exec-statistic.log (1349 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\bm\statistics.xml (278 bytes)

The process yupdate-exec.exe:3848 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\u2-exec-statistic.log (2050 bytes)

The process yupdate-ctrl.exe:4088 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\praetorian\appinfo.xml (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\barie\statistics.xml (1095 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yupdate-ctrl.log (70012 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\barie\appinfo.xml (1997 bytes)

The process yupdate-ctrl.exe:3176 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\vbie\statistics.xml (310 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\vbie\appinfo.xml (1622 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yupdate-ctrl.log (65954 bytes)

The process {51426ABB-6DCB-40D0-9EA1-211122CE9025}.exe:3908 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\clids.xml (267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\master_preferences (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BrandFile (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\install[1].txt (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ybEDA8.tmp (87080 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BE432C2EE45E016635C9B13C029DA7E7 (391 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BE432C2EE45E016635C9B13C029DA7E7 (744 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\PartnerFile (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\lite_installer.log (24238 bytes)

The process clidmgr.exe:3680 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\clids-yabrowser.xml (369 bytes)

The process browser.exe:2964 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\debug.log (121 bytes)

The process browser.exe:2456 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\JY3GLGFX\yastatic.net\yb.sxx (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#yastatic.net\settings.sxx (199 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx (10576 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\FAP8EC7.tmp (4 bytes)

The process browser.exe:2876 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\PageOverlay\page_overlay.css (954 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\ListEditor\list_editor.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\ja\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\pages\promo.js (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\cs\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\OptionsPage\options_page.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\PromoPage\promo_page.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\pages\options.html (459 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\pt\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\PageOverlay\page_overlay.xml (273 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\zh_TW\messages.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\tr\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\zh_CN\messages.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\pages\log.html (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\manifest.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\fr\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\OptionsPage\img\logo-128.png (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-64.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\de\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\common\defaults.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-16.png (292 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\ru\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\background.html (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\PromoPage\img\notebook.png (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\LogPage\log_page.css (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\uk\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\assessorContent.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\yapdf.dll (2134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\content.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\third_party\requirejs\require.js (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\es\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\it\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\assessorContent.css (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\icons\complain-ad-16.png (214 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-48.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\ListEditor\img\remove.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\PromoPage\img\smile.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\background.js (17904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\DECODED_IMAGES (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\PromoPage\img\red_cross.png (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\DECODED_MESSAGE_CATALOGS (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\.DS_Store (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\third_party\requirejs\.bower.json (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\PromoPage\img\layout.png (20800 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\PromoPage\img\trash.png (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\pages\options.js (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\PromoPage\promo_page.css (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\pages\promo.html (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\ListEditor\list_editor.xml (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\OptionsPage\options_page.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\pages\log.js (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\pt_BR\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\en\messages.json (3 bytes)

The process browser.exe:3888 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\messages\tabsListener.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\restart_worker.js (809 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\base\define.js (318 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\get_homepage_url.js (654 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\messages\RequestMessage.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\messages\workersListener.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\update_workers.js (669 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\get_idle.js (638 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\get_cookie.js (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\messages\ResponseMessage.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\browser.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\third_party\lodash.min.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\messages\Message.js (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\utils\network.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\force_update_workers.js (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\workers\storage.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\workers\config.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\main.js (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\_locales\ru\messages.json (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\utils\logger.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\utils\filesystem.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\messages\Notification.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\add_cache_entry.js (719 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\messages\messagesHub.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\messages\baseListener.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\get_config_data.js (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\messages\MessageSource.js (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\workers\supervisor.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\watch_cookies.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\DECODED_MESSAGE_CATALOGS (348 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\remove_cache_entry.js (713 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\DECODED_IMAGES (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\watch_idle.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\get_cookies.js (716 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\workers\storageUpdater.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\workers\workersConfigData.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\utils\url.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\manifest.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\yandex.js (3 bytes)

The process browser.exe:3124 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\main.js (305 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\messages\RequestMessage.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\utils\filesystem.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\watch_cookies.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\get_cookies.js (716 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\yandex.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\DECODED_IMAGES (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\third_party\lodash.min.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\utils\logger.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\_locales\ru\messages.json (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\messages\Message.js (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\get_idle.js (638 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\remove_cache_entry.js (713 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\update_workers.js (669 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\get_homepage_url.js (654 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\add_cache_entry.js (719 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\browser.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\get_cookie.js (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\manifest.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\watch_idle.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\workers\config.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\force_update_workers.js (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\restart_worker.js (809 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\utils\network.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\utils\url.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\messages\tabsListener.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\messages\Notification.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\messages\messagesHub.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\messages\workersListener.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\workers\supervisor.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\base\define.js (318 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\DECODED_MESSAGE_CATALOGS (348 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\messages\MessageSource.js (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\workers\workersConfigData.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\messages\ResponseMessage.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\workers\storage.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\messages\baseListener.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\get_config_data.js (729 bytes)

The process browser.exe:3792 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\data_0 (1373380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\data_1 (291184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\data_2 (118424 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\data_3 (31864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\zh_CN\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Visited Links (3658 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\68F9.tmp (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\suspend_api_check.exe (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\000003.log (94 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\7784.tmp (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\plmneencfmbjfgbkfiinjelmngigejjh\0.8.9_0\main\platform\chrome\icons (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Cookies (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\browser_elf.dll (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\_locales\ru\messages.json (306 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\ja\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000017 (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000016 (698 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000015 (731 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000014 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000013 (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000012 (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000011 (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000010 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000019 (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000018 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_ak2aFoetrl4WNbB (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\de\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\2629.tmp (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yabrowser\statistics.xml (2521 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\C520.tmp (99177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_wATuj3LoNfyH8sf (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\pt_BR\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\000005.bak (433 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cookies (5867 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Shortcuts (304 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\72D9.tmp (103 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Data-journal (6950 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Storage\https_www.youtube.com_0.localstorage-journal (127505 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\manifest.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\000009.log (97948 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Current Tabs (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-48.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\plmneencfmbjfgbkfiinjelmngigejjh\0.8.9_0\main\platform\chrome (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\5FCF.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\E8A9.tmp (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\F077.tmp (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\cs\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Download_new (123036 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000011 (37 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000010 (36 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\QuotaManager-journal (55156 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Storage\chrome-extension_emghafiiokbjdgphaofindndbcicinae_0.localstorage-journal (39385 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\C4A2.tmp (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\000003.log (40275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_M7JGlHfF4135Jtq (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-16.png (375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\First Run (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Storage\https_www.youtube.com_0.localstorage (2233 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\566B.tmp (375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_f7xOYKafERxHIjt (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-128.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\tr\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2FHWDSRNYOR38QYCY71R.temp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_0aiDI27pak5dwBY (748 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\62BB.tmp (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\ihhcdinmaceokcdmbddlclfejhadgpgg\0.2.1_0 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\.usage (1616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\fr\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000004 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000005 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000006 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000007 (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000000 (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000001 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000002 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\it\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000008 (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000009 (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\54D4.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cookies-journal (42879 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\F2B9.tmp (961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\55C0.tmp (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\plugins\npswf32_16_0_0_305.dll (5532 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\C51F.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CCCF.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Top Sites (1952 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\plmneencfmbjfgbkfiinjelmngigejjh\0.8.9_0\main\platform\chrome\pages (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_ezjsJioQcccqHmD (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\LOG (1393 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\browser.dll (5823 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Login Data (734 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\zh_TW\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-64.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Resources\extension\bgeakjmfknncppbmgkkfbglnodccdecp\settings.json (1706 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\74ED.tmp (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\GPUCache\index (368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\998E.tmp (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\clids-yabrowser.xml (358 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\databases\Databases.db (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\en\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Cookies-journal (2799 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Fraud_new (13076 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\C520.tmp (5873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\zh_TW\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\000003.log (621 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Origin Bound Certs-journal (6223 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\en\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\lhbpmoijjppjnkgelgdemkidbedaijhp\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\7AB1.tmp (152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\History (21458 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\plmneencfmbjfgbkfiinjelmngigejjh\0.8.9_0\main\antishock\ui (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\64D0.tmp (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\pt\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\C02.tmp (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Storage\chrome-extension_emghafiiokbjdgphaofindndbcicinae_0.localstorage (7862 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_TNgfdrgEsELUPOU (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yupdate-exec-yabrowser.log (2929 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\lhbpmoijjppjnkgelgdemkidbedaijhp\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_KLIpXBJchVcI3y3 (140 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Bloom Prefix Set (1428 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\pt_BR\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Tablo Cache\index (368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_ahReT3hkOhXrgZK (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Favicons-journal (30290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\261F.tmp (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Storage\https_browser.yandex.ua_0.localstorage (231 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\4E62.tmp (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\DB12.tmp (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network Action Predictor (3946 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Tablo Cache\data_0 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Tablo Cache\data_1 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Tablo Cache\data_2 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Tablo Cache\data_3 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Storage\http_videodownloader.ummy.net_0.localstorage-journal (576 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\de\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\es\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_b18wjkW5xm5P8LY (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\MANIFEST-000008 (127 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\MANIFEST-000001 (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-64.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\MANIFEST-000002 (195 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\lhbpmoijjppjnkgelgdemkidbedaijhp\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_BDXPBDT62oDL1iZ (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\000003.log (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\000003.log (1973 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\7B4E.tmp (80 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_00MBW8u8OZYbd2Z (524 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-16.png (375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\databases\Databases.db-journal (576 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\C4A2.tmp (5621 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\6DB4.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\ihhcdinmaceokcdmbddlclfejhadgpgg\0.2.1_0\scripts\app\handlers (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\A364.tmp (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Data (14121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Login Data-journal (576 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\plmneencfmbjfgbkfiinjelmngigejjh\0.8.9_0 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\History-journal (31513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\pt\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\000003.log (497 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\Yahelper.crx (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\000003.log (3927 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\antishock-prod.crx (5873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_f1maYfDskYNHocA (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Images_new (204 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_12AI5HqPPmamRQc (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\plmneencfmbjfgbkfiinjelmngigejjh\0.8.9_0\_locales (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000003 (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\000003.log (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\9830.tmp (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\BE7C.tmp (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\E1A0.tmp (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\00\00000004 (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\00\00000003 (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Resources\extension\emghafiiokbjdgphaofindndbcicinae\skins.json (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\History Provider Cache (486 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Storage\https_browser.yandex.ua_0.localstorage-journal (9647 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\.usage (5304 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\A51A.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\_locales\ru\messages.json (306 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yabrowser\in_work_0.xml (504 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\GPUCache\data_3 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\GPUCache\data_2 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\GPUCache\data_1 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\GPUCache\data_0 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\lhbpmoijjppjnkgelgdemkidbedaijhp\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\lhbpmoijjppjnkgelgdemkidbedaijhp\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Shortcuts-journal (576 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\D446.tmp (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\cs\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\000003.log (907 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\tr\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\zh_CN\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Extension Blacklist_new (11876 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_I2IwAMRKwVNNGLk (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\first_run_imported_tabs (101 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network Action Predictor-journal (12878 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\ihhcdinmaceokcdmbddlclfejhadgpgg\0.2.1_0\scripts\app\messages (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_weHG9Zx5g1E1Gjf (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\000003.log (15178 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\000003.log (3106 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\index (368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\uk\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000028 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000029 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000026 (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000027 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000024 (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000025 (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000022 (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000023 (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000020 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000021 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\1722.tmp (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Bloom_new (140572 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\ru\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\it\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_HbEoH7FnKPF9Qp4 (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\uk\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\A02E.tmp (961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Origin Bound Certs (863 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\1D9F.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\README (166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\000003.log (107159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\manifest.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\manifest.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000009 (68 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\ja\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\manifest.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\000005.ldb (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Top Sites-journal (6616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\QuotaManager (6588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\5886.tmp (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Favicons (6406 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\ru\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-128.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\2B3F.tmp (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Current Session (15289 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\AA10.tmp (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_00000b (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_00000c (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_00000a (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_00000f (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_00000d (333 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_00000e (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\D964.tmp (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Storage\http_videodownloader.ummy.net_0.localstorage (77 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\000003.log (38890 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-48.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\000008.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\E5B4.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\AFE9.tmp (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_Lx5UT3LcGI7zd89 (465 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\A676.tmp (88 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\.usage (24 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Yandex Download_new (204 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\es\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Permanent State (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Resources\extension\emghafiiokbjdgphaofindndbcicinae\settings.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000008 (94 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\54B4.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000002 (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000003 (72 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000001 (32 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000006 (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000007 (98 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000004 (32 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000005 (60 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\000003.log (21330 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yabrowser\appinfo.xml (9074 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_OjQByvBonjf3tS0 (12810 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\fr\messages.json (3 bytes)

The process browser.exe:3152 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\browser_child.dll (4465 bytes)

The process browser.exe:3776 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-16.png (292 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\pt\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\pages\log.js (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\PromoPage\promo_page.css (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\PromoPage\img\smile.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\background.js (18240 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\uk\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\assessorContent.css (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\.DS_Store (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\ListEditor\list_editor.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\zh_CN\messages.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\OptionsPage\options_page.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\DECODED_IMAGES (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\third_party\requirejs\.bower.json (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\de\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\PageOverlay\page_overlay.css (954 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\es\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\third_party\requirejs\require.js (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\PromoPage\img\layout.png (20800 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\pages\promo.js (6984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\third_party\.DS_Store (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\pages\log.html (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\it\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-64.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\pt_BR\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\DECODED_MESSAGE_CATALOGS (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\.DS_Store (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-48.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\icons\complain-ad-16.png (214 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\pages\options.js (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\background.html (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\PromoPage\img\trash.png (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\OptionsPage\img\logo-128.png (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\zh_TW\messages.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\LogPage\log_page.css (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\PromoPage\promo_page.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\PromoPage\img\notebook.png (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\assessorContent.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\en\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\PageOverlay\page_overlay.xml (273 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\ru\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\pages\promo.html (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\.DS_Store (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\ListEditor\img\remove.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\common\defaults.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\OptionsPage\options_page.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\manifest.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\ja\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\cs\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\PromoPage\img\red_cross.png (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\tr\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\ListEditor\list_editor.xml (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\pages\options.html (459 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\content.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\fr\messages.json (3 bytes)

The process MSI299D.tmp:3636 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\stat.3636.log (561 bytes)

The process MSI299D.tmp:536 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\seed.txt (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexPackSetup.exe (503 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\downloader.536.log (198176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\info[1].rss (827 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\YandexPackSetup[1].exe (274647 bytes)

Registry activity

The process BrowserManager.exe:3680 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@""%windir%\System32]
"ie4uinit.exe"",-732" = "Finds and displays information and Web sites on the Internet."

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories\{56FFCC30-D398-11D0-B2AE-00A0C908FA49}\Enum]
"Implementing" = "1C 00 00 00 01 00 00 00 DF 07 04 00 01 00 14 00"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"Browser Manager" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManager.exe"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process Yandex.exe:824 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@C:\Windows\system32]
"wdc.dll,-10030" = "Resource Monitor"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"Favorites" = "00 7C 01 00 00 14 00 1F 80 C8 27 34 1F 10 5C 10"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@C:\Windows\system32]
"OobeFldr.dll,-33056" = "Getting Started"
"WindowsAnytimeUpgradeUI.exe,-1" = "Windows Anytime Upgrade"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@%Program Files%\Common Files\Microsoft Shared\Ink]
"TipTsf.dll,-80" = "Tablet PC Input Panel"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@C:\Windows\system32]
"AuthFWGP.dll,-20" = "Windows Firewall with Advanced Security"
"MdSched.exe,-4001" = "Windows Memory Diagnostic"
"filemgmt.dll,-2204" = "Services"
"dfrgui.exe,-103" = "Disk Defragmenter"
"gameux.dll,-10082" = "Games Explorer"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@C:\Windows\system32\Speech\SpeechUX]
"sapi.cpl,-5555" = "Windows Speech Recognition"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@%Program Files%\Common Files\Microsoft Shared\Ink]
"ShapeCollector.exe,-298" = "Personalize Handwriting Recognition"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@C:\Windows\system32\WindowsPowerShell\v1.0]
"powershell.exe,-101" = "Windows PowerShell ISE"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@C:\Windows\system32\migwiz]
"wet.dll,-588" = "Windows Easy Transfer"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@C:\Windows\system32]
"AccessibilityCpl.dll,-10" = "Ease of Access Center"
"msra.exe,-100" = "Windows Remote Assistance"
"ie4uinit.exe,-737" = "Internet Explorer (No Add-ons)"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@C:\Windows\system32]
"iscsicpl.dll,-5001" = "iSCSI Initiator"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesVersion" = "2"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@%Program Files%\Windows Sidebar]
"sidebar.exe,-1005" = "Desktop Gadget Gallery"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@C:\Windows\system32]
"FXSRESM.dll,-114" = "Windows Fax and Scan"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@C:\Windows\system32\WindowsPowerShell\v1.0]
"powershell.exe,-102" = "Windows PowerShell ISE (x86)"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@C:\Windows\system32]
"SnippingTool.exe,-15051" = "Snipping Tool"
"NetProjW.dll,-501" = "Connect to a Network Projector"
"pmcsnap.dll,-700" = "Print Management"
"odbcint.dll,-1310" = "Data Sources (ODBC)"
"sdcpl.dll,-101" = "Backup and Restore"
"wdc.dll,-10021" = "Performance Monitor"
"miguiresource.dll,-101" = "Event Viewer"
"SNTSearch.dll,-505" = "Sticky Notes"
"sud.dll,-1" = "Default Programs"
"recdisc.exe,-2000" = "Create a System Repair Disc"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@%Program Files%\Windows Journal]
"Journal.exe,-3074" = "Windows Journal"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@C:\Windows\system32]
"SyncCenter.dll,-3000" = "Sync Center"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@C:\Windows\system32\migwiz]
"wet.dll,-591" = "Windows Easy Transfer Reports"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@C:\Windows\system32]
"mycomput.dll,-300" = "Computer Management"
"msconfig.exe,-126" = "System Configuration"
"mblctr.exe,-1008" = "Windows Mobility Center"
"wsecedit.dll,-718" = "Local Security Policy"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesChanges" = "8"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@C:\Windows\system32]
"wucltux.dll,-1" = "Windows Update"
"XpsRchVw.exe,-102" = "XPS Viewer"
"displayswitch.exe,-320" = "Connect to a Projector"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesResolve" = "CC 02 00 00 4C 00 00 00 01 14 02 00 00 00 00 00"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@C:\Windows\system32]
"rstrui.exe,-100" = "System Restore"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@%Program Files%\Common Files\Microsoft Shared\Ink]
"mip.exe,-291" = "Math Input Panel"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@C:\Windows\system32]
"comres.dll,-3410" = "Component Services"
"mstsc.exe,-4000" = "Remote Desktop Connection"
"msinfo32.exe,-100" = "System Information"
"SoundRecorder.exe,-100" = "Sound Recorder"
"miguiresource.dll,-201" = "Task Scheduler"

The process YandexPackSetup.exe:3676 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{12f34aee-538c-44d5-b33a-12213b7e0197}]
"EstimatedSize" = "13557"
"BundleVersion" = "2.1.2.577"
"DisplayIcon" = "C:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerInstaller.exe,0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer]
"GlobalAssocChangedCounter" = "41"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{12f34aee-538c-44d5-b33a-12213b7e0197}]
"HelpLink" = "http://help.yandex.ru/bm/"

"BundleAddonCode" = "Type: REG_MULTI_SZ, Length: 0"
"EngineVersion" = "3.8.2029.0"
"DisplayVersion" = "2.1.2.577"
"URLInfoAbout" = "bm.yandex.ru"
"ModifyPath" = "C:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerInstaller.exe /modify"
"Publisher" = "ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â"
"QuietUninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerInstaller.exe /uninstall /quiet"

[HKCU\Software\Classes\Installer\Dependencies\{12f34aee-538c-44d5-b33a-12213b7e0197}]
"Version" = "2.1.2.577"
"(Default)" = "{12f34aee-538c-44d5-b33a-12213b7e0197}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{12f34aee-538c-44d5-b33a-12213b7e0197}]
"NoElevateOnModify" = "1"
"BundleCachePath" = "C:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerInstaller.exe"
"BundleProviderKey" = "{12f34aee-538c-44d5-b33a-12213b7e0197}"
"BundleUpgradeCode" = "{CEADE967-2D56-4D80-A02E-CD3D762C0A3D}"
"DisplayName" = "ÃÅ“ÃÂµÃÂ½ÃÂµÃÂ´ÃÂ¶ÃÂµÃ‘â‚¬ ÃÂ±Ã‘â‚¬ÃÂ°Ã‘Æ’ÃÂ·ÃÂµÃ‘â‚¬ÃÂ¾ÃÂ²"
"Resume" = "1"
"URLUpdateInfo" = "bm.yandex.ru"
"Installed" = "1"
"BundleDetectCode" = "Type: REG_MULTI_SZ, Length: 0"
"BundlePatchCode" = "Type: REG_MULTI_SZ, Length: 0"
"BundleTag" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Classes\Installer\Dependencies\{FD5B5C38-B794-4459-9333-875A9987DA66}]
"Version" = "2.1.2.577"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{12f34aee-538c-44d5-b33a-12213b7e0197}]
"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerInstaller.exe /uninstall"

[HKCU\Software\Classes\Installer\Dependencies\{FD5B5C38-B794-4459-9333-875A9987DA66}]
"DisplayName" = "ÃÅ“ÃÂµÃÂ½ÃÂµÃÂ´ÃÂ¶ÃÂµÃ‘â‚¬ ÃÂ±Ã‘â‚¬ÃÂ°Ã‘Æ’ÃÂ·ÃÂµÃ‘â‚¬ÃÂ¾ÃÂ²"

[HKCU\Software\Classes\Installer\Dependencies\{12f34aee-538c-44d5-b33a-12213b7e0197}]
"DisplayName" = "ÃÅ“ÃÂµÃÂ½ÃÂµÃÂ´ÃÂ¶ÃÂµÃ‘â‚¬ ÃÂ±Ã‘â‚¬ÃÂ°Ã‘Æ’ÃÂ·ÃÂµÃ‘â‚¬ÃÂ¾ÃÂ²"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"{12f34aee-538c-44d5-b33a-12213b7e0197}" = "C:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerInstaller.exe /quiet /burn.log.append C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ÃÅ“ÃÂµÃÂ½ÃÂµÃÂ´ÃÂ¶ÃÂµÃ‘â‚¬_ÃÂ±Ã‘â‚¬ÃÂ°Ã‘Æ’ÃÂ·ÃÂµÃ‘â‚¬ÃÂ¾ÃÂ²_20150420095211.log /burn.runonce"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Classes\Installer\Dependencies\{FD5B5C38-B794-4459-9333-875A9987DA66}\Dependents\{12f34aee-538c-44d5-b33a-12213b7e0197}]
"MaxVersion"

"MinVersion"

[HKCU\Software\Classes\Installer\Dependencies\{12f34aee-538c-44d5-b33a-12213b7e0197}\Dependents\{12f34aee-538c-44d5-b33a-12213b7e0197}]
"MinVersion"
"MaxVersion"

The Trojan disables automatic startup of the application by deleting the following autorun value:

[HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"{12f34aee-538c-44d5-b33a-12213b7e0197}"

The process YandexPackSetup.exe:3388 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer]
"GlobalAssocChangedCounter" = "37"

The process BrowserManagerShow.exe:3760 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Wow6432Node\Interface\{CCF7256C-B9E9-4632-8DB8-EC44D7CE8BB8}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\m3com.CoBrowser\CurVer]
"(Default)" = "m3com.CoBrowser.1"

[HKCR\m3com.CoChange.1\CLSID]
"(Default)" = "{92FDEF05-B35E-4806-B87F-8B66AB649997}"

[HKCR\AppID\{9989EAE6-D057-4072-8BD2-1C33DED64A34}]
"(Default)" = "m3com"

[HKCU\Software\Classes\Wow6432Node\Interface\{1332C988-6548-4F21-B4A3-A6F7BA47F57E}]
"(Default)" = "IExtension"

[HKCR\m3com.YandexBrowser\CLSID]
"(Default)" = "{AD4409E5-23C2-412B-849D-8FC0635B4073}"

[HKCU\Software\Classes\Interface\{4649205D-F063-454D-A508-64757E93CE16}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\TypeLib\{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}\1.0\HELPDIR]
"(Default)" = ""

[HKCU\Software\Classes\Wow6432Node\Interface\{09DEC95B-ED9E-4448-AE54-35D0F758464E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\m3com.CoCtrl.1\CLSID]
"(Default)" = "{DD20920E-515A-4342-85E3-FC9A9FDA55C2}"

[HKCR\m3com.YandexBrowser.1\CLSID]
"(Default)" = "{AD4409E5-23C2-412B-849D-8FC0635B4073}"

[HKCU\Software\Classes\Interface\{09DEC95B-ED9E-4448-AE54-35D0F758464E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{1332C988-6548-4F21-B4A3-A6F7BA47F57E}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\m3com.CoBrowser\CLSID]
"(Default)" = "{A8BD93E8-F6AE-4F02-828D-DE47FEC4D375}"

[HKCR\Wow6432Node\CLSID\{9F0BF664-B611-4C53-AEEA-FDBFCE6E3CA3}\ProgID]
"(Default)" = "m3com.CoSearch.1"

[HKCR\m3com.CoBrowser.1]
"(Default)" = "CoBrowser Class"

[HKCR\Wow6432Node\CLSID\{AEE9D70C-6C9E-4B27-9F2C-8F14E95BEEF6}\LocalServer32]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe"

[HKCU\Software\Classes\Wow6432Node\Interface\{1332C988-6548-4F21-B4A3-A6F7BA47F57E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4ECE211A-8310-4672-A5DF-C62EE00D5464}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\m3com.YandexBrowser.1]
"(Default)" = "YandexBrowser Class"

[HKCU\Software\Classes\Wow6432Node\Interface\{1332C988-6548-4F21-B4A3-A6F7BA47F57E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4649205D-F063-454D-A508-64757E93CE16}]
"(Default)" = "ISearch"

[HKCR\m3com.CoSearch\CLSID]
"(Default)" = "{9F0BF664-B611-4C53-AEEA-FDBFCE6E3CA3}"

[HKCU\Software\Classes\Interface\{C1E23796-5CC8-4333-8976-E5EF32364F18}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\Wow6432Node\CLSID\{A8BD93E8-F6AE-4F02-828D-DE47FEC4D375}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C1E23796-5CC8-4333-8976-E5EF32364F18}\TypeLib]
"Version" = "1.0"

[HKCR\m3com.CoSearch.1\CLSID]
"(Default)" = "{9F0BF664-B611-4C53-AEEA-FDBFCE6E3CA3}"

[HKCR\m3com.CoBrowser]
"(Default)" = "CoBrowser Class"

[HKCR\Wow6432Node\CLSID\{AD4409E5-23C2-412B-849D-8FC0635B4073}\ProgID]
"(Default)" = "m3com.YandexBrowser.1"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{53AF677A-32B3-440F-AA73-0AE89E030022}]
"AppPath" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager"

[HKCR\Wow6432Node\CLSID\{AD4409E5-23C2-412B-849D-8FC0635B4073}\VersionIndependentProgID]
"(Default)" = "m3com.YandexBrowser"

[HKCR\Wow6432Node\CLSID\{86002F38-B7C3-48C2-AEFD-6BC409D250F7}\VersionIndependentProgID]
"(Default)" = "m3com.CoExtension"

[HKCU\Software\Classes\Wow6432Node\Interface\{6822DB22-B345-4984-B046-99DB9116609D}]
"(Default)" = "IYandexBrowser"

[HKCU\Software\Classes\Wow6432Node\Interface\{4649205D-F063-454D-A508-64757E93CE16}]
"(Default)" = "ISearch"

[HKCR\Wow6432Node\CLSID\{AEE9D70C-6C9E-4B27-9F2C-8F14E95BEEF6}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\m3com.CoLocale\CLSID]
"(Default)" = "{AEE9D70C-6C9E-4B27-9F2C-8F14E95BEEF6}"

[HKCR\Wow6432Node\CLSID\{A8BD93E8-F6AE-4F02-828D-DE47FEC4D375}]
"(Default)" = "CoBrowser Class"

[HKCR\m3com.CoSearch\CurVer]
"(Default)" = "m3com.CoSearch.1"

[HKCR\Wow6432Node\CLSID\{9F0BF664-B611-4C53-AEEA-FDBFCE6E3CA3}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C1E23796-5CC8-4333-8976-E5EF32364F18}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4ECE211A-8310-4672-A5DF-C62EE00D5464}\TypeLib]
"Version" = "1.0"

[HKCR\m3com.CoCtrl\CLSID]
"(Default)" = "{DD20920E-515A-4342-85E3-FC9A9FDA55C2}"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{53AF677A-32B3-440F-AA73-0AE89E030022}]
"Policy" = "3"

[HKCU\Software\Classes\Interface\{4ECE211A-8310-4672-A5DF-C62EE00D5464}]
"(Default)" = "ICtrl"

[HKCU\Software\Classes\Interface\{1332C988-6548-4F21-B4A3-A6F7BA47F57E}]
"(Default)" = "IExtension"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy]
"Dummy" = "11"

[HKCR\Wow6432Node\CLSID\{AD4409E5-23C2-412B-849D-8FC0635B4073}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\Wow6432Node\CLSID\{DD20920E-515A-4342-85E3-FC9A9FDA55C2}\VersionIndependentProgID]
"(Default)" = "m3com.CoCtrl"

[HKCR\Wow6432Node\CLSID\{AD4409E5-23C2-412B-849D-8FC0635B4073}]
"(Default)" = "YandexBrowser Class"

[HKCR\Wow6432Node\CLSID\{86002F38-B7C3-48C2-AEFD-6BC409D250F7}]
"(Default)" = "CoExtension Class"

[HKCR\m3com.CoExtension\CLSID]
"(Default)" = "{86002F38-B7C3-48C2-AEFD-6BC409D250F7}"

[HKCR\AppID\m3com.EXE]
"AppID" = "{9989EAE6-D057-4072-8BD2-1C33DED64A34}"

[HKCR\Wow6432Node\CLSID\{DD20920E-515A-4342-85E3-FC9A9FDA55C2}]
"AppID" = "{9989EAE6-D057-4072-8BD2-1C33DED64A34}"

[HKCU\Software\Classes\Interface\{4ECE211A-8310-4672-A5DF-C62EE00D5464}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{09DEC95B-ED9E-4448-AE54-35D0F758464E}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\Wow6432Node\CLSID\{86002F38-B7C3-48C2-AEFD-6BC409D250F7}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\Wow6432Node\CLSID\{92FDEF05-B35E-4806-B87F-8B66AB649997}\VersionIndependentProgID]
"(Default)" = "m3com.CoChange"

[HKCU\Software\Classes\Interface\{1332C988-6548-4F21-B4A3-A6F7BA47F57E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{6822DB22-B345-4984-B046-99DB9116609D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{CCF7256C-B9E9-4632-8DB8-EC44D7CE8BB8}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4ECE211A-8310-4672-A5DF-C62EE00D5464}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\m3com.CoBrowser.1\CLSID]
"(Default)" = "{A8BD93E8-F6AE-4F02-828D-DE47FEC4D375}"

[HKCR\m3com.CoSearch]
"(Default)" = "CoSearch Class"

[HKCR\m3com.CoExtension\CurVer]
"(Default)" = "m3com.CoExtension.1"

[HKCU\Software\Classes\Wow6432Node\Interface\{4ECE211A-8310-4672-A5DF-C62EE00D5464}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\Wow6432Node\CLSID\{A8BD93E8-F6AE-4F02-828D-DE47FEC4D375}]
"AppID" = "{9989EAE6-D057-4072-8BD2-1C33DED64A34}"

[HKCR\Wow6432Node\CLSID\{AEE9D70C-6C9E-4B27-9F2C-8F14E95BEEF6}\VersionIndependentProgID]
"(Default)" = "m3com.CoLocale"

[HKCR\Wow6432Node\CLSID\{92FDEF05-B35E-4806-B87F-8B66AB649997}]
"(Default)" = "CoChange Class"

[HKCU\Software\Classes\TypeLib\{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}\1.0\FLAGS]
"(Default)" = "0"

[HKCU\Software\Classes\Interface\{C1E23796-5CC8-4333-8976-E5EF32364F18}\TypeLib]
"Version" = "1.0"

[HKCR\m3com.CoCtrl]
"(Default)" = "CoCtrl Class"

[HKCR\Wow6432Node\CLSID\{9F0BF664-B611-4C53-AEEA-FDBFCE6E3CA3}]
"AppID" = "{9989EAE6-D057-4072-8BD2-1C33DED64A34}"

[HKCR\Wow6432Node\CLSID\{DD20920E-515A-4342-85E3-FC9A9FDA55C2}]
"(Default)" = "CoCtrl Class"

[HKCR\m3com.CoLocale.1]
"(Default)" = "CoLocale Class"

[HKCU\Software\Classes\Interface\{6822DB22-B345-4984-B046-99DB9116609D}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\m3com.CoLocale]
"(Default)" = "CoLocale Class"

[HKCR\Wow6432Node\CLSID\{92FDEF05-B35E-4806-B87F-8B66AB649997}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCU\Software\Classes\Wow6432Node\Interface\{6822DB22-B345-4984-B046-99DB9116609D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{6822DB22-B345-4984-B046-99DB9116609D}]
"(Default)" = "IYandexBrowser"

[HKCR\m3com.YandexBrowser]
"(Default)" = "YandexBrowser Class"

[HKCU\Software\Classes\Interface\{4649205D-F063-454D-A508-64757E93CE16}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\Wow6432Node\CLSID\{AD4409E5-23C2-412B-849D-8FC0635B4073}]
"AppID" = "{9989EAE6-D057-4072-8BD2-1C33DED64A34}"

[HKCU\Software\Classes\Interface\{09DEC95B-ED9E-4448-AE54-35D0F758464E}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\m3com.CoExtension]
"(Default)" = "CoExtension Class"

[HKCU\Software\Classes\Wow6432Node\Interface\{CCF7256C-B9E9-4632-8DB8-EC44D7CE8BB8}]
"(Default)" = "IChange"

[HKCU\Software\Classes\Wow6432Node\Interface\{4649205D-F063-454D-A508-64757E93CE16}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{09DEC95B-ED9E-4448-AE54-35D0F758464E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{53AF677A-32B3-440F-AA73-0AE89E030022}]
"AppName" = "BrowserManagerShow.exe"

[HKCU\Software\Classes\Interface\{09DEC95B-ED9E-4448-AE54-35D0F758464E}]
"(Default)" = "IBrowser"

[HKCU\Software\Classes\Wow6432Node\Interface\{09DEC95B-ED9E-4448-AE54-35D0F758464E}\TypeLib]
"Version" = "1.0"

[HKCR\Wow6432Node\CLSID\{DD20920E-515A-4342-85E3-FC9A9FDA55C2}\ProgID]
"(Default)" = "m3com.CoCtrl.1"

[HKCU\Software\Classes\Wow6432Node\Interface\{C1E23796-5CC8-4333-8976-E5EF32364F18}]
"(Default)" = "ILocale"

[HKCU\Software\Classes\Wow6432Node\Interface\{CCF7256C-B9E9-4632-8DB8-EC44D7CE8BB8}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C1E23796-5CC8-4333-8976-E5EF32364F18}]
"(Default)" = "ILocale"

[HKCU\Software\Classes\Wow6432Node\Interface\{4649205D-F063-454D-A508-64757E93CE16}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\TypeLib\{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}\1.0\0\win32]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe"

[HKCR\Wow6432Node\CLSID\{92FDEF05-B35E-4806-B87F-8B66AB649997}\LocalServer32]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe"

[HKCR\m3com.CoExtension.1\CLSID]
"(Default)" = "{86002F38-B7C3-48C2-AEFD-6BC409D250F7}"

[HKCR\m3com.CoCtrl\CurVer]
"(Default)" = "m3com.CoCtrl.1"

[HKCU\Software\Classes\Wow6432Node\Interface\{6822DB22-B345-4984-B046-99DB9116609D}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\m3com.CoChange.1]
"(Default)" = "CoChange Class"

[HKCR\Wow6432Node\CLSID\{92FDEF05-B35E-4806-B87F-8B66AB649997}\ProgID]
"(Default)" = "m3com.CoChange.1"

[HKCR\Wow6432Node\CLSID\{9F0BF664-B611-4C53-AEEA-FDBFCE6E3CA3}\VersionIndependentProgID]
"(Default)" = "m3com.CoSearch"

[HKCU\Software\Classes\Interface\{CCF7256C-B9E9-4632-8DB8-EC44D7CE8BB8}\TypeLib]
"Version" = "1.0"
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\m3com.CoExtension.1]
"(Default)" = "CoExtension Class"

[HKCR\Wow6432Node\CLSID\{9F0BF664-B611-4C53-AEEA-FDBFCE6E3CA3}\LocalServer32]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe"

[HKCR\Wow6432Node\CLSID\{DD20920E-515A-4342-85E3-FC9A9FDA55C2}\LocalServer32]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe"

[HKCU\Software\Classes\Wow6432Node\Interface\{CCF7256C-B9E9-4632-8DB8-EC44D7CE8BB8}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{9F0BF664-B611-4C53-AEEA-FDBFCE6E3CA3}]
"(Default)" = "CoSearch Class"

[HKCR\Wow6432Node\CLSID\{A8BD93E8-F6AE-4F02-828D-DE47FEC4D375}\LocalServer32]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe"

[HKCU\Software\Classes\Wow6432Node\Interface\{4649205D-F063-454D-A508-64757E93CE16}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\Wow6432Node\CLSID\{AD4409E5-23C2-412B-849D-8FC0635B4073}\LocalServer32]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe"

[HKCR\Wow6432Node\CLSID\{86002F38-B7C3-48C2-AEFD-6BC409D250F7}\LocalServer32]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe"

[HKCU\Software\Classes\Interface\{C1E23796-5CC8-4333-8976-E5EF32364F18}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{1332C988-6548-4F21-B4A3-A6F7BA47F57E}\TypeLib]
"Version" = "1.0"

[HKCR\Wow6432Node\CLSID\{92FDEF05-B35E-4806-B87F-8B66AB649997}]
"AppID" = "{9989EAE6-D057-4072-8BD2-1C33DED64A34}"

[HKCR\m3com.CoLocale.1\CLSID]
"(Default)" = "{AEE9D70C-6C9E-4B27-9F2C-8F14E95BEEF6}"

[HKCU\Software\Classes\Wow6432Node\Interface\{09DEC95B-ED9E-4448-AE54-35D0F758464E}]
"(Default)" = "IBrowser"

[HKCU\Software\Classes\Interface\{4ECE211A-8310-4672-A5DF-C62EE00D5464}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{CCF7256C-B9E9-4632-8DB8-EC44D7CE8BB8}]
"(Default)" = "IChange"

[HKCR\m3com.CoLocale\CurVer]
"(Default)" = "m3com.CoLocale.1"

[HKCU\Software\Classes\Wow6432Node\Interface\{6822DB22-B345-4984-B046-99DB9116609D}\TypeLib]
"Version" = "1.0"

[HKCR\Wow6432Node\CLSID\{A8BD93E8-F6AE-4F02-828D-DE47FEC4D375}\ProgID]
"(Default)" = "m3com.CoBrowser.1"

[HKCR\m3com.CoChange]
"(Default)" = "CoChange Class"

[HKCR\Wow6432Node\CLSID\{86002F38-B7C3-48C2-AEFD-6BC409D250F7}]
"AppID" = "{9989EAE6-D057-4072-8BD2-1C33DED64A34}"

[HKCR\m3com.CoCtrl.1]
"(Default)" = "CoCtrl Class"

[HKCR\m3com.CoSearch.1]
"(Default)" = "CoSearch Class"

[HKCR\Wow6432Node\CLSID\{A8BD93E8-F6AE-4F02-828D-DE47FEC4D375}\VersionIndependentProgID]
"(Default)" = "m3com.CoBrowser"

[HKCU\Software\Classes\Interface\{6822DB22-B345-4984-B046-99DB9116609D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C1E23796-5CC8-4333-8976-E5EF32364F18}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\Wow6432Node\CLSID\{AEE9D70C-6C9E-4B27-9F2C-8F14E95BEEF6}]
"AppID" = "{9989EAE6-D057-4072-8BD2-1C33DED64A34}"

[HKCU\Software\Classes\TypeLib\{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}\1.0]
"(Default)" = "m3com 1.0 Type Library"

[HKCR\Wow6432Node\CLSID\{DD20920E-515A-4342-85E3-FC9A9FDA55C2}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4ECE211A-8310-4672-A5DF-C62EE00D5464}]
"(Default)" = "ICtrl"

[HKCU\Software\Classes\Wow6432Node\Interface\{1332C988-6548-4F21-B4A3-A6F7BA47F57E}\TypeLib]
"(Default)" = "{7DBEE6F7-2E64-45C5-AE31-A1A2D1F58FDA}"

[HKCR\Wow6432Node\CLSID\{AEE9D70C-6C9E-4B27-9F2C-8F14E95BEEF6}\ProgID]
"(Default)" = "m3com.CoLocale.1"

[HKCR\m3com.CoChange\CLSID]
"(Default)" = "{92FDEF05-B35E-4806-B87F-8B66AB649997}"

[HKCU\Software\Classes\Interface\{4649205D-F063-454D-A508-64757E93CE16}\TypeLib]
"Version" = "1.0"

[HKCR\Wow6432Node\CLSID\{AEE9D70C-6C9E-4B27-9F2C-8F14E95BEEF6}]
"(Default)" = "CoLocale Class"

[HKCR\Wow6432Node\CLSID\{86002F38-B7C3-48C2-AEFD-6BC409D250F7}\ProgID]
"(Default)" = "m3com.CoExtension.1"

[HKCR\m3com.YandexBrowser\CurVer]
"(Default)" = "m3com.YandexBrowser.1"

[HKCR\m3com.CoChange\CurVer]
"(Default)" = "m3com.CoChange.1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy]
"dummy"

The process downloader.exe:2592 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "E6 15 AB 5D 36 7B D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4D 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "AF 5A 79 70 36 7B D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process rundll32.exe:3148 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9126FE0D-ECE8-42C1-8AAD-7DE477D4FE91}]
"Policy" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB]
"InstallResult" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Branding]
"PackageLocation" = "{3FE44B1A-EA19-4992-84B7-84F1776F8D77}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Statistic\Clids]
"Clid20" = "2162133-100"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\AppDataLow\Software\Yandex\Toolbar\Settings]
"Fastdial" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB]
"migrateFromBar" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Statistic]
"UserId" = "{128AC281-D5D9-496E-964F-56634EB3AD42}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Statistic\Clids]
"Clid9" = "2148278-100"
"Clid8" = "2148277-100"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Branding]
"PackageTimestamp" = "1416933862"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Settings]
"cols" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Statistic\Clids]
"Clid2" = "2148272-100"
"Clid1" = "2148271-100"
"Clid7" = "2148276-100"
"Clid6" = "2148275-100"
"Clid5" = "2148274-100"
"Clid4" = "2148273-100"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@C:\Windows\system32]
"MCTRes.dll,-200016" = "USA.gov"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB]
"Install" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB]
"ShowWelcomePage" = "0"
"MIGRATE" = "2.16.0.3147"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Branding]
"BrandId" = "yandex"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Settings]
"PrevRows" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB]
"BackgroundsTime" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Settings]
"Favorites" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB]
"Update" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C93F72A2-2162-4BBA-A07A-F13663C297A6}]
"Flags" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Statistic\Clids]
"Clid13" = "2148282-100"
"Clid12" = "2148281-100"
"Clid11" = "2148280-100"
"Clid10" = "2148279-100"
"Clid17" = "2148285-100"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0A4ECA5C-45F6-4340-8673-F63E8259576E}]
"Policy" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Statistic\Clids]
"Clid15" = "2148284-100"
"Clid14" = "2148283-100"
"Clid18" = "2148286-100"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\fastdialhost.dll]
"Version" = "2.16.0.3147"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB]
"PRODUCTVERSION" = "2.16.0.3147"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Settings]
"MaxRows" = "5"
"Rows" = "5"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@C:\Windows\system32]
"MCTRes.dll,-200017" = "GobiernoUSA.gov"

[HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"NewTabPageShow" = "2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Settings]
"MaxCols" = "5"
"update_period" = "86400"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\fastdialhost.dll]
"Target" = "%Program Files% (x86)\Yandex\FastDial\fastdial.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C93F72A2-2162-4BBA-A07A-F13663C297A6}]
"Version" = "*"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Settings]
"SendStatistics" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB]
"NewTabPageShow" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Settings]
"PrevCols" = "5"

The Trojan deletes the following registry key(s):

[HKCU\Software\AppDataLow\Software\Yandex\VB]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\ClosedTabs]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\Locks]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Statistic]
"SearchLogo"
"SearchButton"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\Locks]
"{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Statistic]
"DeleteThumb"
"LinksHistory"
"LinksTabs"
"AddThumb"
"MoveThumb"
"EditThumb"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Settings]
"SendUserStat"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Statistic]
"LinksFavorites"
"FavoritesClck"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Branding]
"LastUpdate"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\VB\Statistic]
"LinksSettings"
"SearchSuggest"
"LinksDownloads"
"SearchEnter"

The process rundll32.exe:1204 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\fastdial64host.dll]
"Target" = "%Program Files% (x86)\Yandex\FastDial\fastdial64.dll"
"Version" = "2.16.0.3147"

The process rundll32.exe:4004 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml]
"VersionID" = "{43FCBB38-EB3C-4377-ADC8-9389E99F06BD}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\sbPageLastAcceptTime]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show-friends-notifications]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"Icon" = "icons/icon.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\update-interval]
"Default" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"StatisticsId" = "site"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid6" = "2148275-100"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting\Settings\json_timeout]
"Default" = "15"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika\Settings\show-buttonname]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"UseServices" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru]
"ContentMask" = "6"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru]
"Enabled" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\notificationsData]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml#facebook" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml#rambler" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\masterSaveId]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta\Settings\countersUpdateInterval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml]
"Version" = "2.5.1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-video]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"UseServices" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-groups]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action1\execute\Parameter1]
"Value" = "(ÃÂ¸Ã‘ÂÃ‘â€šÃÂ¾Ã‘â€¡ÃÂ½ÃÂ¸ÃÂº: {documentUrl?}){selection?}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"Title" = "Ãâ€”ÃÂ°Ã‘â€°ÃÂ¸Ã‘â€šÃÂ° ÃÂ¾Ã‘â€š Ã‘â€žÃÂ¸Ã‘Ë†ÃÂ¸ÃÂ½ÃÂ³ÃÂ°"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\old-balls]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru]
"Deleted" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\showText]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"LibraryX86" = "esync.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\messages]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"StatisticsId" = "gmail"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\show-warning]
"Default" = "true"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action2]
"HasPreview" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\sbBrowserLaunchUrl]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"Icon" = "icons/gmail.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml]
"VersionID" = "{22DAB5C6-8ECF-4897-8B50-D502DEF9537E}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"StatisticsId" = "yatic"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"Title" = "Facebook"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki\Settings\showText]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio\Settings\show_text]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-weatherHomepage]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"Icon" = "icons/on.png"

[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{91397D20-1446-11D4-8AF4-0040CA1127B6}" = "20 7D 39 91 46 14 D4 11 8A F4 00 40 CA 11 27 B6"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio\Settings\show_text]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"Icon" = "icons/quote/quote_up.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"Icon" = "icons/fotki/fotki.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-username]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#mail" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action1]
"Context" = "selection"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\show-main-button-title]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\preview]
"ParamCount" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\slice-data]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru]
"ContentMask" = "6"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru\Action1\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"Icon" = "icons/browser_red_16.png"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru]
"Deleted" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0A4ECA5C-45F6-4340-8673-F63E8259576E}]
"AppPath" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action1\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\id]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"Hidden" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru]
"Icon" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\market.ico"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml#gmail" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign\Settings\update-interval]
"Default" = "15"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-trafficHomepage]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-friend-notifications]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"Type" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru]
"homepageurl" = "http://mail.yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\tutorial.usedFeatures]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"LibraryX86" = "webmaster.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki\Settings\countersUpdateInterval]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"Title" = "ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â.Ãâ€™ÃÂµÃÂ±ÃÂ¼ÃÂ°Ã‘ÂÃ‘â€šÃÂµÃ‘â‚¬"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"LibraryX86" = "odnoklassniki.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml]
"Version" = "4.5"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action1\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"UseServices" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"Title" = "ÃÂ¢ÃÂ²ÃÂ¸Ã‘â€šÃ‘â€šÃÂµÃ‘â‚¬"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\tutorial.usedFeatures]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"Hidden" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru]
"Enabled" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\masterSaveId]
"Default" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action2\execute\Parameter1]
"Name" = "body"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\execute]
"Action" = "http://market.yandex.ru/search.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\notification_data]
"Default" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action3\execute]
"ParamCount" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"Icon" = "icons/metrika_16.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\hintUrls]
"Default" = "about:blank;about:tabs;bar:tabs;vb:tabs;fd:tabs"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-trafficHomepage]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml]
"VersionID" = "{46C81EBC-940B-47B3-96A4-D922D53739DE}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\access_token]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"Title" = "ÃÅ¸ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ° Mail.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-msg]
"Default" = "false"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action2\execute]
"Method" = "get"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru]
"Icon" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\yandex.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\execute\Parameter1]
"Name" = "text"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"LibraryX86" = "altsearch.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"LibraryX64" = "yavideo64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\share]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"Type" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2]
"HasPreview" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\notification_data]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru]
"Verb" = "ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\updateInterval]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-groups]
"Scope" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action1\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"UseServices" = "0"
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"Title" = "ÃÂ¢ÃÂ¾Ã‘â€¡ÃÂ½ÃÂ¾ ÃÂ¿ÃÂ¾ ÃÂ°ÃÂ´Ã‘â‚¬ÃÂµÃ‘ÂÃ‘Æ’"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show-message-notifications]
"Default" = "true"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru]
"Icon" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\slovari.ico"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Branding]
"PackageLocation" = "{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid4" = "2148273-100"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\execute\Parameter1]
"Value" = "{selection}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"LibraryX86" = "smartbox.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml]
"Version" = "1.6"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"Icon" = "icons/translator/translator.png"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\lastDate]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#money" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\notificationsData]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar]
"VersionIntroducedFx" = "8.7.0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\old-balls]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"LibraryX64" = "webmaster64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"Title" = "ÃÅ¸ÃÂ¾ÃÂ´ÃÂ¿ÃÂ¸Ã‘ÂÃÂºÃÂ¸"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-groups]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-trafficHomepage]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-video]
"Default" = "false"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action1\execute]
"ParamCount" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\clid]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\selectedSitenameSetting]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml]
"VersionID" = "{3D3261A6-5177-43C6-81ED-0DDD424D8098}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"Active" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml]
"Version" = "2.7"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action1\execute]
"Action" = "http://slovari.yandex.ru/{selection}/ÃÂ·ÃÂ½ÃÂ°Ã‘â€¡ÃÂµÃÂ½ÃÂ¸ÃÂµ"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki\Settings\countersUpdateInterval]
"Default" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\user_id]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"Title" = "ÃÂÃÂ²Ã‘â€šÃÂ¾Ã‘â‚¬ÃÂ¸ÃÂ·ÃÂ°Ã‘â€ ÃÂ¸Ã‘Â"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru]
"Enabled" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug\Settings\showText]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"LibraryX86" = "mailru.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-happy]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\friend]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Toolbar]
"Locked" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\offer.elements]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"Unique" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\state]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\access_token]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"Title" = "ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â.Ãâ€ÃÂ¸Ã‘â‚¬ÃÂµÃÂºÃ‘â€š"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\tutorial.showAfter]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\showHomepage]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator]
"UseServices" = "0"
"AllowDisable" = "1"
"Title" = "ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂµÃ‘ÂÃ‘â€šÃÂ¸ Ã‘ÂÃ‘â€šÃ‘â‚¬ÃÂ°ÃÂ½ÃÂ¸Ã‘â€ Ã‘Æ’"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml#radio" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\defaultSearchScope]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-username]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0A4ECA5C-45F6-4340-8673-F63E8259576E}]
"AppName" = "elements.exe"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"Type" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"LibraryX86" = "direct.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"StatisticsId" = "mailrambler"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’]
"DefaultActivity" = "yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"LibraryX64" = "webmaster64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\metrikaSaveId]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster\Settings\update-interval]
"Scope" = "2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\execute]
"Action" = "http://market.yandex.ru/search.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"LibraryX64" = "browseroffer64.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\execute\Parameter1]
"Value" = "{linkText}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\selectedSitename]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\notifications]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler\Settings\show_label]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"LibraryX86" = "radio.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"LibraryX64" = "esync64.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru]
"ContentMask" = "7"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"Icon" = "icons/geolocation/geolocation.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign\Settings\campaign]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\showTextAlert]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\access_token]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"Type" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\updateInterval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"StatisticsId" = "smartbox"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru]
"Icon" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\lingvo.ico"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\route-work]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"Title" = "ÃÂ£ÃÂ¼ÃÂ½ÃÂ°Ã‘Â Ã‘ÂÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂºÃÂ°"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\tutorial.usedFeatures]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"Icon" = "icons/logo/logo.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml]
"VersionID" = "{D1F76FA7-5811-4201-90A1-6ED3AD724EAF}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show-friends-notifications]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-msg]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-username]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"Type" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator]
"Type" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"Type" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1]
"HasPreview" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\tutorial.autoCounter]
"Scope" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru]
"Verb" = "ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\show-compose-button]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"LibraryX64" = "direct64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"StatisticsId" = "mailru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"Hidden" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru]
"DownloadUrl" = "http://slovari.yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\update-interval]
"Default" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler\Settings\show_label]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\hintUrls]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"Icon" = "icons/icon.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"Type" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta\Settings\countersUpdateInterval]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"LibraryX64" = "radio64.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru]
"DisplayName" = "ÃÂÃÂ°ÃÂ¹Ã‘â€šÃÂ¸ ÃÂ¾ÃÂ¿Ã‘â‚¬ÃÂµÃÂ´ÃÂµÃÂ»ÃÂµÃÂ½ÃÂ¸ÃÂµ Ã‘ÂÃÂ»ÃÂ¾ÃÂ²ÃÂ° ÃÂ² ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â.ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘ÂÃ‘â€¦"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action2\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml]
"Version" = "1.5.1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"LibraryX64" = "direct64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-name]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action3\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-mention-notifications]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-guest]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"Title" = "ÃÂ ÃÂ°ÃÂ´ÃÂ¸ÃÂ¾"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\save]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"Title" = "ÃÅ“ÃÂµÃ‘â€šÃ‘â‚¬ÃÂ¸ÃÂºÃÂ°"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo\Settings\countersUpdateInterval]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9126FE0D-ECE8-42C1-8AAD-7DE477D4FE91}]
"AppPath" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"LibraryX64" = "smartbox64.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru]
"ActionCount" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator\Settings\tlang]
"Default" = "ru"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru]
"Icon" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\maps.ico"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"LibraryX86" = "twitter.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"Title" = "ÃÅ“ÃÂ¾Ã‘Â Ã‘ÂÃ‘â€šÃ‘â‚¬ÃÂ°ÃÂ½ÃÂ¸Ã‘â€ ÃÂ° Ãâ€™ÃÅ¡"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru]
"DisplayName" = "ÃÂÃÂ°ÃÂ¹Ã‘â€šÃÂ¸ ÃÂ¿ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´ Ã‘ÂÃÂ»ÃÂ¾ÃÂ²ÃÂ° ÃÂ² ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â.ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘ÂÃ‘â€¦"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml#profile" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"Icon" = "icons/moikrug/moikrug.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\flashOfferUrl]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"Title" = "ÃÅ¡ÃÂ¾Ã‘â€šÃÂ¸Ã‘â‚¬ÃÂ¾ÃÂ²ÃÂºÃÂ¸"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo\Settings\window-pos]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\defaultSearchScope]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-video]
"Scope" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru]
"Type" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\route-home]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"Unique" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"Title" = "ÃÅ¸ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\execute\Parameter1]
"Value" = "{selection}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\save]
"Scope" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru]
"Deleted" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika\Settings\update-interval]
"Default" = "12"
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"Title" = "ÃËœÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â Ã‘â€ ÃÂ¸Ã‘â€šÃÂ¸Ã‘â‚¬ÃÂ¾ÃÂ²ÃÂ°ÃÂ½ÃÂ¸Ã‘Â"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\show_label]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid11" = "2148280-100"
"Clid10" = "2148279-100"
"Clid13" = "2148282-100"
"Clid12" = "2148281-100"
"Clid15" = "2148284-100"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\Locks]
"{91397D20-1446-11D4-8AF4-0040CA1127B6}" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid17" = "2148285-100"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler\Settings\show_label]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\execute\Parameter1]
"Name" = "text"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid18" = "2148286-100"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\slice-data]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\clid]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"Title" = "ÃÅ¸ÃÂ»ÃÂµÃÂµÃ‘â‚¬ ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â.ÃÅ“Ã‘Æ’ÃÂ·Ã‘â€¹ÃÂºÃÂ¸"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money\Settings\countersUpdateInterval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct\Settings\update-interval]
"Default" = "15"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-friends]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\customSettings]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"Icon" = "icons/mailru.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml#direct" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator]
"Hidden" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\execute]
"ParamCount" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar]
"LastRestoreVersion" = "8.7.0.3110"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action1]
"Context" = "selection"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\execute\Parameter1]
"Name" = "text"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo\Settings\update-interval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\title]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements]
"LastImportedHistory" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#textonly" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#pagetranslator" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"StatisticsId" = "quotation"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"Type" = "4"
"Icon" = "icons/town/town.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\update-interval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator\Settings\ie-mode]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show_notifications]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru]
"ActionCount" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-message-notifications]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"Hidden" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\execute]
"Action" = "http://maps.yandex.ru/"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"Icon" = "icons/site_settings.png"
"Title" = "ÃÂ¡ÃÂ°ÃÂ¹Ã‘â€š"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika\Settings\show-buttonname]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\show-compose-button-title]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"Type" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\execute]
"ParamCount" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\update-interval]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\messages]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\route-work]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru]
"Verb" = "ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action1\execute]
"Method" = "get"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"Hidden" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action2\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\sbPageLastAcceptTime]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-notes]
"Default" = "false"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\preview]
"Action" = "https://export.yandex.ru/bar/mapsprint.xml?address={selection}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-weather]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote\Settings\update-interval]
"Default" = "15"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru]
"Domain" = "yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"Icon" = "icons/ic/4.png"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru]
"DownloadUrl" = "http://maps.yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-traffic]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\AutoSelect]
"SelectedWidgets" = "none"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar]
"PRODUCTVERSION" = "8.7.0.3110"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"api" = "0"
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action1\execute]
"Method" = "get"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\state]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"Title" = "ÃÂ¡ÃÂ¸ÃÂ½Ã‘â€¦Ã‘â‚¬ÃÂ¾ÃÂ½ÃÂ¸ÃÂ·ÃÂ°Ã‘â€ ÃÂ¸Ã‘Â"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action2\execute]
"Method" = "post"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"Title" = "ÃÅ¸ÃÂ¾ÃÂºÃÂ°ÃÂ·Ã‘â€¹ÃÂ²ÃÂ°Ã‘â€šÃ‘Å’ ÃÂºÃÂ¾ÃÂ½Ã‘â€šÃÂµÃÂºÃ‘ÂÃ‘â€šÃÂ½Ã‘â€¹ÃÂµ ÃÂ¿Ã‘â‚¬ÃÂµÃÂ´ÃÂ»ÃÂ¾ÃÂ¶ÃÂµÃÂ½ÃÂ¸Ã‘Â ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â.Ãâ€˜Ã‘â‚¬ÃÂ°Ã‘Æ’ÃÂ·ÃÂµÃ‘â‚¬ÃÂ°"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\AutoSelect]
"MatchedWidgets" = "none"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"LibraryX86" = "webmaster.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action2]
"HasPreview" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music\Settings\firstLaunch]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"Icon" = "icons/readability/ready.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"UseServices" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-mention-notifications]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"Type" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign\Settings\campaign]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#moikrug" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\notification_data]
"Scope" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\preview]
"ParamCount" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru]
"ActionCount" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"StatisticsId" = "esync"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2]
"HasPreview" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show_notifications]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"StatisticsId" = "yamusic"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml#site" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"Title" = "ÃÅ¸ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ° ÃÂ ÃÂ°ÃÂ¼ÃÂ±ÃÂ»ÃÂµÃ‘â‚¬ÃÂ°"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml]
"Version" = "4.0.1"

[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"ITBar7Layout" = "13 00 00 00 00 00 00 00 00 00 00 00 30 00 00 00"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\BrowserHistory]
"d" = "10"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action1\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"StatisticsId" = "webmaster"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"Icon" = "icons/music/music.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\update-interval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru]
"Domain" = "yandex.ru"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action2\execute]
"Method" = "get"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\showTextAlert]
"Default" = "true"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\preview]
"Method" = "get"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "AF 5A 79 70 36 7B D0 01"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\show-sitename]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"StatisticsId" = "odnoklassniki"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml]
"VersionID" = "{C098CB7E-82C5-40DB-A31C-AB32320420A0}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\show-compose-button-title]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\translatorOfferUrl]
"Default" = "http://browser.yandex.ru/desktop/?from=link_element_neyb_translate_&banerid=0456530000#translate"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"Title" = "ÃÅ¾ÃÂ¿Ã‘â‚¬ÃÂµÃÂ´ÃÂµÃÂ»ÃÂµÃÂ½ÃÂ¸ÃÂµ ÃÂ¼ÃÂµÃ‘ÂÃ‘â€šÃÂ¾ÃÂ¿ÃÂ¾ÃÂ»ÃÂ¾ÃÂ¶ÃÂµÃÂ½ÃÂ¸Ã‘Â ÃÂ½ÃÂ° Ã‘ÂÃÂµÃ‘â‚¬ÃÂ²ÃÂ¸Ã‘ÂÃÂ°Ã‘â€¦ ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘ÂÃÂ°"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#lenta" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"Icon" = "icons/profile.png"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1]
"HasPreview" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\show-warning]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\notifications]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\sbPageLastAcceptTime]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting\Settings\json_timeout]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2]
"Context" = "link"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"Hidden" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action2\execute]
"ParamCount" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"Icon" = "icons/login/auth.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-comment-notifications]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action1]
"Context" = "selection"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action3]
"HasPreview" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"LibraryX64" = "gmail64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid20" = "2162133-100"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml#altsearch" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#town" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\menu.open]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator\Settings\ie-mode]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator\Settings\tlang]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\preview]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"UseServices" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru]
"homepageurl" = "http://yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator\Settings\tlang]
"Scope" = "2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\preview]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music\Settings\volume]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹]
"DefaultActivity" = "yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\update-interval]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"Unique" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\show-compose-button]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"StatisticsId" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\messages]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\sbBrowserInstallUrl]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign\Settings\update-interval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\execute]
"Method" = "get"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"Icon" = "icons/yavideo.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"Icon" = "icons/smartbox.png"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action1\execute]
"Method" = "post"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster\Settings\update-interval]
"Default" = "12"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\execute\Parameter1]
"Value" = "{linkText}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml]
"VersionID" = "{2ED5656A-C761-4B58-B09A-CA04C22011A9}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"Icon" = "icons/main.png"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru]
"homepageurl" = "http://maps.yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"StatisticsId" = "geolocation"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar]
"VersionIntroduced" = "8.7.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru]
"ContentMask" = "6"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#cy" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru]
"DisplayName" = "ÃÂÃÂ°ÃÂ¹Ã‘â€šÃÂ¸ Ã‘â€šÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬ ÃÂ½ÃÂ° ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â.ÃÅ“ÃÂ°Ã‘â‚¬ÃÂºÃÂµÃ‘â€šÃÂµ"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml]
"Version" = "2.7.1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"UseServices" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"api" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru]
"Type" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\show-compose-button]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#login" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#music" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru]
"ActionCount" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\id]
"Default" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru]
"ActionCount" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml]
"Version" = "3.5.3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\show-compose-button-title]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy\Settings\showValue]
"Persistent" = "1"
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml]
"VersionID" = "{4D2C7324-517E-4161-A803-013796C510BA}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"Icon" = "icons/typesquatting/icon.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"LibraryX64" = "sb64.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action3\execute\Parameter2]
"Name" = "body"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\preview]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"StatisticsId" = "twitter"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\selectedSitename]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru\Action1]
"HasPreview" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika\Settings\show-buttonname]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"LibraryX86" = "sb.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-comment-notifications]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money\Settings\countersUpdateInterval]
"Scope" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru]
"homepageurl" = "http://slovari.yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote\Settings\update-interval]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator\Settings\ie-tutorialShowCount]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo\Settings\update-interval]
"Default" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"Title" = "ÃÅ¡ÃÂ°ÃÂ¼ÃÂ¿ÃÂ°ÃÂ½ÃÂ¸Ã‘Â"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"Title" = "ÃÅ¸ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ° Gmail"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"Icon" = "icons/mail/mail.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\updateInterval]
"Default" = "12"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\preview]
"Action" = "http://market.yandex.ru/export/bar/search_bar.xml?text={linkText}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign\Settings\update-interval]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-photo]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"Type" = "5"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru]
"Verb" = "ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler\Settings\update_interval]
"Default" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar]
"LanguageID" = "1049"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"StatisticsId" = "yamoney"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\sbBrowserInstallUrl]
"Default" = "http://browser.yandex.ru/desktop/?head=security&from=link_element_neyb_safe_|&banerid=0456000000#safe"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-guest]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"StatisticsId" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml]
"Version" = "4.3.5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"Hidden" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action3\execute]
"Method" = "post"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"Title" = "ÃÅ¾ÃÂ´ÃÂ½ÃÂ¾ÃÂºÃÂ»ÃÂ°Ã‘ÂÃ‘ÂÃÂ½ÃÂ¸ÃÂºÃÂ¸"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show-notification-notifications]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"Hidden" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "26 51 74 80 36 7B D0 01"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"LibraryX64" = "odnoklassniki64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster\Settings\update-interval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct\Settings\update-interval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\hideallbtn]
"Default" = "true"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru]
"ActionCount" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"LibraryX64" = "webmaster64.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru]
"Domain" = "yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\title]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru]
"Domain" = "yandex.ru"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\show-sitename]
"Default" = "true"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action2\execute]
"ParamCount" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-notif]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"Unique" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml]
"Version" = "4.3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\state]
"Scope" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru]
"Deleted" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\customSettings]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio\Settings\station]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo\Settings\window-pos]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru\Action1]
"Context" = "link"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-message-notifications]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"Unique" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru]
"Type" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru]
"homepageurl" = "http://slovari.yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9126FE0D-ECE8-42C1-8AAD-7DE477D4FE91}]
"AppName" = "elements64.exe"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml]
"VersionID" = "{B0C694A6-605D-4D1D-A06B-DAA0B4A437EB}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show_notifications]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"Icon" = "icons/campaign-running.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"StatisticsId" = "facebook"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru]
"Verb" = "ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\update-interval]
"Default" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki\Settings\showText]
"Default" = "true"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\execute]
"Method" = "get"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"Type" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Branding]
"UpdateURL" = "http://ye-update.yandex.ru/update-ie.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\menu.open]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-happy]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"api" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action2\execute]
"ParamCount" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo\Settings\showInAddressBand]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting\Settings\json_timeout]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"LibraryX86" = "webmaster.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru]
"Deleted" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"Title" = "userinfo"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\hideallbtn]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\update-interval]
"Default" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml#mailru" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\old-balls]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"Type" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action3\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting\Settings\json_time]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\allowRestoreDefault]
"Default" = "true"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action1]
"HasPreview" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1]
"Context" = "selection"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru]
"DownloadUrl" = "http://slovari.yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\metrikaSaveId]
"Default" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru]
"DownloadUrl" = "http://yandex.ru"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action1\execute]
"Action" = "http://slovari.yandex.ru/{selection}/ÃÂ¿ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml]
"Version" = "2.3.2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"LibraryX86" = "vkontakte.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"api" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru\Action1\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action1\execute]
"ParamCount" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo\Settings\showInAddressBand]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action1]
"HasPreview" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"PlatformVersion" = "22"
"UseServices" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\preview]
"ParamCount" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"UseServices" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\execute]
"Action" = "http://maps.yandex.ru/"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"StatisticsId" = "moikrug"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio\Settings\station]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"Type" = "4"
"LibraryX64" = "rambler64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"UseServices" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action2\execute\Parameter1]
"Value" = "{linkText?}{link}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\customSitename]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator\Settings\ie-mode]
"Default" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\route-home]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\allowRestoreDefault]
"Scope" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1]
"Context" = "selection"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´]
"DefaultActivity" = "yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\share]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-friend-notifications]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show_notifications]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"Icon" = "icons/webmaster.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show-notification-notifications]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"LibraryX86" = "sb.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Presets\http://bar.yandex.ru/packages/yandexbar.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\presets\http://bar.yandex.ru/packages/yandexbar.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-weather]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\notification_data]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#geolocation" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"Title" = "Ãâ€œÃÂ»ÃÂ°ÃÂ²ÃÂ½ÃÂ°Ã‘Â ÃÂºÃÂ½ÃÂ¾ÃÂ¿ÃÂºÃÂ°"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler\Settings\update_interval]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\tutorial.showAfter]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo\Settings\countersUpdateInterval]
"Default" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"StatisticsId" = "yalogin"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"LibraryX64" = "vkontakte64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\BrowserHistory]
"h" = "100"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"UseServices" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki\Settings\showText]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#translator" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"Title" = "ÃÅ¸Ã‘â‚¬ÃÂµÃÂ´ÃÂ»ÃÂ¾ÃÂ¶ÃÂµÃÂ½ÃÂ¸ÃÂµ ÃÂ°ÃÂ»Ã‘Å’Ã‘â€šÃÂµÃ‘â‚¬ÃÂ½ÃÂ°Ã‘â€šÃÂ¸ÃÂ²ÃÂ½ÃÂ¾ÃÂ³ÃÂ¾ ÃÂ¿ÃÂ¾ÃÂ¸Ã‘ÂÃÂºÃÂ°"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action2]
"Context" = "link"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\flashOfferUrl]
"Default" = "http://browser.yandex.ru/desktop/?head=flash&from=link_element_neyb_no-flash_|&banerid=0456510000"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml]
"Version" = "1.5.1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo\Settings\showInAddressBand]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"Icon" = "icons/subscription/subscription.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\show_label]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar]
"ManifestUrl" = "http://bar.yandex.ru/packages/yandexbar"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\showHomepage]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru]
"Type" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"LibraryX86" = "rambler.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml#metrika" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show_notifications]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\friend]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"StatisticsId" = "readability"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"Title" = "ÃÅ“ÃÂ¾ÃÂ¹ ÃÅ¡Ã‘â‚¬Ã‘Æ’ÃÂ³"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml#webmaster" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show_notifications]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\route-work]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\hintUrls]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\id]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"LibraryX64" = "sb64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"Title" = "ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â.Ãâ€ÃÂµÃÂ½Ã‘Å’ÃÂ³ÃÂ¸"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign\Settings\campaign]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-notes]
"Scope" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\preview]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\show_notification]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\allowRestoreDefault]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\preview]
"Method" = "get"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar]
"Version" = "8.7"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote\Settings\quote-id]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-photos]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml#mc" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-messages]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\execute]
"ParamCount" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\share]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\clid]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action3\execute\Parameter1]
"Name" = "subject"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting\Settings\json_time]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator]
"Icon" = "icons/pagetranslator/pagetranslator.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"Unique" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-guest]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\show-main-button-title]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml]
"Version" = "4.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru]
"Enabled" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show-notification-notifications]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music\Settings\volume]
"Default" = "0.7"
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"Icon" = "facebook.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\translatorOfferUrl]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar]
"LanguageID" = "1049"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml#campaign" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml]
"VersionID" = "{1A35CAC7-7791-432B-A940-D058887FA594}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct\Settings\update-interval]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote\Settings\quote-id]
"Default" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid5" = "2148274-100"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar]
"VersionID" = "{59A1D6BD-7ED6-4619-A09D-BC3B574B0B76}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid7" = "2148276-100"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-friends]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid1" = "2148271-100"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action2\execute]
"Action" = "http://slovari.yandex.ru/{linkText}/ÃÂ¿ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid2" = "2148272-100"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting\Settings\json_time]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator\Settings\ie-tutorialShowCount]
"Scope" = "2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action2\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid9" = "2148278-100"
"Clid8" = "2148277-100"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"Unique" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru]
"Verb" = "ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-photos]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action1\execute\Parameter1]
"Name" = "body"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\lastDate]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action3\execute\Parameter2]
"Value" = "{documentUrl}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\Clids]
"Clid14" = "2148283-100"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug\Settings\countersUpdateInterval]
"Default" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml#smartbox" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml]
"VersionID" = "{E21F4A98-D637-448B-AAAF-7E0F16926A2C}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru]
"DisplayName" = "ÃÅ¾Ã‘â€šÃÂ¿Ã‘â‚¬ÃÂ°ÃÂ²ÃÂ¸Ã‘â€šÃ‘Å’ ÃÂ¿ÃÂ¾ ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â.ÃÅ¸ÃÂ¾Ã‘â€¡Ã‘â€šÃÂµ"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\update-interval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote\Settings\update-interval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°]
"DefaultActivity" = "yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\defaultSearchScope]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml#yavideo" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\customSitename]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-happy]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\show-name]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\notified_data]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\sbBrowserLaunchUrl]
"Default" = "http://browser.yandex.ru/desktop/?head=security&from=link_element_yabr-installed_safe_|&banerid=0456000000#safe"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo\Settings\window-pos]
"Default" = "0,0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action2\execute]
"Action" = "http://mail.yandex.ru/compose"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"StatisticsId" = "vk"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"Title" = "Ãâ€œÃÂ¾Ã‘â‚¬ÃÂ¾ÃÂ´"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\show-main-button-title]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show-message-notifications]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\sbBrowserLaunchUrl]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#quote" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"StatisticsId" = "mc"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\preview]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show-message-notifications]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"Active" = "0"

[HKCU\Software\Microsoft\Internet Explorer\MINIE]
"TabBandWidth" = "676"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\show_notification]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-notif]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"StatisticsId" = "translator"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru]
"Enabled" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta\Settings\countersUpdateInterval]
"Default" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Newest]
"x64" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110\elements64.exe"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\menu.open]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show_notifications]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\tutorial.showAfter]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-name]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\offer.elements]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"LibraryX86" = "facebook.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\bartabhost.dll]
"Version" = "8.7.0.3110"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#logo" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"StatisticsId" = "yamail"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-mention-notifications]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru\Action1\execute]
"Method" = "get"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\notificationsData]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"Icon" = "icons/money/money.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"UseServices" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo\Settings\always-on-top]
"Default" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-messages]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"Icon" = "icons/rambler.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\lastDate]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-traffic]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-photo]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Settings]
"SendStatistics" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\state]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"StatisticsId" = "altsearch"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\show_label]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo\Settings\always-on-top]
"Scope" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru\Action1\execute]
"ParamCount" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action3\execute]
"Action" = "http://mail.yandex.ru/compose"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\preview]
"Method" = "get"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"Icon" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"LibraryX86" = "direct.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-notif]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0A4ECA5C-45F6-4340-8673-F63E8259576E}]
"Policy" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"Type" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\preview]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml]
"Version" = "3.2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru\Action1\execute]
"Action" = "http://yandex.ru/yandsearch?stype=&nl=0&text={linkText}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\notification_data]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\customSettings]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4E 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\show_notification]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\execute]
"Method" = "get"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar]
"ApplySSI" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-photos]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"StatisticsId" = "typosquatting"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug\Settings\showText]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler\Settings\update_interval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml]
"VersionID" = "{2F6D726F-6648-4A69-BB7F-4ECDBBBE9404}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\preview]
"Action" = "http://market.yandex.ru/export/bar/search_bar.xml?text={selection}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show_notifications]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki\Settings\countersUpdateInterval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru]
"ContentMask" = "6"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music\Settings\firstLaunch]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Presets\http://bar.yandex.ru/packages/yandexbar.xml]
"Version" = "8.7"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"Type" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\slice-data]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\hideallbtn]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\tutorial.autoCounter]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-friend-notifications]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2]
"Context" = "link"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\offer.elements]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml]
"Version" = "3.11"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"Title" = "ÃÂ¢ÃÂ¾ÃÂ»Ã‘Å’ÃÂºÃÂ¾ Ã‘â€šÃÂµÃÂºÃ‘ÂÃ‘â€š"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-weatherHomepage]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru]
"Deleted" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"Icon" = "icons/twitter.png"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru]
"homepageurl" = "http://market.yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"StatisticsId" = "metrika"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml]
"LocalPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\execute\Parameter1]
"Name" = "text"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru]
"DownloadUrl" = "http://market.yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\update-interval]
"Scope" = "2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\execute]
"Method" = "get"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show_notifications]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml#odnoklassniki" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"Title" = "ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â.Ãâ€™ÃÂ¸ÃÂ´ÃÂµÃÂ¾"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action3]
"Context" = "document"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action3\execute\Parameter1]
"Value" = "{documentTitle?}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru]
"DownloadUrl" = "http://mail.yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\show-warning]
"Scope" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\preview]
"Action" = "https://export.yandex.ru/bar/mapsprint.xml?address={linkText}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"LibraryX86" = "gmail.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-friends]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings\save]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"StatisticsId" = "direct"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator\Settings\ie-tutorialShowCount]
"Default" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"LibraryX86" = "yavideo.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug\Settings\showText]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"StatisticsId" = "yalogo"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml#twitter" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Presets]
"(Default)" = "http://bar.yandex.ru/packages/yandexbar.xml"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action1\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action2]
"Context" = "link"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action1\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar]
"InstallResult" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\show-sitename]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"StatisticsId" = "campaign"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"StatisticsId" = "browseroffer"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\state]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml#typesquatting" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"Title" = "ÃÂ¤ÃÂ¾Ã‘â€šÃÂºÃÂ¸"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\sbBrowserInstallUrl]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\AutoSelect]
"Version" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-name]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml#esync" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator]
"LibraryX86" = "stardust.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\selectedSitenameSetting]
"Default" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru]
"Type" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy\Settings\showValue]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\BrowserHistory]
"dh" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\title]
"Default" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action2\execute]
"Accept-charset" = "utf-8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"UseServices" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action2]
"Context" = "link"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\state]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings\notification_data]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-weatherHomepage]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\preview]
"ParamCount" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo\Settings\countersUpdateInterval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9126FE0D-ECE8-42C1-8AAD-7DE477D4FE91}]
"Policy" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"LibraryX86" = "browseroffer.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\execute]
"ParamCount" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\masterSaveId]
"Scope" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action2\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\update-interval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-photo]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\show-name]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"Title" = "ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´ Ã‘ÂÃÂ»ÃÂ¾ÃÂ²"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru]
"DisplayName" = "ÃÅ¸ÃÂ¾Ã‘ÂÃÂ¼ÃÂ¾Ã‘â€šÃ‘â‚¬ÃÂµÃ‘â€šÃ‘Å’ ÃÂ½ÃÂ° ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘Â.ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃÂ°Ã‘â€¦"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\customSitename]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"LibraryX64" = "mailru64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\notified_data]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Newest]
"x86" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110\elements.exe"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug\Settings\countersUpdateInterval]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\selectedSitename]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\show-msg]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug\Settings\countersUpdateInterval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug]
"UseServices" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync]
"UseServices" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº]
"DefaultActivity" = "yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics]
"UserId" = "{128AC281-D5D9-496E-964F-56634EB3AD42}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml]
"ManifestUrl" = "http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action1\execute]
"Action" = "http://mail.yandex.ru/compose"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-weather]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo\Settings\update-interval]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika\Settings\update-interval]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action2\preview]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-message-notifications]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\user_id]
"Default" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\state]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹]
"DefaultActivity" = "yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml]
"LanguageID" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml]
"VersionID" = "{36188A0B-FA48-490C-90C0-AE716EF0A9C0}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings\state]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator]
"StatisticsId" = "pagetranslator"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"StatisticsId" = "fotki"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster]
"Unique" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru]
"ContentMask" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\flashOfferUrl]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio\Settings\station]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action1]
"HasPreview" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml]
"VersionID" = "{7A7B50C0-E661-4FC2-BEFC-659C7F4A5218}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml]
"VersionID" = "{52CE6CD9-F6B6-46BC-AC9B-B170DC82A411}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse]
"FirstInstallDate" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\showText]
"Scope" = "3"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch]
"LibraryX64" = "altsearch64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"Hidden" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action1\execute]
"ParamCount" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂ¾ÃÂ¸Ã‘ÂÃÂº\yandex.ru]
"DisplayName" = "ÃÂÃÂ°ÃÂ¹Ã‘â€šÃÂ¸ ÃÂ² ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘ÂÃÂµ"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"Type" = "4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar.yandex.ru/packages/yandexbar#fotki" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Branding]
"BrandId" = "yandex"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar]
"AllowSYH" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\showHomepage]
"Default" = "false"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¡ÃÂ»ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘Å’\yandex.ru\Action2\execute]
"Action" = "http://slovari.yandex.ru/{linkText}/ÃÂ·ÃÂ½ÃÂ°Ã‘â€¡ÃÂµÃÂ½ÃÂ¸ÃÂµ"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Statistics\DayUse\AutoSelect]
"http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml#browseroffer" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"Type" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action2\preview]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\metrikaSaveId]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money\Settings\countersUpdateInterval]
"Default" = "5"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town]
"StatisticsId" = "yacity"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter]
"LibraryX64" = "twitter64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\show-traffic]
"Default" = "true"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote\Settings\quote-id]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar]
"AllowSYS" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\user_id]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo\Settings\always-on-top]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly]
"Hidden" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\showText]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂ¢ÃÂ¾ÃÂ²ÃÂ°Ã‘â‚¬Ã‘â€¹\yandex.ru\Action1\preview]
"Method" = "get"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox]
"api" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\friend]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"AllowDisable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\notifications]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml]
"Version" = "6.12"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru]
"Enabled" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio\Settings\show_text]
"Persistent" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru]
"Icon" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\mail.ico"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail]
"UseServices" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru\Action2]
"HasPreview" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¸ÃÂµÃ‘â‚¬ÃÂµÃÂ²ÃÂ¾ÃÂ´\yandex.ru\Action2\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings\tutorial.autoCounter]
"Default" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings\show-friends-notifications]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml]
"VersionID" = "{A67769C2-5F93-463B-90EB-23C0E278BE9E}"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\update-interval]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct]
"Icon" = "icons/direct.png"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru]
"Domain" = "yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-messages]
"Default" = "false"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo]
"UseServices" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings\showTextAlert]
"Scope" = "2"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation]
"CustomSettings" = "0"
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru]
"Domain" = "yandex.ru"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"LibraryX64" = "stardust64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music\Settings\firstLaunch]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings\translatorOfferUrl]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc]
"Icon" = "icons/mc/icon.png"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\show-comment-notifications]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings\route-home]
"Scope" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta]
"StatisticsId" = "yasubscription"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook]
"LibraryX64" = "facebook64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\notified_data]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\show-name]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru]
"Unique" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings\display-button-notes]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings\state]
"Scope" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÅ¡ÃÂ°Ã‘â‚¬Ã‘â€šÃ‘â€¹\yandex.ru\Action1\execute]
"Enctype" = "application/x-www-form-urlencoded"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ÃÂÃÂ»ÃÂµÃÂºÃ‘â€šÃ‘â‚¬ÃÂ¾ÃÂ½ÃÂ½ÃÂ°Ã‘Â ÃÂ¿ÃÂ¾Ã‘â€¡Ã‘â€šÃÂ°\yandex.ru]
"Type" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings\selectedSitenameSetting]
"Persistent" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"StatisticsId" = "radio"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator]
"PlatformVersion" = "22"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio]
"CustomSettings" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\bartabhost.dll]
"Target" = "%Program Files% (x86)\Yandex\Elements\bartab.dll"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following registry key(s):

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml\Components\yavideo\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\town\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml\Components\browseroffer\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\textonly\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml\Components\radio\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy\Variables]
[HKCU\Software\AppDataLow\Software\Yandex\Toolbar]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\logo\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\userinfo\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml\Components\rambler\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\site\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\login\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\pagetranslator\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml\Components\facebook\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\Locks]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml\Components\mailru\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\moikrug\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\webmaster\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\direct\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml\Components\campaign\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml\Components\gmail\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\translator\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\geolocation\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml\Components\profile\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\fotki\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\music\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml\Components\esync\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\mc\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\quote\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\cy\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml\Components\smartbox\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml\Components\altsearch\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml\Components\twitter\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\lenta\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml\Components\typesquatting\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml\Components\metrika\Settings]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\mail\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml\Components\odnoklassniki\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money\Variables]
[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar\Custom\Packages\http://bar.yandex.ru/packages/yandexbar\Components\money\Settings]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Toolbar]
"ApplySSI"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\Locks]
"{91397D20-1446-11D4-8AF4-0040CA1127B6}"

The process setup.exe:4060 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCR\YandexPPT.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserPPT Document"

[HKLM\SOFTWARE\RegisteredApplications]
"Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q" = "Software\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities"

[HKCR\YandexFLV.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-106"

[HKCR\YandexWEBM.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserWEBM Document"

[HKCU\Software\Yandex\YandexBrowser\Commands\on-os-upgrade]
"CommandLine" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\setup.exe --on-os-upgrade --verbose-logging"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"news" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".psd" = "YandexPSD.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\.swf\OpenWithProgids]
"YandexSWF.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexPPTS.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserPPTS Document"

[HKCR\YandexDOC.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer]
"GlobalAssocChangedCounter" = "38"

[HKCR\YandexPPTX.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".crx" = "YandexCRX.DAPOW4WZBGMBLQA5WYYOJHF62Q"
".htm" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"
".fb2" = "YandexFB2.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\yabrowser\shell]
"(Default)" = "open"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"irc" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\YandexJS.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserJS Document"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"http" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\YandexFLV.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserFLV Document"

[HKCR\YandexCRX.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\.pptx\OpenWithProgids]
"YandexPPTX.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\.html\OpenWithProgids]
"YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\.epub\OpenWithProgids]
"YandexEPUB.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"DisplayIcon" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,0"

[HKCR\YandexCSS.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\browser.exe]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe"

[HKCR\YandexFILE.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"tel" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\YandexOGV.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexCSS.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-124"

[HKCU\Software\Yandex\YandexBrowser(backup)]
"InstallerError" = "0"
"Name" = "Yandex"

[HKCR\YandexSWF.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserSWF Document"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"webcal" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\YandexODT.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexGIF.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserGIF Document"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"sms" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".DOT" = "YandexDOT.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\.jpeg\OpenWithProgids]
"YandexJPEG.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexPOT.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-129"

[HKCR\YandexSXW.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserSXW Document"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"VersionMajor" = "2214"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".MP3" = "YandexMP3.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCU\Software\Yandex\YandexBrowser]
"UninstallArguments" = " --uninstall --verbose-logging"

[HKCR\YandexOGV.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserOGV Document"

[HKCU\Software\Classes\YandexBrowser.crx\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe %1"

[HKCR\yabrowser\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,0"

[HKCU\Software\Yandex\YandexBrowser]
"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\setup.exe"

[HKCR\YandexXML.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-134"

[HKCR\YandexPPTS.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-115"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"DisplayVersion" = "40.0.2214.3645"

[HKCR\.odt\OpenWithProgids]
"YandexODT.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"InstallLocation" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application"

[HKCR\YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex HTML Document"

[HKCU\Software\Yandex\YandexBrowser]
"InstallerSuccessLaunchCmdLine" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe"

[HKCR\.pot\OpenWithProgids]
"YandexPOT.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexTIFF.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserTIFF Document"

[HKCR\YandexDOT.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-125"

[HKCR\YandexPNG.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\.txt\OpenWithProgids]
"YandexTXT.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexOGV.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-128"

[HKCR\.shtml\OpenWithProgids]
"YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexFB2.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-122"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".ogv" = "YandexOGV.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\.gif\OpenWithProgids]
"YandexGIF.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexPPT.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexDOCX.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-105"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".swf" = "YandexSWF.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\.mp3\OpenWithProgIds]
"YandexMP3.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\InstallInfo]
"IconsVisible" = "1"

[HKCR\YandexDOC.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-104"

[HKCR\YandexJPEG.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"nntp" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\YandexEPUB.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserEPUB Document"

[HKCR\.webp\OpenWithProgids]
"YandexFILE.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"mailto" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCU\Software\Classes\.crx]
"(Default)" = "YandexBrowser.crx"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".html" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\yabrowser\shell\open\ddeexec]
"(Default)" = ""

[HKCR\.fb2\OpenWithProgids]
"YandexFB2.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".gif" = "YandexGIF.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\.ppts\OpenWithProgids]
"YandexPPTS.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\.doc\OpenWithProgids]
"YandexDOC.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCU\Software\Yandex\YandexBrowser]
"pv" = "40.0.2214.3645"

[HKCR\YandexJS.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-126"

[HKCR\.rtf\OpenWithProgids]
"YandexRTF.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCU\Software\Yandex\YandexBrowser]
"Name" = "Yandex"

[HKCR\.jpg\OpenWithProgids]
"YandexJPEG.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCU\Software\Yandex\YandexBrowser(backup)]
"InstallTime" = "13073986337418959"

[HKCU\Software\Yandex\YandexBrowser]
"InstallerExtraCode1" = "1"

[HKCU\Software\Classes\YandexBrowser.crx\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,0"

[HKCR\YandexPOT.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserPOT Document"

[HKCR\.xml\OpenWithProgIDs]
"YandexXML.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexPPTX.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-116"

[HKCR\.htm\OpenWithProgids]
"YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexXML.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCU\Software\Yandex\YandexBrowser]
"InstallerResult" = "0"

[HKCR\.js\OpenWithProgids]
"YandexJS.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexMP4.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexXML.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserXML Document"

[HKCU\Software\Yandex\YandexBrowser]
"InstallerError" = "0"

[HKCR\yabrowser\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\.crx\OpenWithProgids]
"YandexCRX.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexFILE.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserFILE Document"

[HKCR\.ogv\OpenWithProgIDs]
"YandexOGV.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"VersionMinor" = "3645"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"urn" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\InstallInfo]
"ReinstallCommand" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --make-default-browser"

[HKCR\YandexJPEG.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserJPEG Document"

[HKCR\.pdf\OpenWithProgIds]
"YandexPDF.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexGIF.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-107"

[HKCR\YandexJPEG.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-109"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesChanges" = "10"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\browser.exe]
"Path" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application"

[HKCR\YandexPPTS.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexTXT.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserTXT Document"

[HKCR\YandexPDF.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-112"

[HKCR\YandexFILE.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-123"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesResolve" = "CC 02 00 00 4C 00 00 00 01 14 02 00 00 00 00 00"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"smsto" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"NoRepair" = "1"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".pot" = "YandexPOT.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser,"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"https" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\.psd\OpenWithProgids]
"YandexPSD.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCU\Software\Yandex\YandexBrowser(backup)]
"InstallerSuccessLaunchCmdLine" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe"

[HKCR\YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-108"

[HKCR\YandexCRX.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserCRX Document"

[HKCR\YandexPPTX.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserPPTX Document"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".epub" = "YandexEPUB.DAPOW4WZBGMBLQA5WYYOJHF62Q"
".CSS" = "YandexCSS.DAPOW4WZBGMBLQA5WYYOJHF62Q"
".shtml" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"Publisher" = "ÃÅ¾ÃÅ¾ÃÅ¾Ã‚Â Ã‚Â«ÃÂ¯ÃÂÃâ€Ãâ€¢ÃÅ¡ÃÂ¡Ã‚Â»"

[HKCR\YandexCSS.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserCSS Document"

[HKCU\Software\Yandex\YandexBrowser(backup)]
"InstallerResult" = "0"

[HKCU\Software\Yandex\YandexBrowser]
"oopcrashes" = "1"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".ppt" = "YandexPPT.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\YandexPSD.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexPPT.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-114"

[HKCU\Software\Yandex\YandexBrowser(backup)\Commands\on-os-upgrade]
"AutoRunOnOSUpgrade" = "1"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".ppts" = "YandexPPTS.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCU\Software\Yandex\YandexBrowser]
"yasend_install" = "true"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"ftp" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\YandexDOT.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCU\Software\Classes\YandexBrowser.crx]
"(Default)" = "Yandex Browser Extra"

[HKCR\YandexCRX.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-103"

[HKCR\YandexFB2.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\.css\OpenWithProgids]
"YandexCSS.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexSWF.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-118"

[HKCR\.png\OpenWithProgids]
"YandexPNG.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCU\Software\Yandex\YandexBrowser(backup)\Commands\on-os-upgrade]
"CommandLine" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\setup.exe --on-os-upgrade --verbose-logging"

[HKCR\YandexPNG.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserPNG Document"

[HKCR\YandexMP3.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-110"

[HKCR\YandexSXW.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-131"

[HKCR\.xht\OpenWithProgids]
"YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexRTF.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-117"

[HKCR\YandexODT.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserODT Document"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,0"

[HKCU\Software\Yandex\YandexBrowser]
"ap" = ""

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities]
"ApplicationDescription" = "Yandex Ã¢â‚¬â€œ Ã‘ÂÃ‘â€šÃÂ¾ ÃÂ±Ã‘â€¹Ã‘ÂÃ‘â€šÃ‘â‚¬ÃÂ°Ã‘Â ÃÂ¸Ã‚Â Ã‘Æ’ÃÂ´ÃÂ¾ÃÂ±ÃÂ½ÃÂ°Ã‘Â ÃÂ¿Ã‘â‚¬ÃÂ¾ÃÂ³Ã‘â‚¬ÃÂ°ÃÂ¼ÃÂ¼ÃÂ° ÃÂ´ÃÂ»Ã‘ÂÃ‚Â Ã‘â‚¬ÃÂ°ÃÂ±ÃÂ¾Ã‘â€šÃ‘â€¹ ÃÂ²Ã‚Â ÃÂ¸ÃÂ½Ã‘â€šÃÂµÃ‘â‚¬ÃÂ½ÃÂµÃ‘â€šÃÂµ ÃÂ¸Ã‚Â ÃÂ¿Ã‘â‚¬ÃÂ¾Ã‘ÂÃÂ¼ÃÂ¾Ã‘â€šÃ‘â‚¬ÃÂ° ÃÂ²ÃÂµÃÂ±-Ã‘ÂÃ‘â€šÃ‘â‚¬ÃÂ°ÃÂ½ÃÂ¸Ã‘â€ ."

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe"

[HKCU\Software\Yandex\YandexBrowser]
"InstallTime" = "13073986337418959"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\InstallInfo]
"ShowIconsCommand" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --show-icons"
"HideIconsCommand" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --hide-icons"

[HKCR\.sxw\OpenWithProgids]
"YandexSXW.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexSXW.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexMP4.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-111"

[HKCR\YandexTXT.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\setup.exe --uninstall --verbose-logging"

[HKCR\.ppt\OpenWithProgids]
"YandexPPT.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexWEBM.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-132"

[HKCU\Software\Yandex\YandexBrowser(backup)]
"pv" = "40.0.2214.3645"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities]
"ApplicationName" = "Yandex"

[HKCR\YandexTIFF.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-119"

[HKCU\Software\Yandex\YandexBrowser(backup)]
"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\setup.exe"

[HKCR\YandexEPUB.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-121"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".xht" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\.tiff\OpenWithProgids]
"YandexTIFF.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexPDF.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\URLAssociations]
"mms" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".DOC" = "YandexDOC.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"NoModify" = "1"

[HKCR\YandexSWF.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\.docx\OpenWithProgids]
"YandexDOCX.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"Favorites" = "00 7C 01 00 00 14 00 1F 80 C8 27 34 1F 10 5C 10"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities]
"ApplicationIcon" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,0"

[HKCR\YandexEPUB.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexWEBM.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexMP3.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserMP3 Document"

[HKCR\YandexMP4.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserMP4 Document"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"InstallDate" = "20150420"

[HKCU\Software\Yandex\YandexBrowser(backup)]
"oopcrashes" = "1"

[HKCR\YandexWMV.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-133"

[HKCR\YandexMP3.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCU\Software\Yandex\YandexBrowser(backup)]
"usagestats" = "1"
"UninstallArguments" = " --uninstall --verbose-logging"

[HKCR\.flv\OpenWithProgIds]
"YandexFLV.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\Startmenu]
"StartMenuInternet" = "Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\YandexFLV.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"DisplayName" = "Yandex"

[HKCR\YandexRTF.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexTXT.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-120"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesVersion" = "2"

[HKCR\YandexWMV.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\.mp4\OpenWithProgids]
"YandexMP4.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCU\Software\Yandex\YandexBrowser(backup)]
"yasend_install" = "true"

[HKCR\YandexJS.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\YandexDOCX.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".flv" = "YandexFLV.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCU\Software\Yandex\YandexBrowser(backup)]
"lang" = "ru"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".xhtml" = "YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\YandexPOT.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\.xhtml\OpenWithProgids]
"YandexHTML.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCU\Software\Yandex\YandexBrowser\Commands\on-os-upgrade]
"AutoRunOnOSUpgrade" = "1"

[HKCR\YandexDOT.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserDOT Document"

[HKCR\YandexRTF.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserRTF Document"

[HKCR\YandexTIFF.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser]
"Version" = "40.0.2214.3645"

[HKCR\.webm\OpenWithProgIds]
"YandexWEBM.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexFB2.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserFB2 Document"

[HKCR\YandexDOC.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserDOC Document"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".XML" = "YandexXML.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex"

[HKCR\YandexWMV.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserWMV Document"

[HKCR\YandexPSD.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserPSD Document"

[HKCR\YandexGIF.DAPOW4WZBGMBLQA5WYYOJHF62Q\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe -- %1"

[HKCR\.dot\OpenWithProgids]
"YandexDOT.DAPOW4WZBGMBLQA5WYYOJHF62Q" = ""

[HKCR\YandexDOCX.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserDOCX Document"

[HKCR\YandexPSD.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-130"

[HKCR\YandexODT.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-127"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yandex.DAPOW4WZBGMBLQA5WYYOJHF62Q\Capabilities\FileAssociations]
".mp4" = "YandexMP4.DAPOW4WZBGMBLQA5WYYOJHF62Q"
".sxw" = "YandexSXW.DAPOW4WZBGMBLQA5WYYOJHF62Q"

[HKCR\YandexPDF.DAPOW4WZBGMBLQA5WYYOJHF62Q]
"(Default)" = "Yandex BrowserPDF Document"

[HKCR\yabrowser]
"URL Protocol" = ""

[HKCU\Software\Yandex\YandexBrowser]
"usagestats" = "1"

[HKCR\YandexPNG.DAPOW4WZBGMBLQA5WYYOJHF62Q\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe,-113"

The Trojan deletes the following registry key(s):

[HKCU\Software\Yandex\YandexBrowser(backup)]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Yandex\YandexBrowser]
"InstallerExtraCode1"
"ap"
"pv"

The process UmmyVideoDownloader.tmp:1860 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\RestartManager\Session0000]
"RegFilesHash" = "FC F3 45 D8 CD 2D 3D 96 DC 10 B9 F9 4E 0E AD 98"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\RestartManager\Session0000]
"RegFiles0000" = "C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\UmmyVideoDownloader.exe, C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\ffmpeg.exe, C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\RegProto.exe"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E028DBDA-EEE7-48A0-ADF7-D250589A02C5}_is1]
"InstallLocation" = "C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E028DBDA-EEE7-48A0-ADF7-D250589A02C5}_is1]
"Inno Setup: Icon Group" = "UmmyVideoDownloader"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E028DBDA-EEE7-48A0-ADF7-D250589A02C5}_is1]
"EstimatedSize" = "37772"
"Inno Setup: Setup Version" = "5.5.5 (u)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E028DBDA-EEE7-48A0-ADF7-D250589A02C5}_is1]
"Inno Setup: Language" = "english"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "E6 15 AB 5D 36 7B D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "9D DD DA 73 36 7B D0 01"

[HKCU\Software\Microsoft\RestartManager\Session0000]
"SessionHash" = "FF C3 33 BC 27 0F 99 4F E9 D8 B6 E4 6A 78 0B EF"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E028DBDA-EEE7-48A0-ADF7-D250589A02C5}_is1]
"NoModify" = "1"
"URLInfoAbout" = "http://videodownloader.ummy.net/"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E028DBDA-EEE7-48A0-ADF7-D250589A02C5}_is1]
"URLUpdateInfo" = "http://videodownloader.ummy.net/"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached]
"{17FE9752-0B5A-4665-84CD-569794602F5C} {7F9185B0-CB92-43C5-80A9-92277A4F7B54} 0xFFFF" = "01 00 00 00 00 00 00 00 0D F8 C9 6D 36 7B D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E028DBDA-EEE7-48A0-ADF7-D250589A02C5}_is1]
"MajorVersion" = "1"
"QuietUninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\unins000.exe /SILENT"
"DisplayIcon" = "C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\UmmyVideoDownloader.exe"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E028DBDA-EEE7-48A0-ADF7-D250589A02C5}_is1]
"Inno Setup: App Path" = "C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader"
"DisplayVersion" = "1.3.0.3"
"HelpLink" = "http://videodownloader.ummy.net/"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 49 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E028DBDA-EEE7-48A0-ADF7-D250589A02C5}_is1]
"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\unins000.exe"

[HKCU\Software\Microsoft\RestartManager\Session0000]
"Sequence" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E028DBDA-EEE7-48A0-ADF7-D250589A02C5}_is1]
"NoRepair" = "1"
"Inno Setup: User" = "%CurrentUserName%"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\RestartManager\Session0000]
"Owner" = "44 07 00 00 4B 8B A6 5B 36 7B D0 01"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E028DBDA-EEE7-48A0-ADF7-D250589A02C5}_is1]
"MinorVersion" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E028DBDA-EEE7-48A0-ADF7-D250589A02C5}_is1]
"InstallDate" = "20150420"
"DisplayName" = "UmmyVideoDownloader"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following registry key(s):

[HKCU\Software\Microsoft\RestartManager\Session0000]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\RestartManager\Session0000]
"RegFilesHash"
"Sequence"
"Owner"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\RestartManager\Session0000]
"SessionHash"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKCU\Software\Microsoft\RestartManager\Session0000]
"RegFiles0000"

The process MsiExec.exe:3476 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"Favorites" = "00 7C 01 00 00 14 00 1F 80 C8 27 34 1F 10 5C 10"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\F291EF9CDDAA823A7B68021A60FD1C48]
"FaviconURLFallback" = "http://www.yandex.com/favicon.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"ShowSearchSuggestions" = "1"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\F291EF9CDDAA823A7B68021A60FD1C48]
"SuggestionsURL" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\Internet Explorer\Services\Bing.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\F291EF9CDDAA823A7B68021A60FD1C48]
"URL" = "http://yandex.com/yandsearch?win=173&clid=2148275-100&text={searchTerms}"
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\Local\MICROS~1\INTERN~1\Services\WWWYAN~2.ICO"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"NTLogoURL" = "http://downloader.yandex.net/banner/ntpagelogo/{language}_{scalelevel}.png"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\F291EF9CDDAA823A7B68021A60FD1C48]
"DisplayName" = "Yandex"
"NTLogoURL" = "http://downloader.yandex.net/banner/ntpagelogo/{language}_{scalelevel}.png"

[HKCU\Software\AppDataLow\Yandex]
"UICreated_adm" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached]
"{182C3813-DF97-40FA-9C4E-B7D3E74F00CA} {000214F9-0000-0000-C000-000000000046} 0xFFFF" = "01 00 00 00 00 00 00 00 C2 40 E1 75 36 7B D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesVersion" = "2"

[HKCU\Software\Microsoft\Internet Explorer\SearchUrl\y]
"(Default)" = "http://yandex.com/yandsearch?win=173&clid=2148278-100&text=%s"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\F291EF9CDDAA823A7B68021A60FD1C48]
"SuggestionsURL_JSON" = "http://suggest.yandex.net/suggest-ff.cgi?part={searchTerms}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"DisplayName" = "Yandex"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\F291EF9CDDAA823A7B68021A60FD1C48]
"SuggestionsURLFallback" = "http://api.bing.com/qsml.aspx?query={searchTerms}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IE10SS&market={language}"
"ShowSearchSuggestions" = "1"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\Internet Explorer\Services\Bing.ico"

[HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = "{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\F291EF9CDDAA823A7B68021A60FD1C48]
"TopResultURLFallback" = "http://www.bing.com/search?q={searchTerms}&src=IE-TopResult&FORM=IE10TR"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"SuggestionsURL" = "Type: REG_SZ, Length: 0"
"SuggestionsURL_JSON" = "http://suggest.yandex.net/suggest-ff.cgi?part={searchTerms}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesChanges" = "7"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
"FaviconURLFallback" = "http://www.bing.com/favicon.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"NTURL" = "http://yandex.com/yandsearch?win=173&clid=2148277-100&text={searchTerms}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\F291EF9CDDAA823A7B68021A60FD1C48]
"SortIndex" = "0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
"SuggestionsURLFallback" = "http://api.bing.com/qsml.aspx?query={searchTerms}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IE10SS&market={language}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\F291EF9CDDAA823A7B68021A60FD1C48]
"NTURL" = "http://yandex.com/yandsearch?win=173&clid=2148277-100&text={searchTerms}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL" = "http://yandex.com/yandsearch?win=173&clid=2148275-100&text={searchTerms}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\F291EF9CDDAA823A7B68021A60FD1C48]
"YaCreationDate" = "2015-04-20"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"YaCreationDate" = "2015-04-20"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
"DisplayName" = "Bing"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"NTTopResultURL" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\F291EF9CDDAA823A7B68021A60FD1C48]
"NTTopResultURL" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Internet Explorer\Main]
"Start Page" = "http://www.yandex.com/?win=173&clid=2148274-100"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"FaviconURLFallback" = "http://www.yandex.com/favicon.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
"URL" = "http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes]
"ShowSearchSuggestionsInAddressGlobal" = "1"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
"TopResultURLFallback" = "http://www.bing.com/search?q={searchTerms}&src=IE-TopResult&FORM=IE10TR"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesResolve" = "CC 02 00 00 4C 00 00 00 01 14 02 00 00 00 00 00"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"SortIndex" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories\{56FFCC30-D398-11D0-B2AE-00A0C908FA49}\Enum]
"Implementing" = "1C 00 00 00 01 00 00 00 DF 07 04 00 01 00 14 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached]
"{E88DCCE0-B7B3-11D1-A9F0-00AA0060FA31} {000214E6-0000-0000-C000-000000000046} 0xFFFF" = "01 00 00 00 00 00 00 00 3B 46 70 74 36 7B D0 01"

The Trojan deletes the following registry key(s):

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\F291EF9CDDAA823A7B68021A60FD1C48]
[HKCU\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
[HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]

The Trojan deletes the following value(s) in system registry:

The process MsiExec.exe:3900 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION]
"elements64.exe" = "10000"

[HKCR\fd\DefaultIcon]
"(Default)" = "%Program Files% (x86)\Yandex\FastDial\fastdial.dll,0"

[HKCR\Wow6432Node\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}]
"NoExplorer" = "1"

[HKCR\Interface\{E16FE932-52D3-4BD9-B50B-A03BEC527579}]
"(Default)" = "IFastDial"

[HKCR\Interface\{E16FE932-52D3-4BD9-B50B-A03BEC527579}\TypeLib]
"(Default)" = "{AFBDA429-7995-4CCA-9298-7C7D6B4A244C}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION]
"elements.exe" = "10000"

[HKCR\FastDial.CFastDial.1]
"(Default)" = "Visual Bookmarks"

[HKCR\Wow6432Node\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\ProgID]
"(Default)" = "FastDial.CFastDial.1"

[HKCR\FastDial.CFastDial\CurVer]
"(Default)" = "FastDial.CFastDial.1"

[HKCR\Interface\{E16FE932-52D3-4BD9-B50B-A03BEC527579}\TypeLib]
"Version" = "1.0"

[HKCR\Wow6432Node\Interface\{E16FE932-52D3-4BD9-B50B-A03BEC527579}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]
"elements64.exe" = "1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{C93F72A2-2162-4BBA-A07A-F13663C297A6}]
"Version" = "*"

[HKCR\Wow6432Node\Interface\{E16FE932-52D3-4BD9-B50B-A03BEC527579}\TypeLib]
"Version" = "1.0"

[HKCR\Wow6432Node\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\VersionIndependentProgID]
"(Default)" = "FastDial.CFastDial"

[HKCR\fd\shell\open\command]
"(Default)" = "%Program Files%\Internet Explorer\IEXPLORE.EXE %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]
"elements.exe" = "1"

[HKCR\TypeLib\{AFBDA429-7995-4CCA-9298-7C7D6B4A244C}\1.0\HELPDIR]
"(Default)" = "%Program Files% (x86)\Yandex\FastDial"

[HKCR\Interface\{E16FE932-52D3-4BD9-B50B-A03BEC527579}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\TypeLib\{AFBDA429-7995-4CCA-9298-7C7D6B4A244C}\1.0\0\win32]
"(Default)" = "%Program Files% (x86)\Yandex\FastDial\fastdial.dll"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_GPU_RENDERING]
"elements64.exe" = "1"

[HKCR\Wow6432Node\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}]
"AppID" = "{53C0373B-51E4-4F85-9085-53EF06DE6E00}"

[HKCR\FastDial.CFastDial]
"(Default)" = "Visual Bookmarks"

[HKCR\FastDial.CFastDial.1\CLSID]
"(Default)" = "{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}"

[HKCR\Wow6432Node\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\TypeLib]
"(Default)" = "{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_WEBOC_DOCUMENT_ZOOM]
"elements.exe" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_TABBED_BROWSING]
"elements64.exe" = "1"

[HKCR\Wow6432Node\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\InprocServer32]
"(Default)" = "%Program Files% (x86)\Yandex\FastDial\fastdialhost.dll"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_WEBOC_DOCUMENT_ZOOM]
"elements64.exe" = "1"

[HKU\.DEFAULT\SOFTWARE\AppDataLow\Software\Yandex\Toolbar\Settings]
"Fastdial" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_TABBED_BROWSING]
"elements.exe" = "1"

[HKCR\fd]
"URL Protocol" = ""

[HKCR\TypeLib\{AFBDA429-7995-4CCA-9298-7C7D6B4A244C}\1.0]
"(Default)" = "FastDial 1.0 Type Library"

[HKCR\FastDial.CFastDial\CLSID]
"(Default)" = "{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}"

[HKCR\fd]
"(Default)" = "URL:FastDial Protocol"

[HKCR\TypeLib\{AFBDA429-7995-4CCA-9298-7C7D6B4A244C}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\Wow6432Node\Interface\{E16FE932-52D3-4BD9-B50B-A03BEC527579}]
"(Default)" = "IFastDial"

[HKCR\Wow6432Node\Interface\{E16FE932-52D3-4BD9-B50B-A03BEC527579}\TypeLib]
"(Default)" = "{AFBDA429-7995-4CCA-9298-7C7D6B4A244C}"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{C93F72A2-2162-4BBA-A07A-F13663C297A6}]
"Flags" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_GPU_RENDERING]
"elements.exe" = "1"

[HKCR\Wow6432Node\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}]
"(Default)" = "Visual Bookmarks"

The Trojan deletes the following registry key(s):

[HKCR\FastDial.CFastDial\CurVer]
[HKCR\FastDial.CFastDial.1\CLSID]
[HKCR\FastDial.CFastDial\CLSID]
[HKCR\FastDial.CFastDial]
[HKCR\FastDial.CFastDial.1]

The process MsiExec.exe:3940 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Internet Explorer\Toolbar]
"Locked" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\bartab64host.dll]
"Target" = "%Program Files% (x86)\Yandex\Elements\bartab64.dll"

[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{91397D20-1446-11D4-8AF4-0040CA1127B6}" = "20 7D 39 91 46 14 D4 11 8A F4 00 40 CA 11 27 B6"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\DeskbandHost\bartab64host.dll]
"Version" = "8.7.0.3110"

[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"ITBar7Layout64" = "13 00 00 00 00 00 00 00 00 00 00 00 30 00 00 00"

The process MsiExec.exe:3796 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Yandex.Toolbar.1\CLSID]
"(Default)" = "{91397D20-1446-11D4-8AF4-0040CA1127B6}"

[HKCR\Wow6432Node\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}\ProgID]
"(Default)" = "Yandex.Toolbar.1"

[HKCR\Wow6432Node\Interface\{91397D1F-1446-11D4-8AF4-0040CA1127B6}]
"(Default)" = "IYndbar"

[HKCR\Yandex.Toolbar.1]
"(Default)" = "ÃÂÃÂ»ÃÂµÃÂ¼ÃÂµÃÂ½Ã‘â€šÃ‘â€¹ ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘ÂÃÂ°"

[HKCR\Yandex.Toolbar\CurVer]
"(Default)" = "Yandex.Toolbar.1"

[HKCR\Interface\{91397D1F-1446-11D4-8AF4-0040CA1127B6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}\TypeLib]
"(Default)" = "{91397D20-1446-11D4-8AF4-0040CA1127B6}"

[HKCR\Wow6432Node\Interface\{91397D1F-1446-11D4-8AF4-0040CA1127B6}\TypeLib]
"Version" = "1.0"

[HKCR\TypeLib\{91397D13-1446-11D4-8AF4-0040CA1127B6}\1.0\FLAGS]
"(Default)" = "0"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCR\Interface\{91397D1F-1446-11D4-8AF4-0040CA1127B6}\TypeLib]
"Version" = "1.0"

[HKCR\Wow6432Node\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}]
"(Default)" = "ÃÂÃÂ»ÃÂµÃÂ¼ÃÂµÃÂ½Ã‘â€šÃ‘â€¹ ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘ÂÃÂ°"

[HKCR\TypeLib\{91397D13-1446-11D4-8AF4-0040CA1127B6}\1.0\HELPDIR]
"(Default)" = "%Program Files% (x86)\Yandex\Elements"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCR\TypeLib\{91397D13-1446-11D4-8AF4-0040CA1127B6}\1.0]
"(Default)" = "Yandex Toolbar 1.0 Type Library"

[HKCR\Yandex.Toolbar]
"(Default)" = "ÃÂÃÂ»ÃÂµÃÂ¼ÃÂµÃÂ½Ã‘â€šÃ‘â€¹ ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘ÂÃÂ°"

[HKCR\Wow6432Node\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}\VersionIndependentProgID]
"(Default)" = "Yandex.Toolbar"

[HKCR\Wow6432Node\Interface\{91397D1F-1446-11D4-8AF4-0040CA1127B6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{91397D1F-1446-11D4-8AF4-0040CA1127B6}\TypeLib]
"(Default)" = "{91397D13-1446-11D4-8AF4-0040CA1127B6}"

[HKCR\Interface\{91397D1F-1446-11D4-8AF4-0040CA1127B6}]
"(Default)" = "IYndbar"

[HKCR\Wow6432Node\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}\InprocServer32]
"(Default)" = "%Program Files% (x86)\Yandex\Elements\bartabhost.dll"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{91397D20-1446-11D4-8AF4-0040CA1127B6}" = "ÃÂÃÂ»ÃÂµÃÂ¼ÃÂµÃÂ½Ã‘â€šÃ‘â€¹ ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘ÂÃÂ°"

[HKCR\Wow6432Node\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}]
"AppID" = "{9340F2B2-4F27-4575-8BAE-4AAD70B69B28}"

[HKCR\TypeLib\{91397D13-1446-11D4-8AF4-0040CA1127B6}\1.0\0\win32]
"(Default)" = "%Program Files% (x86)\Yandex\Elements\bartab.dll"

[HKCR\Yandex.Toolbar\CLSID]
"(Default)" = "{91397D20-1446-11D4-8AF4-0040CA1127B6}"

[HKCR\Interface\{91397D1F-1446-11D4-8AF4-0040CA1127B6}\TypeLib]
"(Default)" = "{91397D13-1446-11D4-8AF4-0040CA1127B6}"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

The process MsiExec.exe:3920 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCR\fd\DefaultIcon]
"(Default)" = "%Program Files% (x86)\Yandex\FastDial\fastdial64.dll,0"

[HKCR\FastDial.CFastDial.1\CLSID]
"(Default)" = "{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}"

[HKCR\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\TypeLib]
"(Default)" = "{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}"

[HKCR\TypeLib\{AFBDA429-7995-4CCA-9298-7C7D6B4A244C}\1.0\0\win64]
"(Default)" = "%Program Files% (x86)\Yandex\FastDial\fastdial64.dll"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING ]
"elements.exe" = "1"

[HKCR\FastDial.CFastDial.1]
"(Default)" = "Visual Bookmarks"

[HKCR\FastDial.CFastDial\CurVer]
"(Default)" = "FastDial.CFastDial.1"

[HKCR\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\InprocServer32]
"(Default)" = "%Program Files% (x86)\Yandex\FastDial\fastdial64host.dll"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]
"elements64.exe" = "10000"

[HKCR\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}]
"(Default)" = "Visual Bookmarks"

[HKCR\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\ProgID]
"(Default)" = "FastDial.CFastDial.1"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_DOCUMENT_ZOOM]
"elements64.exe" = "1"

[HKCR\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}]
"AppID" = "{53C0373B-51E4-4F85-9085-53EF06DE6E00}"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_TABBED_BROWSING]
"elements.exe" = "1"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_DOCUMENT_ZOOM]
"elements.exe" = "1"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]
"elements.exe" = "10000"

[HKCR\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\VersionIndependentProgID]
"(Default)" = "FastDial.CFastDial"

[HKCR\fd\shell\open\command]
"(Default)" = "%Program Files%\Internet Explorer\IEXPLORE.EXE %1"

[HKCR\fd]
"URL Protocol" = ""

[HKCR\FastDial.CFastDial]
"(Default)" = "Visual Bookmarks"

[HKU\.DEFAULT\SOFTWARE\AppDataLow\Software\Yandex\Toolbar\Settings]
"Fastdial" = "0"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{C93F72A2-2162-4BBA-A07A-F13663C297A6}]
"Version" = "*"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_TABBED_BROWSING]
"elements64.exe" = "1"

[HKCR\FastDial.CFastDial\CLSID]
"(Default)" = "{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING ]
"elements64.exe" = "1"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]
"elements64.exe" = "1"
"elements.exe" = "1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{C93F72A2-2162-4BBA-A07A-F13663C297A6}]
"Flags" = "1"

[HKCR\fd]
"(Default)" = "URL:FastDial Protocol"

It registers itself as a Browser Helper Object (BHO) to ensure its automatic execution every time Internet Explorer is run. It does this by creating the following registry key(s)/entry(ies):

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}]
"NoExplorer" = "1"

The Trojan deletes the following registry key(s):

[HKCR\fd\shell]
[HKCR\fd\shell\open]
[HKCR\fd\shell\open\command]
[HKCR\fd\DefaultIcon]
[HKCR\FastDial.CFastDial.1\CLSID]
[HKCR\FastDial.CFastDial.1]
[HKCR\FastDial.CFastDial\CurVer]
[HKCR\fd]
[HKCR\FastDial.CFastDial]
[HKCR\FastDial.CFastDial\CLSID]

The process MsiExec.exe:1860 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\cncgohepihcekklokhbhiblhfcmipbdh]
"install_parameter" = "clid=2148275-100&win=173&"
"update_url" = "http://clients2.google.com/service/update2/crx"

[HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gehngeifmelphpllncobkmimphfkckne]
"update_url" = "http://clients2.google.com/service/update2/crx"
"install_parameter" = "clid=2148274-100&win=173&"

The process MsiExec.exe:3848 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCR\Yandex.Toolbar.1]
"(Default)" = "ÃÂÃÂ»ÃÂµÃÂ¼ÃÂµÃÂ½Ã‘â€šÃ‘â€¹ ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘ÂÃÂ°"

[HKCR\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}\ProgID]
"(Default)" = "Yandex.Toolbar.1"

[HKCR\TypeLib\{91397D13-1446-11D4-8AF4-0040CA1127B6}\1.0\0\win64]
"(Default)" = "%Program Files% (x86)\Yandex\Elements\bartab64.dll"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCR\Yandex.Toolbar.1\CLSID]
"(Default)" = "{91397D20-1446-11D4-8AF4-0040CA1127B6}"

[HKCR\Yandex.Toolbar]
"(Default)" = "ÃÂÃÂ»ÃÂµÃÂ¼ÃÂµÃÂ½Ã‘â€šÃ‘â€¹ ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘ÂÃÂ°"

[HKCR\Yandex.Toolbar\CLSID]
"(Default)" = "{91397D20-1446-11D4-8AF4-0040CA1127B6}"

[HKCR\Yandex.Toolbar\CurVer]
"(Default)" = "Yandex.Toolbar.1"

[HKCR\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}]
"AppID" = "{9340F2B2-4F27-4575-8BAE-4AAD70B69B28}"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCR\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}]
"(Default)" = "ÃÂÃÂ»ÃÂµÃÂ¼ÃÂµÃÂ½Ã‘â€šÃ‘â€¹ ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘ÂÃÂ°"

[HKCR\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}\TypeLib]
"(Default)" = "{91397D20-1446-11D4-8AF4-0040CA1127B6}"

[HKCR\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}\InprocServer32]
"(Default)" = "%Program Files% (x86)\Yandex\Elements\bartab64host.dll"
"ThreadingModel" = "Apartment"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{91397D20-1446-11D4-8AF4-0040CA1127B6}" = "ÃÂÃÂ»ÃÂµÃÂ¼ÃÂµÃÂ½Ã‘â€šÃ‘â€¹ ÃÂ¯ÃÂ½ÃÂ´ÃÂµÃÂºÃ‘ÂÃÂ°"

[HKCR\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}\VersionIndependentProgID]
"(Default)" = "Yandex.Toolbar"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

The process %original file name%.exe:2784 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "2D 85 33 3A 90 73 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 48 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "9D DD DA 73 36 7B D0 01"

[HKCU\Software\Magicbit\UmmyVideoDownloader]
"UserId" = "d16fa102-3a03-4493-a49b-561daf7f9ecc"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

The process elements64.exe:908 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater]
"LastRestoreTime" = "Type: REG_QWORD, Length: 8"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"YandexElements" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110\elements64.exe /auto"

The process elements64.exe:1776 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater]
"NextCheckTime" = "1429599246"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

The process elements64.exe:3728 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\vb]
"State" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\vb\Version]
"URL" = "http://download.cdn.yandex.net/element/ie/silentupdate/891v2/vb-ru.2.18.0.5151.x64.delta.2.16.0.3147.zip"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\elements]
"TimeStamp" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "8C D8 39 CD 36 7B D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "26 51 74 80 36 7B D0 01"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\vb\Version]
"Version" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\elements\Version]
"Type" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\vb\Version]
"md5" = "9fe28fa531d40bc5bf1a01d2cf71b3c2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\elements\Version]
"Version" = "Type: REG_QWORD, Length: 8"

"URL" = "http://download.cdn.yandex.net/element/ie/silentupdate/891v2/elements-ru.8.9.1.5100.x64.delta.8.7.0.3110.zip"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\vb]
"TimeStamp" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\elements\Version]
"sha2" = "950f295951357e55fab701479446662cf8306fc69e98ebc657530ad192dd6a3d"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 51 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\elements\Version]
"md5" = "d8f47f6a6782b6affddad67bb309d652"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\elements]
"State" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\vb\Version]
"sha2" = "6be2966ef95494a09d67b5351518f932ebc778b37028cba396c88ca970ea93ed"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Yandex\Elements\Updater\Applications\vb\Version]
"Type" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process RegProto.exe:1916 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCR\ummy\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\UmmyVideoDownloader.exe %1"

[HKCR\ummy]
"(Default)" = "Ummy video downloader"

[HKCR\ummy\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\UmmyVideoDownloader.exe,0"

[HKCR\ummy]
"URL Protocol" = ""

The process UmmyVideoDownloader.exe:2084 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4B 00 00 00 09 00 00 00 00 00 00 00"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
"AutoDetect"

The process u2-ctrl.exe:3548 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Wow6432Node\Interface\{5D4EA112-577A-4377-AD53-A50FE6593F00}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{762A09E8-ACCD-45F1-B12B-12A975EF880B}]
"Policy" = "3"

[HKCU\Software\Classes\Wow6432Node\Interface\{D35A8326-BEE2-47CA-BB99-2886A31017FD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9B84B6C2-A76D-4904-BCAF-C9BF28449182}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{81F45AC1-2A92-4CA8-833A-8C75EA10E696}]
"(Default)" = "IStatistic"

[HKCU\Software\Classes\Wow6432Node\Interface\{81F45AC1-2A92-4CA8-833A-8C75EA10E696}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\TypeLib\{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}\1.0\0\win32]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\u2-ctrl.exe"

[HKCR\u2ctrl.Updater.1\CLSID]
"(Default)" = "{34700894-16CA-43a3-91E2-4A393296F164}"

[HKCR\u2ctrl.Updater\CurVer]
"(Default)" = "u2ctrl.Updater.1"

[HKCU\Software\Classes\Wow6432Node\Interface\{9B84B6C2-A76D-4904-BCAF-C9BF28449182}]
"(Default)" = "IAsyncUpdater"

[HKCU\Software\Classes\Interface\{5D4EA112-577A-4377-AD53-A50FE6593F00}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{0B5EE9BB-BCAC-4C8D-8F22-300B84A23478}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\Interface\{5D4EA112-577A-4377-AD53-A50FE6593F00}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\Interface\{9B84B6C2-A76D-4904-BCAF-C9BF28449182}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{FCB5358B-53DC-40E0-BA2A-D694DD354BD3}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\Interface\{9B84B6C2-A76D-4904-BCAF-C9BF28449182}]
"(Default)" = "IAsyncUpdater"

[HKCR\u2ctrl.Updater]
"(Default)" = "Upd2 Class"

[HKCU\Software\Classes\Wow6432Node\Interface\{81F45AC1-2A92-4CA8-833A-8C75EA10E696}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\AppID\{E45DB0F3-B529-46a4-B8D0-C7BB61756FFF}]
"(Default)" = "u2ctrl"

[HKCU\Software\Classes\Interface\{EFB7CE54-8B07-4CA6-90E3-8BDA870268B0}]
"(Default)" = "IEnvironment"

[HKCU\Software\Classes\Interface\{81F45AC1-2A92-4CA8-833A-8C75EA10E696}]
"(Default)" = "IStatistic"

[HKCU\Software\Classes\Interface\{5D4EA112-577A-4377-AD53-A50FE6593F00}]
"(Default)" = "ILegacy"

[HKCU\Software\Classes\Interface\{FCB5358B-53DC-40E0-BA2A-D694DD354BD3}]
"(Default)" = "ISyncUpdater"

[HKCU\Software\Classes\Wow6432Node\Interface\{FCB5358B-53DC-40E0-BA2A-D694DD354BD3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{34700894-16CA-43a3-91E2-4A393296F164}\LocalServer32]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\u2-ctrl.exe"

[HKCU\Software\Classes\Interface\{0B5EE9BB-BCAC-4C8D-8F22-300B84A23478}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D35A8326-BEE2-47CA-BB99-2886A31017FD}\TypeLib]
"Version" = "1.0"

[HKCR\u2ctrl.Updater.1]
"(Default)" = "Upd2 Class"

[HKCU\Software\Classes\Interface\{EFB7CE54-8B07-4CA6-90E3-8BDA870268B0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{EFB7CE54-8B07-4CA6-90E3-8BDA870268B0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D35A8326-BEE2-47CA-BB99-2886A31017FD}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\Interface\{9B84B6C2-A76D-4904-BCAF-C9BF28449182}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\TypeLib\{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}\1.0\HELPDIR]
"(Default)" = ""

[HKCU\Software\Classes\Wow6432Node\Interface\{D35A8326-BEE2-47CA-BB99-2886A31017FD}]
"(Default)" = "IWebUpdater"

[HKCU\Software\Classes\Wow6432Node\Interface\{5D4EA112-577A-4377-AD53-A50FE6593F00}]
"(Default)" = "ILegacy"

[HKCU\Software\Classes\Wow6432Node\Interface\{FCB5358B-53DC-40E0-BA2A-D694DD354BD3}]
"(Default)" = "ISyncUpdater"

[HKCU\Software\Classes\Interface\{81F45AC1-2A92-4CA8-833A-8C75EA10E696}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{EFB7CE54-8B07-4CA6-90E3-8BDA870268B0}\TypeLib]
"Version" = "1.0"

[HKCR\u2ctrl.Updater\CLSID]
"(Default)" = "{34700894-16CA-43a3-91E2-4A393296F164}"

[HKCU\Software\Classes\Interface\{9B84B6C2-A76D-4904-BCAF-C9BF28449182}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\Interface\{EFB7CE54-8B07-4CA6-90E3-8BDA870268B0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{34700894-16CA-43a3-91E2-4A393296F164}\ProgID]
"(Default)" = "u2ctrl.Updater.1"

[HKCU\Software\Classes\Wow6432Node\Interface\{9B84B6C2-A76D-4904-BCAF-C9BF28449182}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{D35A8326-BEE2-47CA-BB99-2886A31017FD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{EFB7CE54-8B07-4CA6-90E3-8BDA870268B0}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\Interface\{FCB5358B-53DC-40E0-BA2A-D694DD354BD3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{762A09E8-ACCD-45F1-B12B-12A975EF880B}]
"AppPath" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2"

[HKCU\Software\Classes\Interface\{81F45AC1-2A92-4CA8-833A-8C75EA10E696}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{762A09E8-ACCD-45F1-B12B-12A975EF880B}]
"AppName" = "u2-ctrl.exe"

[HKCR\Wow6432Node\CLSID\{34700894-16CA-43a3-91E2-4A393296F164}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49cd-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\Wow6432Node\Interface\{0B5EE9BB-BCAC-4C8D-8F22-300B84A23478}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\Wow6432Node\Interface\{5D4EA112-577A-4377-AD53-A50FE6593F00}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\TypeLib\{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\Wow6432Node\CLSID\{34700894-16CA-43a3-91E2-4A393296F164}]
"(Default)" = "Upd2 Class"

[HKCU\Software\Classes\Interface\{5D4EA112-577A-4377-AD53-A50FE6593F00}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{D35A8326-BEE2-47CA-BB99-2886A31017FD}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9B84B6C2-A76D-4904-BCAF-C9BF28449182}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\TypeLib\{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}\1.0]
"(Default)" = "u2ctrl 1.0 Type Library"

[HKCU\Software\Classes\Wow6432Node\Interface\{5D4EA112-577A-4377-AD53-A50FE6593F00}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\Wow6432Node\Interface\{0B5EE9BB-BCAC-4C8D-8F22-300B84A23478}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{FCB5358B-53DC-40E0-BA2A-D694DD354BD3}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCR\AppID\u2-ctrl.EXE]
"AppID" = "{E45DB0F3-B529-46a4-B8D0-C7BB61756FFF}"

[HKCU\Software\Classes\Wow6432Node\Interface\{FCB5358B-53DC-40E0-BA2A-D694DD354BD3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{81F45AC1-2A92-4CA8-833A-8C75EA10E696}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D35A8326-BEE2-47CA-BB99-2886A31017FD}]
"(Default)" = "IWebUpdater"

[HKCR\Wow6432Node\CLSID\{34700894-16CA-43a3-91E2-4A393296F164}\VersionIndependentProgID]
"(Default)" = "u2ctrl.Updater"

[HKCU\Software\Classes\Interface\{EFB7CE54-8B07-4CA6-90E3-8BDA870268B0}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\Interface\{D35A8326-BEE2-47CA-BB99-2886A31017FD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{0B5EE9BB-BCAC-4C8D-8F22-300B84A23478}]
"(Default)" = "IAd"

[HKCU\Software\Classes\Wow6432Node\Interface\{0B5EE9BB-BCAC-4C8D-8F22-300B84A23478}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{81F45AC1-2A92-4CA8-833A-8C75EA10E696}\TypeLib]
"(Default)" = "{0ABEAB7E-D0E5-49CD-AFAE-982D8F9624C3}"

[HKCU\Software\Classes\Interface\{0B5EE9BB-BCAC-4C8D-8F22-300B84A23478}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{FCB5358B-53DC-40E0-BA2A-D694DD354BD3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{EFB7CE54-8B07-4CA6-90E3-8BDA870268B0}]
"(Default)" = "IEnvironment"

[HKCU\Software\Classes\Wow6432Node\Interface\{0B5EE9BB-BCAC-4C8D-8F22-300B84A23478}]
"(Default)" = "IAd"

The process {51426ABB-6DCB-40D0-9EA1-211122CE9025}.exe:3908 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "26 51 74 80 36 7B D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C]
"Blob" = "04 00 00 00 01 00 00 00 10 00 00 00 3E 45 52 15"

[HKCU\Software\Yandex\YandexBrowser]
"lang" = "ru"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@%SystemRoot%\system32]
"dnsapi.dll,-103" = "Domain Name System (DNS) Server Trust"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E\@%SystemRoot%\system32]
"p2pcollab.dll,-8042" = "Peer to Peer Trust"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 50 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following registry key(s):

[HKCU\Software\Classes\Local Settings\MuiCache\2D]
[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Yandex\YandexBrowser]
"DistribInfoParams"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates]
"B1BC968BD4F49D622AA89A81F2150152A41D829C"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Yandex\YandexBrowser]
"ClidsFile"
"BrandFile"
"brand"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKCU\Software\Yandex\YandexBrowser]
"InstallerData"
"PartnerFile"

The process browser.exe:2964 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

The process browser.exe:2456 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Yandex\BLBeacon]
"State" = "2"
"failed_count" = "0"

The process browser.exe:3792 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Yandex\YandexBrowser]
"metricsid" = "D6988A1A-859F-4989-BBC8-2C527DE71803"
"metricsid_enableddate" = "1429512737"

[HKCU\Software\Chromium\StabilityMetrics]
"user_experience_metrics.stability.exited_cleanly" = "0"

[HKCU\Software\Yandex\BLBeacon]
"State" = "1"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Yandex\YandexBrowser]
"lastrun" = "13073986345898580"
"_NumAccounts" = "1"
"_NumSignedIn" = "0"

[HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\74207441729CDD92EC7931D823108DC28192E2BB]
"Blob" = "0F 00 00 00 01 00 00 00 14 00 00 00 83 44 60 93"

[HKCU\Software\Yandex\YandexBrowser]
"usagestats" = "1"
"metricsid_installdate" = "0"

[HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\6252DC40F71143A22FDE9EF7348E064251B18118]
"Blob" = "0F 00 00 00 01 00 00 00 14 00 00 00 1E 42 7A 36"

[HKCU\Software\Yandex\BLBeacon]
"Version" = "40.0.2214.3645"

[HKCU\Software\Yandex\YandexBrowser]
"clid" = "2148263-100"

[HKCU\Software\Yandex\BLBeacon]
"failed_count" = "0"

The Trojan deletes the following registry key(s):

[HKCU\Software\Yandex\BLFinchList]

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates]
"6252DC40F71143A22FDE9EF7348E064251B18118"
"74207441729CDD92EC7931D823108DC28192E2BB"

The process MSI299D.tmp:536 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "26 51 74 80 36 7B D0 01"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@%SystemRoot%\system32]
"p2pcollab.dll,-8042" = "Peer to Peer Trust"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@%SystemRoot%\system32]
"dnsapi.dll,-103" = "Domain Name System (DNS) Server Trust"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4F 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following registry key(s):

[HKCU\Software\Classes\Local Settings\MuiCache\2E]
[HKCU\Software\Classes\Local Settings\MuiCache\2E\52C64B7E]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

Dropped PE files

MD5	File path
971a41f5ece6557efcf4304218aaf379	c:\Program Files (x86)\Yandex\Common\elements.exe
2549e38e93284be049feaed1c16254da	c:\Program Files (x86)\Yandex\Common\elements64.exe
34bf9fe7634e2fab96f3c478293800b0	c:\Program Files (x86)\Yandex\Elements\barframe.dll
f43a95dcde40e5b49e771acec1f88682	c:\Program Files (x86)\Yandex\Elements\barframe64.dll
8b7e6cfa0e1fd37f425a6b61c2032c01	c:\Program Files (x86)\Yandex\Elements\barshims.dll
8db5e27e0141355a50d0bd3811853aaa	c:\Program Files (x86)\Yandex\Elements\barshims64.dll
a3333e8659cdbea6608db1b32435d4b6	c:\Program Files (x86)\Yandex\Elements\bartab.dll
7bd0198f6b9968da9db21c2287ecb4e1	c:\Program Files (x86)\Yandex\Elements\bartab64.dll
51da86f45bf7662e48ae6eb57f571d60	c:\Program Files (x86)\Yandex\Elements\bartab64host.dll
75a71bafe645c33d4d40ba28b738a607	c:\Program Files (x86)\Yandex\Elements\bartabhost.dll
d86224a084a1815f5381a7523cc2abaa	c:\Program Files (x86)\Yandex\FastDial\fastdial.dll
dd2fd94c48c8452525d87c7c608ece9e	c:\Program Files (x86)\Yandex\FastDial\fastdial64.dll
5eef7abf0e80f1109358bb5f52779f61	c:\Program Files (x86)\Yandex\FastDial\fastdial64host.dll
662960012a0f689f6c35cabe9c18eaa4	c:\Program Files (x86)\Yandex\FastDial\fastdialframe.dll
750d0b55a61a3827b0ef54ca86d4588d	c:\Program Files (x86)\Yandex\FastDial\fastdialframe64.dll
60946d84648c793ec6a548732064f9f5	c:\Program Files (x86)\Yandex\FastDial\fastdialhost.dll
5f324a0541f8797f7b1173faa1acc438	c:\Program Files (x86)\Yandex\FastDial\fastdialshims.dll
aabd0196d2637b460b7413d159a57970	c:\Program Files (x86)\Yandex\FastDial\fastdialshims64.dll
889cf8ad9eaa4a29b613832aa988dcf7	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Common\elements.exe
700be9ee53422b795d8b02761318aefa	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Common\elements64.exe
a43cbe103488bc5af57c86c7362fdbe0	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barframe.dll
90a0e552c8c525b182752becee02a533	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barframe64.dll
68470eff59376322bc00829d9d621dcd	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barshims.dll
5e200cc6012d15a8b39d48951e1c7878	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barshims64.dll
273a1e1e80f4f3b9b30675176d0fbd6d	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\bartab.dll
72ae3bf0b73412daba2d2c23ba9a21a4	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\bartab64.dll
889cf8ad9eaa4a29b613832aa988dcf7	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\Common\elements.exe
700be9ee53422b795d8b02761318aefa	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\Common\elements64.exe
b00dd6b2d1f8ac9211202f238fa88b07	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdial.dll
82d8846ddc2fed3fdf9227b830a36d6f	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdial64.dll
8466eece61ecb4c35d0c2cdd667f68db	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialframe.dll
57c0d94e7e3d7d778c0eec940aa43d72	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialframe64.dll
bd818b82660c4ac1bc29a4cae811f022	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialshims.dll
13c33ec45f1aa425c356699d8540c7ba	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialshims64.dll
32da80a97b55abd1cda9c5257810c6d1	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\rambler.dll
cc72a6b7d3f162e3c5c1ae667601994b	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\rambler64.dll
14bde3e37e4c5d7b444b983447922d52	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\facebook.dll
794d9ca21ff6d2550a5f64f64d7f0ebc	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\facebook64.dll
a44206c911780dd36e37afe6a003273d	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\yavideo.dll
26803b9ff8f28d94ba701175d5a8352e	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\yavideo64.dll
859fa8a4b3563aaba4b27550f0401fd4	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\smartbox.dll
5975fbddceefe75c21e6cd3de9903683	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\smartbox64.dll
e86c26b4a580b0d030cc7e793322d177	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\browseroffer.dll
1ba2cb257865f2125c662c9286dba6a9	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\browseroffer64.dll
54a16e3516ac76e7b5cbb915a71d7c12	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\sb.dll
8d4a6516a1987ed8d36c36c0419ebb58	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\sb64.dll
a6e3297fe8460fd5edf34d7a12efc67c	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\webmaster.dll
fb6b162d92fc0260b52e94b081941704	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\webmaster64.dll
060b4dcff2b7f6f7b9b279ea4fc5febe	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\ESyncHelper.exe
ec40b647a205b76adc0132b40a95b88e	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\esync.dll
a166fb5936f6e6b6f5d2104c27398e51	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\esync64.dll
69dbea34773b156c41a2e615dbc612db	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\mailru.dll
7032e5f9f1d13c012805483329cb388d	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\mailru64.dll
574bea93147856a6ff34a1061ee5c6b2	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\altsearch.dll
23bacc3fb7926867e2c73cebfed642de	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\altsearch64.dll
02caae9f798916b34013c2d13ca4842c	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\twitter.dll
18c64531fab9261e6f4db27d3ec20e46	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\twitter64.dll
d34c1391b4453d790993748e34430ec6	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\stardust.dll
6fd5e30840e39b75f13291cb14a5db6c	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\stardust64.dll
c1fd8390d6125554d96be50caacd5dd4	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\radio.dll
9f80995091a0ba02468a5ac0d53120af	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\radio64.dll
c05bc8fc621d511f9a2a01e1cd52accf	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\streamplayer.exe
4762df833ebb6d729e9b0006043db845	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\odnoklassniki.dll
7edf77d0d662a55255140ba47250faab	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\odnoklassniki64.dll
700c6a81ecdbaeae98ac60748c71dd05	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\direct.dll
ca858c2f9c53f377a8d0ffc098516d96	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\direct64.dll
381c771b894c70c0627fbc9388fa361f	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\vkontakte.dll
a31ab5ec4c56b956042fabba36c72161	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\vkontakte64.dll
99e5fe6ee4a0418d99c257827fa15f78	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\gmail.dll
d614c4118a2117090e43fcf84889769c	c:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\gmail64.dll
c36270c4f332ec684210bb8a042bb082	c:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\YandexPackSetup[1].exe
1d3e27538f7cd40d5dc9afd2f68f0409	c:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\YandexPackSetup[1].exe
4d0002cc9ceb45d375220658984c4088	c:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\UmmyVideoDownloader_setup[1].exe
ecde6bb66cfd7e1b1876348c8bab6803	c:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerInstaller.exe
1d3e27538f7cd40d5dc9afd2f68f0409	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexPackSetup.exe
4d0002cc9ceb45d375220658984c4088	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\UmmyVideoDownloader.exe
6abaaafc40899fdcf61715371f1b46ec	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\downloader.exe
6ee7993784ffb8d8c82b3d20395cd6a1	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\lite_installer.exe
9e7e65d9fed7ce4684c708366ff8d4b1	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\sender.exe
3577c3a7cef4ae20a7d5ee167f1d8479	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\{51426ABB-6DCB-40D0-9EA1-211122CE9025}.exe
eebf4140e67a116343b5fcedfe19e8d9	c:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\ffmpeg.exe
bb0a4ea018aa17f8d1c674c1594c7094	c:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\UmmyVideoDownloader.exe
a9be9bc55331cc9cf1ed025dcc28b9a3	c:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\unins000.exe
9f972d4cc0d0da8ed6b62702230cf2cf	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManager.exe
ecf1b5f5621efe3aedda0c4fcf2099a5	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerGUI.exe
6b6915b4f96d4267a2572fda75e6a10c	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe
05cd793dc1186851f14b712a44911c0f	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\be\BrowserManagerGUI.resources.dll
b5249a267c44caf472ebedd89888fba9	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\en\BrowserManagerGUI.resources.dll
94763a8f6cb5a74f6ca6c67624914527	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\fixhosts.exe
854fc8bf8e842414e8b39d1b64f4eda0	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\kk\BrowserManagerGUI.resources.dll
77364ca0576e1a15f6ca6b884ae3ba70	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\seeder.dll
1a021870b1b058b862d5a41abff13b47	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\tr\BrowserManagerGUI.resources.dll
047ade2258b3d3f33a41e93b5944697a	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\uk\BrowserManagerGUI.resources.dll
971a41f5ece6557efcf4304218aaf379	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110\elements.exe
2549e38e93284be049feaed1c16254da	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110\elements64.exe
a580afd19c960638093714b54b54dd2f	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\show-dlg.dll
6b170a55bcc1020f3d4ae734611893f9	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\show-dlg.exe
6b170a55bcc1020f3d4ae734611893f9	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\show-dlg.exe.bcp
7a67696d114355d9a8df0ce08cb8c87c	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\u2-ctrl.exe
08040fc70e65c75daf5d374ec1617e1b	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\yupdate-exec.exe
5103f2d8edc9a8a89bbfd8d538230d32	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater\praetorian.exe
ab6bde7b084f2cfbec789a7cfba4cd8d	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater\show-dlg.exe
864b51ad79294b3e06fa9560899c0b2e	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater\yupdate-ctrl.exe
c9211823b2bddca32d395563b0c9a0b3	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater\yupdate-exec.exe
fef4d009ec53dc89ccd8fbb7a17b2fb2	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\setup.exe
20b8cd7d7ca68f6c539cfd12f0cbaa70	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\browser.dll
5bd0a60037665c40c0276d33e6d7a50f	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\browser_child.dll
f56204b1467a08174af755b7df008c92	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\browser_elf.dll
9f8f814603aa06ef3687b46e4a7d5438	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\crash_service.exe
c81e0c917d5db4fecd2ec3c7e2712bbf	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\d3dcompiler_46.dll
b174683215f2b62f7facdad0ed471cd0	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\dllyupdate.dll
575075114abd09b2766db97c2a0b5857	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\ffmpegsumo.dll
61a082ff39c9edae15b5a41597f40e21	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\libegl.dll
7fe07d0e4f411e5acb81b0546138bdb9	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\libexif.dll
ea515a1ee667227f2b3d463a5ad46126	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\libglesv2.dll
609aa905f8fc86945f93a81ae50a15fa	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\nacl64.exe
cbf9a483945d42f40d24dc6b65cc9b8c	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\plugins\npmedia_plugin.dll
c62322c77d1aab77b1cf1130fcc3673a	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\plugins\npswf32_16_0_0_305.dll
26b40bdec45cc0e597b62fbf90bc9341	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\service_update.exe
6b170a55bcc1020f3d4ae734611893f9	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\show-dlg.exe
a3235c6b357129cc6aaea424b1619472	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\suspend_api_check.exe
77f595dee5ffacea72b135b1fce1312e	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\xinput1_3.dll
408391e9ae8b23bb12c0f714ffb187e2	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\yapdf.dll
b744aa22e9139b0c920bed06151c1f16	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\yapr.dll
9a83a7e610e6a2331947aec9fe780b7d	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\yawp.dll
08040fc70e65c75daf5d374ec1617e1b	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\yupdate-exec.exe
b858e1f1ebfe4b746af300671aa300d7	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
221a488e6b8c88d9ec5843483794b958	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe
7ba737b4050ff77a859a9e5b494261b0	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\yapin\Yandex.exe
70fe52d099713fd74b6ac07cc5c9703b	c:\Windows\Installer\MSI299D.tmp

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

No information is available.

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	4096	704580	705024	4.38304	7b51ce423a9f3f0b72e6130f91b508c6
.itext	712704	4136	4608	4.09727	763a28cec535e3b90f0c2a2d6bf80ae9
.data	720896	10608	10752	2.96543	b912ba53dc0468c27cb0a78875254190
.bss	733184	21592	0	0	d41d8cd98f00b204e9800998ecf8427e
.idata	757760	5444	5632	3.43103	aeabb271e9b0acb5f835dc6dbeab549e
.didata	765952	456	512	2.14355	368229a9ef95837bbd250ae4873b8515
.edata	770048	92	512	0.739781	fc9d57676b24b399f9251b232fd8889e
.tls	774144	12	0	0	d41d8cd98f00b204e9800998ecf8427e
.rdata	778240	24	512	0.139033	74194f968239e65309cc3db72c6abde0
.rsrc	782336	80896	80896	4.88113	d032f0fc6adf27dde7cf9d44b0d9fd84

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL	IP
hxxp://videodownloader.ummy.net/assets/UmmyVideoDownloader_setup.exe	37.130.231.85
hxxp://videodownloader.ummy.net/app/get.php?id=ya&f=v2&country=ua	37.130.231.85
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?a7d080bfbd34551c
hxxp://ocsp.usertrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI=	178.255.83.1
hxxp://ocsp.usertrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69+Aj36pvE8hI6t7jiY7NkyMtQCEC58h8wOk0pS/pT9HLfNNK8=	178.255.83.1
hxxp://ocsp.usertrust.com/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBSSdxXdG447ymkRNPVViULv3rkBzQQUKZFg/4pN+uv5pmq4z/nmS71JzhICEQC1smUlNaKs4ay/+dXXgWrU	178.255.83.1
hxxp://sf-addon.com/helper/geoip/country.php	146.185.29.11
hxxp://google-analytics.com/collect	173.194.113.212
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/authrootstl.cab?f943bb638cf7712b
hxxp://a1363.dscg.akamai.net/pki/crl/products/microsoftrootcert.crl
hxxp://a1363.dscg.akamai.net/pki/crl/products/WinPCA.crl
hxxp://a1363.dscg.akamai.net/pki/crl/products/MicrosoftTimeStampPCA.crl
hxxp://37.130.231.86/update/version.txt
hxxp://www-google-analytics.l.google.com/collect
hxxp://videodownloader.ummy.net/congratulations.html	37.130.231.85
hxxp://videodownloader.ummy.net/assets/css/flexslider.css	37.130.231.85
hxxp://videodownloader.ummy.net/assets/css/style.css?v7	37.130.231.85
hxxp://videodownloader.ummy.net/assets/js/vendor/modernizr-2.6.2.min.js	37.130.231.85
hxxp://www-google-analytics.l.google.com/analytics.js
hxxp://videodownloader.ummy.net/assets/js/vendor/jquery.flexslider-min.js	37.130.231.85
hxxp://videodownloader.ummy.net/assets/js/plugins.js	37.130.231.85
hxxp://videodownloader.ummy.net/assets/js/main.js?v1	37.130.231.85
hxxp://googleapis.l.google.com/ajax/libs/jquery/1.10.2/jquery.min.js
hxxp://www-google-analytics.l.google.com/r/collect?v=1&_v=j35&a=298125754&t=pageview&_s=1&dl=http://videodownloader.ummy.net/congratulations.html&ul=en-us&de=utf-8&dt=Congratulations!&sd=24-bit&sr=1716x901&vp=1189x539&je=1&_u=AEAAAEQAI~&jid=433611454&cid=1715774948.1429512691&tid=UA-51606522-5&_r=1&z=278947634
hxxp://cdn.yandex.net/yandex-pack/downloader/info.rss
hxxp://videodownloader.ummy.net/assets/img/bg.jpg	37.130.231.85
hxxp://videodownloader.ummy.net/assets/img/logo.png	37.130.231.85
hxxp://cache-kiev06.cdn.yandex.net/downloader.yandex.net/yandex-pack/downloader/info.rss	141.8.174.111
hxxp://cdn.yandex.net/yandex-pack/savefrom-video/YandexPackSetup.exe
hxxp://cache-kiev12.cdn.yandex.net/downloader.yandex.net/yandex-pack/savefrom-video/YandexPackSetup.exe	141.8.174.94
hxxp://counter.yadro.ru/hit?t26.3;r;s171690124;uhttp://videodownloader.ummy.net/congratulations.html;0.11979874879619706	88.212.201.199
hxxp://counter.yadro.ru/hit?q;t26.3;r;s171690124;uhttp://videodownloader.ummy.net/congratulations.html;0.11979874879619706	88.212.201.199
hxxp://www-google-analytics.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCFRqIchUgXeK
hxxp://videodownloader.ummy.net/assets/icons/favicon.ico	37.130.231.85
hxxp://mdata.yandex.ru/status.xml?clid=2148271-100&uuid={128AC281-D5D9-496E-964F-56634EB3AD42}&vnt=6.1x64&top=3.0&file-no=45 15 107 106 25 6 26 27 111 129 121 42 41 43 40 89 18 17 12 11 13 10 21 24 22 20 47 104 127 103 108 123 124 102
hxxp://cdn.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe
hxxp://cache-kiev12.cdn.yandex.net/download.cdn.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe	141.8.174.94
hxxp://mdata.yandex.ru/status.xml?ui={128AC281-D5D9-496E-964F-56634EB3AD42}&iyasoft=barie&iclid=2148271-100&iqs=1&ihp=1&version=8.7.0.3110&yst=0&mg=0&ms=0&mqs=0&mhp=0
hxxp://cache-kiev10.cdn.yandex.net/downloader.yandex.net/yandex-pack/downloader/info.rss	141.8.174.92
hxxp://clck.yandex.ru/click/dtype=stred/pid=12/cid=72435/path=dwnldr/p=savefrom-video/cnt=0/dt=2/ct=4/rt=32/*	93.158.134.14
hxxp://cdn.yandex.net/yandex-pack/bm-partner-ru/YandexPackSetup.exe
hxxp://cache-kiev10.cdn.yandex.net/downloader.yandex.net/yandex-pack/bm-partner-ru/YandexPackSetup.exe	141.8.174.92
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQJ1TBLBrQ9OnPHXPVaWb87MxkNlgQUwu79F9f+tw/GciJ7fvbA4gIz7D4CEH6T6/t8xk5Z6kuad9QG/Ds=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRi82PVYYKWGJWdgVNyePy5kYTdqQQUX5r1blzMzHSa1N197z/b7EyALt0CEA7P9DjI/r81bgTYapgbGlA=
hxxp://crl.certum.pl/ca.crl	213.222.201.150
hxxp://mdata.yandex.ru/status.xml?yasoft=yabrowser&clid=2148263-100&ui={128AC281-D5D9-496E-964F-56634EB3AD42}&ver=40.0.2214.3645&os=winnt&stat=install&bitness=64&brandID=yandex&eid=&uv=1.1.0.1801&fd=20.04.2015
hxxp://www.yandex.ru/instant/config	213.180.193.3
hxxp://clck.yandex.ru/click/dtype=stred/pid=12/cid=72085/path=rs.0ca/*	93.158.134.14
hxxp://export.yandex.ru/bar/reginfo.xml?lang=ru	93.158.134.27
hxxp://www-google-analytics.l.google.com/r/collect?v=1&_v=j35&a=1421518628&t=pageview&_s=1&dl=http://videodownloader.ummy.net/congratulations.html&ul=ru&de=UTF-8&dt=Congratulations!&sd=24-bit&sr=1716x901&vp=1270x717&je=1&fl=16.0 r0&_u=AEAAAEABI~&jid=63923678&cid=1652772922.1429512749&tid=UA-51606522-5&_r=1&z=1943805879
hxxp://favicon.yandex.net/favicon/some.nonexistent	77.88.21.36
hxxp://favicon.yandex.net/favicon/videodownloader.ummy.net	77.88.21.36
hxxp://favicon.yandex.net/favicon/browser.yandex.ru	77.88.21.36
hxxp://clck.yandex.ru/click/dtype=stred/pid=12/cid=72435/path=dwnldr/p=bm-partner-ru/cnt=0/dt=0/ct=0/rt=21/imp=0/*	93.158.134.14
hxxp://mdata.yandex.ru/status.xml?ui={128AC281-D5D9-496E-964F-56634EB3AD42}&iyasoft=bm&iclid=2021616&icclid=2157774-100&iqs=0&ihp=0&version=2.1.2.577
hxxp://counter.yadro.ru/hit?t26.3;r;s171690124;uhttp://videodownloader.ummy.net/congratulations.html;0.23587389150634408	88.212.201.199
hxxp://counter.yadro.ru/hit?q;t26.3;r;s171690124;uhttp://videodownloader.ummy.net/congratulations.html;0.23587389150634408	88.212.201.199
hxxp://videodownloader.ummy.net/assets/icons/apple-touch-icon-120x120-precomposed.png	37.130.231.85
hxxp://videodownloader.ummy.net/assets/icons/apple-touch-icon-114x114-precomposed.png	37.130.231.85
hxxp://videodownloader.ummy.net/assets/icons/apple-touch-icon-76x76-precomposed.png	37.130.231.85
hxxp://videodownloader.ummy.net/assets/icons/apple-touch-icon-72x72-precomposed.png	37.130.231.85
hxxp://videodownloader.ummy.net/assets/icons/apple-touch-icon-60x60-precomposed.png	37.130.231.85
hxxp://videodownloader.ummy.net/assets/icons/apple-touch-icon-57x57-precomposed.png	37.130.231.85
hxxp://hostedocsp.globalsign.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBQmECJms4f7i5EbxtN7NbzQCBwAdAQUUa8kJpz0aCJXgCYrO0ZiFXsezKUCE1oAAMJz1l6tff2DltkAAQAAwnM=
hxxp://mdata.yandex.ru/status.xml?yasoft=bm&clid=2157774-100&ui={128AC281-D5D9-496E-964F-56634EB3AD42}&ver=2.1.2.577&os=winnt&stat=install&bdata=1110-0410-1081-0081-1190-0090-&brcnt=3&cfg=231-0&dnet=4.0&ie=1&lcl=en&lcl2=1033&sdh=6b170a55bcc1020f3d4ae734611893f9&uac=0&uv=1.1.0.1801&fd=20.04.2015
hxxp://cdn.yandex.net/bm/version.rss
hxxp://cache-kiev02.cdn.yandex.net/download.cdn.yandex.net/bm/version.rss	141.8.174.69
hxxp://cdn.yandex.net/element/ie/silentupdate/891v2/elements-ru.8.9.1.5100.x64.delta.8.7.0.3110.zip
hxxp://cache-kiev08.cdn.yandex.net/download.cdn.yandex.net/element/ie/silentupdate/891v2/elements-ru.8.9.1.5100.x64.delta.8.7.0.3110.zip	141.8.174.113
hxxp://cdn.yandex.net/element/ie/silentupdate/891v2/vb-ru.2.18.0.5151.x64.delta.2.16.0.3147.zip
hxxp://cache-kiev06.cdn.yandex.net/download.cdn.yandex.net/element/ie/silentupdate/891v2/vb-ru.2.18.0.5151.x64.delta.2.16.0.3147.zip	141.8.174.111
hxxp://market.yandex.ru/?from=brow_e1_tableau&nugt=yabrowser-15.2.2214.3645	213.180.204.22
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECECVRccvD8Qb29B4D63fPT+k=
hxxp://a1363.dscg.akamai.net/pki/crl/products/MicCodSigPCA_08-31-2010.crl
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAKQll6RM0DNpmNM7zH3/Qc=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTEemCaVgs8Tuh2B9fGVE0pKKNyzgQUTF+nNhcF4oZhIkk5jLmo40rgOBoCEC6utoKGY/7ZdVX4/iTzOxo=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRODEXefhs/UZFum2o8YfzOFwceMwQUkz5j3yJ0BOBkhDHd2yOfDq+2TZMCEA89qsgV9niZmSI6gIO0S/U=
hxxp://download.cdn.yandex.net/element/ie/silentupdate/891v2/vb-ru.2.18.0.5151.x64.delta.2.16.0.3147.zip	5.45.205.234
hxxp://downloader.yandex.net/yandex-pack/downloader/info.rss	5.45.205.235
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?a7d080bfbd34551c	87.245.216.19
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?f943bb638cf7712b	87.245.216.19
hxxp://ocsp.comodoca.com/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBSSdxXdG447ymkRNPVViULv3rkBzQQUKZFg/4pN+uv5pmq4z/nmS71JzhICEQC1smUlNaKs4ay/+dXXgWrU	178.255.83.1
hxxp://ocsp.comodoca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69+Aj36pvE8hI6t7jiY7NkyMtQCEC58h8wOk0pS/pT9HLfNNK8=	178.255.83.1
hxxp://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECECVRccvD8Qb29B4D63fPT+k=	23.57.107.27
hxxp://soft.export.yandex.ru/status.xml?yasoft=bm&clid=2157774-100&ui={128AC281-D5D9-496E-964F-56634EB3AD42}&ver=2.1.2.577&os=winnt&stat=install&bdata=1110-0410-1081-0081-1190-0090-&brcnt=3&cfg=231-0&dnet=4.0&ie=1&lcl=en&lcl2=1033&sdh=6b170a55bcc1020f3d4ae734611893f9&uac=0&uv=1.1.0.1801&fd=20.04.2015	213.180.204.108
hxxp://soft.export.yandex.ru/status.xml?yasoft=yabrowser&clid=2148263-100&ui={128AC281-D5D9-496E-964F-56634EB3AD42}&ver=40.0.2214.3645&os=winnt&stat=install&bitness=64&brandID=yandex&eid=&uv=1.1.0.1801&fd=20.04.2015	213.180.204.108
hxxp://www.google-analytics.com/collect	173.194.122.3
hxxp://download.cdn.yandex.net/bm/version.rss	5.45.205.234
hxxp://ocsp.msocsp.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBQmECJms4f7i5EbxtN7NbzQCBwAdAQUUa8kJpz0aCJXgCYrO0ZiFXsezKUCE1oAAMJz1l6tff2DltkAAQAAwnM=	108.162.232.201
hxxp://download.cdn.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe	5.45.205.234
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c=	23.57.107.27
hxxp://soft.export.yandex.ru/status.xml?ui={128AC281-D5D9-496E-964F-56634EB3AD42}&iyasoft=barie&iclid=2148271-100&iqs=1&ihp=1&version=8.7.0.3110&yst=0&mg=0&ms=0&mqs=0&mhp=0	213.180.204.108
hxxp://www.google-analytics.com/r/collect?v=1&_v=j35&a=1421518628&t=pageview&_s=1&dl=http://videodownloader.ummy.net/congratulations.html&ul=ru&de=UTF-8&dt=Congratulations!&sd=24-bit&sr=1716x901&vp=1270x717&je=1&fl=16.0 r0&_u=AEAAAEABI~&jid=63923678&cid=1652772922.1429512749&tid=UA-51606522-5&_r=1&z=1943805879	173.194.122.3
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8=	23.57.107.27
hxxp://soft.export.yandex.ru/status.xml?ui={128AC281-D5D9-496E-964F-56634EB3AD42}&iyasoft=bm&iclid=2021616&icclid=2157774-100&iqs=0&ihp=0&version=2.1.2.577	213.180.204.108
hxxp://downloader.yandex.net/yandex-pack/savefrom-video/YandexPackSetup.exe	5.45.205.235
hxxp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl	87.245.216.57
hxxp://market.yandex.ua/?from=brow_e1_tableau&nugt=yabrowser-15.2.2214.3645	213.180.204.22
hxxp://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl	87.245.216.57
hxxp://www.google-analytics.com/r/collect?v=1&_v=j35&a=298125754&t=pageview&_s=1&dl=http://videodownloader.ummy.net/congratulations.html&ul=en-us&de=utf-8&dt=Congratulations!&sd=24-bit&sr=1716x901&vp=1189x539&je=1&_u=AEAAAEQAI~&jid=433611454&cid=1715774948.1429512691&tid=UA-51606522-5&_r=1&z=278947634	173.194.122.3
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI=	23.57.107.27
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTEemCaVgs8Tuh2B9fGVE0pKKNyzgQUTF+nNhcF4oZhIkk5jLmo40rgOBoCEC6utoKGY/7ZdVX4/iTzOxo=	23.57.107.27
hxxp://downloader.yandex.net/yandex-pack/bm-partner-ru/YandexPackSetup.exe	5.45.205.235
hxxp://ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js	216.58.211.42
hxxp://www.google-analytics.com/analytics.js	173.194.122.3
hxxp://ts-ocsp.ws.symantec.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRi82PVYYKWGJWdgVNyePy5kYTdqQQUX5r1blzMzHSa1N197z/b7EyALt0CEA7P9DjI/r81bgTYapgbGlA=	23.57.107.27
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEDZn4Vi1JMj/v+U4FyeG8eI=	23.57.107.27
hxxp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl	87.245.216.57
hxxp://download.cdn.yandex.net/element/ie/silentupdate/891v2/elements-ru.8.9.1.5100.x64.delta.8.7.0.3110.zip	5.45.205.234
hxxp://crl.microsoft.com/pki/crl/products/WinPCA.crl	87.245.216.57
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAKQll6RM0DNpmNM7zH3/Qc=	23.57.107.27
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w=	23.57.107.27
hxxp://soft.export.yandex.ru/status.xml?clid=2148271-100&uuid={128AC281-D5D9-496E-964F-56634EB3AD42}&vnt=6.1x64&top=3.0&file-no=45 15 107 106 25 6 26 27 111 129 121 42 41 43 40 89 18 17 12 11 13 10 21 24 22 20 47 104 127 103 108 123 124 102	213.180.204.108
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRODEXefhs/UZFum2o8YfzOFwceMwQUkz5j3yJ0BOBkhDHd2yOfDq+2TZMCEA89qsgV9niZmSI6gIO0S/U=	23.57.107.27
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCFRqIchUgXeK
cache-kiev01.cdn.yandex.net	141.8.174.96
sba.yandex.net	87.250.250.232
avatars.yandex.net	87.250.247.194
cache-kiev09.cdn.yandex.net	141.8.174.48
browser.yandex.ua	87.250.250.85
browser-api.store.yandex.net	77.88.21.216
storage.mds.yandex.net	213.180.204.158
storage.ape.yandex.net	93.158.134.55
clients4.google.com	173.194.122.6
pass.yandex.ru	87.250.250.51
sba.cdn.yandex.net	5.45.205.233
cache-kiev03.cdn.yandex.net	141.8.174.76
www.gstatic.com	173.194.122.31
cache-kiev05.cdn.yandex.net	141.8.174.56
www.youtube.com	173.194.116.231
cache-kiev04.cdn.yandex.net	141.8.174.89
api.browser.yandex.ru	93.158.134.82
cache-kiev07.cdn.yandex.net	141.8.174.112
cache-kiev11.cdn.yandex.net	141.8.174.93
browser.yandex.ru	87.250.250.85
www.google.com	216.58.209.196
pass.yandex.ua	213.180.204.47
yastatic.net	178.154.131.217
ieonline.microsoft.com	204.79.197.200
mc.yandex.ru
www.liveinternet.ru

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

SURICATA UDPv4 invalid checksum
SURICATA IPv4 invalid checksum
ET MALWARE Possible Windows executable sent when remote host claims to send html content
ET SHELLCODE Possible TCP x86 JMP to CALL Shellcode Detected
ET TROJAN VMProtect Packed Binary Inbound via HTTP - Likely Hostile
ET MALWARE Suspicious Mozilla User-Agent - Likely Fake (Mozilla/4.0)
ET POLICY curl User-Agent Outbound
SURICATA STREAM FIN out of window
SURICATA STREAM SHUTDOWN RST invalid ack
SURICATA STREAM Packet with invalid ack

Traffic

GET /pki/crl/products/microsoftrootcert.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Tue, 24 Mar 2015 05:02:25 GMT

If-None-Match: "a1132b8ef65d01:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 304 Not Modified

Content-Type: application/pkix-crl

Last-Modified: Tue, 24 Mar 2015 05:02:25 GMT

ETag: "a1132b8ef65d01:0"

Cache-Control: max-age=767

Date: Mon, 20 Apr 2015 06:51:28 GMT

Connection: keep-alive

....

GET /pki/crl/products/WinPCA.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Sat, 07 Mar 2015 06:01:44 GMT

If-None-Match: "dde36a309c58d01:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 304 Not Modified

Content-Type: application/pkix-crl

Last-Modified: Sat, 07 Mar 2015 06:01:44 GMT

ETag: "dde36a309c58d01:0"

Cache-Control: max-age=900

Date: Mon, 20 Apr 2015 06:51:29 GMT

Connection: keep-alive

....

GET /pki/crl/products/MicrosoftTimeStampPCA.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Thu, 05 Mar 2015 06:01:35 GMT

If-None-Match: "cf2633d6957d01:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 304 Not Modified

Content-Type: application/pkix-crl

Last-Modified: Thu, 05 Mar 2015 06:01:35 GMT

ETag: "cf2633d6957d01:0"

Cache-Control: max-age=900

Date: Mon, 20 Apr 2015 06:51:29 GMT

Connection: keep-alive

HTTP/1.1 304 Not Modified..Content-Type: application/pkix-crl..Last-Mo
dified: Thu, 05 Mar 2015 06:01:35 GMT..ETag: "cf2633d6957d01:0"..Cache
-Control: max-age=900..Date: Mon, 20 Apr 2015 06:51:29 GMT..Connection
: keep-alive..

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 159

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=download&ea=insert&el=edit&ev=1&cd=main
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:55:11 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 159

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=download&ea=insert&el=edit&ev=1&cd=main
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:53:30 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

GET /download.cdn.yandex.net/element/ie/silentupdate/891v2/elements-ru.8.9.1.5100.x64.delta.8.7.0.3110.zip HTTP/1.1

Accept: */*

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Win64; x64; Trident/6.0)

Host: cache-kiev08.cdn.yandex.net

Connection: Close



._6s.>|..6....}...z7j....k7.._....NN.Dt._..u.o........E..&?w..Fc5..
[..a.OG..i...:.g.[j....gs.G;.....Z.v.p..j..Vi[.P.E...W(. .R......V.U(8
.J.S..F.V..B.Qc....j.^e....o.B...V....m..u...Qc%.<.-5j...N..R......
.Fe....Z...Y...IK ...V;.v^*CK.........[i..;....n....y.......mD..Y..k..
.}|....M....:x.qj.54.z:1..T..6Nz...Z......Ogo.a...blmo..rtR........N]f
.A].L..]..t..bk.Z.:h.-Z.puu.r0:....}\....u.l.-...8{wR.Z"k..}.Mg..N....
..z.29 ....61z.8..g..LT.>.n...........Ym..;;{.....w..l....vV..z.k.{
..F........ZeT)].j.^'..Vj...l.5..[...UZ...`T.7Qi...:.A.....Y...M:!..F.
....{=D.o...._....L6...].. ....-{..u....hal.tb..B..P...B.#|.(.m`...E..
.E...\.\UvM....G.....mb..W{618......ll..7.ma.3.I.ne.7i........wvwrp.u.
u..QY.D.....he......mW0.........E..%<..=....N.bh...m.s..."....?....
.\.3).)..O....0..Dq1....Z..X.f...EU|..]...;.h..2t......Z...Lz!.. .3.3.
r.}..ef....4SX...%|.v..g.).0.. ..&.<\e..u.."...6..A%...6Z.z..v2..|c
.G.....(...)?.fN..........:[.s..Z.9&1........V..g...n9L....hk...,z....
.q.FE.}.=.?h.....l-r...-e ].w...R........b.....o..V..f..M...E18A....6b
......}`.....:J....T..yNk.# .[0....Z...ht.JF|...T.>..|....V..J.....
...@[email protected][email protected]. ...i^.Z..Rh|5h....l
.. ..v...w'.v_8t..J3J/v.....4e....M.H/E.)h.!l...1f.-.%Z.|w"7...>...
......#..h.BT.==znBGQ..v...uoM'_/..%..S2... .S..!!E..]... Y.}..(~l.R..
...p-j.....Vl.M.]..D....>S.[o..VQ.gu..jx..}...KP..Fgh.`h........L.E
..LD.....".....f<@.....\.. ...........f....kY{;7.t.n..#...A....{..~
......:....SiX.)uD....S&.5E.e...,..(.W....R7.......G....{S..N. ..(<<< skipped >>>

GET /?from=brow_e1_tableau&nugt=yabrowser-15.2.2214.3645 HTTP/1.1

Host: market.yandex.ua

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept: */*

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8

Cookie: Session_id=noauth:1429512749; yandexuid=2181954531429512744; ys=def_bro.0; yp=1744872755.yb.15_2_2214_3645:2148263-100:1429512755; _ym_visorc_25439111=b


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:54:25 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=120

Cache-Control: max-age=0, proxy-revalidate

Expires: Mon, 20 Apr 2015 06:54:25 GMT

X-Frame-Options: Deny

X-Powered-By: Zinger

XSCRIPT_PARENT_REQID_SEQ: d16798bc03658dee7b73a760ae283b3a

Set-Cookie: ps_gch=1404411064227833856; domain=market.yandex.ua; path=/; expires=Wed, 29 Jul 2015 06:54:24 GMT

Set-Cookie: yandexmarket=10,UAH,1,,,,2,0,0; domain=.market.yandex.ua; path=/; expires=Tue, 19 Jan 2038 03:14:07 GMT

Set-Cookie: yandexmarket_mbo-products-carousel-192288=195174; domain=.market.yandex.ua; path=/; expires=Mon, 20 Apr 2015 07:24:25 GMT

Set-Cookie: uid=CmZNnlU0oqESDhhBBaL6Ag==; path=/

Content-Encoding: gzip
400a................#.y ..."....EGe.GwWsp....d.... .D...h4.HQ.R ...jLC
.Ei.v..-o.-.2..d..<[email protected] ...............?.\.......Y`.......c..
.bJ.....V.d.Ol.".S....H.*y.E....T..s;..[uB....<.p....q......i.n..$.
....~eK.6....M.......sy.z.....t..a.........,........g..~....R.5.-W...e
........../[email protected]`<.tk.!.KcY.r.....Q.....k...8./;U@
...h.2... O.'.t..oO......3... b.cI^..t..ik....4l.h..[..z.x..`..hJ..8..
..;sl.....*...g.g.....[.?.....]...Wo.~...._^\...o.?}...}[email protected]?..
.....7.v....@._.....w>.x..0......F..t..........................O.xo
.y..EO.t...|.#...,j.4i}[email protected]../ar_.....
................<[email protected]]^..=__^]m%X1........t.
jr..y.&...7.6.r1$UOi..Fm...>.V.<evy......\.4......W...[..b..e.^~
..U......\..0...$....W..O...7_..G]>....67d.<....@.?y..7...}.H..&
B)"|L.._.......0......W..?...}..^..E9.!..'.............Nq..c...,i ]..H
.......]..i.,k.o...^[email protected]_.l...1z]2......<.d...?.,4:\5...a
....P(. ..0...x.....s.T..7].4.......\..T...b.....H~.x...O.4.i.8...QuV.
...c..0L... i.JZ......l..b.... .)....>b>}O.y Bn.s.%7..H.c.h8..D'
&."V..V...}..\....l#.....r.....A..tE_L.f;......eH.....]..9.#.y4.;..<
;@..f.L.6,.....}.YN.CL,[email protected]..).\....b.".. .........W.<.....I.
..u...;.m.,......f..>f.....xo....'.}a..##.............V_...........
...2.^..C?.^_z.kJ...}Y.......?...m{....V./...1...J..;.Q............w.s
d....P.X...F........?............. .@[email protected].*.^9
.~E.8~....%......e......._.?.D_~.U<x._l.........&.M..}....5..d6<<< skipped >>>

GET /download.cdn.yandex.net/element/ie/silentupdate/891v2/vb-ru.2.18.0.5151.x64.delta.2.16.0.3147.zip HTTP/1.1

Accept: */*

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Win64; x64; Trident/6.0)

Host: cache-kiev06.cdn.yandex.net

Connection: Close


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Mon, 20 Apr 2015 06:54:16 GMT

Content-Type: application/zip

Content-Length: 1805601

Connection: close

ETag: "2123283239"

Last-Modified: Mon, 23 Mar 2015 14:52:58 GMT

Accept-Ranges: bytes
PK........\.wF..X..............update.xml..K..0....w..o.PJ...*........
....n.<.W0FQ.....?3?.|0...'m..^TuVh.S..HhV.L..4Fz1$...7%.F......v..
;n.,*.=5...B\). Z.eF.F..m.B....F.......$u;@...ns.m............}6.J#...
........_..fT3...-../...].W.k}.Y...gPK........}.wFX.G.-`..........Comm
on/elements.exe.patch...XU....gv=g.....~D@,....XA 6.,...(.D.....`..G"*
.....X.h.b..(b..b9.QD.H....z.n.}...w.........Y3.f..rH...L..?..>j...
.....v=.=YyF.........| D.$........][....V.:Y...(..\uo$r..[U..T8:..,Ulu
X..X....v.,.....2..l.......b..G...pmf..t..ZW(. ..y...n....l.........mi
2...2..r..h.^.;T...[.~..6..t.....\T..".>C[..../Z{.9.........u....*A
..d.V../@V/.....j?m..1_]G;..h..O..x)...D.\z..OE6N....C...%...(N.m.Lg..
[email protected]...<.........m.5..zv5z...pT8.
........n.*O..hP).W;.I4....v.....;.....ROw...ZgQ.RuU.......9l......S&g
t;c...z.*..........`.Zh....h.6..)..t.cv..E.....T..rt_........-.....OQ.
j.f!M........]......L....1.....4z.:.>....y..r.V`.......'2n.*[.....\
.3MWs...I.....q....K8k..]..q.o..1.....I....&m...9...H.P....|.fFg....r.
....&...X....F...*..:._...1}.).. H.....6......e..r..tp..^c.Z.1..b.JE.U
./.]..:M.;`T...............). R.w..G/.D.3..{_..TmtX.LD{p..O..u...6n...
Bz.m.........=.....n`...=tn].........`..k.k..C..D....S&.5E.e...,..(.W.
...R7.......G....{S..N. ..(...N[.......B5i...GE.;.g.4.I'..v %........)
Z...j...8.....o...e......R.H..2...8Vn.s0...^.. A......h.Q'- ml..T)(.b.
_........`.V..)#..}..U.r.......V.V.r...4.)w.c`.o .}DB...._......YI..A.
....|D4....M............g..M.[..-.i...w=.....).m.i..E=....E.o..p.?<<< skipped >>>

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 210

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&ul=en-GB&av=1.3.0.3&t=screenview&cd=main&ua=Opera/9.80 (Windows NT 6.1) Presto/2.12.388 Version/12.14
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:51:30 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

POST /collect HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0

Host: google-analytics.com

Content-Length: 120

Cache-Control: no-cache

v=1&tid=UA-51606522-3&cid=d16fa102-3a03-4493-a49b-561daf7f9ecc&an=uvd_yandex&av=1.3.0.3&t=screenview&cd=license&aiid=100
HTTP/1.1 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:50:59 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1

GIF89a.............,...........D..;HTTP/1.1 200 OK..Pragma: no-cache..
Expires: Mon, 07 Aug 1995 23:30:00 GMT..Cache-Control: private, no-cac
he, no-cache=Set-Cookie, proxy-revalidate..Access-Control-Allow-Origin
: *..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-Content-Type-Opti
ons: nosniff..Content-Type: image/gif..Date: Mon, 20 Apr 2015 06:50:59
 GMT..Server: Golfe2..Content-Length: 35..Alternate-Protocol: 80:quic,
p=1..GIF89a.............,...........D..;....

POST /collect HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0

Host: google-analytics.com

Content-Length: 119

Cache-Control: no-cache

v=1&tid=UA-51606522-3&cid=d16fa102-3a03-4493-a49b-561daf7f9ecc&an=uvd_yandex&av=1.3.0.3&t=screenview&cd=invite&aiid=100
HTTP/1.1 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:51:03 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1

GIF89a.............,...........D..;HTTP/1.1 200 OK..Pragma: no-cache..
Expires: Mon, 07 Aug 1995 23:30:00 GMT..Cache-Control: private, no-cac
he, no-cache=Set-Cookie, proxy-revalidate..Access-Control-Allow-Origin
: *..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-Content-Type-Opti
ons: nosniff..Content-Type: image/gif..Date: Mon, 20 Apr 2015 06:51:03
 GMT..Server: Golfe2..Content-Length: 35..Alternate-Protocol: 80:quic,
p=1..GIF89a.............,...........D..;....

POST /collect HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0

Host: google-analytics.com

Content-Length: 119

Cache-Control: no-cache

v=1&tid=UA-51606522-3&cid=d16fa102-3a03-4493-a49b-561daf7f9ecc&an=uvd_yandex&av=1.3.0.3&t=screenview&cd=yawser&aiid=100
HTTP/1.1 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:51:10 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1

GIF89a.............,...........D..;HTTP/1.1 200 OK..Pragma: no-cache..
Expires: Mon, 07 Aug 1995 23:30:00 GMT..Cache-Control: private, no-cac
he, no-cache=Set-Cookie, proxy-revalidate..Access-Control-Allow-Origin
: *..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-Content-Type-Opti
ons: nosniff..Content-Type: image/gif..Date: Mon, 20 Apr 2015 06:51:10
 GMT..Server: Golfe2..Content-Length: 35..Alternate-Protocol: 80:quic,
p=1..GIF89a.............,...........D..;....

POST /collect HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0

Host: google-analytics.com

Content-Length: 121

Cache-Control: no-cache

v=1&tid=UA-51606522-3&cid=d16fa102-3a03-4493-a49b-561daf7f9ecc&an=uvd_yandex&av=1.3.0.3&t=screenview&cd=finished&aiid=100
HTTP/1.1 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:51:18 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1

GIF89a.............,...........D..;....

POST /collect HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0

Host: google-analytics.com

Content-Length: 130

Cache-Control: no-cache

v=1&tid=UA-51606522-3&cid=d16fa102-3a03-4493-a49b-561daf7f9ecc&t=event&ec=offers&ea=accept&el=yandex installsearch&ev=1&cd=offer
HTTP/1.1 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:51:18 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1

GIF89a.............,...........D..;....

POST /collect HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0

Host: google-analytics.com

Content-Length: 125

Cache-Control: no-cache

v=1&tid=UA-51606522-3&cid=d16fa102-3a03-4493-a49b-561daf7f9ecc&t=event&ec=offers&ea=accept&el=yandex sendstat&ev=1&cd=offer
HTTP/1.1 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:51:18 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1

GIF89a.............,...........D..;HTTP/1.1 200 OK..Pragma: no-cache..
Expires: Mon, 07 Aug 1995 23:30:00 GMT..Cache-Control: private, no-cac
he, no-cache=Set-Cookie, proxy-revalidate..Access-Control-Allow-Origin
: *..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-Content-Type-Opti
ons: nosniff..Content-Type: image/gif..Date: Mon, 20 Apr 2015 06:51:18
 GMT..Server: Golfe2..Content-Length: 35..Alternate-Protocol: 80:quic,
p=1..GIF89a.............,...........D..;..

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 161

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=download&ea=insert&el=buffer&ev=1&cd=main
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:53:13 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 159

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=download&ea=insert&el=edit&ev=1&cd=main
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:55:25 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

GET /downloader.yandex.net/yandex-pack/downloader/info.rss HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Connection: Keep-Alive

Host: cache-kiev06.cdn.yandex.net


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Mon, 20 Apr 2015 06:51:31 GMT

Content-Type: application/rss xml

Content-Length: 2267

Connection: keep-alive

ETag: "1400027787"

Last-Modified: Fri, 13 Mar 2015 15:35:59 GMT

Accept-Ranges: bytes
<?xml version="1.0" encoding="UTF-8"?>..<downloader version="
1">...<partneryandexbar>....<url>hXXp://downloader.yand
ex.net/yandex-pack/</url>....<name>YandexPackSetup.exe<
/name>..    <lt_name>YandexSearch.exe</lt_name>..    &l
t;partner name="vkmusic-elements">..            <url>hXXp://d
ownloader.yandex.net/yandex-pack/</url>..            <name>
;YandexPackSetup.exe</name>..            <lt_name>YandexSe
arch.exe</lt_name>..            <exp_path val="33">-extens
ion-exp1</exp_path>..            <exp_path val="33">-exten
sion-exp2</exp_path>..            <exp_path val="33">-exte
nsion-exp3</exp_path>..    </partner>..    <partner nam
e="disc-soft">..            <url>hXXp://downloader.yandex.net
/yandex-pack/</url>..            <name>YandexPackSetup.exe
</name>..            <lt_name>YandexSearch.exe</lt_name
>..            <exp_path val="50">-accelerator-exp1</exp_p
ath>..            <exp_path val="50">-accelerator-exp2</ex
p_path>..    </partner>..    <partner name="kmplayer-eleme
nts2">..            <url>hXXp://downloader.yandex.net/yandex-
pack/</url>..            <name>YandexPackSetup.exe</nam
e>..            <lt_name>YandexSearch.exe</lt_name>..  
          <exp_path val="33">-extension-exp1</exp_path>.. 
           <exp_path val="33">-extension-exp2</exp_path&g<<< skipped >>>

HEAD /download.cdn.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

User-Agent: Microsoft BITS/7.5

Host: cache-kiev12.cdn.yandex.net


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Mon, 20 Apr 2015 06:51:46 GMT

Content-Type: application/x-msdos-program

Content-Length: 61830096

Connection: keep-alive

Content-Disposition: attachment; filename="Yandex.exe"

ETag: "2285172280"

Last-Modified: Mon, 06 Apr 2015 09:57:48 GMT

Accept-Ranges: bytes

....

GET /download.cdn.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Mon, 06 Apr 2015 09:57:48 GMT

User-Agent: Microsoft BITS/7.5

Host: cache-kiev12.cdn.yandex.net


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Mon, 20 Apr 2015 06:51:46 GMT

Content-Type: application/x-msdos-program

Content-Length: 61830096

Connection: keep-alive

Content-Disposition: attachment; filename="Yandex.exe"

ETag: "1648325745"

Last-Modified: Mon, 06 Apr 2015 09:57:48 GMT

Accept-Ranges: bytes
MZ......................@................................... .........
..!..L.!This program cannot be run in DOS mode....$........p.....}...}
...}L. }...}.C3}...}.@.}...}.C.}...}.C.}...}.fP}...}.fR}...}.fU}...}..
.}o..}.h3}...}.h.}...}.h.}_..}.h.}T..}.C7}...}..{}...}.h2}...}Rich...}
........PE..L...U..T.........."..................z............@.......
[email protected]....@.....................................
.....................R...!...`..............................8w.......v
[email protected]...............
............ ..`.rdata..2...........................@[email protected].........
[email protected][email protected]
c...............................@[email protected].......`....................
[email protected]................................................................
......................................................................
......................................................................
.............................................\._......h .V...E..Y...._
......h*.V...D..Y.hZ.V...D..Y.hO.V...D..Y.hD.V...D..Y...i......_......
..h..V...D..Y.V..._...._..5.._........y....._........_.$...h..V..5.._.
...._..c^..fD..Y^.........h....hD._.....V.h..V..AD..Y.. .^....^..$.^..
..^...8.^.. .^..<.^..,.^..@.^..8.^...(.^....^..,.^....^..0.^....^..
.L.^....^..P.^....^..T.^....^..X.^....^..\.^....^..`.^....^..d.^....^.
..<.^....^...0.^....^..4.^....^...p.^....^..t.^....^....^....^....^
....^....^..(.^....^..<.^....^..P.^....^..d.^..x.^..x.^..l.^...<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTEemCaVgs8Tuh2B9fGVE0pKKNyzgQUTF+nNhcF4oZhIkk5jLmo40rgOBoCEC6utoKGY/7ZdVX4/iTzOxo= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1552

content-transfer-encoding: binary

Cache-Control: max-age=369196, public, no-transform, must-revalidate

Last-Modified: Fri, 17 Apr 2015 13:24:57 GMT

Expires: Fri, 24 Apr 2015 13:24:57 GMT

Date: Mon, 20 Apr 2015 06:55:51 GMT

Connection: keep-alive
0..........0..... [email protected]
7132457Z0s0q0I0... .........z`.V.<N.v...TM)(.r...L_.6....a"I9....J.
8........c..uU..$.;.....20150417132457Z....20150424132457Z0...*.H.....
........Y.4.<..&r.....&.>'.TqX.E...*...............Lp3.p.MU..^..
...!e4.xN..1u.#.ox.....5.....j....&.....E...H=}..S....l..5{.........BO
.......8[.~2:[}..W.SVd.y..%\f.x.op...]uE..W0.......}.. .S..Fp..".....:
Iw ....M.....9l.>G.........;.#.>.B..... h...&.4.dARH..8(...r...5
0..10..-0..........y.P}~.EY....T]. 0...*.H........0..1.0...U....US1.0.
..U....VeriSign, Inc.1<0:..U...3Class 3 Public Primary Certificatio
n Authority - G21:08..U...1(c) 1998 VeriSign, Inc. - For authorized us
e only1.0...U....VeriSign Trust Network0...141202000000Z..151216235959
Z0..1.0...U....US1.0...U....Symantec Corporation1.0...U....Symantec Tr
ust Network1?0=..U...6Symantec Class 3 PCA - G2 OCSP Responder Certifi
cate 30.."0...*.H.............0..........6..]......w';.r........I..c..
4.... .........TyW......hd_.....!C.k......SE<?o.H.. .me.c..9N.&....
e.^-..a.....i\:..*."..u...|....".Nf3.~.L...QW...p.....-]UV8U...J&.<
./.G.....I...4.T....#I*.i.E0\..~q$.I.......X?G....f.t......v.l.U.Ld.I.
..B.....=...Sf...H.s.........0..0...U....0.0l..U. .e0c0a..`.H...E....0
R0&.. .........hXXp://VVV.symauth.com/cps0(.. .......0...hXXp://VVV.sy
mauth.com/rpa0...U.%..0... .......0...U........0... .....0......0!..U.
...0...0.1.0...U....TGV-B-2740...*.H............1.`...i.....H.C.i.9~.i
..Z.r.*$..(./.ag9.....J.Q.~.`.$?b..C....<.h.........d&....3.kV.<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRODEXefhs/UZFum2o8YfzOFwceMwQUkz5j3yJ0BOBkhDHd2yOfDq+2TZMCEA89qsgV9niZmSI6gIO0S/U= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1725

content-transfer-encoding: binary

Cache-Control: max-age=399492, public, no-transform, must-revalidate

Last-Modified: Fri, 17 Apr 2015 21:49:58 GMT

Expires: Fri, 24 Apr 2015 21:49:58 GMT

Date: Mon, 20 Apr 2015 06:55:51 GMT

Connection: keep-alive
0..........0..... .....0......0...0......%bn.$..5.......?'4....2015041
7214958Z0s0q0I0... ........N.E.~.?Q.n.j<a.....3...>c."t..d.1..#.
...M....=....x..":...K.....20150417214958Z....20150424214958Z0...*.H..
...........y...eJ.K&.u&..HV..M'.m6K.,........N.Ou.{..#.Z.....GZ s.?.{.
.....%..;m....N........u.p.>....T.Ez.......X..a...K..XU....)'......
.e...F.5..7.}..VH....[...........^]...].Q..QH...*...'...G`....*...S...
...U....C.. ?.....l......|6.U)Z..a.wz.o...6.Sq...D.%Q..U........0...0.
..0..........7.R.~|..r."....#0...*.H........0..1.0...U....US1.0...U...
.VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of us
e at hXXps://VVV.verisign.com/rpa (c)091.0,..U...%VeriSign Class 3 Cod
e Signing 2009 CA0...150401000000Z..150630235959Z0..1.0...U....US1.0..
.U....VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1VeriSi
gn Class 3 Code Signing 2009 OCSP Responder0.."0...*.H.............0..
........z..|..>.....5.Z ...2.C MWIH.5......M.\.... ...eW..`.B=..`:.
.R. ...Z.k.Y.....p@.(3.c....a.;..[E....J:'...`...B....M..&......{. (..
......%......^[v[....m....*.T.o&4..3.....3.........G...e)...'?.K..2s..
8=?..z.:..T..-.8R..8wv7*U.K..c...<s...]{.........6.?_...........0..
.0...U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://www
.verisign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS
 incorp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0.
..U........0... .....0......0"..U....0...0.1.0...U....TGV-B-34920...*.
H.............,..-......q3a........z....t;B.z.h...]...#}.6.,..YU..<<< skipped >>>

HEAD /downloadable_soft/browser/pseudoportal-ru/Yandex.exe HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

User-Agent: Microsoft BITS/7.5

Host: download.cdn.yandex.net


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Mon, 20 Apr 2015 06:51:46 GMT

Connection: keep-alive

Keep-Alive: timeout=5

Location: hXXp://cache-kiev12.cdn.yandex.net/download.cdn.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

....

GET /downloadable_soft/browser/pseudoportal-ru/Yandex.exe HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Mon, 06 Apr 2015 09:57:48 GMT

User-Agent: Microsoft BITS/7.5

Host: download.cdn.yandex.net


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Mon, 20 Apr 2015 06:51:46 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=5

Location: hXXp://cache-kiev12.cdn.yandex.net/download.cdn.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

0..HTTP/1.1 302 Moved Temporarily..Server: nginx/1.6.2..Date: Mon, 20 
Apr 2015 06:51:46 GMT..Transfer-Encoding: chunked..Connection: keep-al
ive..Keep-Alive: timeout=5..Location: hXXp://cache-kiev12.cdn.yandex.n
et/download.cdn.yandex.net/downloadable_soft/browser/pseudoportal-ru/Y
andex.exe..Expires: Thu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-c
ache..Cache-Control: no-store,no-cache,must-revalidate..Pragma: no-cac
he..0..

GET /element/ie/silentupdate/891v2/vb-ru.2.18.0.5151.x64.delta.2.16.0.3147.zip HTTP/1.1

Accept: */*

Connection: Close

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Win64; x64; Trident/6.0)

Host: download.cdn.yandex.net


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Mon, 20 Apr 2015 06:54:16 GMT

Transfer-Encoding: chunked

Connection: close

Location: hXXp://cache-kiev06.cdn.yandex.net/download.cdn.yandex.net/element/ie/silentupdate/891v2/vb-ru.2.18.0.5151.x64.delta.2.16.0.3147.zip

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

0..

GET /congratulations.html HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: videodownloader.ummy.net

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:51:30 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.23

Set-Cookie: PHPSESSID=3kv2c876rj19q99d1u9jfjujn5; expires=Mon, 27-Apr-2015 06:51:30 GMT; path=/ru/; HttpOnly

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: firstVisit=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT

Content-Encoding: gzip
aee...............n.8.y..?.B..&......X.z....m...-...DK.eR%)_........~.
.R.-......pd.. ...(n..<....oo^.T..~.......e..|.....\=....K.Z.{7.0&l
t;J. o.....G..W..tx.y nuV.p....!lv.'.b....zC.yk..$....y...Q.b!...B.=.y
c9U*....NB.W.......X.AF,.q...../B.'.N...H..g......3......)..Ih.DF.....
..~.M.mD.S.b..3...T.ahi...`Bc.c>e..1.~1..}FT`..Y..%...Uc>..J..q.
..(.......H......Q6B.d..3E....J..a...(....E..?c.'......m.o.%C.Ce(.(2.t
..t)...D.... Z......P)4.-.........,."F....".8....k.R.....qB..W.J..8oD.
@.d0,[email protected]<F.x..m.:.',.....w.PL.!.....y..Oij..
........hs...K.'..qr6;9k6c......s.X....?..........@...].k.....p..p...4
dH.T.y....^B..&.Jt}.........a.Ywv.=.X...1.?....{:;;=.X.{....CS.R..$...
< .U.....3<G.`....z.....>..Ya.UC..7;...|.5...chCq-;.~...,..:.
-....E....'ze...$#O....F....D..........s{..w?....?.........B...I1.&@..
.f1.;.22E..T9......../2.....[c.&DU .t..'..........c9gQ..oRDar1.s,.....
O.$B=%C...Mj}v.)eP..1..>m....m..t:..c...6......F.f.m...J.c.:.mdCGw.
9=>=.v.......O.I..5,....#C...>h......)!j3.".e2#3.Q]...j......&..
...K....%...&`....6V0........!...O^.b.....7......O..\.\1......>.$..
.[..x.......b..*..J..*.7..E.@%......f......_.a._......y!.........s.'..
..DP."....nRmJXA.N..a_L'..... ....C:...=.Z9.c...z~..g....f|z..8&..Z...
7#C.i..x...%*O.2D./...b9.....k...vFw/.....7.z.....5A.Y..,..L...{.."..P
.......*u..0....RR.......>"..V...0.!.NHm .DR.tR..cN.]!F_...t.f.$...
._,e.tR...N.%$ F...?v.}........9..:.4...'..,.. .6ni..>.....1.. .~I.
BT...=...5.z....P..>&.]\...r..>.8...M...4..6..*.....}[.Y..u.<<< skipped >>>

GET /assets/css/flexslider.css HTTP/1.1

Accept: text/css

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: videodownloader.ummy.net

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:51:30 GMT

Content-Type: text/css

Content-Length: 4950

Last-Modified: Tue, 13 May 2014 21:24:04 GMT

Connection: keep-alive

ETag: "53728d74-1356"

Accept-Ranges: bytes
/*. * jQuery FlexSlider v2.2.0. * hXXp://VVV.woothemes.com/flexslider/
. *. * Copyright 2012 WooThemes. * Free to use under the GPLv2 license
.. * hXXp://VVV.gnu.org/licenses/gpl-2.0.html. *. * Contributing autho
r: Tyler Smith (@mbmufffin). */.../* Browser Resets.******************
***************/..flex-container a:active,..flexslider a:active,..flex
-container a:focus,..flexslider a:focus  {outline: none;}..slides,..fl
ex-control-nav,..flex-direction-nav {margin: 0; padding: 0; list-style
: none;}../* Icon Fonts.*********************************/./* Font-fac
e Icons */.@font-face {..font-family: 'flexslider-icon';..src:url('fon
ts/flexslider-icon.eot');..src:url('fonts/flexslider-icon.eot?#iefix')
 format('embedded-opentype'),...url('fonts/flexslider-icon.woff') form
at('woff'),...url('fonts/flexslider-icon.ttf') format('truetype'),...u
rl('fonts/flexslider-icon.svg#flexslider-icon') format('svg');..font-w
eight: normal;..font-style: normal;.}../* FlexSlider Necessary Styles.
*********************************/..flexslider {margin: 0; padding: 0;
}..flexslider .slides > li {display: none; -webkit-backface-visibil
ity: hidden;} /* Hide the slides before the JS is loaded. Avoids image
 jumping */..flexslider .slides img {width: 100%; display: block;}..fl
ex-pauseplay span {text-transform: capitalize;}../* Clearfix for the .
slides element */..slides:after {content: "\0020"; display: block; cle
ar: both; visibility: hidden; line-height: 0; height: 0;}.html[xmlns] 
.slides {display: block;}.* html .slides {height: 1%;}../* No Java<<< skipped >>>

GET /assets/js/vendor/jquery.flexslider-min.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: videodownloader.ummy.net

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:51:30 GMT

Content-Type: application/x-javascript

Content-Length: 21545

Last-Modified: Tue, 13 May 2014 21:24:14 GMT

Connection: keep-alive

ETag: "53728d7e-5429"

Accept-Ranges: bytes
/*. * jQuery FlexSlider v2.2.2. * Copyright 2012 WooThemes. * Contribu
ting Author: Tyler Smith. */.;(function(d){d.flexslider=function(g,l){
var a=d(g);a.vars=d.extend({},d.flexslider.defaults,l);var e=a.vars.na
mespace,v=window.navigator&&window.navigator.msPointerEnabled&&window.
MSGesture,t=("ontouchstart"in window||v||window.DocumentTouch&&documen
t instanceof DocumentTouch)&&a.vars.touch,m="",u,p="vertical"===a.vars
.direction,n=a.vars.reverse,h=0<a.vars.itemWidth,r="fade"===a.vars.
animation,q=""!==a.vars.asNavFor,c={};d.data(g,"flexslider",a);c={init
:function(){a.animating=!1;a.currentSlide=parseInt(a.vars.startAt?.a.v
ars.startAt:0,10);isNaN(a.currentSlide)&&(a.currentSlide=0);a.animatin
gTo=a.currentSlide;a.atEnd=0===a.currentSlide||a.currentSlide===a.last
;a.containerSelector=a.vars.selector.substr(0,a.vars.selector.search("
 "));a.slides=d(a.vars.selector,a);a.container=d(a.containerSelector,a
);a.count=a.slides.length;a.syncExists=0<d(a.vars.sync).length;"sli
de"===a.vars.animation&&(a.vars.animation="swing");a.prop=p?"top":"mar
ginLeft";a.args={};a.manualPause=!1;a.stopped=!1;a.started=!1;a.startT
imeout=null;.a.transitions=!a.vars.video&&!r&&a.vars.useCSS&&function(
){var b=document.createElement("div"),f=["perspectiveProperty","Webkit
Perspective","MozPerspective","OPerspective","msPerspective"],k;for(k 
in f)if(void 0!==b.style[f[k]])return a.pfx=f[k].replace("Perspective"
,"").toLowerCase(),a.prop="-" a.pfx "-transform",!0;return!1}();""!==a
.vars.controlsContainer&&(a.controlsContainer=0<d(a.vars.contro<<< skipped >>>

GET /assets/img/logo.png HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: videodownloader.ummy.net

DNT: 1

Connection: Keep-Alive

Cookie: _ga=GA1.2.1715774948.1429512691; _gat=1


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:51:31 GMT

Content-Type: image/png

Content-Length: 13717

Last-Modified: Fri, 30 May 2014 10:31:06 GMT

Connection: keep-alive

ETag: "53885dea-3595"

Accept-Ranges: bytes
.PNG........IHDR...J...]......./.....tEXtSoftware.Adobe ImageReadyq.e&
lt;..57IDATx..}..%Gy..w...vg_.V....0/..1.`t....W./Ip..y...LN..KN..}r.&
>1....$.8A.s$L.Ac..($0p0...;.@ V;.3.3s.>....].]U.}..;s...%...}..
.Vw}.........i......@@.([email protected](UF.Q_.k...*__.v....
@......p.Xn.....87=......_8BD#.J.J.5.i.Q.... .B..T.~..T.ze.f..V.......
..J.=....|..../..7!9<......|....!...U<.....>...\.........\...
[.%..n..7...B.k..V..F.{Y.kWQ...p...h.X*/y...........y&..s...d..V....Y.
..<..n..U....k6.).y..P...5....:....Q.K^..q..!..U...$>....%h...|.
.........i...<J$*...tX.........>....x#./.....^.....#..<h..*..
...._..]...|V......!..Q.nX.....`........d.......Q../...~=.u...<....
...?..'.....K^..C..Z..z./...../dl..P...n.Q....j.....H...j.$...I...c.f.
-..\.F....y.....H.Q.z*.... ...o%}e...&Y-...,]..7D..W..%>..{.K^.....
.h.=.E.#|..4....Jx.:6 ,bz1*".o-.$..........'..u).q.icH.O.<p..Gf....
_..j.....sP|Z..G.J..?.y....\....] ..1.|#..q...$.t...8eK.h.:LT...E.'.2.
-T......#....b.s..).[At>......'r.e^....%........_S.xL....y.P.......
..:~%t..rwx!...c....0C...*.6.....!v....9...q,.. .6v!.'[email protected]_..
..i.....i.o.'...q^......m7..$!..R..iz:M.....p......R.........T........
.@......&.........<[email protected][email protected]..}.v
....{..._.%..z-.Q)..r.Z..S..V.|.k.......jp~...........o..}J......:....
.<.7{.....w...."......e.....t.../..G..,.Q.t...-0..@.;.....`..;?....
....X^[email protected].!..M.}..1b$..f...$..Uj...d.:5....h\.t....wEb ,2.
[email protected]....._t8.....p`....~h..s..H...8. .4~....1.%/y.d.,.<<< skipped >>>

GET /yandex-pack/downloader/info.rss HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: downloader.yandex.net

Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Mon, 20 Apr 2015 06:52:09 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=5

Location: hXXp://cache-kiev10.cdn.yandex.net/downloader.yandex.net/yandex-pack/downloader/info.rss

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

0..HTTP/1.1 302 Moved Temporarily..Server: nginx/1.6.2..Date: Mon, 20 
Apr 2015 06:52:09 GMT..Transfer-Encoding: chunked..Connection: keep-al
ive..Keep-Alive: timeout=5..Location: hXXp://cache-kiev10.cdn.yandex.n
et/downloader.yandex.net/yandex-pack/downloader/info.rss..Expires: Thu
, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache..Cache-Control: no
-store,no-cache,must-revalidate..Pragma: no-cache..0......

GET /yandex-pack/bm-partner-ru/YandexPackSetup.exe HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: downloader.yandex.net

Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Mon, 20 Apr 2015 06:52:09 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=5

Location: hXXp://cache-kiev10.cdn.yandex.net/downloader.yandex.net/yandex-pack/bm-partner-ru/YandexPackSetup.exe

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

0..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1762

content-transfer-encoding: binary

Cache-Control: max-age=460480, public, no-transform, must-revalidate

Last-Modified: Sat, 18 Apr 2015 14:45:04 GMT

Expires: Sat, 25 Apr 2015 14:45:04 GMT

Date: Mon, 20 Apr 2015 06:51:37 GMT

Connection: keep-alive
0..........0..... .....0......0...0......;O}a.!..u...au..eUNp..2015041
8144504Z0s0q0I0... ...................B.>.I.$&.....e......0..C9...3
13..R...%V.......K3.....20150418144504Z....20150425144504Z0...*.H.....
........cG..0.<.3....Z}.. .A.D.c.O.l5.%9|.;q..E..{d...3u~....4....H
w....,w..p.<H.I ....0..M....V...|DY....&.nP.sD..B......,D0.{....Bp.
....'j......C1.7[..N..........]..w.R....^......`F..sd.i.....A....._.j.
.\.9.j..gV)e..nv8..<...|..Y....x.J.S.{ ..W......7...yC~..vnP....0..
.0...0...........2...'U.BM...g.B0...*.H........0..1.0...U....US1.0...U
....VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1(c) 2006
 VeriSign, Inc. - For authorized use only1E0C..U...<VeriSign Class 
3 Public Primary Certification Authority - G50...141202000000Z..151216
235959Z0..1.0...U....US1.0...U....Symantec Corporation1.0...U....Syman
tec Trust Network1?0=..U...6Symantec Class 3 PCA - G5 OCSP Responder C
ertificate 30.."0...*.H.............0...............2&..PL...,..2....:
..tH...`JG.%..*...s.c%[email protected]"1.5?..
s.....3[...u......]...R0..Z}....l..I.Y.....j\H.q...#.uw.4qz.#.J.....@2
$"..$l.B.......D.ye..(..2.........@...... ...."... E..0M,..b{.^..s'...
.f.6.pr4.J........'j..........0...0...U.......0.0l..U. .e0c0a..`.H...E
....0R0&.. .........hXXp://VVV.symauth.com/cps0(.. .......0...hXXp://w
ww.symauth.com/rpa0...U.%..0... .......0...U...........0... .....0....
..0!..U....0...0.1.0...U....TGV-B-2760...U......;O}a.!..u...au..eUNp0.
..U.#..0.....e......0..C9...3130...*.H.............(.&..Dgr.Ve..#.<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEDZn4Vi1JMj/v+U4FyeG8eI= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1725

content-transfer-encoding: binary

Cache-Control: max-age=557769, public, no-transform, must-revalidate

Last-Modified: Sun, 19 Apr 2015 17:44:59 GMT

Expires: Sun, 26 Apr 2015 17:44:59 GMT

Date: Mon, 20 Apr 2015 06:51:37 GMT

Connection: keep-alive
0..........0..... .....0......0...0......N$p...v....1.;..vn....2015041
9174459Z0s0q0I0... ...................F....0.yV......{&.K......&......
.6g.X.$....8.'.......20150419174459Z....20150426174459Z0...*.H........
.............hs..`..t..m.4jr.7#..i=.ye....4c.. =/.......q.%........T..
1..y..O...}[email protected](.!yR.[7.|O8......N.....%.w.<....
EE......q1.#....|.).&..F./.<V.|.%Q..&...k.8B.}bM....J.....;8.5..nkJ
G.l.....^.;..J.........u.d....a...=..<...=...n`..9..N/I......0...0.
..0............F...I]A([email protected]...*.H........0..1.0...U....US1.0...U...
.VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of us
e at hXXps://VVV.verisign.com/rpa (c)101.0,..U...%VeriSign Class 3 Cod
e Signing 2010 CA0...150225000000Z..150526235959Z0..1.0...U....US1.0..
.U....VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1VeriSi
gn Class 3 Code Signing 2010 OCSP Responder0.."0...*.H.............0..
.......q<...A...#......A...u..Lz.............o..D.vQ%..s.......f...
.e../jI.d.W.....|K;.j5...#.B%.]..~S.... .|;S.&.....N..`...5.....!D.p..
..M/.. ..;j...q..`6...2.Ck..BnLHvCZn%....,.w.Ooi..z'...\.Yx......b..L.
..5.o..o..{..}.........%e.....N..._i........*Bc....:yQg.........0...0.
..U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.ve
risign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS in
corp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U
........0... .....0......0"..U....0...0.1.0...U....TGV-B-31830...*.H..
............-..^.........f.P`...s.....8.....V.......... .... B.(@-<<< skipped >>>

GET /assets/UmmyVideoDownloader_setup.exe HTTP/1.1

Accept: */*

X-User-Lang: 1033

X-User-OS: Version 6.1 Build 7601 SP 1.0 (Windows 7)

X-VID: 100

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: videodownloader.ummy.net

Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily

Server: nginx

Date: Mon, 20 Apr 2015 06:50:46 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.23

Location: /app/get.php?id=ya&f=v2&country=ua
0......


GET /app/get.php?id=ya&f=v2&country=ua HTTP/1.1

Accept: */*

X-User-Lang: 1033

X-User-OS: Version 6.1 Build 7601 SP 1.0 (Windows 7)

X-VID: 100

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: videodownloader.ummy.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:50:46 GMT

Content-Type: application/octet-stream

Content-Length: 14272632

Last-Modified: Fri, 17 Apr 2015 13:02:32 GMT

Connection: keep-alive

Content-Disposition: attachment; filename=UmmyVideoDownloader_setup.exe

ETag: "55310468-d9c878"

Accept-Ranges: bytes

MZP.....................@.............................................
..!..L.!..This program must be run under Win32..$7....................
......................................................................
..............................................PE..L......S............
......................... ....@..........................@............
[email protected].......
......................................................................
...............text...,........................... ..`.itext..D.......
.................... ..`.data........ [email protected]..
...V...0...........................idata..............................
@....tls.....................................rdata....................
..........@[email protected]... ..............@..@................
....................@..@..............................................
......................................................................
[email protected]............
@...string([email protected]......@...............................@.....
.... 9@.([email protected]@[email protected]@[email protected]@..9@.,[email protected]@[email protected].%..A....%..A.
...%..A....%..A....%..A....%..A....%(.A....%..A....%$.A....%..A....%..
A....%..A....%..A....%..A....%|.A....%x.A....%t.A....%p.A....%l.A....%
h.A....% .A....%d.A....%`.A....%\.A....%..A....%..A....%..A....%X.A...
.%T.A....%..A....%..A....%..A....%P.A....%L.A....%H.A....%D.A....%@.A.
..S..........$D...T.J....D$,.t...\$0....D[..@..%<.A....%8.A....

<<< skipped >>>

GET /ajax/libs/jquery/1.10.2/jquery.min.js HTTP/1.1

Host: ajax.googleapis.com

Connection: keep-alive

Accept: */*

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8


HTTP/1.1 200 OK

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Type: text/javascript; charset=UTF-8

Last-Modified: Tue, 09 Jul 2013 11:31:25 GMT

Date: Wed, 15 Apr 2015 19:43:36 GMT

Expires: Thu, 14 Apr 2016 19:43:36 GMT

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

X-Content-Type-Options: nosniff

Server: sffe

Content-Length: 32822

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=31536000

Age: 385732

Alternate-Protocol: 80:quic,p=1
.............{...0.{....U.sD.N...3.u.4i.8....h?..J.A..@-....;.lX(.....
.i-b..z.ls....._.......d4.....G.28z2......S..e..VQ...8.:[.......Q^\...
2.......}T..b...m.Iv....HUn.d.M.....?..]....XT..uT.e......q.>.D..Q.
/...nV.r...J.227/....P..)vp.H,..^l.|!....yb%..e.A.......J\.E.....J.U|.
.Z....._W..@\..UT~...*.m\Tw.B.G.r#nes$E\...(.o.nG..*L*|#.`/n..|x.....|
..|T...!.....z..up:...o.......x&O......../_..>./.u.......a..c......
...Y0.{.x\....'..A..T..r_..7........./.O.'g5.~A.-Dx.?/....ky.E..a-.n.|
.`..B..q.......: .E.................U.z..X.8.....*vq...2..]..'<%..S
r).C.N6....F.......x.........i...,*c...7.\p.G.h.zq...MRVq..u..y.....BH
...|.M.*.........*.............4..6..w...X.&....}....>....A.......$
.q.q.#..B.s.W.....^.Q.J...*..c(.U.J.J..S.Ty;..y....=o.p-`...X.*/.[...:
s.[..n".i...q...*)..W....S..&..'...g..X<..1L.w.x..?........7g....AF
@...........T....$....8S..du..x43.n.`..=..C.......w.s......(.RQ.......
x.f......}..n.QQ._.....Rd..Q...70.Y6.o`.. ....#1...x?.......oGI.*.....
_.e.].....:p......}lv.,....3..QEU...z2uVd...../c.8...z..?Y."?>.q...
;.7.=.%[email protected]~........q..\...u......LW.....ac>.`V
..........W.W[..K.h0.W..7...iQDw>..[\..z....cQ.T,tv....h..)5.......
.......Vr....p|.........x./.....\.|....c%][email protected].^..j/[email protected]
/....;...|/h..F..%..M.H..y...%p.D.{..:c.._...H......ME..N..:TA.....H..
.......3..:[email protected]...........
lup..J.u......P..(...~..W.[Z.....0|.C1....X.....v...HDC....2rz.`..5pl)
l..}.g{)..)bB."..8.,A)ao/e..l. {../.A;..u.q.A].%....,e.....NN.`.;K<<< skipped >>>

GET /assets/js/plugins.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: videodownloader.ummy.net

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:51:30 GMT

Content-Type: application/x-javascript

Content-Length: 733

Last-Modified: Tue, 13 May 2014 21:24:02 GMT

Connection: keep-alive

ETag: "53728d72-2dd"

Accept-Ranges: bytes
// Avoid `console` errors in browsers that lack a console..(function()
 {.    var method;.    var noop = function () {};.    var methods = [.
        'assert', 'clear', 'count', 'debug', 'dir', 'dirxml', 'error',
.        'exception', 'group', 'groupCollapsed', 'groupEnd', 'info', '
log',.        'markTimeline', 'profile', 'profileEnd', 'table', 'time'
, 'timeEnd',.        'timeStamp', 'trace', 'warn'.    ];.    var lengt
h = methods.length;.    var console = (window.console = window.console
 || {});..    while (length--) {.        method = methods[length];..  
      // Only stub undefined methods..        if (!console[method]) {.
            console[method] = noop;.        }.    }.}());..// Place an
y jQuery/helper plugins in here..HTTP/1.1 200 OK..Server: nginx..Date:
 Mon, 20 Apr 2015 06:51:30 GMT..Content-Type: application/x-javascript
..Content-Length: 733..Last-Modified: Tue, 13 May 2014 21:24:02 GMT..C
onnection: keep-alive..ETag: "53728d72-2dd"..Accept-Ranges: bytes..// 
Avoid `console` errors in browsers that lack a console..(function() {.
    var method;.    var noop = function () {};.    var methods = [.   
     'assert', 'clear', 'count', 'debug', 'dir', 'dirxml', 'error',.  
      'exception', 'group', 'groupCollapsed', 'groupEnd', 'info', 'log
',.        'markTimeline', 'profile', 'profileEnd', 'table', 'time', '
timeEnd',.        'timeStamp', 'trace', 'warn'.    ];.    var length =
 methods.length;.    var console = (window.console = window.console ||
 {});..    while (length--) {.        method = methods[length];.. <<< skipped >>>

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 159

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=download&ea=insert&el=edit&ev=1&cd=main
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:54:08 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

GET /favicon/some.nonexistent HTTP/1.1

Host: favicon.yandex.net

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept: */*

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8


HTTP/1.1 200 OK

Content-Type: image/png

Date: Mon, 20 Apr 2015 06:52:30 GMT

Cache-Control: max-age=691200

access-control-allow-origin: *

Content-Length: 73

[email protected] .....IEND.
B`.....

GET /favicon/videodownloader.ummy.net HTTP/1.1

Host: favicon.yandex.net

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept: */*

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8


HTTP/1.1 200 OK

Content-Type: image/png

Date: Mon, 20 Apr 2015 06:52:30 GMT

Cache-Control: max-age=691200

access-control-allow-origin: *

Content-Length: 731
.PNG........IHDR................a....IDATx..S.kSK.?g..{.Q.J....}......
!]ZP........J]...E...X...].Z..("H.."..Z...-...;_..I....d.s.9....sf....
.l.D.(@&.....2......1.:... i.........:..............Y.I.Jq..S........l
............).../..=.w|.yD}....Hk.O.)....K....Q.|....\8H.?w...........
..._..D..A...:..r.De.29..Tk..k....7xR. ..k......W.R.........E..]..~...
mW.a.l..u[........i......'..>..PY..r.....#8Q`l..*%.m. .#d}.;.f...\.
...6....S3...L.V....LC.q......'...e..Bb...8"..P....O.&.n.\.C...|..u..e
.I7U....$."N......f..up...j.7.s1..a...?...T~..^..1[A.._^..dq..}...!r/.
..J.L..cynpy......s..!.D.;H..p.....Si...A.8.La.........|...q...2.w.z.8
..v7k........`....f!.,.j.....Dne..y.'..\...N.. 6....@....(4.p.8...D4..
b..............ue....z....IEND.B`.HTTP/1.1 200 OK..Content-Type: image
/png..Date: Mon, 20 Apr 2015 06:52:30 GMT..Cache-Control: max-age=6912
00..access-control-allow-origin: *..Content-Length: 731...PNG........I
HDR................a....IDATx..S.kSK.?g..{.Q.J....}......!]ZP........J
]...E...X...].Z..("H.."..Z...-...;_..I....d.s.9....sf.....l.D.(@&.....
2......1.:... i.........:..............Y.I.Jq..S........l............)
.../..=.w|.yD}....Hk.O.)....K....Q.|....\8H.?w.............._..D..A...
:..r.De.29..Tk..k....7xR. ..k......W.R.........E..]..~...mW.a.l..u[...
.....i......'..>..PY..r.....#8Q`l..*%.m. .#d}.;.f...\....6....S3...
L.V....LC.q......'...e..Bb...8"..P....O.&.n.\.C...|..u..e.I7U....$."N.
.....f..up...j.7.s1..a...?...T~..^..1[A.._^..dq..}...!r/...J.L..cynpy.
.....s..!.D.;H..p.....Si...A.8.La.........|...q...2.w.z.8..v7k....<<< skipped >>>

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab?f943bb638cf7712b HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Tue, 24 Feb 2015 00:37:01 GMT

If-None-Match: "80b4d90ca4fd01:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com


HTTP/1.1 304 Not Modified

Content-Type: application/octet-stream

Last-Modified: Tue, 24 Feb 2015 00:37:01 GMT

ETag: "80b4d90ca4fd01:0"

Cache-Control: max-age=604800

Date: Mon, 20 Apr 2015 06:51:19 GMT

Connection: keep-alive

HTTP/1.1 304 Not Modified..Content-Type: application/octet-stream..Las
t-Modified: Tue, 24 Feb 2015 00:37:01 GMT..ETag: "80b4d90ca4fd01:0"..C
ache-Control: max-age=604800..Date: Mon, 20 Apr 2015 06:51:19 GMT..Con
nection: keep-alive..

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 161

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=download&ea=insert&el=buffer&ev=1&cd=main
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:54:28 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

GET /status.xml?clid=2148271-100&uuid={128AC281-D5D9-496E-964F-56634EB3AD42}&vnt=6.1x64&top=3.0&file-no=45
15
107
106
25
6
26
27
111
129
121
42
41
43
40
89
18
17
12
11
13
10
21
24
22
20
47
104
127
103
108
123
124
102 HTTP/1.1

Connection: Keep-Alive

User-Agent: StatisticsEx/1.0

Host: soft.export.yandex.ru


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Mon, 20 Apr 2015 06:51:46 GMT

Content-Type: text/xml

Content-Length: 64

Last-Modified: Wed, 19 Nov 2014 09:40:42 GMT

Connection: keep-alive

Keep-Alive: timeout=120

Accept-Ranges: bytes
<?xml version="1.0" encoding="windows-1251"?>.<page>.ok.&l
t;/page>...

GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBQmECJms4f7i5EbxtN7NbzQCBwAdAQUUa8kJpz0aCJXgCYrO0ZiFXsezKUCE1oAAMJz1l6tff2DltkAAQAAwnM= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.msocsp.com


HTTP/1.1 200 OK

Date: Mon, 20 Apr 2015 06:52:35 GMT

Content-Type: application/ocsp-response

Content-Length: 1757

Connection: keep-alive

Set-Cookie: __cfduid=d7e54101fba19a71f2165e02db78cd1b81429512755; expires=Tue, 19-Apr-16 06:52:35 GMT; path=/; domain=.msocsp.com; HttpOnly

Last-Modified: Mon, 20 Apr 2015 02:24:00 GMT

Expires: Fri, 24 Apr 2015 02:24:00 GMT

ETag: "3d4a6b3d039a6c21b08e35cf67ec04751803279d"

Cache-Control: max-age=10800,public,no-transform,must-revalidate

X-Cache: HIT

CF-Cache-Status: HIT

Server: cloudflare-nginx

CF-RAY: 1d9eed63f16915ad-FRA
0..........0..... .....0......0...0..........<.|[email protected]|..2015
0420022400Z0..0..0L0... ........&."f........{5.....t..Q.$&..h"W.& ;Fb.
{.....Z...s.^.}.........s....20150420022400Z....20150424022400Z."0 0..
. .....0......20140420022400Z0...*.H.................7.'u..4.....X...}
..G.MVn]....... hh......&..G.E..2yZ.~..*..w.R@...... .[...F.,| .m.-..t
.R......".!......i.E..5u..?.<......f.9..L.F.&2..h<...W....~.B_..
.=.X....o.!.P..!....z:y...1..]...l......}...;..7..1....c'....J/....4n.
.iE.WH..SZ...nN..p.(...T.P..2......0...0...0..........Z.....W.3.......
...0...*.H........0..1.0...U....US1.0...U....Washington1.0...U....Redm
ond1.0...U....Microsoft Corporation1.0...U....Microsoft IT1.0...U....M
icrosoft IT SSL SHA20...150304231653Z..150518231653Z0!1.0...U....Shoul
d be ignore by CA0.."0...*.H.............0...........&!(..$.K...."=f..
..x.d.._s.....j....9`..l.Z..............^f..u......-e.&.bG.(i.Q.......
....bEy...^7A...A..c....CF-&...e.7..7F....."..w...y.:..`.w{~..D.x*....
...x3Os......q...... S.fB .ig.....L..3......4E..}..7...M....e ...6.M.O
.....<5:......r.....]..A.5........0..0...U..........<.|7...@N6p.
I.e|0...U.#..0...Q.$&..h"W.& ;Fb.{...0...U...........0...U.%..0... ...
....0... .....7....0.0... .......0... .....0......0...*.H.............
....9........V.O..o.6........O......8=\..Uy}.%..y.^.*_#@.L.\....s..im.
k.\Y5.h.h.%.&%.E]..G...aAn./q...omj........e.._....|.S...y0..$....|A@.
._Xl98k.Q...s5. ;....|p....n/\"d0.c#..7....1Nv...h8.X.G....F.x.(K.....
lx1. .......O.....%.Gk|......"[email protected]/.o-....\.r....@I.<<< skipped >>>

GET /pki/crl/products/MicCodSigPCA_08-31-2010.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Tue, 14 Apr 2015 05:02:07 GMT

Accept-Ranges: bytes

ETag: "2711f7277076d01:0"

Server: Microsoft-IIS/8.5

VTag: 438486457400000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 554

Cache-Control: max-age=900

Date: Mon, 20 Apr 2015 06:55:37 GMT

Connection: keep-alive

0..&0......0...*.H........0y1.0...U....US1.0...U....Washington1.0...U.
...Redmond1.0...U....Microsoft Corporation1#0!..U....Microsoft Code Si
gning PCA..150413163223Z..150713045223Z.a0_0...U.#..0..........X..7.3.
..L...0... .....7.........0...U......Z0... .....7......150712164223Z0.
..*.H.............WK....e.\.-.n......./......."]..E!.. //=...[....w...
 ..........#...[.l.J..f|..... .s......w...J._.......3.[..#.z....ko.I..
Q{....e.nV......F..d}..rF\H.jlH]dQ.E....x......W............j....&L. 2
.$.?...X?.#.(.....pK.v.......y..r....t......=.AW......K.G.gJD.b...

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=371673, public, no-transform, must-revalidate

Last-Modified: Fri, 17 Apr 2015 14:10:10 GMT

Expires: Fri, 24 Apr 2015 14:10:10 GMT

Date: Mon, 20 Apr 2015 06:55:37 GMT

Connection: keep-alive
0..........0..... .....0......0...0......'.V.8.F.V....H....JW..2015041
7141010Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
.A..2.....:...:......20150417141010Z....20150424141010Z0...*.H........
........c.8.c..d8..6_.S.O..~Q.0..biaE3.C......MY.W.J.'gu...5.U.X......
.....p..R.........7.ErNBD.....7.5..Z..k.8S.Y..=.h...]_.<...[t.?..D6
...6([email protected].../A".....:.v....'.._.'.thz.}.e..W...RC..5.1f/.Z..61
.~.7......F...>.FO...dw.G(5U'.[;;......T..`P. ... .......#0...0...0
..........r..?.*......y"..0...*.H........0..1.0...U....US1.0...U....Ve
riSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use a
t hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code S
igning 2009-2 CA0...150226000000Z..150527235959Z0..1.0...U....US1.0...
U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms o
f use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Clas
s 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0.......
......m5*R........2....>...yU4..L.. ...........u..Hez..Pn.....d...n
z(...V7.}^...d!RX...bl..[..a...L.. .~..Ij......%..%p.-...u..:..i..F*].
..*....{NH..|0...gHX.Q.r....S..........._.9.(w...suC...N..s.....&."...
:.C.Q.i~rl..<..krS..8.B..o][email protected]...
U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.veri
sign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS inco
rp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U..
......0... .....0......0"..U....0...0.1.0...U....TGV-B-32010...*.H<<< skipped >>>

GET /yandex-pack/downloader/info.rss HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: downloader.yandex.net

Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Mon, 20 Apr 2015 06:51:31 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=5

Location: hXXp://cache-kiev06.cdn.yandex.net/downloader.yandex.net/yandex-pack/downloader/info.rss

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

0..HTTP/1.1 302 Moved Temporarily..Server: nginx/1.6.2..Date: Mon, 20 
Apr 2015 06:51:31 GMT..Transfer-Encoding: chunked..Connection: keep-al
ive..Keep-Alive: timeout=5..Location: hXXp://cache-kiev06.cdn.yandex.n
et/downloader.yandex.net/yandex-pack/downloader/info.rss..Expires: Thu
, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache..Cache-Control: no
-store,no-cache,must-revalidate..Pragma: no-cache..0......

GET /yandex-pack/savefrom-video/YandexPackSetup.exe HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: downloader.yandex.net

Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Mon, 20 Apr 2015 06:51:32 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=5

Location: hXXp://cache-kiev12.cdn.yandex.net/downloader.yandex.net/yandex-pack/savefrom-video/YandexPackSetup.exe

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

0..HTTP/1.1 302 Moved Temporarily..Server: nginx/1.6.2..Date: Mon, 20 
Apr 2015 06:51:32 GMT..Transfer-Encoding: chunked..Connection: keep-al
ive..Keep-Alive: timeout=5..Location: hXXp://cache-kiev12.cdn.yandex.n
et/downloader.yandex.net/yandex-pack/savefrom-video/YandexPackSetup.ex
e..Expires: Thu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache..Ca
che-Control: no-store,no-cache,must-revalidate..Pragma: no-cache..0..

GET /assets/css/style.css?v7 HTTP/1.1

Host: videodownloader.ummy.net

Connection: keep-alive

Accept: text/css,*/*;q=0.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:52:28 GMT

Content-Type: text/css

Content-Length: 72192

Last-Modified: Tue, 14 Apr 2015 12:56:34 GMT

Connection: keep-alive

ETag: "552d0e82-11a00"

Accept-Ranges: bytes
/*! normalize.css v1.1.3 | MIT License | git.io/normalize */./* ======
====================================================================. 
  HTML5 display definitions.   =======================================
=================================== */./**. * Correct `block` display 
not defined in IE 6/7/8/9 and Firefox 3.. */.article,.aside,.details,.
figcaption,.figure,.footer,.header,.hgroup,.main,.nav,.section,.summar
y {.  display: block;.}./**. * Correct `inline-block` display not defi
ned in IE 6/7/8/9 and Firefox 3.. */.audio,.canvas,.video {.  display:
 inline-block;.  *display: inline;.  *zoom: 1;.}./**. * Prevent modern
 browsers from displaying `audio` without controls.. * Remove excess h
eight in iOS 5 devices.. */.audio:not([controls]) {.  display: none;. 
 height: 0;.}./**. * Address styling not present in IE 7/8/9, Firefox 
3, and Safari 4.. * Known issue: no IE 6 support.. */.[hidden] {.  dis
play: none;.}./* =====================================================
=====================.   Base.   =====================================
===================================== */./**. * 1. Correct text resizi
ng oddly in IE 6/7 when body `font-size` is set using. *    `em` units
.. * 2. Prevent iOS text size adjust after orientation change, without
 disabling. *    user zoom.. */.html {.  font-size: 100%;.  /* 1 */.  
-ms-text-size-adjust: 100%;.  /* 2 */.  -webkit-text-size-adjust: 100%
;.  /* 2 */.}./**. * Address `font-family` inconsistency between `text
area` and other form. * elements.. */.html,.button,.input,.select,<<< skipped >>>

GET /assets/img/logo.png HTTP/1.1

Host: videodownloader.ummy.net

Connection: keep-alive

Accept: image/webp,*/*;q=0.8

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Referer: hXXp://videodownloader.ummy.net/assets/css/style.css?v7

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8

Cookie: _ga=GA1.2.1652772922.1429512749; _gat=1


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:52:31 GMT

Content-Type: image/png

Content-Length: 13717

Last-Modified: Fri, 30 May 2014 10:31:06 GMT

Connection: keep-alive

ETag: "53885dea-3595"

Accept-Ranges: bytes
.PNG........IHDR...J...]......./.....tEXtSoftware.Adobe ImageReadyq.e&
lt;..57IDATx..}..%Gy..w...vg_.V....0/..1.`t....W./Ip..y...LN..KN..}r.&
>1....$.8A.s$L.Ac..($0p0...;.@ V;.3.3s.>....].]U.}..;s...%...}..
.Vw}.........i......@@.([email protected](UF.Q_.k...*__.v....
@......p.Xn.....87=......_8BD#.J.J.5.i.Q.... .B..T.~..T.ze.f..V.......
..J.=....|..../..7!9<......|....!...U<.....>...\.........\...
[.%..n..7...B.k..V..F.{Y.kWQ...p...h.X*/y...........y&..s...d..V....Y.
..<..n..U....k6.).y..P...5....:....Q.K^..q..!..U...$>....%h...|.
.........i...<J$*...tX.........>....x#./.....^.....#..<h..*..
...._..]...|V......!..Q.nX.....`........d.......Q../...~=.u...<....
...?..'.....K^..C..Z..z./...../dl..P...n.Q....j.....H...j.$...I...c.f.
-..\.F....y.....H.Q.z*.... ...o%}e...&Y-...,]..7D..W..%>..{.K^.....
.h.=.E.#|..4....Jx.:6 ,bz1*".o-.$..........'..u).q.icH.O.<p..Gf....
_..j.....sP|Z..G.J..?.y....\....] ..1.|#..q...$.t...8eK.h.:LT...E.'.2.
-T......#....b.s..).[At>......'r.e^....%........_S.xL....y.P.......
..:~%t..rwx!...c....0C...*.6.....!v....9...q,.. .6v!.'[email protected]_..
..i.....i.o.'...q^......m7..$!..R..iz:M.....p......R.........T........
.@......&.........<[email protected][email protected]..}.v
....{..._.%..z.........,....y..6.J'.T...y....@[.....O~..g..(......t.@.
.Z.,n]G....C....NpD..`lx....G.>[email protected]...'.u.1..c.....*.j~.!X
.......a.x..R.q......e..g..2.......~.G.....y.x. x..a.....J..."b`dp.P"6
......8..M....K..$ [email protected]`._..J.Ok..V..J.>..X../A.....C,<<< skipped >>>

GET /assets/js/plugins.js HTTP/1.1

Host: videodownloader.ummy.net

Connection: keep-alive

Accept: */*

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:52:28 GMT

Content-Type: application/x-javascript

Content-Length: 733

Last-Modified: Tue, 13 May 2014 21:24:02 GMT

Connection: keep-alive

ETag: "53728d72-2dd"

Accept-Ranges: bytes
// Avoid `console` errors in browsers that lack a console..(function()
 {.    var method;.    var noop = function () {};.    var methods = [.
        'assert', 'clear', 'count', 'debug', 'dir', 'dirxml', 'error',
.        'exception', 'group', 'groupCollapsed', 'groupEnd', 'info', '
log',.        'markTimeline', 'profile', 'profileEnd', 'table', 'time'
, 'timeEnd',.        'timeStamp', 'trace', 'warn'.    ];.    var lengt
h = methods.length;.    var console = (window.console = window.console
 || {});..    while (length--) {.        method = methods[length];..  
      // Only stub undefined methods..        if (!console[method]) {.
            console[method] = noop;.        }.    }.}());..// Place an
y jQuery/helper plugins in here..HTTP/1.1 200 OK..Server: nginx..Date:
 Mon, 20 Apr 2015 06:52:28 GMT..Content-Type: application/x-javascript
..Content-Length: 733..Last-Modified: Tue, 13 May 2014 21:24:02 GMT..C
onnection: keep-alive..ETag: "53728d72-2dd"..Accept-Ranges: bytes..// 
Avoid `console` errors in browsers that lack a console..(function() {.
    var method;.    var noop = function () {};.    var methods = [.   
     'assert', 'clear', 'count', 'debug', 'dir', 'dirxml', 'error',.  
      'exception', 'group', 'groupCollapsed', 'groupEnd', 'info', 'log
',.        'markTimeline', 'profile', 'profileEnd', 'table', 'time', '
timeEnd',.        'timeStamp', 'trace', 'warn'.    ];.    var length =
 methods.length;.    var console = (window.console = window.console ||
 {});..    while (length--) {.        method = methods[length];.. <<< skipped >>>

GET /?from=brow_e1_tableau&nugt=yabrowser-15.2.2214.3645 HTTP/1.1

Host: market.yandex.ru

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept: */*

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8

Cookie: yandexuid=2181954531429512744; ys=def_bro.0


HTTP/1.1 302 Found

Server: nginx

Date: Mon, 20 Apr 2015 06:54:24 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=120

Cache-Control: max-age=0, proxy-revalidate

Expires: Mon, 20 Apr 2015 06:54:24 GMT

Location: hXXp://market.yandex.ua/?from=brow_e1_tableau&nugt=yabrowser-15.2.2214.3645

X-Frame-Options: Deny

X-Powered-By: Zinger

Set-Cookie: uid=CmZNnlU0oqASDhhBBaL3Ag==; path=/
0..HTTP/1.1 302 Found..Server: nginx..Date: Mon, 20 Apr 2015 06:54:24 
GMT..Content-Type: text/html..Transfer-Encoding: chunked..Connection: 
keep-alive..Keep-Alive: timeout=120..Cache-Control: max-age=0, proxy-r
evalidate..Expires: Mon, 20 Apr 2015 06:54:24 GMT..Location: hXXp://ma
rket.yandex.ua/?from=brow_e1_tableau&nugt=yabrowser-15.2.2214.3645..X-
Frame-Options: Deny..X-Powered-By: Zinger..Set-Cookie: uid=CmZNnlU0oqA
SDhhBBaL3Ag==; path=/..0......

GET /assets/js/vendor/modernizr-2.6.2.min.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: videodownloader.ummy.net

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:51:30 GMT

Content-Type: application/x-javascript

Content-Length: 15414

Last-Modified: Tue, 13 May 2014 21:24:13 GMT

Connection: keep-alive

ETag: "53728d7d-3c36"

Accept-Ranges: bytes
/* Modernizr 2.6.2 (Custom Build) | MIT & BSD. * Build: hXXp://moderni
zr.com/download/#-fontface-backgroundsize-borderimage-borderradius-box
shadow-flexbox-hsla-multiplebgs-opacity-rgba-textshadow-cssanimations-
csscolumns-generatedcontent-cssgradients-cssreflections-csstransforms-
csstransforms3d-csstransitions-applicationcache-canvas-canvastext-drag
anddrop-hashchange-history-audio-video-indexeddb-input-inputtypes-loca
lstorage-postmessage-sessionstorage-websockets-websqldatabase-webworke
rs-geolocation-inlinesvg-smil-svg-svgclippaths-touch-webgl-shiv-mq-css
classes-addtest-prefixed-teststyles-testprop-testallprops-hasevent-pre
fixes-domprefixes-load. */.;window.Modernizr=function(a,b,c){function 
D(a){j.cssText=a}function E(a,b){return D(n.join(a ";") (b||""))}funct
ion F(a,b){return typeof a===b}function G(a,b){return!!~("" a).indexOf
(b)}function H(a,b){for(var d in a){var e=a[d];if(!G(e,"-")&&j[e]!==c)
return b=="pfx"?e:!0}return!1}function I(a,b,d){for(var e in a){var f=
b[a[e]];if(f!==c)return d===!1?a[e]:F(f,"function")?f.bind(d||b):f}ret
urn!1}function J(a,b,c){var d=a.charAt(0).toUpperCase() a.slice(1),e=(
a " " p.join(d " ") d).split(" ");return F(b,"string")||F(b,"undefined
")?H(e,b):(e=(a " " q.join(d " ") d).split(" "),I(e,b,c))}function K()
{e.input=function(c){for(var d=0,e=c.length;d<e;d  )u[c[d]]=c[d]in 
k;return u.list&&(u.list=!!b.createElement("datalist")&&!!a.HTMLDataLi
stElement),u}("autocomplete autofocus list placeholder max min multipl
e pattern required step".split(" ")),e.inputtypes=function(a){for(<<< skipped >>>

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 161

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=download&ea=insert&el=buffer&ev=1&cd=main
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:51:30 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 161

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=download&ea=insert&el=buffer&ev=1&cd=main
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:55:07 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 159

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=download&ea=insert&el=edit&ev=1&cd=main
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:52:40 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

GET /click/dtype=stred/pid=12/cid=72435/path=dwnldr/p=bm-partner-ru/cnt=0/dt=0/ct=0/rt=21/imp=0/* HTTP/1.1

User-Agent: curl/1.1

Host: clck.yandex.ru

Accept: *.*


HTTP/1.1 200 Ok

Content-Type: image/gif

Cache-Control: no-cache

Content-Length: 43

GIF89a.............!.......,...........L..;..

GET /ca.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.certum.pl


HTTP/1.1 200 OK

Date: Mon, 20 Apr 2015 06:52:18 GMT

Server: Apache

Last-Modified: Fri, 17 Apr 2015 16:30:44 GMT

ETag: "48032-187-1a10b500"

Accept-Ranges: bytes

Content-Length: 391

Connection: close

Content-Type: application/x-pkcs7-crl
0...0m0...*.H........0>1.0...U....PL1.0...U....Unizeto Sp. z o.o.1.
0...U....Certum CA..150416081634Z..160415081634Z0...*.H...............
........{....Q.q....{...|.OB.l..|......y.%...}kq)A>OaJ4p...._.....7
...{...6bA,..HM..r{W............N...0.7..f.].(....6....(..........a!,.
..J4n..<....C.(S..........s.....p...x..........;$@......./..HW...U(
i;.p...h7`.....4.|._...A.A&..zB.N..9................

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 159

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=download&ea=insert&el=edit&ev=1&cd=main
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:54:32 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.usertrust.com


HTTP/1.1 200 OK

Date: Mon, 20 Apr 2015 06:50:58 GMT

Server: Apache/2.2.22 (Debian)

Last-Modified: Sun, 19 Apr 2015 04:29:13 GMT

Expires: Thu, 23 Apr 2015 04:29:13 GMT

ETag: 98A3F7BA210A17F91115EDFB857C49ADDD034CBB

Cache-Control: max-age=250094,public,no-transform,must-revalidate

X-OCSP-Reponder-ID: h6edcaocsp7

Content-Length: 471

Connection: close

Content-Type: application/ocsp-response
0..........0..... .....0......0...0.........z4.&...&T....$.T...2015041
9042913Z0s0q0I0... ........|.fT...D.b&...e{.z.......z4.&...&T....$.T..
.'f.V.I....p...."....20150419042913Z....20150423042913Z0...*.H........
.....B...S(..5/^.=.LM.9..F.d.Y$&.y....'.t.Q8.b....7z....!q..mc..  .1.J
.........Z..#c.G..c..?.d.#.C\b.?.(..5FOG)..e%z.(D.]/.6..=}7....(G.L VZ
T#......W]`lI..Q...Y.q..?..y.....XyOb:....I..?N.t.i....co.....oX..G..*
.&.....uoWN.1...1.%:)....^.......u4.Xg..Hbu%...a.T...

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCFRqIchUgXeK HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCCm+FOP+yx5C HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com


HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Sat, 18 Apr 2015 22:20:22 GMT

Expires: Wed, 22 Apr 2015 22:20:22 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Cache-Control: public, max-age=345600

Age: 117071

Alternate-Protocol: 80:quic,p=1
0..........0..... .....0......0...0......J......h.v....b..Z./..2015041
8130515Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
.)......B....20150418130515Z....20150425130515Z0...*.H.............j..
......<...m...#xe...bY.D....a#2.H./...Y.%.b.........Y......D...y..&
lt;.....Z...%..P.'..x....z.....!.......^....J.h(....t......h....T....I
M....J^8..(r.. .....bQ..i....1...J?.?8Lv./...1KY\...&y2..F.a....H..gK.
@..V._j.SaC.8sY.d.I..(.....W.........t."..b.T....HTTP/1.1 200 OK..Cont
ent-Type: application/ocsp-response..Date: Sat, 18 Apr 2015 22:20:22 G
MT..Expires: Wed, 22 Apr 2015 22:20:22 GMT..Server: ocsp_responder..Co
ntent-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: S
AMEORIGIN..Cache-Control: public, max-age=345600..Age: 117071..Alterna
te-Protocol: 80:quic,p=1..0..........0..... .....0......0...0......J..
....h.v....b..Z./..20150418130515Z0k0i0A0... ..........j.....p.I.#z...
(~d..J......h.v....b..Z./..)......B....20150418130515Z....201504251305
15Z0...*.H.............j........<...m...#xe...bY.D....a#2.H./...Y.%
.b.........Y......D...y..<.....Z...%..P.'..x....z.....!.......^....
J.h(....t......h....T....IM....J^8..(r.. .....bQ..i....1...J?.?8Lv./..
.1KY\[email protected]._j.SaC.8sY.d.I..(.....W.........t."..b.
T......<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRi82PVYYKWGJWdgVNyePy5kYTdqQQUX5r1blzMzHSa1N197z/b7EyALt0CEA7P9DjI/r81bgTYapgbGlA= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ts-ocsp.ws.symantec.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1508

content-transfer-encoding: binary

Cache-Control: max-age=390194, public, no-transform, must-revalidate

Last-Modified: Fri, 17 Apr 2015 19:14:48 GMT

Expires: Fri, 24 Apr 2015 19:14:48 GMT

Date: Mon, 20 Apr 2015 06:52:14 GMT

Connection: keep-alive
0..........0..... .....0......0...0......s...3f[.u....&...%.O..2015041
7191448Z0s0q0I0... ........b.c.a......Srx........_..n\..t...}.?..L....
....8...5n..j...P....20150417191448Z....20150424191448Z0...*.H........
.....5.xO,Ue.G...#[email protected])k%..3...H.'.e.U..p.Pw
n....H....$.$...|Z(.x...:....s]A.,.....9.7.....Uv..j..hnE......>K..
.}G8[..*.}.......^......U.......}....K7..O....0..;y..5M......K........
....\....7.....$..a7=...D..._...p..M..f.i.j.8 .&.]...<....0...0...0
..........hWi=...$.>./C.a.0...*.H........0^1.0...U....US1.0...U....
Symantec Corporation100...U...'Symantec Time Stamping Services CA - G2
0...150305000000Z..150603235959Z0m1.0...U....US1.0...U....Symantec Cor
poration1?0=..U...6Symantec Time Stamping Services CA - G2 OCSP Respon
der0.."0...*.H.............0..........].A.L..or....j..k..k...{k..]\.ss
".(...k...X....Ae.H.....H.D...c, .>(..Q.N..h.3;. ..I...C..K.#*...Lh
*...p........s .k..x.....5.{A....s.3.f.2}....q..........u.B.P....\.&.J
s..{..;:r.....n.>..o.6.4J;..2.|C..N.^.*.@&;l....s.7.a.)..I..-.,.='.
 ...=a.... ..*...W........0..0... .....0......0"..U....0...0.1.0...U..
..TGV-B-32580...U.#..0..._..n\..t...}.?..L...0...U......s...3f[.u....&
...%.O0...U.......0.0...U.%..0... .......0...U...........0...*.H......
[email protected].[C\..K~..&...C..._......q.z.....".i.8gG
(......q..3.,85: %.p.....{Q!.-n....C'..F.....:.[.g......Y^y.....9.....
..z[Ae.g........c.o.... ..{>.t...}..e.p/.a..-..3...m..w......i|.G..
.".;..n..<.......... ...ZL&..8.o...........^3.ud...qc.....<<< skipped >>>

HEAD /download.cdn.yandex.net/bm/version.rss HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

User-Agent: Microsoft BITS/7.5

Host: cache-kiev02.cdn.yandex.net


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Mon, 20 Apr 2015 06:52:44 GMT

Content-Type: application/rss xml

Content-Length: 4845

Connection: keep-alive

ETag: "3807180900"

Last-Modified: Wed, 08 Apr 2015 12:09:52 GMT

Accept-Ranges: bytes

....

GET /download.cdn.yandex.net/bm/version.rss HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Wed, 08 Apr 2015 12:09:52 GMT

User-Agent: Microsoft BITS/7.5

Host: cache-kiev02.cdn.yandex.net


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Mon, 20 Apr 2015 06:52:44 GMT

Content-Type: application/rss xml

Content-Length: 4845

Connection: keep-alive

ETag: "3605836950"

Last-Modified: Wed, 08 Apr 2015 12:09:52 GMT

Accept-Ranges: bytes
<?xml version="1.0" encoding="windows-1251"?>..<rss xmlns:ver
sion="hXXp://xml.yandex.ru/rss/versionmodule" version="2.0">..   &l
t;channel>..      <title>........ .........</title>..  
    <link>hXXp://VVV.yandex.ru/</link>..      <descript
ion>........ .........</description>..      <managingEdito
r>[email protected]</managingEditor>..      <item>..
         <title>........ .........</title>..         <l
ink>hXXp://VVV.yandex.ru/</link>..         <description>
;</description>..         <pubDate>Fri, 03 Apr 2015 12:00:
00 GMT</pubDate>..         <guid>hXXp://downloader.yandex.
net/yandex-pack/bm/BrowserManagerInstaller-ru.exe</guid>..      
   <version:distargs>/quiet</version:distargs>..         &
lt;version:nick>bm</version:nick>..         <version:dists
ize>4087224</version:distsize>..         <version:platform
>winnt</version:platform>..         <version:version>2.
1.2.577</version:version>..    . <version:status>critical&
lt;/version:status>..    . <version:uac_dlg>hide</version:
uac_dlg>..         <update:target>1.3.1.502</update:target
>..         <update:guid>hXXp://downloader.yandex.net/yandex-
pack/bm/BrowserManagerInstaller-ru-bs.exe</update:guid>..       
  <update:nick>bm</update:nick>..         <update:dists
ize>4106800</update:distsize>..         <update:distar<<< skipped >>>

GET /assets/css/style.css?v7 HTTP/1.1

Accept: text/css

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: videodownloader.ummy.net

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:51:30 GMT

Content-Type: text/css

Content-Length: 72192

Last-Modified: Tue, 14 Apr 2015 12:56:34 GMT

Connection: keep-alive

ETag: "552d0e82-11a00"

Accept-Ranges: bytes
/*! normalize.css v1.1.3 | MIT License | git.io/normalize */./* ======
====================================================================. 
  HTML5 display definitions.   =======================================
=================================== */./**. * Correct `block` display 
not defined in IE 6/7/8/9 and Firefox 3.. */.article,.aside,.details,.
figcaption,.figure,.footer,.header,.hgroup,.main,.nav,.section,.summar
y {.  display: block;.}./**. * Correct `inline-block` display not defi
ned in IE 6/7/8/9 and Firefox 3.. */.audio,.canvas,.video {.  display:
 inline-block;.  *display: inline;.  *zoom: 1;.}./**. * Prevent modern
 browsers from displaying `audio` without controls.. * Remove excess h
eight in iOS 5 devices.. */.audio:not([controls]) {.  display: none;. 
 height: 0;.}./**. * Address styling not present in IE 7/8/9, Firefox 
3, and Safari 4.. * Known issue: no IE 6 support.. */.[hidden] {.  dis
play: none;.}./* =====================================================
=====================.   Base.   =====================================
===================================== */./**. * 1. Correct text resizi
ng oddly in IE 6/7 when body `font-size` is set using. *    `em` units
.. * 2. Prevent iOS text size adjust after orientation change, without
 disabling. *    user zoom.. */.html {.  font-size: 100%;.  /* 1 */.  
-ms-text-size-adjust: 100%;.  /* 2 */.  -webkit-text-size-adjust: 100%
;.  /* 2 */.}./**. * Address `font-family` inconsistency between `text
area` and other form. * elements.. */.html,.button,.input,.select,<<< skipped >>>

GET /assets/img/bg.jpg HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: videodownloader.ummy.net

DNT: 1

Connection: Keep-Alive

Cookie: _ga=GA1.2.1715774948.1429512691; _gat=1


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:51:31 GMT

Content-Type: image/jpeg

Content-Length: 23473

Last-Modified: Tue, 13 May 2014 21:24:09 GMT

Connection: keep-alive

ETag: "53728d79-5bb1"

Accept-Ranges: bytes
......Exif..II*.................Ducky.......<..... hXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-
c011 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="ht
tp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.
0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" 
xmpMM:InstanceID="xmp.iid:36AB10ADD1DE11E3B06FEC0FB9087FCB" xmpMM:Docu
mentID="xmp.did:36AB10AED1DE11E3B06FEC0FB9087FCB"> <xmpMM:Derive
dFrom stRef:instanceID="xmp.iid:36AB10ABD1DE11E3B06FEC0FB9087FCB" stRe
f:documentID="xmp.did:36AB10ACD1DE11E3B06FEC0FB9087FCB"/> </rdf:
Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="
r"?>....Adobe.d....................................................
......................................................................
......................................................................
.......................................1!A.Q".a.2q....B..rRb.#...3C...
...................!A.1Q..a............?..s.|.,....R...U...@A....@[email protected]
.`E.KZ.X.d.[[email protected]{k...WL..Zb..6o./o...dt.kK..1.xK...
".(.-h.5......e..........y...xK:...KV..r....(.......(...P.A@@..B......
T.j.k?OE...|.......U..>?.......c.7......@... .".&.Np...6..|m.?....{
.]m.... ..n..LV~..f..G$......o...w.V.t.Y i.....K:.../.9....g...R..<<< skipped >>>

GET /assets/icons/favicon.ico HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Host: videodownloader.ummy.net

DNT: 1

Connection: Keep-Alive

Cookie: _ga=GA1.2.1715774948.1429512691; _gat=1


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:51:33 GMT

Content-Type: image/x-icon

Content-Length: 1150

Last-Modified: Tue, 13 May 2014 21:24:07 GMT

Connection: keep-alive

ETag: "53728d77-47e"

Accept-Ranges: bytes

............ .h.......(....... ..... .................................
......................................................................
.............!...#...#...!...............................R............
.......................................S.......W....R0..?...;...8...7.
..5...5...7...8...;...?...Q0.........X....U8..,......./.../.......W:..
W:....../.../.......,...U8..........<... ...,...,... ...ZA.........
.ZA.. ...,...,... ...<...........2...(...)...(...T>.............
.....T>..(...)...(...2...........-...%...&...&...@*...w...........x
..@*..&...&...%...-...........*..."...#...#.......^Q..........^Q......
#...#..."...*...........*....... ... .......`V..........`V...... ... .
......*...........0"..................`X..........`X..................
0"..........JD..................6...ok..ok..6...................KD....
.....X....C?..)#..#... ................... ...#...)#[email protected]....
...S...................................................R..............
.................!...#...#...!........................................
......................................................................
..........................................HTTP/1.1 200 OK..Server: ngi
nx..Date: Mon, 20 Apr 2015 06:51:33 GMT..Content-Type: image/x-icon..C
ontent-Length: 1150..Last-Modified: Tue, 13 May 2014 21:24:07 GMT..Con
nection: keep-alive..ETag: "53728d77-47e"..Accept-Ranges: bytes.......
....... .h.......(....... ..... ......................................
..................................................................

<<< skipped >>>

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 159

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=download&ea=insert&el=edit&ev=1&cd=main
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:52:53 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

HEAD /status.xml?ui={128AC281-D5D9-496E-964F-56634EB3AD42}&iyasoft=barie&iclid=2148271-100&iqs=1&ihp=1&version=8.7.0.3110&yst=0&mg=0&ms=0&mqs=0&mhp=0 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

User-Agent: Microsoft BITS/7.5

Host: soft.export.yandex.ru


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Mon, 20 Apr 2015 06:52:08 GMT

Content-Type: text/xml

Content-Length: 64

Last-Modified: Wed, 19 Nov 2014 09:40:42 GMT

Connection: keep-alive

Keep-Alive: timeout=120

Accept-Ranges: bytes
....


GET /status.xml?ui={128AC281-D5D9-496E-964F-56634EB3AD42}&iyasoft=barie&iclid=2148271-100&iqs=1&ihp=1&version=8.7.0.3110&yst=0&mg=0&ms=0&mqs=0&mhp=0 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Wed, 19 Nov 2014 09:40:42 GMT

User-Agent: Microsoft BITS/7.5

Host: soft.export.yandex.ru


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Mon, 20 Apr 2015 06:52:08 GMT

Content-Type: text/xml

Content-Length: 64

Last-Modified: Wed, 19 Nov 2014 09:40:42 GMT

Connection: keep-alive

Keep-Alive: timeout=120

Accept-Ranges: bytes
<?xml version="1.0" encoding="windows-1251"?>.<page>.ok.&l
t;/page>.HTTP/1.1 200 OK..Server: nginx/1.4.7..Date: Mon, 20 Apr 20
15 06:52:08 GMT..Content-Type: text/xml..Content-Length: 64..Last-Modi
fied: Wed, 19 Nov 2014 09:40:42 GMT..Connection: keep-alive..Keep-Aliv
e: timeout=120..Accept-Ranges: bytes..<?xml version="1.0" encoding=
"windows-1251"?>.<page>.ok.</page>.....


HEAD /status.xml?yasoft=yabrowser&clid=2148263-100&ui={128AC281-D5D9-496E-964F-56634EB3AD42}&ver=40.0.2214.3645&os=winnt&stat=install&bitness=64&brandID=yandex&eid=&uv=1.1.0.1801&fd=20.04.2015 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

User-Agent: Microsoft BITS/7.5

Host: soft.export.yandex.ru


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Mon, 20 Apr 2015 06:52:22 GMT

Content-Type: text/xml

Content-Length: 64

Last-Modified: Wed, 19 Nov 2014 09:40:42 GMT

Connection: keep-alive

Keep-Alive: timeout=120

Accept-Ranges: bytes
....


GET /status.xml?yasoft=yabrowser&clid=2148263-100&ui={128AC281-D5D9-496E-964F-56634EB3AD42}&ver=40.0.2214.3645&os=winnt&stat=install&bitness=64&brandID=yandex&eid=&uv=1.1.0.1801&fd=20.04.2015 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Wed, 19 Nov 2014 09:40:42 GMT

User-Agent: Microsoft BITS/7.5

Host: soft.export.yandex.ru


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Mon, 20 Apr 2015 06:52:22 GMT

Content-Type: text/xml

Content-Length: 64

Last-Modified: Wed, 19 Nov 2014 09:40:42 GMT

Connection: keep-alive

Keep-Alive: timeout=120

Accept-Ranges: bytes
<?xml version="1.0" encoding="windows-1251"?>.<page>.ok.&l
t;/page>.HTTP/1.1 200 OK..Server: nginx/1.4.7..Date: Mon, 20 Apr 20
15 06:52:22 GMT..Content-Type: text/xml..Content-Length: 64..Last-Modi
fied: Wed, 19 Nov 2014 09:40:42 GMT..Connection: keep-alive..Keep-Aliv
e: timeout=120..Accept-Ranges: bytes..<?xml version="1.0" encoding=
"windows-1251"?>.<page>.ok.</page>.....


HEAD /status.xml?ui={128AC281-D5D9-496E-964F-56634EB3AD42}&iyasoft=bm&iclid=2021616&icclid=2157774-100&iqs=0&ihp=0&version=2.1.2.577 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

User-Agent: Microsoft BITS/7.5

Host: soft.export.yandex.ru


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Mon, 20 Apr 2015 06:52:31 GMT

Content-Type: text/xml

Content-Length: 64

Last-Modified: Wed, 19 Nov 2014 09:40:42 GMT

Connection: keep-alive

Keep-Alive: timeout=120

Accept-Ranges: bytes
....


GET /status.xml?ui={128AC281-D5D9-496E-964F-56634EB3AD42}&iyasoft=bm&iclid=2021616&icclid=2157774-100&iqs=0&ihp=0&version=2.1.2.577 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Wed, 19 Nov 2014 09:40:42 GMT

User-Agent: Microsoft BITS/7.5

Host: soft.export.yandex.ru


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Mon, 20 Apr 2015 06:52:31 GMT

Content-Type: text/xml

Content-Length: 64

Last-Modified: Wed, 19 Nov 2014 09:40:42 GMT

Connection: keep-alive

Keep-Alive: timeout=120

Accept-Ranges: bytes
<?xml version="1.0" encoding="windows-1251"?>.<page>.ok.&l
t;/page>.HTTP/1.1 200 OK..Server: nginx/1.4.7..Date: Mon, 20 Apr 20
15 06:52:31 GMT..Content-Type: text/xml..Content-Length: 64..Last-Modi
fied: Wed, 19 Nov 2014 09:40:42 GMT..Connection: keep-alive..Keep-Aliv
e: timeout=120..Accept-Ranges: bytes..<?xml version="1.0" encoding=
"windows-1251"?>.<page>.ok.</page>.....


HEAD /status.xml?yasoft=bm&clid=2157774-100&ui={128AC281-D5D9-496E-964F-56634EB3AD42}&ver=2.1.2.577&os=winnt&stat=install&bdata=1*1*1*0-0*4*1*0-1*0*8*1-0*0*8*1-1*1*9*0-0*0*9*0-&brcnt=3&cfg=231-0&dnet=4.0&ie=1&lcl=en&lcl2=1033&sdh=6b170a55bcc1020f3d4ae734611893f9&uac=0&uv=1.1.0.1801&fd=20.04.2015 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

User-Agent: Microsoft BITS/7.5

Host: soft.export.yandex.ru


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Mon, 20 Apr 2015 06:52:44 GMT

Content-Type: text/xml

Content-Length: 64

Last-Modified: Wed, 19 Nov 2014 09:40:42 GMT

Connection: keep-alive

Keep-Alive: timeout=120

Accept-Ranges: bytes
....


GET /status.xml?yasoft=bm&clid=2157774-100&ui={128AC281-D5D9-496E-964F-56634EB3AD42}&ver=2.1.2.577&os=winnt&stat=install&bdata=1*1*1*0-0*4*1*0-1*0*8*1-0*0*8*1-1*1*9*0-0*0*9*0-&brcnt=3&cfg=231-0&dnet=4.0&ie=1&lcl=en&lcl2=1033&sdh=6b170a55bcc1020f3d4ae734611893f9&uac=0&uv=1.1.0.1801&fd=20.04.2015 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Wed, 19 Nov 2014 09:40:42 GMT

User-Agent: Microsoft BITS/7.5

Host: soft.export.yandex.ru


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Mon, 20 Apr 2015 06:52:44 GMT

Content-Type: text/xml

Content-Length: 64

Last-Modified: Wed, 19 Nov 2014 09:40:42 GMT

Connection: keep-alive

Keep-Alive: timeout=120

Accept-Ranges: bytes
<?xml version="1.0" encoding="windows-1251"?>.<page>.ok.&l
t;/page>.HTTP/1.1 200 OK..Server: nginx/1.4.7..Date: Mon, 20 Apr 20
15 06:52:44 GMT..Content-Type: text/xml..Content-Length: 64..Last-Modi
fied: Wed, 19 Nov 2014 09:40:42 GMT..Connection: keep-alive..Keep-Aliv
e: timeout=120..Accept-Ranges: bytes..<?xml version="1.0" encoding=
"windows-1251"?>.<page>.ok.</page>...

POST /collect HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0

Host: google-analytics.com

Content-Length: 148

Cache-Control: no-cache

v=1&tid=UA-51606522-3&cid=d16fa102-3a03-4493-a49b-561daf7f9ecc&an=uvd_yandex&av=1.3.0.3&t=event&ec=config&ea=isadmin&el=yes&ev=1&cd=license&aiid=100
HTTP/1.1 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:50:59 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1

GIF89a.............,...........D..;HTTP/1.1 200 OK..Pragma: no-cache..
Expires: Mon, 07 Aug 1995 23:30:00 GMT..Cache-Control: private, no-cac
he, no-cache=Set-Cookie, proxy-revalidate..Access-Control-Allow-Origin
: *..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-Content-Type-Opti
ons: nosniff..Content-Type: image/gif..Date: Mon, 20 Apr 2015 06:50:59
 GMT..Server: Golfe2..Content-Length: 35..Alternate-Protocol: 80:quic,
p=1..GIF89a.............,...........D..;....

POST /collect HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0

Host: google-analytics.com

Content-Length: 125

Cache-Control: no-cache

v=1&tid=UA-51606522-3&cid=d16fa102-3a03-4493-a49b-561daf7f9ecc&t=event&ec=offers&ea=accept&el=yandex elements&ev=1&cd=offer
HTTP/1.1 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:51:18 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1

GIF89a.............,...........D..;....

POST /collect HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0

Host: google-analytics.com

Content-Length: 125

Cache-Control: no-cache

v=1&tid=UA-51606522-3&cid=d16fa102-3a03-4493-a49b-561daf7f9ecc&t=event&ec=offers&ea=accept&el=yandex homepage&ev=1&cd=offer
HTTP/1.1 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:51:18 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1

GIF89a.............,...........D..;....

POST /collect HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0

Host: google-analytics.com

Content-Length: 124

Cache-Control: no-cache

v=1&tid=UA-51606522-3&cid=d16fa102-3a03-4493-a49b-561daf7f9ecc&t=event&ec=offers&ea=accept&el=yandex browser&ev=1&cd=offer
HTTP/1.1 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:51:18 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1

GIF89a.............,...........D..;HTTP/1.1 200 OK..Pragma: no-cache..
Expires: Mon, 07 Aug 1995 23:30:00 GMT..Cache-Control: private, no-cac
he, no-cache=Set-Cookie, proxy-revalidate..Access-Control-Allow-Origin
: *..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-Content-Type-Opti
ons: nosniff..Content-Type: image/gif..Date: Mon, 20 Apr 2015 06:51:18
 GMT..Server: Golfe2..Content-Length: 35..Alternate-Protocol: 80:quic,
p=1..GIF89a.............,...........D..;....

POST /collect HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0

Host: google-analytics.com

Content-Length: 150

Cache-Control: no-cache

v=1&tid=UA-51606522-3&cid=d16fa102-3a03-4493-a49b-561daf7f9ecc&an=uvd_yandex&av=1.3.0.3&t=event&ec=config&ea=regproto&el=yes&ev=1&cd=finished&aiid=100
HTTP/1.1 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:51:29 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1

GIF89a.............,...........D..;HTTP/1.1 200 OK..Pragma: no-cache..
Expires: Mon, 07 Aug 1995 23:30:00 GMT..Cache-Control: private, no-cac
he, no-cache=Set-Cookie, proxy-revalidate..Access-Control-Allow-Origin
: *..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-Content-Type-Opti
ons: nosniff..Content-Type: image/gif..Date: Mon, 20 Apr 2015 06:51:29
 GMT..Server: Golfe2..Content-Length: 35..Alternate-Protocol: 80:quic,
p=1..GIF89a.............,...........D..;..

GET /analytics.js HTTP/1.1

Host: VVV.google-analytics.com

Connection: keep-alive

Accept: */*

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8


HTTP/1.1 200 OK

Date: Mon, 20 Apr 2015 06:32:23 GMT

Expires: Mon, 20 Apr 2015 08:32:23 GMT

Last-Modified: Wed, 08 Apr 2015 20:30:30 GMT

X-Content-Type-Options: nosniff

Content-Type: text/javascript

Vary: Accept-Encoding

Content-Encoding: gzip

Server: Golfe2

Content-Length: 11178

Age: 1205

Cache-Control: public, max-age=7200

Alternate-Protocol: 80:quic,p=1
...........}{W.....|.....'.$@/....w..m.=.].$BJHR..R.......l.2.9.}...y.
.%..t...H...(...evG....X...v...&.....8.....B..=...}.;oT(E.]e&.e.;2>
..q..W..[......2....Z.2.gIp&su...2.&.,..,.Tfdn....u...N...w.<......
T.o...3.....p@..%.p.$F..........M6..,.....O..D..D.2C.O..l...xH-.T....S
.Z*..sJN&CjfB.gS.u.]PbBM.fJc8A......L....%.$ .._....Jhs,g.....(.<..
..i.f.....<[email protected]*J.0...e=.Fg...9
..b,..../.q...I.c<..v............X..*).......4.H..u.7o.U.....hI...%
../c7TR.i..,...t{"M..t.U....z=r_iou5..Q|<.S.t.~.Kn|.kno.....h..%}3.
ZH..G..<}.....W......}w....O..|...U...~...F...l.../~].n476.........
A.Nd...h......v....A........s....!.<"/..s.LQj.R...3......>.T.j .
.Fm...Z.."...z..2..m..K..4.&..E.D..H(B........vU/[email protected] t..Q....n...
V.}.V.>.......%n,B.\.f3.....{{|L......q.....N....U8.o..||......Z(.7
.?.5t.|<.w..D...5.C....C1St........6.`.7....Hh.Q...L..#;..V...o....
/...........ZA0..bu.`{...cpFch....z.....fNN3.H..t.f.z....B...P.;....)`
.....x.z............Jh:.......O.....Ls32Y.6(L......Z...R.p....g....S..
\.#.&..q<..sq!o......"i...$.pR..@....?..t9.!..#E.......AQ1q.:XhL'{.
...L.]...}..e..F.....(...CL.$....)3!.C....k...I.O.-..{.G....\.ZX*K....
.g...b.....q...z.....sq.t....L...MhZ...wZG.G....Db.:..mC."X_.tm1..[..T
.^......7B.$.TP.A_#.........K? ...}O.>...K...P..D.G...F....{...O../
....$N%.....g.j.Z.7E..3D...n."u...6M.dE}:#..?......Y.}PI.....$....pj..
f3\BR.-T.!.....c.vj..D(..q.a`Js..g......Yq. .t'.L.c.u..u..i..j..-.o.j7
T..f.5..F.4..<....K.Spt.........GK..`%*jk...H1...c......t.=.\.8<<< skipped >>>

GET /r/collect?v=1&_v=j35&a=1421518628&t=pageview&_s=1&dl=http://videodownloader.ummy.net/congratulations.html&ul=ru&de=UTF-8&dt=Congratulations!&sd=24-bit&sr=1716x901&vp=1270x717&je=1&fl=16.0 r0&_u=AEAAAEABI~&jid=63923678&cid=1652772922.1429512749&tid=UA-51606522-5&_r=1&z=1943805879 HTTP/1.1

Host: VVV.google-analytics.com

Connection: keep-alive

Accept: image/webp,*/*;q=0.8

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8


HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Date: Mon, 20 Apr 2015 06:52:29 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, no-store, must-revalidate

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1

GIF89a.............,...........D..;HTTP/1.1 200 OK..Access-Control-All
ow-Origin: *..Date: Mon, 20 Apr 2015 06:52:29 GMT..Pragma: no-cache..E
xpires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, no-sto
re, must-revalidate..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-C
ontent-Type-Options: nosniff..Content-Type: image/gif..Server: Golfe2.
.Content-Length: 35..Alternate-Protocol: 80:quic,p=1..GIF89a..........
...,...........D..;....

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 161

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=download&ea=insert&el=buffer&ev=1&cd=main
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:55:45 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

GET /msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?a7d080bfbd34551c HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Tue, 24 Mar 2015 16:17:41 GMT

If-None-Match: "804047d4e66d01:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com


HTTP/1.1 304 Not Modified

Content-Type: application/octet-stream

Last-Modified: Tue, 24 Mar 2015 16:17:41 GMT

ETag: "804047d4e66d01:0"

Cache-Control: max-age=86400

Date: Mon, 20 Apr 2015 06:50:58 GMT

Connection: keep-alive

HTTP/1.1 304 Not Modified..Content-Type: application/octet-stream..Las
t-Modified: Tue, 24 Mar 2015 16:17:41 GMT..ETag: "804047d4e66d01:0"..C
ache-Control: max-age=86400..Date: Mon, 20 Apr 2015 06:50:58 GMT..Conn
ection: keep-alive..

GET /hit?t26.3;r;s1716*901*24;uhttp://videodownloader.ummy.net/congratulations.html;0.23587389150634408 HTTP/1.1

Host: counter.yadro.ru

Connection: keep-alive

Accept: image/webp,*/*;q=0.8

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8


HTTP/1.1 302 Moved Temporarily

Date: Mon, 20 Apr 2015 06:52:31 GMT

Server: 0W/0.8c

Content-Type: text/html

Location: hXXp://counter.yadro.ru/hit?q;t26.3;r;s1716*901*24;uhttp://videodownloader.ummy.net/congratulations.html;0.23587389150634408

Content-Length: 32

Expires: Sat, 19 Apr 2014 21:00:00 GMT

Pragma: no-cache

Cache-control: no-cache

P3P: policyref="/w3c/p3p.xml", CP="UNI"

Set-Cookie: FTID=1LDA8l1DiCLK1LDA8l; path=/; expires=Mon, 18 Apr 2016 21:00:00 GMT; domain=.yadro.ru
<html><body>Moved</body></html>.HTTP/1.1 302 M
oved Temporarily..Date: Mon, 20 Apr 2015 06:52:31 GMT..Server: 0W/0.8c
..Content-Type: text/html..Location: hXXp://counter.yadro.ru/hit?q;t26
.3;r;s1716*901*24;uhttp://videodownloader.ummy.net/congratulations.h
tml;0.23587389150634408..Content-Length: 32..Expires: Sat, 19 Apr 2014
 21:00:00 GMT..Pragma: no-cache..Cache-control: no-cache..P3P: policyr
ef="/w3c/p3p.xml", CP="UNI"..Set-Cookie: FTID=1LDA8l1DiCLK1LDA8l; path
=/; expires=Mon, 18 Apr 2016 21:00:00 GMT; domain=.yadro.ru..<html&
gt;<body>Moved</body></html>.....

GET /instant/config HTTP/1.1

Host: VVV.yandex.ru

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept: */*

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8

Cookie: ys=def_bro.0


HTTP/1.1 200 Ok

Server: nginx

Date: Mon, 20 Apr 2015 06:52:23 GMT

Content-Type: application/json; charset=UTF-8

Transfer-Encoding: chunked

Connection: close

Cache-Control: no-cache,no-store,max-age=0,must-revalidate

Expires: Mon, 20 Apr 2015 06:52:24 GMT

Last-Modified: Mon, 20 Apr 2015 06:52:24 GMT

P3P: policyref="/w3c/p3p.xml", CP="NON DSP ADM DEV PSD IVDo OUR IND STP PHY PRE NAV UNI"

Set-Cookie: ys=def_bro.0; Domain=.yandex.ru; Path=/

Set-Cookie: yandexuid=2181954531429512744; Expires=Thu, 17-Apr-2025 06:52:23 GMT; Domain=.yandex.ru; Path=/

X-XRDS-Location: hXXp://openid.yandex.ru/server_xrds/

Content-Encoding: gzip
[email protected].#(..zu.` uK..O.K{..~.OW.....N3. X
.Z.}.`. 2..RJ}.`../..,...{..r7.`~.g....< ....I.x.#)......^.u.:...9.
p.......d..iU..>......q...q}.Xn...l.?vo..hr6b....uUl.....Y.'N......
e.....p......0..

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 159

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=download&ea=insert&el=edit&ev=1&cd=main
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:51:53 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 161

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=showtips&ea=change&el=no&ev=1&cd=tipofday
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:51:30 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

GET /favicon/some.nonexistent HTTP/1.1

Host: favicon.yandex.net

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept: */*

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8


HTTP/1.1 200 OK

Content-Type: image/png

Date: Mon, 20 Apr 2015 06:52:30 GMT

Cache-Control: max-age=691200

access-control-allow-origin: *

Content-Length: 73

[email protected] .....IEND.
B`.HTTP/1.1 200 OK..Content-Type: image/png..Date: Mon, 20 Apr 2015 06
:52:30 GMT..Cache-Control: max-age=691200..access-control-allow-origin
: *..Content-Length: 73...PNG........IHDR.....................IDATx.bb
[email protected] .....IEND.B`.....

GET /favicon/browser.yandex.ru HTTP/1.1

Host: favicon.yandex.net

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept: */*

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8


HTTP/1.1 200 OK

Content-Type: image/png

Date: Mon, 20 Apr 2015 06:52:30 GMT

Cache-Control: max-age=691200

access-control-allow-origin: *

Content-Length: 698
.PNG........IHDR................a....IDATx.tSOO.o..]h...Hc.`....1X....
3....37. z2..F..*.....".ViJj1)...........3.v..g3.w.}.g.wfv...u.......~
..>R.eGU..X,.."^...8.K...d.p......z....ccc.....j}..k...N..:..l6.2M.
`..?*.7h ......:[email protected]{..3..C...`)$.4e{.7..?...p.{).....a.7z.V
...e..i7U....nS"....w$U...d..(..Q". ....4.....oH...E.T*....z.l4.......
.....F..L..,.......}`,\I8.R....aI...NOD.....3..?s..X..,uh.........E.j5
.hC./r..........JD..&:"...F.O.7)...]...!..p.~N.!....................[B
.!.w.....!....."I.#...3...j..8~8y.......U.8..c.#..q....\M...J..$..W...
i....'K[.}~~.znn.k4..BaC.c.6.A...rv....~.m.c..[.X..._...r.........;;lh
ZD...|..?.F....{...OF....&&...:==F.5.kyvvv.".W.....Z.B.........IEND.B`
.HTTP/1.1 200 OK..Content-Type: image/png..Date: Mon, 20 Apr 2015 06:5
2:30 GMT..Cache-Control: max-age=691200..access-control-allow-origin: 
*..Content-Length: 698...PNG........IHDR................a....IDATx.tSO
O.o..]h...Hc.`....1X....3....37. z2..F..*.....".ViJj1)...........3.v..
g3.w.}.g.wfv...u.......~..>R.eGU..X,.."^...8.K...d.p......z....ccc.
....j}..k...N..:..l6.2M.`..?*.7h ......:[email protected]{..3..C...`)$.4e
{.7..?...p.{).....a.7z.V...e..i7U....nS"....w$U...d..(..Q". ....4.....
oH...E.T*....z.l4............F..L..,.......}`,\I8.R....aI...NOD.....3.
.?s..X..,uh.........E.j5.hC./r..........JD..&:"...F.O.7)...]...!..p.~N
.!....................[B.!.w.....!....."I.#...3...j..8~8y.......U.8..c
.#..q....\M...J..$..W...i....'K[.}~~.znn.k4..BaC.c.6.A...rv....~.m.c..
[.X..._...r.........;;lhZD...|..?.F....{...OF....&&...:==F.5.kyvvv<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69+Aj36pvE8hI6t7jiY7NkyMtQCEC58h8wOk0pS/pT9HLfNNK8= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.comodoca.com


HTTP/1.1 200 OK

Date: Mon, 20 Apr 2015 06:50:58 GMT

Server: Apache/2.2.22 (Debian)

Last-Modified: Sun, 19 Apr 2015 04:29:13 GMT

Expires: Thu, 23 Apr 2015 04:29:13 GMT

ETag: 05D4A9930A8803CADAB8FC67829E6A6E4BBF7B0A

Cache-Control: max-age=250094,public,no-transform,must-revalidate

X-OCSP-Reponder-ID: h6edcaocsp7

Content-Length: 727

Connection: close

Content-Type: application/ocsp-response
0..........0..... .....0......0...0........~.=...<....8...22...2015
0419042913Z0s0q0I0... ........^..hl\.....W....r.=.....~.=...<....8.
..22....|....JR......4.....20150419042913Z....20150423042913Z0...*.H..
...........ua..:T..N{.\.$n.Dm..=.....1.../...M.ra....3.[...v..9.3i!^..
0cH'..|.6.....RI....J ..syJP.C[.....7...x.'.......(J.....[...n.8..&...
.s..(x..a..M...h........o.y.....#..k..9.....L...:L....i=....t...4..."W
d.~B...sE...'..... .u...i_.Bi.k........H....g.s.."...._.An..q...]^...'
....V..Q.....V.....;.g..U.)..w._{... ..v..[.......)....;.q&.w.N......S
3.y...C.._g..C<I.2P..d.6.A..o.h..B.T..>...)..r..*,wb...y.n......
x.....A.P.R.....Vj$h."\...BX.T`.......Vl$.6.p.........nf....J...2X..&l
t;T\Z.....h...Z....{..?7.-Hm.'.B.&.1.H.T~0..

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 154

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=config&ea=proxy&el=no&ev=1&cd=main
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:51:30 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

GET /congratulations.html HTTP/1.1

Host: videodownloader.ummy.net

Connection: keep-alive

Accept: text/html,application/xhtml xml,application/xml;q=0.9,image/webp,*/*;q=0.8

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:52:28 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.23

Set-Cookie: PHPSESSID=to4plqcmtji307oejtml2ciea0; expires=Mon, 27-Apr-2015 06:52:28 GMT; path=/ru/; HttpOnly

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Set-Cookie: firstVisit=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT

Content-Encoding: gzip
aee...............n.8.y..?.B..&......X.z....m...-...DK.eR%)_........~.
.R.-......pd.. ...(n..<....oo^.T..~.......e..|.....\=....K.Z.{7.0&l
t;J. o.....G..W..tx.y nuV.p....!lv.'.b....zC.yk..$....y...Q.b!...B.=.y
c9U*....NB.W.......X.AF,.q...../B.'.N...H..g......3......)..Ih.DF.....
..~.M.mD.S.b..3...T.ahi...`Bc.c>e..1.~1..}FT`..Y..%...Uc>..J..q.
..(.......H......Q6B.d..3E....J..a...(....E..?c.'......m.o.%C.Ce(.(2.t
..t)...D.... Z......P)4.-.........,."F....".8....k.R.....qB..W.J..8oD.
@.d0,[email protected]<F.x..m.:.',.....w.PL.!.....y..Oij..
........hs...K.'..qr6;9k6c......s.X....?..........@...].k.....p..p...4
dH.T.y....^B..&.Jt}.........a.Ywv.=.X...1.?....{:;;=.X.{....CS.R..$...
< .U.....3<G.`....z.....>..Ya.UC..7;...|.5...chCq-;.~...,..:.
-....E....'ze...$#O....F....D..........s{..w?....?.........B...I1.&@..
.f1.;.22E..T9......../2.....[c.&DU .t..'..........c9gQ..oRDar1.s,.....
O.$B=%C...Mj}v.)eP..1..>m....m..t:..c...6......F.f.m...J.c.:.mdCGw.
9=>=.v.......O.I..5,....#C...>h......)!j3.".e2#3.Q]...j......&..
...K....%...&`....6V0........!...O^.b.....7......O..\.\1......>.$..
.[..x.......b..*..J..*.7..E.@%......f......_.a._......y!.........s.'..
..DP."....nRmJXA.N..a_L'..... ....C:...=.Z9.c...z~..g....f|z..8&..Z...
7#C.i..x...%*O.2D./...b9.....k...vFw/.....7.z.....5A.Y..,..L...{.."..P
.......*u..0....RR.......>"..V...0.!.NHm .DR.tR..cN.]!F_...t.f.$...
._,e.tR...N.%$ F...?v.}........9..:.4...'..,.. .6ni..>.....1.. .~I.
BT...=...5.z....P..>&.]\...r..>.8...M...4..6..*.....}[.Y..u.<<< skipped >>>

GET /assets/css/flexslider.css HTTP/1.1

Host: videodownloader.ummy.net

Connection: keep-alive

Accept: text/css,*/*;q=0.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:52:28 GMT

Content-Type: text/css

Content-Length: 4950

Last-Modified: Tue, 13 May 2014 21:24:04 GMT

Connection: keep-alive

ETag: "53728d74-1356"

Accept-Ranges: bytes
/*. * jQuery FlexSlider v2.2.0. * hXXp://VVV.woothemes.com/flexslider/
. *. * Copyright 2012 WooThemes. * Free to use under the GPLv2 license
.. * hXXp://VVV.gnu.org/licenses/gpl-2.0.html. *. * Contributing autho
r: Tyler Smith (@mbmufffin). */.../* Browser Resets.******************
***************/..flex-container a:active,..flexslider a:active,..flex
-container a:focus,..flexslider a:focus  {outline: none;}..slides,..fl
ex-control-nav,..flex-direction-nav {margin: 0; padding: 0; list-style
: none;}../* Icon Fonts.*********************************/./* Font-fac
e Icons */.@font-face {..font-family: 'flexslider-icon';..src:url('fon
ts/flexslider-icon.eot');..src:url('fonts/flexslider-icon.eot?#iefix')
 format('embedded-opentype'),...url('fonts/flexslider-icon.woff') form
at('woff'),...url('fonts/flexslider-icon.ttf') format('truetype'),...u
rl('fonts/flexslider-icon.svg#flexslider-icon') format('svg');..font-w
eight: normal;..font-style: normal;.}../* FlexSlider Necessary Styles.
*********************************/..flexslider {margin: 0; padding: 0;
}..flexslider .slides > li {display: none; -webkit-backface-visibil
ity: hidden;} /* Hide the slides before the JS is loaded. Avoids image
 jumping */..flexslider .slides img {width: 100%; display: block;}..fl
ex-pauseplay span {text-transform: capitalize;}../* Clearfix for the .
slides element */..slides:after {content: "\0020"; display: block; cle
ar: both; visibility: hidden; line-height: 0; height: 0;}.html[xmlns] 
.slides {display: block;}.* html .slides {height: 1%;}../* No Java<<< skipped >>>

GET /analytics.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.google-analytics.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Mon, 20 Apr 2015 06:32:23 GMT

Expires: Mon, 20 Apr 2015 08:32:23 GMT

Last-Modified: Wed, 08 Apr 2015 20:30:30 GMT

X-Content-Type-Options: nosniff

Content-Type: text/javascript

Vary: Accept-Encoding

Content-Encoding: gzip

Server: Golfe2

Content-Length: 11178

Age: 1147

Cache-Control: public, max-age=7200

Alternate-Protocol: 80:quic,p=1
...........}{W.....|.....'.$@/....w..m.=.].$BJHR..R.......l.2.9.}...y.
.%..t...H...(...evG....X...v...&.....8.....B..=...}.;oT(E.]e&.e.;2>
..q..W..[......2....Z.2.gIp&su...2.&.,..,.Tfdn....u...N...w.<......
T.o...3.....p@..%.p.$F..........M6..,.....O..D..D.2C.O..l...xH-.T....S
.Z*..sJN&CjfB.gS.u.]PbBM.fJc8A......L....%.$ .._....Jhs,g.....(.<..
..i.f.....<[email protected]*J.0...e=.Fg...9
..b,..../.q...I.c<..v............X..*).......4.H..u.7o.U.....hI...%
../c7TR.i..,...t{"M..t.U....z=r_iou5..Q|<.S.t.~.Kn|.kno.....h..%}3.
ZH..G..<}.....W......}w....O..|...U...~...F...l.../~].n476.........
A.Nd...h......v....A........s....!.<"/..s.LQj.R...3......>.T.j .
.Fm...Z.."...z..2..m..K..4.&..E.D..H(B........vU/[email protected] t..Q....n...
V.}.V.>.......%n,B.\.f3.....{{|L......q.....N....U8.o..||......Z(.7
.?.5t.|<.w..D...5.C....C1St........6.`.7....Hh.Q...L..#;..V...o....
/...........ZA0..bu.`{...cpFch....z.....fNN3.H..t.f.z....B...P.;....)`
.....x.z............Jh:.......O.....Ls32Y.6(L......Z...R.p....g....S..
\.#.&..q<..sq!o......"i...$.pR..@....?..t9.!..#E.......AQ1q.:XhL'{.
...tz.....|%......R...?.O....|G......2...=/...m....T.....Bgp..N.....zb
I.7.Y)-v.c.......F..y...%....vIj...8.....C-..8....v..JvTToFN. a...0...
 ...b...s.!.j.S.. .k...$.`...C# &.p...I...K.......4.b..5h..;..q.?.w...
}Nc...P.......l.<$...i..p.x..5k.I.Z...X..E.w......6.....q .:.:.)...
..:...C...H.rm3.W.N.KZ..?}.Ew~...(7..U.q.....H.$.Nv!.s.}%.$...2.y...E.
..a...{.6.$3..s.3...`aof.d<5.t,......]=.Q.'.Qs...#X........V.&l<<< skipped >>>

GET /r/collect?v=1&_v=j35&a=298125754&t=pageview&_s=1&dl=http://videodownloader.ummy.net/congratulations.html&ul=en-us&de=utf-8&dt=Congratulations!&sd=24-bit&sr=1716x901&vp=1189x539&je=1&_u=AEAAAEQAI~&jid=433611454&cid=1715774948.1429512691&tid=UA-51606522-5&_r=1&z=278947634 HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.google-analytics.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Date: Mon, 20 Apr 2015 06:51:30 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, no-store, must-revalidate

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1

GIF89a.............,...........D..;HTTP/1.1 200 OK..Access-Control-All
ow-Origin: *..Date: Mon, 20 Apr 2015 06:51:30 GMT..Pragma: no-cache..E
xpires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, no-sto
re, must-revalidate..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-C
ontent-Type-Options: nosniff..Content-Type: image/gif..Server: Golfe2.
.Content-Length: 35..Alternate-Protocol: 80:quic,p=1..GIF89a..........
...,...........D..;..

GET /click/dtype=stred/pid=12/cid=72085/path=rs.0ca/* HTTP/1.1

User-Agent: curl/1.1

Host: clck.yandex.ru

Accept: *.*


HTTP/1.1 200 Ok

Content-Type: image/gif

Cache-Control: no-cache

Content-Length: 43

GIF89a.............!.......,...........L..;..

GET /MFIwUDBOMEwwSjAJBgUrDgMCGgUABBSSdxXdG447ymkRNPVViULv3rkBzQQUKZFg/4pN+uv5pmq4z/nmS71JzhICEQC1smUlNaKs4ay/+dXXgWrU HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.comodoca.com


HTTP/1.1 200 OK

Date: Mon, 20 Apr 2015 06:50:58 GMT

Server: Apache/2.2.22 (Debian)

Last-Modified: Mon, 20 Apr 2015 00:47:34 GMT

Expires: Fri, 24 Apr 2015 00:47:34 GMT

ETag: 935F3690CBD7F61DBB44E81A7EC5C958683D387F

Cache-Control: max-age=323195,public,no-transform,must-revalidate

X-OCSP-Reponder-ID: h6edcaocsp7

Content-Length: 472

Connection: close

Content-Type: application/ocsp-response
0..........0..... .....0......0...0......).`..M....j....K.I....2015042
0004734Z0t0r0J0... .........w....;.i.4.U.B.......).`..M....j....K.I...
....e%5.........j.....20150420004734Z....20150424004734Z0...*.H.......
......OQki........>.D;......Q. I9...gCS......S...x.......|.v.nP..W.
..2........J....$..C.t..a.s...yQ.|....k.S.v.5Sa....~.n..|.j."5...|].9f
...v.................,....?..}.;.r.N.)E(:.....[X....'...$e......V.`.=/
g.........v..B.U..:A.Q.V..U....,C.]S..?. F0..............

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 159

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=download&ea=insert&el=edit&ev=1&cd=main
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:55:50 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 161

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=download&ea=insert&el=buffer&ev=1&cd=main
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:52:16 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

GET /ajax/libs/jquery/1.10.2/jquery.min.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: ajax.googleapis.com

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Type: text/javascript; charset=UTF-8

Last-Modified: Tue, 09 Jul 2013 11:31:25 GMT

Date: Wed, 15 Apr 2015 19:43:36 GMT

Expires: Thu, 14 Apr 2016 19:43:36 GMT

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

X-Content-Type-Options: nosniff

Server: sffe

Content-Length: 32822

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=31536000

Age: 385674

Alternate-Protocol: 80:quic,p=1
.............{...0.{....U.sD.N...3.u.4i.8....h?..J.A..@-....;.lX(.....
.i-b..z.ls....._.......d4.....G.28z2......S..e..VQ...8.:[.......Q^\...
2.......}T..b...m.Iv....HUn.d.M.....?..]....XT..uT.e......q.>.D..Q.
/...nV.r...J.227/....P..)vp.H,..^l.|!....yb%..e.A.......J\.E.....J.U|.
.Z....._W..@\..UT~...*.m\Tw.B.G.r#nes$E\...(.o.nG..*L*|#.`/n..|x.....|
..|T...!.....z..up:...o.......x&O......../_..>./.u.......a..c......
...Y0.{.x\....'..A..T..r_..7........./.O.'g5.~A.-Dx.?/....ky.E..a-.n.|
.`..B..q.......: .E.................U.z..X.8.....*vq...2..]..'<%..S
r).C.N6....F.......x.........i...,*c...7.\p.G.h.zq...MRVq..u..y.....BH
...|.M.*.........*.............4..6..w...X.&....}....>....A.......$
.q.q.#..B.s.W.....^.Q.J...*..c(.U.J.J..S.Ty;..y....=o.p-`...X.*/.[...:
s.[..n".i...q...*)..W....S..&..'...g..X<..1L.w.x..?........7g....AF
@...........T....$....8S..du..x43.n.`..=..C.......w.s......(.RQ.......
x.f......}..n.QQ._.....Rd..Q...70.Y6.o`.. ....#1...x?.......oGI.*.....
_.e.].....:p......}lv.,....3..QEU...z2uVd...../c.8...z..?Y."?>.q...
;.7.=.%[email protected]~........q..\...u......LW.....ac>.`V
..........W.W[..K.h0.W..7...iQDw>..[\..z....cQ.T,tv....h..)5.......
.......Vr....p|.........x./.....\.|....c%][email protected].^..j/[email protected]
/....;...|/h..F..%..M.H..y...%p.D.{..:c.._...H......ME..N..:TA.....H..
.......3..:[email protected]...........
lup..J.u......P..(...~..W.[Z.....0|.C1....X.....v...HDC....2rz.`..5pl)
l..}.g{)..)bB."..8.,A)ao/e..l. {../.A;..u.q.A].%....,e.....NN.`.;K<<< skipped >>>

POST /helper/geoip/country.php HTTP/1.1

Connection: Keep-Alive

Content-Type: application/x-www-form-urlencoded; Charset=UTF-8

Accept: */*

User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

Content-Length: 9

Host: sf-addon.com

sig=setup
HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:50:59 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Powered-By: PHP/5.3.29

2..UA..0..HTTP/1.1 200 OK..Server: nginx..Date: Mon, 20 Apr 2015 06:50
:59 GMT..Content-Type: text/html..Transfer-Encoding: chunked..Connecti
on: keep-alive..Vary: Accept-Encoding..X-Powered-By: PHP/5.3.29..2..UA
..0......

POST /helper/geoip/country.php HTTP/1.1

Connection: Keep-Alive

Content-Type: application/x-www-form-urlencoded; Charset=UTF-8

Accept: */*

User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

Content-Length: 9

Host: sf-addon.com

sig=setup
HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:51:29 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Powered-By: PHP/5.3.29

2..UA..0..HTTP/1.1 200 OK..Server: nginx..Date: Mon, 20 Apr 2015 06:51
:29 GMT..Content-Type: text/html..Transfer-Encoding: chunked..Connecti
on: keep-alive..Vary: Accept-Encoding..X-Powered-By: PHP/5.3.29..2..UA
..0..

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 159

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=download&ea=insert&el=edit&ev=1&cd=main
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:53:55 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

GET /assets/js/vendor/jquery.flexslider-min.js HTTP/1.1

Host: videodownloader.ummy.net

Connection: keep-alive

Accept: */*

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:52:28 GMT

Content-Type: application/x-javascript

Content-Length: 21545

Last-Modified: Tue, 13 May 2014 21:24:14 GMT

Connection: keep-alive

ETag: "53728d7e-5429"

Accept-Ranges: bytes
/*. * jQuery FlexSlider v2.2.2. * Copyright 2012 WooThemes. * Contribu
ting Author: Tyler Smith. */.;(function(d){d.flexslider=function(g,l){
var a=d(g);a.vars=d.extend({},d.flexslider.defaults,l);var e=a.vars.na
mespace,v=window.navigator&&window.navigator.msPointerEnabled&&window.
MSGesture,t=("ontouchstart"in window||v||window.DocumentTouch&&documen
t instanceof DocumentTouch)&&a.vars.touch,m="",u,p="vertical"===a.vars
.direction,n=a.vars.reverse,h=0<a.vars.itemWidth,r="fade"===a.vars.
animation,q=""!==a.vars.asNavFor,c={};d.data(g,"flexslider",a);c={init
:function(){a.animating=!1;a.currentSlide=parseInt(a.vars.startAt?.a.v
ars.startAt:0,10);isNaN(a.currentSlide)&&(a.currentSlide=0);a.animatin
gTo=a.currentSlide;a.atEnd=0===a.currentSlide||a.currentSlide===a.last
;a.containerSelector=a.vars.selector.substr(0,a.vars.selector.search("
 "));a.slides=d(a.vars.selector,a);a.container=d(a.containerSelector,a
);a.count=a.slides.length;a.syncExists=0<d(a.vars.sync).length;"sli
de"===a.vars.animation&&(a.vars.animation="swing");a.prop=p?"top":"mar
ginLeft";a.args={};a.manualPause=!1;a.stopped=!1;a.started=!1;a.startT
imeout=null;.a.transitions=!a.vars.video&&!r&&a.vars.useCSS&&function(
){var b=document.createElement("div"),f=["perspectiveProperty","Webkit
Perspective","MozPerspective","OPerspective","msPerspective"],k;for(k 
in f)if(void 0!==b.style[f[k]])return a.pfx=f[k].replace("Perspective"
,"").toLowerCase(),a.prop="-" a.pfx "-transform",!0;return!1}();""!==a
.vars.controlsContainer&&(a.controlsContainer=0<d(a.vars.contro<<< skipped >>>

GET /assets/img/bg.jpg HTTP/1.1

Host: videodownloader.ummy.net

Connection: keep-alive

Accept: image/webp,*/*;q=0.8

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Referer: hXXp://videodownloader.ummy.net/assets/css/style.css?v7

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8

Cookie: _ga=GA1.2.1652772922.1429512749; _gat=1


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:52:31 GMT

Content-Type: image/jpeg

Content-Length: 23473

Last-Modified: Tue, 13 May 2014 21:24:09 GMT

Connection: keep-alive

ETag: "53728d79-5bb1"

Accept-Ranges: bytes
......Exif..II*.................Ducky.......<..... hXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-
c011 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="ht
tp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.
0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" 
xmpMM:InstanceID="xmp.iid:36AB10ADD1DE11E3B06FEC0FB9087FCB" xmpMM:Docu
mentID="xmp.did:36AB10AED1DE11E3B06FEC0FB9087FCB"> <xmpMM:Derive
dFrom stRef:instanceID="xmp.iid:36AB10ABD1DE11E3B06FEC0FB9087FCB" stRe
f:documentID="xmp.did:36AB10ACD1DE11E3B06FEC0FB9087FCB"/> </rdf:
Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="
r"?>....Adobe.d....................................................
......................................................................
......................................................................
.......................................1!A.Q".a.2q....B..rRb.#...3C...
...................!A.1Q..a............?..s.|.,....R...U...@A....@[email protected]
.`E.KZ.X.d.[[email protected]{k...WL..Zb..6o./o...dt.kK..1.xK...
".(.-h.5......e..........y...xK:...KV..r....(.......(...P.A@@..B......
T.j.k?OE...|.......U..>?.......c.7......@... .".&.Np...6..|m.?....{
.]m.... ..n..LV~..f..G$......o...w.V.t.Y i.....K:.../.9....g...R..<<< skipped >>>

GET /assets/icons/apple-touch-icon-120x120-precomposed.png HTTP/1.1

Host: videodownloader.ummy.net

Connection: keep-alive

Accept: */*

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8

Cookie: _ga=GA1.2.1652772922.1429512749; _gat=1

GET /assets/icons/apple-touch-icon-114x114-precomposed.png HTTP/1.1

Host: videodownloader.ummy.net

Connection: keep-alive

Accept: */*

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8

Cookie: _ga=GA1.2.1652772922.1429512749; _gat=1


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:52:33 GMT

Content-Type: image/png

Content-Length: 11382

Last-Modified: Tue, 13 May 2014 21:24:07 GMT

Connection: keep-alive

ETag: "53728d77-2c76"

Accept-Ranges: bytes
.PNG........IHDR...r...r........}....gAMA......a.....sRGB........ cHRM
..z&..............u0...`..:....p..Q<....pHYs.................bKGD..
.......... kIDATx..}i.e.U......o.VO.%..,.F..F.-.VAb .l......*...R..P.B
.....*.&.H..I...-.f........`..<J..Vw..o~..3./?.....{...R.N....{..u.
.........:......:......:......:......:..... ..."4.. .R.i.8..$..$!..A..
..N. ..T>$.I`..*...E....$X......*n.........`..*.....B..H..YR."`..'.
D...1.........M$a{...rD.....2... ...}$.. ....2#..L9........5........&g
t;......!.@W.'(.....M....cl.?W,..F.h ...c.V......jGn.=...!......Z4q..b
.Q.'.Xt1.X..iI,..........-.Z0.]0.b..E..$......F.F(^1. ....,.#(.` .bL..
S9=.X..x...8.9..(....$d.R...D@.`V.HL....L.<.........'b.4.rn")#..H..
.D........N....D6......N......d.y."..,...$KN.<=%.zI7..:...s....p.|.
..(h.aD2...0.J..<N-zQ.8..4......g=Q..F..."...%z.yZ.;..p....H..P.&..
In.. ..p.pW.\!.y......6^.$.4.cD.b<^..3.;W....<......t..9|3..@...
.@.. ..=;S0.0l...p..8v....04... ....|...*=..D.`..9....Q.~bai......8*.q
..u_...\...I....w9........u....~..=.:H...K.E7.1...x...W,.....>s..O.
.w..n...s.l.....Dnm\Bd.uY......t/....Bm...d..K.........;......L.o.UVj`
...../;.*./UC.y....k..bk.TX.9.....(..u...;~.W>..k......~.9. ...[.71
...x.gbr..i..R ..,...g.BI.%.....4 ~.3 ..<.....s...........C......4.
..L.F....Y ..(...G1h-..`.........l.b.3.?...c.s)Ay...kt|GWs..o...-O...9
u..?..k.... ~\.wB.;...p..4.t.......mo.mn!...vv..=..=ho.....N....N..3`6
....,..;".......N.s...P.&R..jXI.R....d.?i(....hL1.....I.1.0..#..Epq.|-
.....2..2...s.....`......\s.\X(.wR<.Wt'$>...$>z....."7...<<< skipped >>>

GET /assets/icons/apple-touch-icon-76x76-precomposed.png HTTP/1.1

Host: videodownloader.ummy.net

Connection: keep-alive

Accept: */*

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8

Cookie: _ga=GA1.2.1652772922.1429512749; _gat=1


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:52:33 GMT

Content-Type: image/png

Content-Length: 6182

Last-Modified: Tue, 13 May 2014 21:24:06 GMT

Connection: keep-alive

ETag: "53728d76-1826"

Accept-Ranges: bytes
.PNG........IHDR...L...L.......Q ....gAMA......a.....sRGB........ cHRM
..z&..............u0...`..:....p..Q<....pHYs.................bKGD..
............IDATx..\k...U...s^......N.<....4-m....V...P.P...P@...?@
[email protected]...... .J T.#il7.h..<..k;O.^.s.{........3...*..;...s..
.o.....z..l.....}l.....}l....\..Jb}.eXc.I.n......H..&.)[email protected]...
...8..b.....d..K....T...bn..f:...c.CXi [email protected].&.....g@(.....H
...7`...F...m@]...K....!I..qK..!M.3 ...#0.A...Q...6.V8......$.X....` .
....T.%..8..$&.&...F.F"..#........`.". ..."...H.............)Z.....?..
._|.i:F..JTq#..J......Mr..v..@........}..)...g..`..Y...o..lP...O...OI.
!2.9....5...)gE...s\.,...4I.X.....l.{.n2.5.D.."..I}..E...Mp...r.....Fh
...\Rj.5.,..`E.|MD.l(..h:.s/.. .....`..............x. &.....9gP&......
P..^....}[email protected] F..........i..*HV..y.y.&.c.d|a....?`.....y.....
.`s.1.....76.....:....=.........?.Cp4..x...@.....:.9P... 2....J48...X.
Z I ........?;m...df.fn.2?.37....YX.Y.......A.................o.|.....
..[I|....!. 1..u..s......g....*....#p4...$."..*.Nf..x.l=u^..]"Y.\.j..E
... ..K..V..n........m...S......,..I......~2i6..w....q.....~.. ... ...
.x.....FO<.n.@...>.~..w.d3"#".g.....T.I6.Y..Q..%@.7(..0.f~..{...
..O.w...G.,..o.......v.=X~@......?$.G.......W...>.0..^[email protected].\
.Xg..Ba>........5V..3.. .....S.i.......~...../.~.....X.....\...W..&
.=i..L`1.R.o..k....F...4....25.S...5c.!.kd.3...W.Ef.#...a.^......./.o.
...0;....>!s..s(&...6?,N.Z...&|.JS.... .k1..oc./.....6.!...D'#<.
{.$|.B.N!.}..c.5.'<#.....9.Y{...j..>\..|a6#|.`....V?.9..<<<< skipped >>>

GET /assets/icons/apple-touch-icon-72x72-precomposed.png HTTP/1.1

Host: videodownloader.ummy.net

Connection: keep-alive

Accept: */*

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8

Cookie: _ga=GA1.2.1652772922.1429512749; _gat=1


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:52:34 GMT

Content-Type: image/png

Content-Length: 5506

Last-Modified: Tue, 13 May 2014 21:24:08 GMT

Connection: keep-alive

ETag: "53728d78-1582"

Accept-Ranges: bytes
.PNG........IHDR...H...H.....U..G....gAMA......a.....sRGB........ cHRM
..z&..............u0...`..:....p..Q<....pHYs.................bKGD..
...........wIDATx..\k.\.Y~..;gf..x}[email protected] ([email protected].
.W%T..h.%..m*P.H.RP..Vm..n.v...6N.\v......9...~...ffc;v..=.z.....{..}.
....>...c..>.......K%.f..o....O.c-....... .A ..U~i.G.9.Ly..;.h.w
D..<...!sr....4.h...Pom.^..{H..~~.^v_Y....bcmd..,u..HBD.J.$,@..@. .
..........x.....Hf..(6Y..:.2K............d.,.. -.!....M@kg_.../....].g
..vC....%..`................_.....$E$"....`..../....B.....p.2....@J"..
.H.%.7.t...X#...U...^&..1ve........|.a~........0.c7...7x.....B.M...m@.
`.........5.3`.~..w>Z[>..........E...k...[X...`n....Pw.E..`.....
W.|..A........ .....J....T...X...C..LC.Q....X..$.z..H......F_ri.6..*D.
..Z[}.^.i.....~.......X.{(M.$..}`0...C....&..........C... ...JS K....A
....><[email protected]..,.Y ..8.i..V.l....pb..h.LN.S...T.<|.j.q.?.s
.|..$.!y.snY.....R&Q]@........4.w!.'..[=....!9t...3.g.....wzP...$P..i.
....9.Q.....M[._..MwG..Kk.(....b...''`fg`..`.v".~..o...;......9@...[".
..c...N.........P./....i...`......_B.x....W..........V.....z.@........
...N..WB.......!85....1..wc.....Z.....|%j..M6./,\...C.:[email protected]..
U.}.....W.76.....&br..l.*[email protected].._.....wa..sS.2.....f.
./.....O=....w..7.Y.p.gq..Oa../... .!0G.U.!Q^.T.#...&.%[email protected]
Z`..ch.......~....yX........C.1...y...9......7.8.?.....Y....F._..L$...
`[email protected]......!...!]../..t.{.....h.........;.\.vy.}H.....e.
...t'..Z..{.._.'..%......GU...\1.Ax...?.0.@......]..........\.....<<< skipped >>>

GET /assets/icons/apple-touch-icon-60x60-precomposed.png HTTP/1.1

Host: videodownloader.ummy.net

Connection: keep-alive

Accept: */*

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8

Cookie: _ga=GA1.2.1652772922.1429512749; _gat=1


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:52:34 GMT

Content-Type: image/png

Content-Length: 4102

Last-Modified: Tue, 13 May 2014 21:24:06 GMT

Connection: keep-alive

ETag: "53728d76-1006"

Accept-Ranges: bytes
.PNG........IHDR...<...<.....:..r....gAMA......a.....sRGB.......
. cHRM..z&..............u0...`..:....p..Q<....pHYs.................
bKGD..............IDATh...k.$.U...VuO.t.....k.w..7....". .2.1.....6"..
..!..l'[email protected]&.'B.Hk ..B...5..L,{..z7.;..3.......C=...g...Hs....
.{O.{^.s.......v.n...L. ..x.m..f..6.mW..&..b......%i.h..yo.q.# .4.....
)..}........k.X..c......BWh%...A.=..u..gxme..E...r..;A.K..f.i..2..y.2b
[...=.i.o.......t..f\...{....55.z..>9...._\8C.a........1f..Y>,.5
.U.&....=6............._K.....b...U.....r?7.s.x.....f.~..O....[.....P.
.w....VV.n._YE..hm.....:..Q....$)[email protected]
.v.....6....&.eKS.....>n...M27?..mq.'|.....I.3...].....o.......=.wW
2..}H.H=#"/.P...K.F$[.3..X&.\..AF. !.(@.g.19I..............?t. ..O...~
....&...Ncf.%. ......\~.K\..WI...U....2.>..(......Wus6c.E..T....#e.
$$....}....6..{.v;.*.'C.~.qfv.>le..4[q.]Z.....`....O.1 .......J\..i
(!.\..g:Ry^.kX6x.......|.F..nD..{.Ns.............U.\]]N...S........:..
.OY..Gef5.V.....Bt6..Sygt<U.o1.........5..._.`....g./..z.w..\..../.
e. . a...p..!L^..^.1..~...:.U.r...{.>.b....B.......i..1....s....F..
...~...$t.xJ..K....)#.E.|..=c:...`43.F...y.^Wz....W1....}...s.."...t.x
[email protected]../^d..qd.0....m..l........~........!!0x.m....../.}..
.f.m...=....Qv,^$.9.....k.....}.qL..I.'O#..12..Yd.Q.:.[.F...nc...C.V..
........q.w...ij.z[..E.O.fp.$..y.d.pS....B...O..te.,l..c...Y..\.....!M
.H2...({..N........4#]Y.w..Z?.>...4.!.t..)O..<.'.....0..c4Kc...P
.~n.h..g.W8...ot.6..M.z.08y:.F4......PhBr.<..x"[email protected]..<<<< skipped >>>

GET /assets/icons/apple-touch-icon-57x57-precomposed.png HTTP/1.1

Host: videodownloader.ummy.net

Connection: keep-alive

Accept: */*

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8

Cookie: _ga=GA1.2.1652772922.1429512749; _gat=1


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:52:34 GMT

Content-Type: image/png

Content-Length: 3792

Last-Modified: Tue, 13 May 2014 21:24:06 GMT

Connection: keep-alive

ETag: "53728d76-ed0"

Accept-Ranges: bytes
.PNG........IHDR...9...9.............gAMA......a.....sRGB........ cHRM
..z&..............u0...`..:....p..Q<....pHYs.................bKGD..
............IDATh..Z[.].y.....>[email protected]..*..61 ...(....z
{.C/R.U6m.[.b.pI(.riQB..%m.B..1n...6...m..........7..~..GZ....f..g....
3..r.\ ...r....S....s4X"..i..Y.M..<....$.'..@...@....`.$........>
;t.!wd.t9d.....1......`.....n/.....\'h......M@..............@.........
`. ..#..........`].E.......s.M..3..g......kgA0.u............W...Q8vd.^
..C.i.......N..*......U./...........3........e...>.`/H...g...,@Y.e.
..E..dY..9......'i.. '...$A.#...$...H.`..z.......tq<3...o.......5:`
aq......`F..A._A........G..."[email protected]!2)Af......
%..tN.......x0I.f....gf..f...........:../..w....B....?....ai.~$.....u.
....t.............8.u:[email protected].. ....T..Xe)..E.|....rq..s..4.[n.......?
.6...G..>I..ln....w...s......?.s....._8....&.vI.....<.3-4.....!.
..[...o,...y"]A!.S..?.I,.......S........{..x..*......x.z=\../b....J...
,..c.....Y..m...[&Bq..~.Q.....I.@'........#..1H....?....<'... .z._.
.w...o..4.&.9...}U....t0....Q......tH...y.nzvn..G$..[.x.y..v...O4.....
m...}d&X.cQW.....k.}.h.:'.%.o.....e.6$9I.....K.n.}...#......k.K.....P.
s,.i.. 4....g~..j....L.............^.$.f....u...~...U4~. dvg...'.n....
..W.#?w!. ...MB....p;...C.....t..|..j..._.....>aa.D..kp....t^9.....
.nQ.%f...)..{..B..%.D...h!$DQ.........K........h..I..n..{.....hJf....B
J....r....K20.&..X.5I....0..N..t...VNC..t..t0.t#.X.........}'7.....A.^
...dC....UF.j.....:...i.tcB`I...E....qE)@.Z..0..Dk......GV29~.....<<< skipped >>>

GET /assets/icons/favicon.ico HTTP/1.1

Host: videodownloader.ummy.net

Connection: keep-alive

Accept: */*

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8

Cookie: _ga=GA1.2.1652772922.1429512749; _gat=1


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:52:34 GMT

Content-Type: image/x-icon

Content-Length: 1150

Last-Modified: Tue, 13 May 2014 21:24:07 GMT

Connection: keep-alive

ETag: "53728d77-47e"

Accept-Ranges: bytes

............ .h.......(....... ..... .................................
......................................................................
.............!...#...#...!...............................R............
.......................................S.......W....R0..?...;...8...7.
..5...5...7...8...;...?...Q0.........X....U8..,......./.../.......W:..
W:....../.../.......,...U8..........<... ...,...,... ...ZA.........
.ZA.. ...,...,... ...<...........2...(...)...(...T>.............
.....T>..(...)...(...2...........-...%...&...&...@*...w...........x
..@*..&...&...%...-...........*..."...#...#.......^Q..........^Q......
#...#..."...*...........*....... ... .......`V..........`V...... ... .
......*...........0"..................`X..........`X..................
0"..........JD..................6...ok..ok..6...................KD....
.....X....C?..)#..#... ................... ...#...)#[email protected]....
...S...................................................R..............
.................!...#...#...!........................................
......................................................................
..........................................HTTP/1.1 200 OK..Server: ngi
nx..Date: Mon, 20 Apr 2015 06:52:34 GMT..Content-Type: image/x-icon..C
ontent-Length: 1150..Last-Modified: Tue, 13 May 2014 21:24:07 GMT..Con
nection: keep-alive..ETag: "53728d77-47e"..Accept-Ranges: bytes.......
....... .h.......(....... ..... ......................................
..................................................................

<<< skipped >>>

GET /update/version.txt HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

User-Agent: Mozilla/4.0

Host: 37.130.231.86


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:51:30 GMT

Content-Type: text/plain

Content-Length: 148

Last-Modified: Wed, 15 Apr 2015 21:30:37 GMT

Connection: close

ETag: "552ed87d-94"

Accept-Ranges: bytes

{.."version":."1.3.0.3",.."url":.."hXXp://37.130.231.86/update/update_
1.3.0.3.exe",.."md5":.."1a8bd4e3280a0c474538c908374231fa",.."silent":.
"yes".}...

GET /assets/js/vendor/modernizr-2.6.2.min.js HTTP/1.1

Host: videodownloader.ummy.net

Connection: keep-alive

Accept: */*

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:52:28 GMT

Content-Type: application/x-javascript

Content-Length: 15414

Last-Modified: Tue, 13 May 2014 21:24:13 GMT

Connection: keep-alive

ETag: "53728d7d-3c36"

Accept-Ranges: bytes
/* Modernizr 2.6.2 (Custom Build) | MIT & BSD. * Build: hXXp://moderni
zr.com/download/#-fontface-backgroundsize-borderimage-borderradius-box
shadow-flexbox-hsla-multiplebgs-opacity-rgba-textshadow-cssanimations-
csscolumns-generatedcontent-cssgradients-cssreflections-csstransforms-
csstransforms3d-csstransitions-applicationcache-canvas-canvastext-drag
anddrop-hashchange-history-audio-video-indexeddb-input-inputtypes-loca
lstorage-postmessage-sessionstorage-websockets-websqldatabase-webworke
rs-geolocation-inlinesvg-smil-svg-svgclippaths-touch-webgl-shiv-mq-css
classes-addtest-prefixed-teststyles-testprop-testallprops-hasevent-pre
fixes-domprefixes-load. */.;window.Modernizr=function(a,b,c){function 
D(a){j.cssText=a}function E(a,b){return D(n.join(a ";") (b||""))}funct
ion F(a,b){return typeof a===b}function G(a,b){return!!~("" a).indexOf
(b)}function H(a,b){for(var d in a){var e=a[d];if(!G(e,"-")&&j[e]!==c)
return b=="pfx"?e:!0}return!1}function I(a,b,d){for(var e in a){var f=
b[a[e]];if(f!==c)return d===!1?a[e]:F(f,"function")?f.bind(d||b):f}ret
urn!1}function J(a,b,c){var d=a.charAt(0).toUpperCase() a.slice(1),e=(
a " " p.join(d " ") d).split(" ");return F(b,"string")||F(b,"undefined
")?H(e,b):(e=(a " " q.join(d " ") d).split(" "),I(e,b,c))}function K()
{e.input=function(c){for(var d=0,e=c.length;d<e;d  )u[c[d]]=c[d]in 
k;return u.list&&(u.list=!!b.createElement("datalist")&&!!a.HTMLDataLi
stElement),u}("autocomplete autofocus list placeholder max min multipl
e pattern required step".split(" ")),e.inputtypes=function(a){for(<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECECVRccvD8Qb29B4D63fPT+k= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.thawte.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1396

content-transfer-encoding: binary

Cache-Control: max-age=600517, public, no-transform, must-revalidate

Last-Modified: Mon, 20 Apr 2015 05:40:05 GMT

Expires: Mon, 27 Apr 2015 05:40:05 GMT

Date: Mon, 20 Apr 2015 06:55:33 GMT

Connection: keep-alive
0..p......i0..e.. .....0.....V0..R0......Qw.}`[email protected]
0054005Z0s0q0I0... ........l....r.vdv0..*.~Y..X....e?z.4..G.L.......q.
.%Qq.........w.O.....20150420054005Z....20150427054005Z0...*.H........
.....jBq`.<.. . ...FG--&.......b..}&..."[email protected]..$%.........T
......A...G&S...v.o..k./&.....BJ.C...z..Nu:...y....HT...1H.#n....1.E0.
...{".........M...X.}..GT..%..=..a....)2...v .!....)E....]'..O'.....d,
........ ......t...g..O.{h..1(..y..i...w$...Y=.q?...C.....0...0...0..y
.......^..........N...)0...*.H........0J1.0...U....US1.0...U....Thawte
, Inc.1$0"..U....Thawte Code Signing CA - G20...150303000000Z..1506012
35959Z0Y1.0...U....US1.0...U....Thawte, Inc.1301..U...*Thawte Code Sig
ning CA - G2 OCSP Responder0.."0...*.H.............0............).Z...
....O.~.l...,\.3.".'.'W .ih./..}OA...K...HJd....K^..<.....-.rWJ.j.U
.._......W.../.6....J.y.u-.\...2..U.52B.>...=F...RbR.y.zm.......{b.
bj....Y..J..m...*=.^......V.}p......rmA......9.L ...{?.g.-Y...........
.8...k.$.:.5..6#4..F.#....t.B.8.O)'F.p).........d0b0...U....0.0...U.%.
.0... .......0...U........0... .....0......0"..U....0...0.1.0...U....T
GV-B-32450...*.H..............C.....8.Aw.{....`...y1N...W4M..M.J.3~..7
#}..X..:x..5....$...Z^%.?6..e...}I.)....... .A.w......_...B..j.T..Yu.o
.....g....H....q.Ju.SA`K.....~..O_.....S....I>..O.X..E.......]...y.
.L..F....K......../...._XSk6.:a};.?`...:^.....p....4Z.3L;.......t....&
gt;.....j....<<< skipped >>>

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 159

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=download&ea=insert&el=edit&ev=1&cd=main
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:52:34 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAKQll6RM0DNpmNM7zH3/Qc= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=592757, public, no-transform, must-revalidate

Last-Modified: Mon, 20 Apr 2015 03:30:31 GMT

Expires: Mon, 27 Apr 2015 03:30:31 GMT

Date: Mon, 20 Apr 2015 06:55:51 GMT

Connection: keep-alive
0..........0..... .....0......0...0......'.V.8.F.V....H....JW..2015042
0033031Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
....^[email protected]...*.H........
.....|G#(.}&......W.._..vp/[email protected]%.od.'...|g........j....
..k..d.^.y.U.._n...AM{$.../...S....f8.8{%.........y...\nZk...{.J.z.i.`
F=..#...Q.Y6%.....W....e.m.H.n.,x=.C...........fx.1.......^......$.P.&
*..5....6% ...... #.-.7....@(^.P....s;....O....o......#0...0...0......
....r..?.*......y"..0...*.H........0..1.0...U....US1.0...U....VeriSign
, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use at http
s://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code Signing
 2009-2 CA0...150226000000Z..150527235959Z0..1.0...U....US1.0...U....V
eriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use 
at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Class 3 Co
de Signing 2009-2 OCSP Responder0.."0...*.H.............0.............
m5*R........2....>...yU4..L.. ...........u..Hez..Pn.....d...nz(...V
7.}^...d!RX...bl..[..a...L.. .~..Ij......%..%p.-...u..:..i..F*]...*...
.{NH..|0...gHX.Q.r....S..........._.9.(w...suC...N..s.....&."...:.C.Q.
i~rl..<..krS..8.B..o][email protected]
.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.verisign.c
om/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS incorp. by
 reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U........
0... .....0......0"..U....0...0.1.0...U....TGV-B-32010...*.H......<<< skipped >>>

GET /element/ie/silentupdate/891v2/elements-ru.8.9.1.5100.x64.delta.8.7.0.3110.zip HTTP/1.1

Accept: */*

Connection: Close

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Win64; x64; Trident/6.0)

Host: download.cdn.yandex.net


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Mon, 20 Apr 2015 06:54:07 GMT

Transfer-Encoding: chunked

Connection: close

Location: hXXp://cache-kiev08.cdn.yandex.net/download.cdn.yandex.net/element/ie/silentupdate/891v2/elements-ru.8.9.1.5100.x64.delta.8.7.0.3110.zip

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

0..

GET /assets/js/main.js?v1 HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: videodownloader.ummy.net

DNT: 1

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:51:30 GMT

Content-Type: application/x-javascript

Content-Length: 4342

Last-Modified: Thu, 09 Oct 2014 18:19:01 GMT

Connection: keep-alive

ETag: "5436d195-10f6"

Accept-Ranges: bytes
/**. * Flexslider 2. */..$(document).ready(function () {.    $('.flexs
lider').flexslider({.        animation: 'fade',.        directionNav: 
false.    });.});..$('body').on('click', '.sliderBtn, .how-to-use a', 
function(){.  if(window.ga && this.pathname) {.    ga('send', 'pagevie
w', this.pathname);.  }.});..    $('.faqBlock > a').click(function(
){.       $(this).closest('.faqBlock').find('.answer').slideToggle(100
0); .    });....(function(){.        var question = $(location.hash);.
        if (question.length ===0){.            return;.        }.     
   question.find(".answer").show();..        window.addEventListener("
load",function(){.            setTimeout(function(){.            windo
w.scrollTo(0,question.offset().top);.            },0);.        }).})()
;.../**. * .... .............. .............. .................... ...
........................ */. if (document.getElementById("hidden_ifram
e")){.     document.getElementById("hidden_iframe").addEventListener("
load", function (e) {.    if (submitted) {.        document.getElement
ById("thanks").className = "";.        //window.location='hXXp://in.ta
le.by:1606';.    }.}, false);. }..if (document.getElementById("ss-form
")){.    document.getElementById("ss-form").addEventListener("submit",
 function (e) {.    submitted = true;..    setTimeout(function () {.  
      var form = document.getElementById("ss-form"),.            eleme
nts = form.elements.length;.        for (var i = 0; i < elements; i
  ) {.            form.elements[i].disabled = true;.        }.    <<< skipped >>>

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 161

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=download&ea=insert&el=buffer&ev=1&cd=main
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:53:50 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

GET /bar/reginfo.xml?lang=ru HTTP/1.1

Host: export.yandex.ru

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Accept: */*

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8

Cookie: ys=def_bro.0; yandexuid=2181954531429512744


HTTP/1.1 200 OK

Content-Type: text/xml; charset=utf-8

Expires: Mon, 20 Apr 2015 06:57:27 GMT

X-Content-Type-Options: nosniff

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 1303

Date: Mon, 20 Apr 2015 06:52:27 GMT

Server: lighttpd/1.4.26
...........WMo.6...W.:......g4{(.`.v.a..P$..,Q.E.#[email protected]..
5KzX.......>bo^..m...L.........7.Q....A....64D.......L..6......n...
.[..6."....l.^....6..y.. ...]..3.`[email protected]:}....n....
n.\E BJ.......a."?..a..b... .....*.W.%.l$..6:.^......&. )h.4$.....<
.s.)eXWm.eDS.F.1...1-G._H..1.[.f)&x.0..Q.$?*..w........a.wa.....Y~..Iq
.u...K.Fn.l..Q...%...t...mF.F.R<B.K.....(b...k.&.........U...#..18.
....N.........Y... z.....O.............C......3$.._.9^..5.%.h!......@.
....... .&k.2..'.#...@.[. ...Oa.5.gk..R.|....X...8C.8J.`.....2......g&
lt;$U^Dn.......0.41..D.G.....L[5..xm....E....-)P.>.3..1........G...
V.vf.c>.-.0./>a^...#...c..#.w.Wq~.d.8c./`...2.....X..*M.{1..V...
...tZfL).i.E..T.A.-wA..<H!.:[.-.U_jR*....;J.{rm...[7A&(...f.f.e8-..
.0... .ddF..~..d..F,C!...L..s#p....EBX...q..../......j......T.....EBU.
.Ts.A.Cy...f..RA..C...}...Ab.Y.....M!.9.......>%^.g...D.q..#Z.w.Z*.
..m'l.EQ.......`O.i.-K.. [email protected]..,...l.........*.5.v..l...K. ..x...P.
,.v('.JS..,`.0M(.....^..:?....97..s\Y5...Q.h...#....1...M=7$.a......s.
sd..-.p..8-eM.JQ.P... /t.tX..p4..a.....m..k..# Vc~...wR...\..>..T.!
_.$.Y./.h.E.z..k....].:P..j.(.Z..Lh...6...l/...^Kl.wy.]q...*..W1....`t
....!.7.m7t?....<..%..}.....;..P.........W.......n.E...y....N..F...
..D...m..x.,.X.y...y ........n.W.k.4......'..!8.G..t ....6]..-.o.\....
.m......<<< skipped >>>

GET /downloader.yandex.net/yandex-pack/savefrom-video/YandexPackSetup.exe HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Connection: Keep-Alive

Host: cache-kiev12.cdn.yandex.net


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Mon, 20 Apr 2015 06:51:31 GMT

Content-Type: application/x-msdos-program

Content-Length: 39075128

Connection: keep-alive

ETag: "2343840576"

Last-Modified: Tue, 31 Mar 2015 09:58:58 GMT

Accept-Ranges: bytes

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......@...........
......o.......y.......~.G.....i...............p.......n.......k.....Ri
ch............................PE..L.....>T.....................vQ..
...>[email protected]......{T.............
........................T'..........l.P...........T.8!................
..............................@.......................................
.....text...Q........................... ..`.rdata...u.......v........
..........@[email protected]...$3...@[email protected].....
..P..2..............@..@..............................................
......................................................................
......................................................................
......................................................................
......................................................................
..................................................U..Q.M..E.P.M.......
M...H.B..E...]..............U..Q.M..E...H.B..M..".....].....U..Q.M..M.
......E....t..M.Q.J.......E...].......U...E...P.M.Q.U...R.E.P.)......]
................U...E...P.M.Q.U...R.E.P.c......]................U...E.
.M.f..f..]................U...E.P........]................U...E.P.M.Q.
U.R.E.P.H.......E.].U...E.P.M.Q.U.R.E.P.X.......E.].U......M.Q....5...
M...1..j.j..M.. ....E...].....U......M.Q....5...M...1..j.j..M.......E.
P.M.......E...].........U..Q.M.j.j..M........]..........U..Q.M..E.

<<< skipped >>>

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 157

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=config&ea=portable&el=no&ev=1&cd=main
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:51:30 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

GET /downloader.yandex.net/yandex-pack/downloader/info.rss HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Connection: Keep-Alive

Host: cache-kiev10.cdn.yandex.net


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Mon, 20 Apr 2015 06:52:09 GMT

Content-Type: application/rss xml

Content-Length: 2267

Connection: keep-alive

ETag: "1467414249"

Last-Modified: Fri, 13 Mar 2015 15:35:59 GMT

Accept-Ranges: bytes
<?xml version="1.0" encoding="UTF-8"?>..<downloader version="
1">...<partneryandexbar>....<url>hXXp://downloader.yand
ex.net/yandex-pack/</url>....<name>YandexPackSetup.exe<
/name>..    <lt_name>YandexSearch.exe</lt_name>..    &l
t;partner name="vkmusic-elements">..            <url>hXXp://d
ownloader.yandex.net/yandex-pack/</url>..            <name>
;YandexPackSetup.exe</name>..            <lt_name>YandexSe
arch.exe</lt_name>..            <exp_path val="33">-extens
ion-exp1</exp_path>..            <exp_path val="33">-exten
sion-exp2</exp_path>..            <exp_path val="33">-exte
nsion-exp3</exp_path>..    </partner>..    <partner nam
e="disc-soft">..            <url>hXXp://downloader.yandex.net
/yandex-pack/</url>..            <name>YandexPackSetup.exe
</name>..            <lt_name>YandexSearch.exe</lt_name
>..            <exp_path val="50">-accelerator-exp1</exp_p
ath>..            <exp_path val="50">-accelerator-exp2</ex
p_path>..    </partner>..    <partner name="kmplayer-eleme
nts2">..            <url>hXXp://downloader.yandex.net/yandex-
pack/</url>..            <name>YandexPackSetup.exe</nam
e>..            <lt_name>YandexSearch.exe</lt_name>..  
          <exp_path val="33">-extension-exp1</exp_path>.. 
           <exp_path val="33">-extension-exp2</exp_path&g<<< skipped >>>

GET /downloader.yandex.net/yandex-pack/bm-partner-ru/YandexPackSetup.exe HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Connection: Keep-Alive

Host: cache-kiev10.cdn.yandex.net


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Mon, 20 Apr 2015 06:52:09 GMT

Content-Type: application/x-msdos-program

Content-Length: 4107088

Connection: keep-alive

ETag: "3147634023"

Last-Modified: Tue, 24 Mar 2015 13:47:37 GMT

Accept-Ranges: bytes
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......(I..l(..l(..
l(....k.J(....i.|(....j..(..eP'.i(..eP7.O(..l(..#)....k.$(....m.m(..l(
3.n(....h.m(..Richl(..........PE..L...1<.T.........................
...2.............@...................................?...@............
.....................|...T.......`.............>.`........8..0...8.
..............................@.......................................
.....text............................... ..`.rdata....................
..........@[email protected][email protected].......
....................@[email protected][email protected].
..`...........................@[email protected]...<...........
[email protected]...............................................................
......................................................................
......................................................................
.....................................................U..QQSVW.........
....}..e..j...W.E.P.y.....t9..t5..f..f;.u.f..t.f.H.f;N.u.......f..u.3.
................}........hh.C..u..e...YY.........u...t4h..C.V.I...YY..
.......u...t.h..C.V.-...YY.........u.j.h...........YY..tgh....W3.V..X.
C...tJhh.C..u..E.Wh..C.P.u..T.......v.....t........u...Sj.V.u......9u.
t..u... ..W.~....u.Y..t.V.l ..3.._3.SW.E.P.]..G...h..C.hh.C..E.P.W"..S
Sj.S..T.C.9]..E..E}.P.u..].W.u...e....9].t..u... ...E....H._^[.......E
....u.h..E...7.....E..U....T.}..u.3......SVWjD^V.E.j.P......u.3..}<<< skipped >>>

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 159

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=download&ea=insert&el=edit&ev=1&cd=main
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:53:17 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

GET /hit?t26.3;r;s1716*901*24;uhttp://videodownloader.ummy.net/congratulations.html;0.11979874879619706 HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: counter.yadro.ru

DNT: 1

Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily

Date: Mon, 20 Apr 2015 06:51:31 GMT

Server: 0W/0.8c

Content-Type: text/html

Location: hXXp://counter.yadro.ru/hit?q;t26.3;r;s1716*901*24;uhttp://videodownloader.ummy.net/congratulations.html;0.11979874879619706

Content-Length: 32

Expires: Sat, 19 Apr 2014 21:00:00 GMT

Pragma: no-cache

Cache-control: no-cache

P3P: policyref="/w3c/p3p.xml", CP="UNI"

Set-Cookie: FTID=1LDA7p3qCNrK1LDA7p; path=/; expires=Mon, 18 Apr 2016 21:00:00 GMT; domain=.yadro.ru
<html><body>Moved</body></html>.....


GET /hit?q;t26.3;r;s1716*901*24;uhttp://videodownloader.ummy.net/congratulations.html;0.11979874879619706 HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: counter.yadro.ru

DNT: 1

Connection: Keep-Alive

Cookie: FTID=1LDA7p3qCNrK1LDA7p


HTTP/1.1 200 OK

Date: Mon, 20 Apr 2015 06:51:31 GMT

Server: 0W/0.8c

Connection: Close

Content-Type: image/gif

Content-Length: 145

Expires: Sat, 19 Apr 2014 21:00:00 GMT

Pragma: no-cache

Cache-control: no-cache

P3P: policyref="/w3c/p3p.xml", CP="UNI"

Set-Cookie: VID=1T9GrX3Rs9bK1LDA7p; path=/; expires=Mon, 18 Apr 2016 21:00:00 GMT; domain=.yadro.ru
GIF89aX............!.......,....X.....h......_.......g...Hr`..d3...cl.
R.u[I..G...r....k....0....N..t.)...Qf.z....x...a.K....p...}...`...!8HX
.Q..;..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1453

content-transfer-encoding: binary

Cache-Control: max-age=431936, public, no-transform, must-revalidate

Last-Modified: Sat, 18 Apr 2015 06:50:09 GMT

Expires: Sat, 25 Apr 2015 06:50:09 GMT

Date: Mon, 20 Apr 2015 06:55:32 GMT

Connection: keep-alive
0..........0..... .....0......0...0......T3t.%..O.E..~..F.=....2015041
8065009Z0s0q0I0... ........H.dI.....3..^B...d6Q....ZL%."..1.m..._)..a.
.eR&.....Y.)..".\....20150418065009Z....20150425065009Z0...*.H........
..........3..9..A..A....kqk......".R.P.....A.......A.7.......WT...=p.m
.b...az.K..#..`.j\...g...._..v.OV...Z.......yr...m..bi..}."......O.."3
..4.......... l...e.[Y....6p..yh.....u..r]A....j...U..z...ae..'.7.'.7 
..../.......`|....$..DU.p......n. :.:.........n.-......0...0...0..3...
..../...b.v..-....l}0...*.H........0_1.0...U....US1.0...U....VeriSign,
 Inc.1705..U....Class 3 Public Primary Certification Authority0...1412
02000000Z..151216235959Z0..1.0...U....US1.0...U....Symantec Corporatio
n1.0...U....Symantec Trust Network1?0=..U...6Symantec Class 3 PCA - G1
 OCSP Responder Certificate 30.."0...*.H.............0..........'.....
.Y..x.3B1.7..Q..`..d.. ....s..t.$a.....j2R.{ ,*..c{.3.....H..3-; )....
.0._...*..9M..V...... ...{m...-.......)..tR..{D....~...M...T..pS.p..^|
o....S..v.).)[email protected]#qh...u1T.].G0.]E...=._.....
. ........TE...Sa.s4........r...3.............0..0...U....0.0l..U. .e0
c0a..`.H...E....0R0&.. .........hXXp://VVV.symauth.com/cps0(.. .......
0...hXXp://VVV.symauth.com/rpa0...U.%..0... .......0...U........0... .
....0......0!..U....0...0.1.0...U....TGV-B-2730...*.H.............$..H
......oU....Y!.z{*.V.M..u.._z..3>.. 0....3..m.....e.......a..D.....
......e..F6:.y.....di.......<y.Z.......x}..q.2....UZ1 :,....
<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=477916, public, no-transform, must-revalidate

Last-Modified: Sat, 18 Apr 2015 19:40:18 GMT

Expires: Sat, 25 Apr 2015 19:40:18 GMT

Date: Mon, 20 Apr 2015 06:55:32 GMT

Connection: keep-alive
0..........0..... .....0......0...0......'.V.8.F.V....H....JW..2015041
8194018Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
..M.s.Q~...@?j.......20150418194018Z....20150425194018Z0...*.H........
.......$c.!|..m..L.Z..N....u."%x..'.9.R...C.ZU3F.F:.J7.....F...X..?8..
).H34< .-...q..w.F...%.*........1.b#GA`U*....H.e.p-.r....5..oK.1r..
.S.. *..H/83.b.1...`..(....c4.f...d\.>....aO>.4.%...a...`.;/....
.hO%......"...O.......7............p.......4|U...p....s.P;.....#0...0.
..0..........r..?.*......y"..0...*.H........0..1.0...U....US1.0...U...
.VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of us
e at hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Cod
e Signing 2009-2 CA0...150226000000Z..150527235959Z0..1.0...U....US1.0
...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Term
s of use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign C
lass 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0....
.........m5*R........2....>...yU4..L.. ...........u..Hez..Pn.....d.
..nz(...V7.}^...d!RX...bl..[..a...L.. .~..Ij......%..%p.-...u..:..i..F
*]...*....{NH..|0...gHX.Q.r....S..........._.9.(w...suC...N..s.....&."
...:.C.Q.i~rl..<..krS..8.B..o][email protected]
...U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.v
erisign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS i
ncorp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...
U........0... .....0......0"..U....0...0.1.0...U....TGV-B-32010...<<< skipped >>>

GET /click/dtype=stred/pid=12/cid=72435/path=dwnldr/p=savefrom-video/cnt=0/dt=2/ct=4/rt=32/* HTTP/1.1

User-Agent: curl/1.1

Host: clck.yandex.ru

Accept: *.*


HTTP/1.1 200 Ok

Content-Type: image/gif

Cache-Control: no-cache

Content-Length: 43

GIF89a.............!.......,...........L..;..

GET /assets/js/main.js?v1 HTTP/1.1

Host: videodownloader.ummy.net

Connection: keep-alive

Accept: */*

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 YaBrowser/15.2.2214.3645 Safari/537.36

Referer: hXXp://videodownloader.ummy.net/congratulations.html

Accept-Encoding: gzip, deflate, sdch

Accept-Language: ru,en;q=0.8


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 20 Apr 2015 06:52:28 GMT

Content-Type: application/x-javascript

Content-Length: 4342

Last-Modified: Thu, 09 Oct 2014 18:19:01 GMT

Connection: keep-alive

ETag: "5436d195-10f6"

Accept-Ranges: bytes
/**. * Flexslider 2. */..$(document).ready(function () {.    $('.flexs
lider').flexslider({.        animation: 'fade',.        directionNav: 
false.    });.});..$('body').on('click', '.sliderBtn, .how-to-use a', 
function(){.  if(window.ga && this.pathname) {.    ga('send', 'pagevie
w', this.pathname);.  }.});..    $('.faqBlock > a').click(function(
){.       $(this).closest('.faqBlock').find('.answer').slideToggle(100
0); .    });....(function(){.        var question = $(location.hash);.
        if (question.length ===0){.            return;.        }.     
   question.find(".answer").show();..        window.addEventListener("
load",function(){.            setTimeout(function(){.            windo
w.scrollTo(0,question.offset().top);.            },0);.        }).})()
;.../**. * .... .............. .............. .................... ...
........................ */. if (document.getElementById("hidden_ifram
e")){.     document.getElementById("hidden_iframe").addEventListener("
load", function (e) {.    if (submitted) {.        document.getElement
ById("thanks").className = "";.        //window.location='hXXp://in.ta
le.by:1606';.    }.}, false);. }..if (document.getElementById("ss-form
")){.    document.getElementById("ss-form").addEventListener("submit",
 function (e) {.    submitted = true;..    setTimeout(function () {.  
      var form = document.getElementById("ss-form"),.            eleme
nts = form.elements.length;.        for (var i = 0; i < elements; i
  ) {.            form.elements[i].disabled = true;.        }.    <<< skipped >>>

POST /collect HTTP/1.0

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/4.0

Host: VVV.google-analytics.com

Content-Length: 159

v=1&tid=UA-51606522-4&cid=5847ba93-8fba-4396-9405-9f9a435729b6&an=UmmyVideoDownloader_dq&av=1.3.0.3&ul=en-GB&t=event&ec=download&ea=insert&el=edit&ev=1&cd=main
HTTP/1.0 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Mon, 20 Apr 2015 06:52:20 GMT

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

HEAD /bm/version.rss HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

User-Agent: Microsoft BITS/7.5

Host: download.cdn.yandex.net


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Mon, 20 Apr 2015 06:52:44 GMT

Connection: keep-alive

Keep-Alive: timeout=5

Location: hXXp://cache-kiev02.cdn.yandex.net/download.cdn.yandex.net/bm/version.rss

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

HTTP/1.1 302 Moved Temporarily..Server: nginx/1.6.2..Date: Mon, 20 Apr
 2015 06:52:44 GMT..Connection: keep-alive..Keep-Alive: timeout=5..Loc
ation: hXXp://cache-kiev02.cdn.yandex.net/download.cdn.yandex.net/bm/v
ersion.rss..Expires: Thu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-
cache..Cache-Control: no-store,no-cache,must-revalidate..Pragma: no-ca
che......

GET /bm/version.rss HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Wed, 08 Apr 2015 12:09:52 GMT

User-Agent: Microsoft BITS/7.5

Host: download.cdn.yandex.net


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Mon, 20 Apr 2015 06:52:44 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=5

Location: hXXp://cache-kiev02.cdn.yandex.net/download.cdn.yandex.net/bm/version.rss

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

0..HTTP/1.1 302 Moved Temporarily..Server: nginx/1.6.2..Date: Mon, 20 
Apr 2015 06:52:44 GMT..Transfer-Encoding: chunked..Connection: keep-al
ive..Keep-Alive: timeout=5..Location: hXXp://cache-kiev02.cdn.yandex.n
et/download.cdn.yandex.net/bm/version.rss..Expires: Thu, 01 Jan 1970 0
0:00:01 GMT..Cache-Control: no-cache..Cache-Control: no-store,no-cache
,must-revalidate..Pragma: no-cache..0..

The Trojan connects to the servers at the folowing location(s):

UmmyVideoDownloader.exe_2084:

.text

`.itext

`.data

.idata

.didata

.edata

@.tls

.rdata

@.reloc

B.rsrc

TArray<System.Byte>

TArray<System.Char>

TArray<System.Word>

TArray<System.ShortInt>

TArray<System.SmallInt>

TArray<System.Integer>

TArray<System.Int64>

TArray<System.TPtrWrapper>

System.Types

System.UITypes

TWindowState

poPortrait

ssHorizontal

biClrImportant

tagMSG

Winapi.Windows

HKEY

;!199{199

;0!8&2{199

"<;=!!%{199

TWMKey

MsgFiller

KeyData

KeyDataFiller

Keys

KeysFiller

MouseMsg

HitTestMouseMsgFiller

Windows 95

Windows 95 OSR-2

Windows 98

Windows 98 SE

Windows ME

Windows 9x New

Windows NT 3

Windows NT 4

Windows 2000

Windows XP

Windows 2003

Windows Vista

Windows 2008

Windows 7

Windows 2008 R2

Windows 8

Windows Server 8

Windows NT New

TMsgHandler

TMsgHandlerOO

user.exe

TMsgHandlers

madToolsMsgHandlerWindow

>0';0974&0{199

cmovÌ

setÌ

pop %seg

push %seg

Export

VVV.madshi.net

dbghelp.dll

!"#$%&'(!)* ,-./0'

System.SysUtils

ENotSupportedException

ENotSupportedException@

ENoMonitorSupportException

TArray<System.SysUtils.TLangRec>

TFormatSettings.TEraInfo

IEnumerable<System.string>t!@

TArray<System.string>

TMarshaller.PDisposeRec

TMarshaller.TDisposeProc

TMarshaller.TDisposeRec

TMarshaller.IDisposer

TMarshaller.TDisposer'

TMarshaller.TDisposer`

/TArray<System.SysUtils.TMarshaller.TDisposeRec>

System.SysUtilsL

$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)

&TArray<System.SysUtils.TUnitHashEntry>

System.Variants

Operator

EVariantBadIndexErrord

EVariantBadIndexError<

System.VariantsT

System.Variants|

Winapi.ActiveX

grfLocksSupported

Winapi.ShlObj

4.0.11

bSendBugReport

bSaveBugReport

bPrintBugReport

bShowBugReport

esSysUtilsShowException

esHttpExtension

esIntraweb

esTThreadExecute

epCompleteReport

TBugReportCallback

bugReport

TBugReportCallbackOO

eaSendBugReport

eaSaveBugReport

eaPrintBugReport

eaSendBugReport2

eaSaveBugReport2

eaPrintBugReport2

eaSendBugReport3

eaSaveBugReport3

eaPrintBugReport3

eaShowBugReport

TBugReportPluginA

TBugReportPluginW1

TBugReportPluginExAW

TBugReportPluginExW

advapi32.dll

The import table is invalid.

WindowsLogo

ReportLeaks

UploadViaHttp

HttpServer

HttpSsl

HttpPort

HttpAccount

HttpPassword

BugTrPassword

MailAsSmtpServer

MailAsSmtpClient

SmtpServer

SmtpSsl

SmtpTls

SmtpPort

SmtpAccount

SmtpPassword

bugreport.mbr

screenshot.png

ExceptMsg

FrozenMsg

BitFaultMsg

send bug report

save bug report

print bug report

show bug report

%appname%, %exceptMsg%

bug report

please find the bug report attached

Sending bug report...

PrepAttMsg

MxLookMsg

ConnMsg

SendMailMsg

FieldMsg

SendAttMsg

SendFinalMsg

SendFailMsg

Sorry, sending the bug report didn't work.

GetWindowsLogo

SetWindowsLogo

GetFilter1NoBugReport

GetFilter2NoBugReport

GetGeneralNoBugReport

SetFilter1NoBugReport

SetFilter2NoBugReport

SetGeneralNoBugReport

GetAutoShowBugReport

SetAutoShowBugReport

GetHttpServer

SetHttpServer

GetHttpSsl

SetHttpSsl

GetHttpPort

SetHttpPort

GetHttpAccount

SetHttpAccount

GetHttpPassword

SetHttpPassword

GetBugTrackerPassword

SetBugTrackerPassword

GetMailAsSmtpServer

SetMailAsSmtpServer

GetMailAsSmtpClient

SetMailAsSmtpClient

GetSmtpServer

SetSmtpServer

GetSmtpSsl

SetSmtpSsl

GetSmtpTls

SetSmtpTls

GetSmtpPort

SetSmtpPort

GetSmtpAccount

SetSmtpAccount

GetSmtpPassword

SetSmtpPassword

GetAttachBugReport

SetAttachBugReport

GetAttachBugReportFile

SetAttachBugReportFile

GetDeleteBugReportFile

SetDeleteBugReportFile

GetBugReportSendAs

SetBugReportSendAs

GetBugReportZip

SetBugReportZip

GetBugReportFile

SetBugReportFile

GetAppendBugReports

SetAppendBugReports

GetBugReportFileSize

SetBugReportFileSize

GetExceptMsg

SetExceptMsg

GetFrozenMsg

SetFrozenMsg

GetBitFaultMsg

SetBitFaultMsg

GetPrepareAttachMsg

SetPrepareAttachMsg

GetMxLookupMsg

SetMxLookupMsg

GetConnectMsg

SetConnectMsg

GetSendMailMsg

SetSendMailMsg

GetFieldsMsg

SetFieldsMsg

GetSendAttachMsg

SetSendAttachMsg

GetSendFinalizeMsg

SetSendFinalizeMsg

GetSendFailureMsg

SetSendFailureMsg

TDABugReportCallback

TDABugReportCallbackOO

FBugReportHeader

FBugReportSections

FBugReport

FBugReportCallbacks

FBugReportCallbacksOO

FCreateBugReport

FCorrectBugReportNo

GetBugReportHeader

GetBugReportSections

GetBugReport_

SetBugReport

GetBugReport

RegisterBugReportCallback

bugReportCallback

UnregisterBugReportCallback

GetCreateBugReport

SetCreateBugReport

ShowBugReport

SendBugReport

SaveBugReport

PrintBugReport

CompleteBugReport

CriticalBugReportCallbackExists

VVV.google.com

SMTP:

A.ROOT-SERVERS.NET

K.ROOT-SERVERS.NET

VVV.madshi.net_multipart_boundary

sbtPassResponse

cSupportedAlgs

palgSupportedAlgs

FTlsSupported

TSmtp

port

password

LOGIN

AUTH LOGIN

TWinHttpProxyInfo

lpszProxyBypass

FUrl

FPort

FBugTrackerPassword

FHttpAuthUser

FHttpAuthPassword

FProxyPassword

TWinHttp<

httpAuthUser

httpAuthPassword

bugTrackerPassword

proxyBypass

proxyPassword

TWinHttp

/api.xml

<url>

?cmd=

/xmlrpc.cgi

Bugzilla.version

Product.get_enterable_products

Product.get

Bug.fields

Bugzilla_login

Bugzilla_password

User.get

Bug.create

Bug.add_attachment

/api/soap/mantisconnect.php

<?xml version="1.0" encoding="UTF-8"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="hXXp://schemas.xmlsoap.org/soap/envelope/"><SOAP-ENV:Body><ns1:

</username><password xsi:type="xsd:string">

</password>

*.txt

TSendBugReportExRec

FDefaultMsgBox

defaultMsgBox

BugReportChanged

ServerSupportFunctionNext

kernel32.dll

user32.dll

FaultRep.dll

internal error. please notify [email protected]

HardWareKey

TTimeSpanParser.TParseError

System.TimeSpan

System.SyncObjs

System.SyncObjs

TFunc<System.Boolean>

System.SyncObjsp

System.Generics.Defaults

IEqualityComparer<System.string>

IComparer<System.string>

TCustomComparer<System.string>

TCustomComparer<System.string> 0K

System.Generics.Collections

doOwnsKeys

System.Rtti

GetIndexedProperties

GetIndexedProperty

GetDeclaredIndexedProperties

TMethodImplementation.TFloatReg

):TMethodImplementation.TInterceptFrame.:1

%TMethodImplementation.TInterceptFrame(

*TMethodImplementation.TFirstStageIntercept

%TMethodImplementation.PInterceptFramePnK

*TMethodImplementation.PFirstStageIntercept

TMethodImplementation.TParamLoc

!TMethodImplementation.TInvokeInfoK

!TMethodImplementation.TInvokeInfo

TRttiIndexedPropertyS

TRttiIndexedProperty

FIndexedProps

TArray<System.TCustomAttribute>

-TFunc<System.TArray<System.TCustomAttribute>>

TArray<System.Rtti.TRttiMethod>

TArray<System.Rtti.TRttiField>

!TArray<System.Rtti.TRttiProperty>

(TArray<System.Rtti.TRttiIndexedProperty>

%TArray<System.Rtti.TRttiManagedField>

TArray<System.Rtti.TValue>

3TArray<System.Rtti.TMethodImplementation.TParamLoc>

8TEnumerator<System.Rtti.TMethodImplementation.TParamLoc>(

8TEnumerator<System.Rtti.TMethodImplementation.TParamLoc>

8TEnumerable<System.Rtti.TMethodImplementation.TParamLoc>-

8TEnumerable<System.Rtti.TMethodImplementation.TParamLoc>

;TList<System.Rtti.TMethodImplementation.TParamLoc>.arrayofT

System.Generics.CollectionshpK

6IComparer<System.Rtti.TMethodImplementation.TParamLoc>

CTCollectionNotifyEvent<System.Rtti.TMethodImplementation.TParamLoc>

:TArrayManager<System.Rtti.TMethodImplementation.TParamLoc>g

:TArrayManager<System.Rtti.TMethodImplementation.TParamLoc>\

8IEnumerable<System.Rtti.TMethodImplementation.TParamLoc>t!@

=TList<System.Rtti.TMethodImplementation.TParamLoc>.TEmptyFunc

>TList<System.Rtti.TMethodImplementation.TParamLoc>.TEnumerator5

>TList<System.Rtti.TMethodImplementation.TParamLoc>.TEnumerator

2TList<System.Rtti.TMethodImplementation.TParamLoc>&

2TList<System.Rtti.TMethodImplementation.TParamLoc>

"TArray<System.Rtti.TRttiParameter>

&TArray<System.Rtti.TRttiInterfaceType>

-TPair<System.Pointer,System.Rtti.TRttiObject>

AKey

ATArray<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

FTEnumerator<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>(

FTEnumerator<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>T

FTEnumerable<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>-

FTEnumerable<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

9TDictionary<System.Pointer,System.Rtti.TRttiObject>.TItem

>TDictionary<System.Pointer,System.Rtti.TRttiObject>.TItemArray

!IEqualityComparer<System.Pointer>

&TCollectionNotifyEvent<System.Pointer>

/TCollectionNotifyEvent<System.Rtti.TRttiObject>

TArray<System.Pointer>

TEnumerator<System.Pointer>(

TEnumerator<System.Pointer>p

TEnumerable<System.Pointer>-

TEnumerable<System.Pointer>

BTDictionary<System.Pointer,System.Rtti.TRttiObject>.TKeyEnumerator;

BTDictionary<System.Pointer,System.Rtti.TRttiObject>.TKeyEnumerator

BTDictionary<System.Pointer,System.Rtti.TRttiObject>.TKeyCollection;

BTDictionary<System.Pointer,System.Rtti.TRttiObject>.TKeyCollection

TArray<System.Rtti.TRttiObject>

$TEnumerator<System.Rtti.TRttiObject>(

$TEnumerator<System.Rtti.TRttiObject>8

$TEnumerable<System.Rtti.TRttiObject>-

$TEnumerable<System.Rtti.TRttiObject>x

DTDictionary<System.Pointer,System.Rtti.TRttiObject>.TValueEnumerator;

DTDictionary<System.Pointer,System.Rtti.TRttiObject>.TValueEnumerator

DTDictionary<System.Pointer,System.Rtti.TRttiObject>.TValueCollection;

DTDictionary<System.Pointer,System.Rtti.TRttiObject>.TValueCollection

CTDictionary<System.Pointer,System.Rtti.TRttiObject>.TPairEnumerator;

CTDictionary<System.Pointer,System.Rtti.TRttiObject>.TPairEnumerator

FOnKeyNotify

FKeyCollection

3TDictionary<System.Pointer,System.Rtti.TRttiObject>9

ContainsKey

3TDictionary<System.Pointer,System.Rtti.TRttiObject>

OnKeyNotify

TArray<System.Rtti.TRttiType>

TArray<System.Rtti.TRttiPackage>

-TPair<System.TypInfo.PTypeInfo,System.string>

ATArray<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

FTEnumerator<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>(

FTEnumerator<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

FTEnumerable<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>-

FTEnumerable<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>$/L

9TDictionary<System.TypInfo.PTypeInfo,System.string>.TItem

>TDictionary<System.TypInfo.PTypeInfo,System.string>.TItemArray

System.Generics.Collectionsd0L

 IEqualityComparer<System.TypInfo.PTypeInfo>

0TCollectionNotifyEvent<System.TypInfo.PTypeInfo>

TArray<System.TypInfo.PTypeInfo>

%TEnumerator<System.TypInfo.PTypeInfo>(

%TEnumerator<System.TypInfo.PTypeInfo>(3L

%TEnumerable<System.TypInfo.PTypeInfo>-

%TEnumerable<System.TypInfo.PTypeInfo>h4L

BTDictionary<System.TypInfo.PTypeInfo,System.string>.TKeyEnumerator;

BTDictionary<System.TypInfo.PTypeInfo,System.string>.TKeyEnumerator

BTDictionary<System.TypInfo.PTypeInfo,System.string>.TKeyCollection;

BTDictionary<System.TypInfo.PTypeInfo,System.string>.TKeyCollection

DTDictionary<System.TypInfo.PTypeInfo,System.string>.TValueEnumerator;

DTDictionary<System.TypInfo.PTypeInfo,System.string>.TValueEnumerator

DTDictionary<System.TypInfo.PTypeInfo,System.string>.TValueCollection;

DTDictionary<System.TypInfo.PTypeInfo,System.string>.TValueCollection

CTDictionary<System.TypInfo.PTypeInfo,System.string>.TPairEnumerator;

CTDictionary<System.TypInfo.PTypeInfo,System.string>.TPairEnumerator

3TDictionary<System.TypInfo.PTypeInfo,System.string>9

3TDictionary<System.TypInfo.PTypeInfo,System.string>

OnKeyNotify

-TPair<System.string,System.TypInfo.PTypeInfo>

ATArray<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

FTEnumerator<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>(

FTEnumerator<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

FTEnumerable<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>-

FTEnumerable<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

9TDictionary<System.string,System.TypInfo.PTypeInfo>.TItem

>TDictionary<System.string,System.TypInfo.PTypeInfo>.TItemArray

System.Generics.CollectionsXKL

BTDictionary<System.string,System.TypInfo.PTypeInfo>.TKeyEnumerator;

BTDictionary<System.string,System.TypInfo.PTypeInfo>.TKeyEnumerator

BTDictionary<System.string,System.TypInfo.PTypeInfo>.TKeyCollection;

BTDictionary<System.string,System.TypInfo.PTypeInfo>.TKeyCollection

DTDictionary<System.string,System.TypInfo.PTypeInfo>.TValueEnumerator;

DTDictionary<System.string,System.TypInfo.PTypeInfo>.TValueEnumerator

DTDictionary<System.string,System.TypInfo.PTypeInfo>.TValueCollection;

DTDictionary<System.string,System.TypInfo.PTypeInfo>.TValueCollection

CTDictionary<System.string,System.TypInfo.PTypeInfo>.TPairEnumerator;

CTDictionary<System.string,System.TypInfo.PTypeInfo>.TPairEnumerator

3TDictionary<System.string,System.TypInfo.PTypeInfo>9

3TDictionary<System.string,System.TypInfo.PTypeInfo>

#IComparer<System.Rtti.TRttiPackage>

%TComparison<System.Rtti.TRttiPackage>

#TComparer<System.Rtti.TRttiPackage>2

#TComparer<System.Rtti.TRttiPackage>t`L

,TArray<System.TArray<System.Rtti.TRttiType>>

$TEnumerator<System.TCustomAttribute>(

$TEnumerator<System.TCustomAttribute>TtL

$TEnumerable<System.TCustomAttribute>-

$TEnumerable<System.TCustomAttribute>

'TList<System.TCustomAttribute>.arrayofT

"IComparer<System.TCustomAttribute>

/TCollectionNotifyEvent<System.TCustomAttribute>

&TArrayManager<System.TCustomAttribute>g

&TArrayManager<System.TCustomAttribute>dxL

$IEnumerable<System.TCustomAttribute>t!@

)TList<System.TCustomAttribute>.TEmptyFunc

*TList<System.TCustomAttribute>.TEnumerator5

*TList<System.TCustomAttribute>.TEnumeratorp{L

TList<System.TCustomAttribute>&

TList<System.TCustomAttribute>$}L

-TArray<System.TArray<System.Rtti.TRttiField>>

7TArray<System.TArray<System.Rtti.TRttiIndexedProperty>>

.TArray<System.TArray<System.Rtti.TRttiMethod>>

0TArray<System.TArray<System.Rtti.TRttiProperty>>

&TEnumerator<System.Rtti.TRttiProperty>(

&TEnumerator<System.Rtti.TRttiProperty>

&TEnumerable<System.Rtti.TRttiProperty>-

&TEnumerable<System.Rtti.TRttiProperty>

)TList<System.Rtti.TRttiProperty>.arrayofT

$IComparer<System.Rtti.TRttiProperty>

1TCollectionNotifyEvent<System.Rtti.TRttiProperty>

(TArrayManager<System.Rtti.TRttiProperty>g

(TArrayManager<System.Rtti.TRttiProperty>

&IEnumerable<System.Rtti.TRttiProperty>t!@

 TList<System.Rtti.TRttiProperty>.TEmptyFunc

,TList<System.Rtti.TRttiProperty>.TEnumerator5

,TList<System.Rtti.TRttiProperty>.TEnumerator

TList<System.Rtti.TRttiProperty>&

TList<System.Rtti.TRttiProperty>

$TEnumerator<System.Rtti.TRttiMethod>(

$TEnumerator<System.Rtti.TRttiMethod>

$TEnumerable<System.Rtti.TRttiMethod>-

$TEnumerable<System.Rtti.TRttiMethod>

'TList<System.Rtti.TRttiMethod>.arrayofT

"IComparer<System.Rtti.TRttiMethod>

/TCollectionNotifyEvent<System.Rtti.TRttiMethod>

&TArrayManager<System.Rtti.TRttiMethod>g

&TArrayManager<System.Rtti.TRttiMethod>

$IEnumerable<System.Rtti.TRttiMethod>t!@

)TList<System.Rtti.TRttiMethod>.TEmptyFunc

*TList<System.Rtti.TRttiMethod>.TEnumerator5

*TList<System.Rtti.TRttiMethod>.TEnumerator

TList<System.Rtti.TRttiMethod>&

TList<System.Rtti.TRttiMethod>d

5TArray<System.TArray<System.Rtti.TRttiInterfaceType>>

#TEnumerator<System.Rtti.TRttiField>(

#TEnumerator<System.Rtti.TRttiField>

#TEnumerable<System.Rtti.TRttiField>-

#TEnumerable<System.Rtti.TRttiField>

&TList<System.Rtti.TRttiField>.arrayofT

!IComparer<System.Rtti.TRttiField>

.TCollectionNotifyEvent<System.Rtti.TRttiField>

%TArrayManager<System.Rtti.TRttiField>g

%TArrayManager<System.Rtti.TRttiField>

#IEnumerable<System.Rtti.TRttiField>t!@

(TList<System.Rtti.TRttiField>.TEmptyFunc

)TList<System.Rtti.TRttiField>.TEnumerator5

)TList<System.Rtti.TRttiField>.TEnumerator

TList<System.Rtti.TRttiField>&

TList<System.Rtti.TRttiField>P

*TEnumerator<System.Rtti.TRttiManagedField>(

*TEnumerator<System.Rtti.TRttiManagedField>D2M

*TEnumerable<System.Rtti.TRttiManagedField>-

*TEnumerable<System.Rtti.TRttiManagedField>

-TList<System.Rtti.TRttiManagedField>.arrayofT

(IComparer<System.Rtti.TRttiManagedField>

5TCollectionNotifyEvent<System.Rtti.TRttiManagedField>

,TArrayManager<System.Rtti.TRttiManagedField>g

,TArrayManager<System.Rtti.TRttiManagedField>

*IEnumerable<System.Rtti.TRttiManagedField>t!@

/TList<System.Rtti.TRttiManagedField>.TEmptyFunc

0TList<System.Rtti.TRttiManagedField>.TEnumerator5

0TList<System.Rtti.TRttiManagedField>.TEnumerator

$TList<System.Rtti.TRttiManagedField>&

$TList<System.Rtti.TRttiManagedField>d;M

9TObjectDictionary<System.Pointer,System.Rtti.TRttiObject>M

9TObjectDictionary<System.Pointer,System.Rtti.TRttiObject>duM

8TComparison<System.Rtti.TMethodImplementation.TParamLoc>

6TComparer<System.Rtti.TMethodImplementation.TParamLoc>2

6TComparer<System.Rtti.TMethodImplementation.TParamLoc>

>TMoveArrayManager<System.Rtti.TMethodImplementation.TParamLoc>g

>TMoveArrayManager<System.Rtti.TMethodImplementation.TParamLoc>d

E.TList`1.Pack$823$0$Intf<System.Rtti.TMethodImplementation.TParamLoc>

E@TList`1.Pack$823$ActRec<System.Rtti.TMethodImplementation.TParamLoc>

System.RttihpK

ITList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>.arrayofT

DIComparer<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

QTCollectionNotifyEvent<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

Item-TPair<System.Pointer,System.Rtti.TRttiObject>

HTArrayManager<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>g

HTArrayManager<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

FIEnumerable<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>t!@

KTList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>.TEmptyFunc

LTList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>.TEnumerator5

LTList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>.TEnumerator

@TList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>&

@TList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

TList<System.Pointer>.arrayofT

IComparer<System.Pointer>

TArrayManager<System.Pointer>g

TArrayManager<System.Pointer>

IEnumerable<System.Pointer>t!@

TList<System.Pointer>.TEmptyFunc

!TList<System.Pointer>.TEnumerator5

!TList<System.Pointer>.TEnumerator

TList<System.Pointer>&

TList<System.Pointer>(

'TList<System.Rtti.TRttiObject>.arrayofT

"IComparer<System.Rtti.TRttiObject>

&TArrayManager<System.Rtti.TRttiObject>g

&TArrayManager<System.Rtti.TRttiObject>

$IEnumerable<System.Rtti.TRttiObject>t!@

)TList<System.Rtti.TRttiObject>.TEmptyFunc

*TList<System.Rtti.TRttiObject>.TEnumerator5

*TList<System.Rtti.TRttiObject>.TEnumerator

TList<System.Rtti.TRttiObject>&

TList<System.Rtti.TRttiObject>h

ITList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>.arrayofT

System.Generics.CollectionsH,L

DIComparer<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

QTCollectionNotifyEvent<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

Item-TPair<System.TypInfo.PTypeInfo,System.string>

HTArrayManager<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>g

HTArrayManager<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>@

FIEnumerable<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>t!@

KTList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>.TEmptyFunc

LTList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>.TEnumerator5

LTList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>.TEnumerator

@TList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>&

@TList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

(TList<System.TypInfo.PTypeInfo>.arrayofT

#IComparer<System.TypInfo.PTypeInfo>

'TArrayManager<System.TypInfo.PTypeInfo>g

'TArrayManager<System.TypInfo.PTypeInfo>

%IEnumerable<System.TypInfo.PTypeInfo>t!@

*TList<System.TypInfo.PTypeInfo>.TEmptyFunc

 TList<System.TypInfo.PTypeInfo>.TEnumerator5

 TList<System.TypInfo.PTypeInfo>.TEnumerator

TList<System.TypInfo.PTypeInfo>&

TList<System.TypInfo.PTypeInfo>

TList<System.string>.arrayofT

TArrayManager<System.string>g

TArrayManager<System.string>

TList<System.string>.TEmptyFunc

TList<System.string>.TEnumerator5

TList<System.string>.TEnumeratorh1O

TList<System.string>&

TList<System.string>

ITList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>.arrayofT

System.Generics.Collections<GL

DIComparer<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

QTCollectionNotifyEvent<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

Item-TPair<System.string,System.TypInfo.PTypeInfo>

HTArrayManager<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>g

HTArrayManager<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

FIEnumerable<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>t!@

KTList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>.TEmptyFunc

LTList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>.TEnumerator5

LTList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>.TEnumerator

@TList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>&

@TList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

$TComparison<System.TCustomAttribute>

"TComparer<System.TCustomAttribute>2

"TComparer<System.TCustomAttribute>

*TMoveArrayManager<System.TCustomAttribute>g

*TMoveArrayManager<System.TCustomAttribute>TWO

1.TList`1.Pack$823$0$Intf<System.TCustomAttribute>

1@TList`1.Pack$823$ActRec<System.TCustomAttribute>

1@TList`1.Pack$823$ActRec<System.TCustomAttribute>hZO

&TComparison<System.Rtti.TRttiProperty>

$TComparer<System.Rtti.TRttiProperty>2

$TComparer<System.Rtti.TRttiProperty>d\O

,TMoveArrayManager<System.Rtti.TRttiProperty>g

,TMoveArrayManager<System.Rtti.TRttiProperty>$^O

3.TList`1.Pack$823$0$Intf<System.Rtti.TRttiProperty>

3@TList`1.Pack$823$ActRec<System.Rtti.TRttiProperty>

3@TList`1.Pack$823$ActRec<System.Rtti.TRttiProperty>8aO

$TComparison<System.Rtti.TRttiMethod>

"TComparer<System.Rtti.TRttiMethod>2

"TComparer<System.Rtti.TRttiMethod>8cO

*TMoveArrayManager<System.Rtti.TRttiMethod>g

*TMoveArrayManager<System.Rtti.TRttiMethod>

1.TList`1.Pack$823$0$Intf<System.Rtti.TRttiMethod>

1@TList`1.Pack$823$ActRec<System.Rtti.TRttiMethod>XhO

1@TList`1.Pack$823$ActRec<System.Rtti.TRttiMethod>

#TComparison<System.Rtti.TRttiField>

!TComparer<System.Rtti.TRttiField>2

!TComparer<System.Rtti.TRttiField>

)TMoveArrayManager<System.Rtti.TRttiField>g

)TMoveArrayManager<System.Rtti.TRttiField>

0.TList`1.Pack$823$0$Intf<System.Rtti.TRttiField>

0@TList`1.Pack$823$ActRec<System.Rtti.TRttiField>

*TComparison<System.Rtti.TRttiManagedField>

(TComparer<System.Rtti.TRttiManagedField>2

(TComparer<System.Rtti.TRttiManagedField>

0TMoveArrayManager<System.Rtti.TRttiManagedField>g

0TMoveArrayManager<System.Rtti.TRttiManagedField>

7.TList`1.Pack$823$0$Intf<System.Rtti.TRttiManagedField>

7@TList`1.Pack$823$ActRec<System.Rtti.TRttiManagedField>

FTComparison<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

DTComparer<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>2

DTComparer<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

LTMoveArrayManager<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>g

LTMoveArrayManager<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

S.TList`1.Pack$823$0$Intf<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

S@TList`1.Pack$823$ActRec<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

S@TList`1.Pack$823$ActRec<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>H}O

TComparison<System.Pointer>

TComparer<System.Pointer>2

TComparer<System.Pointer>

!TMoveArrayManager<System.Pointer>g

!TMoveArrayManager<System.Pointer>(

(.TList`1.Pack$823$0$Intf<System.Pointer>

(@TList`1.Pack$823$ActRec<System.Pointer>

(@TList`1.Pack$823$ActRec<System.Pointer>

$TComparison<System.Rtti.TRttiObject>

"TComparer<System.Rtti.TRttiObject>2

"TComparer<System.Rtti.TRttiObject>

*TMoveArrayManager<System.Rtti.TRttiObject>g

*TMoveArrayManager<System.Rtti.TRttiObject>

1.TList`1.Pack$823$0$Intf<System.Rtti.TRttiObject>

1@TList`1.Pack$823$ActRec<System.Rtti.TRttiObject>(

1@TList`1.Pack$823$ActRec<System.Rtti.TRttiObject>

FTComparison<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

DTComparer<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>2

DTComparer<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

LTMoveArrayManager<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>g

LTMoveArrayManager<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

S.TList`1.Pack$823$0$Intf<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

S@TList`1.Pack$823$ActRec<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

S@TList`1.Pack$823$ActRec<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>d

System.RttiH,L

%TComparison<System.TypInfo.PTypeInfo>

#TComparer<System.TypInfo.PTypeInfo>2

#TComparer<System.TypInfo.PTypeInfo>

 TMoveArrayManager<System.TypInfo.PTypeInfo>g

 TMoveArrayManager<System.TypInfo.PTypeInfo>\

2.TList`1.Pack$823$0$Intf<System.TypInfo.PTypeInfo>

2@TList`1.Pack$823$ActRec<System.TypInfo.PTypeInfo>

2@TList`1.Pack$823$ActRec<System.TypInfo.PTypeInfo>p

TComparison<System.string>

TComparer<System.string>2

TComparer<System.string>d

TMoveArrayManager<System.string>g

TMoveArrayManager<System.string>

'.TList`1.Pack$823$0$Intf<System.string>

'@TList`1.Pack$823$ActRec<System.string>

FTComparison<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

DTComparer<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>2

DTComparer<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

LTMoveArrayManager<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>g

LTMoveArrayManager<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

S.TList`1.Pack$823$0$Intf<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

S@TList`1.Pack$823$ActRec<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

S@TList`1.Pack$823$ActRec<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>x

System.Rtti<GL

,TDelegatedComparer<System.Rtti.TRttiPackage>8

,TDelegatedComparer<System.Rtti.TRttiPackage>

?TDelegatedComparer<System.Rtti.TMethodImplementation.TParamLoc>8

?TDelegatedComparer<System.Rtti.TMethodImplementation.TParamLoc>t

 TDelegatedComparer<System.TCustomAttribute>8

 TDelegatedComparer<System.TCustomAttribute>@

-TDelegatedComparer<System.Rtti.TRttiProperty>8

-TDelegatedComparer<System.Rtti.TRttiProperty>

 TDelegatedComparer<System.Rtti.TRttiMethod>8

 TDelegatedComparer<System.Rtti.TRttiMethod>

*TDelegatedComparer<System.Rtti.TRttiField>8

*TDelegatedComparer<System.Rtti.TRttiField>4

1TDelegatedComparer<System.Rtti.TRttiManagedField>8

1TDelegatedComparer<System.Rtti.TRttiManagedField>

MTDelegatedComparer<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>8

MTDelegatedComparer<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

"TDelegatedComparer<System.Pointer>8

"TDelegatedComparer<System.Pointer>x

 TDelegatedComparer<System.Rtti.TRttiObject>8

 TDelegatedComparer<System.Rtti.TRttiObject>

MTDelegatedComparer<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>8

MTDelegatedComparer<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

,TDelegatedComparer<System.TypInfo.PTypeInfo>8

,TDelegatedComparer<System.TypInfo.PTypeInfo>

!TDelegatedComparer<System.string>8

!TDelegatedComparer<System.string>H

MTDelegatedComparer<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>8

MTDelegatedComparer<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

System.TypInfo

mkOperatorOverload

PFieldExEntryh

TFieldExEntry

PVmtMethodExEntryl

TVmtMethodExEntry

$TArray<System.TypInfo.TElementAlias>

&TArray<System.TypInfo.TEnumAliasEntry>

TPropSet<System.string>V

TPropSet<System.string>

TPropSet<System.WideString>V

TPropSet<System.WideString>

TPropSet<System.Single>K

TPropSet<System.Single>

TPropSet<System.Double>K

TPropSet<System.Double>

TPropSet<System.Extended>K

TPropSet<System.Extended>t

TPropSet<System.Comp>K

TPropSet<System.Comp>

TPropSet<System.Currency>K

TPropSet<System.Currency>L

TPropSet<System.IInterface>V

TPropSet<System.IInterface>

&TPropSet<System.TypInfo.TDynamicArray>V

&TPropSet<System.TypInfo.TDynamicArray>d

System.Classes

ssShift

htKeyword

EInvalidOperation

EInvalidOperation\5P

AOperator

System.ClassesHoP

TThread.TSynchronizeRecord

TThread.TSystemTimes

GetCPUUsage

TOperation

TObservers.TCanObserveEvent

TObservers.TObserverAddedEvent

Operation

FOnExecute

OnExecute

TArray<System.IInterface>

TEnumerator<System.IInterface>(

TEnumerator<System.IInterface>

TEnumerable<System.IInterface>-

TEnumerable<System.IInterface>@

!TList<System.IInterface>.arrayofT

IComparer<System.IInterface>

)TCollectionNotifyEvent<System.IInterface>

TArrayManager<System.IInterface>g

TArrayManager<System.IInterface>

IEnumerable<System.IInterface>t!@

#TList<System.IInterface>.TEmptyFunc

$TList<System.IInterface>.TEnumerator5

$TList<System.IInterface>.TEnumerator

TList<System.IInterface>&

TList<System.IInterface>

TThreadList<System.IInterface>&

TThreadList<System.IInterface>

&TArray<System.Classes.TCollectionItem>

 TEnumerator<System.Classes.TCollectionItem>(

 TEnumerator<System.Classes.TCollectionItem>

 TEnumerable<System.Classes.TCollectionItem>-

 TEnumerable<System.Classes.TCollectionItem>

.TList<System.Classes.TCollectionItem>.arrayofT

)IComparer<System.Classes.TCollectionItem>

6TCollectionNotifyEvent<System.Classes.TCollectionItem>

-TArrayManager<System.Classes.TCollectionItem>g

-TArrayManager<System.Classes.TCollectionItem>

 IEnumerable<System.Classes.TCollectionItem>t!@

0TList<System.Classes.TCollectionItem>.TEmptyFunc

1TList<System.Classes.TCollectionItem>.TEnumerator5

1TList<System.Classes.TCollectionItem>.TEnumerator48Q

%TList<System.Classes.TCollectionItem>&

%TList<System.Classes.TCollectionItem>

TArray<System.TObject>

TEnumerator<System.TObject>(

TEnumerator<System.TObject>

TEnumerable<System.TObject>-

TEnumerable<System.TObject>@HQ

TList<System.TObject>.arrayofT

IComparer<System.TObject>

&TCollectionNotifyEvent<System.TObject>

TArrayManager<System.TObject>g

TArrayManager<System.TObject>

IEnumerable<System.TObject>t!@

TList<System.TObject>.TEmptyFunc

!TList<System.TObject>.TEnumerator5

!TList<System.TObject>.TEnumerator

TList<System.TObject>&

TList<System.TObject>hOQ

!TArray<System.Classes.TComponent>

&TEnumerator<System.Classes.TComponent>(

&TEnumerator<System.Classes.TComponent>p\Q

&TEnumerable<System.Classes.TComponent>-

&TEnumerable<System.Classes.TComponent>

)TList<System.Classes.TComponent>.arrayofT

System.Generics.CollectionsX

$IComparer<System.Classes.TComponent>

1TCollectionNotifyEvent<System.Classes.TComponent>

(TArrayManager<System.Classes.TComponent>g

(TArrayManager<System.Classes.TComponent>

&IEnumerable<System.Classes.TComponent>t!@

 TList<System.Classes.TComponent>.TEmptyFunc

,TList<System.Classes.TComponent>.TEnumerator5

,TList<System.Classes.TComponent>.TEnumerator

TList<System.Classes.TComponent>&

TList<System.Classes.TComponent>TeQ

3TPair<System.Integer,System.Classes.IInterfaceList>

JTArray<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

OTEnumerator<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>(

OTEnumerator<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>@sQ

OTEnumerable<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>-

OTEnumerable<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

?TDictionary<System.Integer,System.Classes.IInterfaceList>.TItem

DTDictionary<System.Integer,System.Classes.IInterfaceList>.TItemArray

System.Generics.Collections(vQ

!IEqualityComparer<System.Integer>

&TCollectionNotifyEvent<System.Integer>

5TCollectionNotifyEvent<System.Classes.IInterfaceList>

TEnumerator<System.Integer>(

TEnumerator<System.Integer>`yQ

TEnumerable<System.Integer>-

TEnumerable<System.Integer>

HTDictionary<System.Integer,System.Classes.IInterfaceList>.TKeyEnumerator;

HTDictionary<System.Integer,System.Classes.IInterfaceList>.TKeyEnumerator

HTDictionary<System.Integer,System.Classes.IInterfaceList>.TKeyCollection;

HTDictionary<System.Integer,System.Classes.IInterfaceList>.TKeyCollection

%TArray<System.Classes.IInterfaceList>

*TEnumerator<System.Classes.IInterfaceList>(

*TEnumerator<System.Classes.IInterfaceList>D

*TEnumerable<System.Classes.IInterfaceList>-

*TEnumerable<System.Classes.IInterfaceList>

JTDictionary<System.Integer,System.Classes.IInterfaceList>.TValueEnumerator;

JTDictionary<System.Integer,System.Classes.IInterfaceList>.TValueEnumerator

JTDictionary<System.Integer,System.Classes.IInterfaceList>.TValueCollection;

JTDictionary<System.Integer,System.Classes.IInterfaceList>.TValueCollection

ITDictionary<System.Integer,System.Classes.IInterfaceList>.TPairEnumerator;

ITDictionary<System.Integer,System.Classes.IInterfaceList>.TPairEnumerator$

9TDictionary<System.Integer,System.Classes.IInterfaceList>9

9TDictionary<System.Integer,System.Classes.IInterfaceList>

Keys$

OnKeyNotifyDxQ

'TArray<System.Classes.TBasicActionLink>

,TEnumerator<System.Classes.TBasicActionLink>(

,TEnumerator<System.Classes.TBasicActionLink>,

,TEnumerable<System.Classes.TBasicActionLink>-

,TEnumerable<System.Classes.TBasicActionLink>|

/TList<System.Classes.TBasicActionLink>.arrayofT

System.Generics.Collections(

*IComparer<System.Classes.TBasicActionLink>

7TCollectionNotifyEvent<System.Classes.TBasicActionLink>

.TArrayManager<System.Classes.TBasicActionLink>g

.TArrayManager<System.Classes.TBasicActionLink>t

,IEnumerable<System.Classes.TBasicActionLink>t!@

1TList<System.Classes.TBasicActionLink>.TEmptyFunc

2TList<System.Classes.TBasicActionLink>.TEnumerator5

2TList<System.Classes.TBasicActionLink>.TEnumerator

&TList<System.Classes.TBasicActionLink>&

&TList<System.Classes.TBasicActionLink>d

ELoginCredentialError\

ELoginCredentialError4

"TLoginCredentialService.TLoginFunc

#TLoginCredentialService.TLoginEvent

Password

-TLoginCredentialService.TLoginCredentialEvent

Callback#TLoginCredentialService.TLoginEvent

3TLoginCredentialService.TLoginCredentialEventObject:

3TLoginCredentialService.TLoginCredentialEventObject

FLoginFunc

'TLoginCredentialService.TLoginFuncProxy:

ALoginFunc

'TLoginCredentialService.TLoginFuncProxyD

TLoginCredentialServiceM

RegisterLoginHandler

UnregisterLoginHandler

GetLoginCredentialEvent

GetLoginCredentials

TLoginCredentialService

4TPair<System.string,System.Classes.TPersistentClass>

KTArray<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>

PTEnumerator<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>(

PTEnumerator<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>

PTEnumerable<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>-

PTEnumerable<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>l

@TDictionary<System.string,System.Classes.TPersistentClass>.TItem

ETDictionary<System.string,System.Classes.TPersistentClass>.TItemArray

7TCollectionNotifyEvent<System.Classes.TPersistentClass>

ITDictionary<System.string,System.Classes.TPersistentClass>.TKeyEnumerator;

ITDictionary<System.string,System.Classes.TPersistentClass>.TKeyEnumerator

ITDictionary<System.string,System.Classes.TPersistentClass>.TKeyCollection;

ITDictionary<System.string,System.Classes.TPersistentClass>.TKeyCollection

'TArray<System.Classes.TPersistentClass>

,TEnumerator<System.Classes.TPersistentClass>(

,TEnumerator<System.Classes.TPersistentClass>l

,TEnumerable<System.Classes.TPersistentClass>-

,TEnumerable<System.Classes.TPersistentClass>

KTDictionary<System.string,System.Classes.TPersistentClass>.TValueEnumerator;

KTDictionary<System.string,System.Classes.TPersistentClass>.TValueEnumerator

KTDictionary<System.string,System.Classes.TPersistentClass>.TValueCollection;

KTDictionary<System.string,System.Classes.TPersistentClass>.TValueCollection

JTDictionary<System.string,System.Classes.TPersistentClass>.TPairEnumerator;

JTDictionary<System.string,System.Classes.TPersistentClass>.TPairEnumeratorX

:TDictionary<System.string,System.Classes.TPersistentClass>9

:TDictionary<System.string,System.Classes.TPersistentClass>X

KeysX

/TList<System.Classes.TPersistentClass>.arrayofT

System.Generics.CollectionsDOP

*IComparer<System.Classes.TPersistentClass>

.TArrayManager<System.Classes.TPersistentClass>g

.TArrayManager<System.Classes.TPersistentClass>

,IEnumerable<System.Classes.TPersistentClass>t!@

1TList<System.Classes.TPersistentClass>.TEmptyFunc

2TList<System.Classes.TPersistentClass>.TEnumerator5

2TList<System.Classes.TPersistentClass>.TEnumerator

&TList<System.Classes.TPersistentClass>&

&TList<System.Classes.TPersistentClass>

TArray<System.Classes.TRegGroup>

%TEnumerator<System.Classes.TRegGroup>(

%TEnumerator<System.Classes.TRegGroup>

%TEnumerable<System.Classes.TRegGroup>-

%TEnumerable<System.Classes.TRegGroup>0

(TList<System.Classes.TRegGroup>.arrayofT

System.Generics.Collections<

#IComparer<System.Classes.TRegGroup>

0TCollectionNotifyEvent<System.Classes.TRegGroup>

'TArrayManager<System.Classes.TRegGroup>g

'TArrayManager<System.Classes.TRegGroup>

%IEnumerable<System.Classes.TRegGroup>t!@

*TList<System.Classes.TRegGroup>.TEmptyFunc

 TList<System.Classes.TRegGroup>.TEnumerator5

 TList<System.Classes.TRegGroup>.TEnumerator

TList<System.Classes.TRegGroup>&

TList<System.Classes.TRegGroup>

%TObjectList<System.Classes.TRegGroup><

%TObjectList<System.Classes.TRegGroup>

TArray<System.Classes.TIntConst>

%TEnumerator<System.Classes.TIntConst>(

%TEnumerator<System.Classes.TIntConst>P

%TEnumerable<System.Classes.TIntConst>-

%TEnumerable<System.Classes.TIntConst>

(TList<System.Classes.TIntConst>.arrayofT

#IComparer<System.Classes.TIntConst>

0TCollectionNotifyEvent<System.Classes.TIntConst>

'TArrayManager<System.Classes.TIntConst>g

'TArrayManager<System.Classes.TIntConst>d

%IEnumerable<System.Classes.TIntConst>t!@

*TList<System.Classes.TIntConst>.TEmptyFunc

 TList<System.Classes.TIntConst>.TEnumerator5

 TList<System.Classes.TIntConst>.TEnumeratort

TList<System.Classes.TIntConst>&

TList<System.Classes.TIntConst>(

%TThreadList<System.Classes.TIntConst>&

%TThreadList<System.Classes.TIntConst>

 TArray<System.Classes.TFindGlobalComponent>

0TEnumerator<System.Classes.TFindGlobalComponent>(

0TEnumerator<System.Classes.TFindGlobalComponent>

0TEnumerable<System.Classes.TFindGlobalComponent>-

0TEnumerable<System.Classes.TFindGlobalComponent>X1R

3TList<System.Classes.TFindGlobalComponent>.arrayofT

System.Generics.Collections`

.IComparer<System.Classes.TFindGlobalComponent>

;TCollectionNotifyEvent<System.Classes.TFindGlobalComponent>

2TArrayManager<System.Classes.TFindGlobalComponent>g

2TArrayManager<System.Classes.TFindGlobalComponent>h4R

0IEnumerable<System.Classes.TFindGlobalComponent>t!@

5TList<System.Classes.TFindGlobalComponent>.TEmptyFunc

6TList<System.Classes.TFindGlobalComponent>.TEnumerator5

6TList<System.Classes.TFindGlobalComponent>.TEnumerator

*TList<System.Classes.TFindGlobalComponent>&

*TList<System.Classes.TFindGlobalComponent>p9R

7TArray<System.Classes.TList<System.Classes.TComponent>>

<TEnumerator<System.Classes.TList<System.Classes.TComponent>>(

<TEnumerator<System.Classes.TList<System.Classes.TComponent>>

<TEnumerable<System.Classes.TList<System.Classes.TComponent>>-

<TEnumerable<System.Classes.TList<System.Classes.TComponent>>dIR

LTList<System.Generics.Collections.TList<System.Classes.TComponent>>.arrayofT

GIComparer<System.Generics.Collections.TList<System.Classes.TComponent>>

GTCollectionNotifyEvent<System.Classes.TList<System.Classes.TComponent>>

Item TList<System.Classes.TComponent>

>TArrayManager<System.Classes.TList<System.Classes.TComponent>>g

>TArrayManager<System.Classes.TList<System.Classes.TComponent>>

IIEnumerable<System.Generics.Collections.TList<System.Classes.TComponent>>t!@

NTList<System.Generics.Collections.TList<System.Classes.TComponent>>.TEmptyFunc

OTList<System.Generics.Collections.TList<System.Classes.TComponent>>.TEnumerator5

OTList<System.Generics.Collections.TList<System.Classes.TComponent>>.TEnumerator`PR

CTList<System.Generics.Collections.TList<System.Classes.TComponent>>&

CTList<System.Generics.Collections.TList<System.Classes.TComponent>>\RR

TList.Sort$1974$0$Intf

TList.Sort$1974$ActRec

!TArray<System.Classes.TPropFixup>

&TEnumerator<System.Classes.TPropFixup>(

&TEnumerator<System.Classes.TPropFixup>

&TEnumerable<System.Classes.TPropFixup>-

&TEnumerable<System.Classes.TPropFixup>

)TList<System.Classes.TPropFixup>.arrayofT

$IComparer<System.Classes.TPropFixup>

1TCollectionNotifyEvent<System.Classes.TPropFixup>

(TArrayManager<System.Classes.TPropFixup>g

(TArrayManager<System.Classes.TPropFixup>

&IEnumerable<System.Classes.TPropFixup>t!@

 TList<System.Classes.TPropFixup>.TEmptyFunc

,TList<System.Classes.TPropFixup>.TEnumerator5

,TList<System.Classes.TPropFixup>.TEnumerator

TList<System.Classes.TPropFixup>&

TList<System.Classes.TPropFixup>

&TThreadList<System.Classes.TPropFixup>&

&TThreadList<System.Classes.TPropFixup>p

UhN%S

System.ClassesX

"TArray<System.Classes.TPersistent>

'TEnumerator<System.Classes.TPersistent>(

'TEnumerator<System.Classes.TPersistent>

'TEnumerable<System.Classes.TPersistent>-

'TEnumerable<System.Classes.TPersistent>

*TList<System.Classes.TPersistent>.arrayofT

%IComparer<System.Classes.TPersistent>

2TCollectionNotifyEvent<System.Classes.TPersistent>

)TArrayManager<System.Classes.TPersistent>g

)TArrayManager<System.Classes.TPersistent>

'IEnumerable<System.Classes.TPersistent>t!@

,TList<System.Classes.TPersistent>.TEmptyFunc

-TList<System.Classes.TPersistent>.TEnumerator5

-TList<System.Classes.TPersistent>.TEnumerator

!TList<System.Classes.TPersistent>&

!TList<System.Classes.TPersistent>

TArray<System.Classes.TThread>

#TEnumerator<System.Classes.TThread>(

#TEnumerator<System.Classes.TThread>`

#TEnumerable<System.Classes.TThread>-

#TEnumerable<System.Classes.TThread>

&TList<System.Classes.TThread>.arrayofT

!IComparer<System.Classes.TThread>

.TCollectionNotifyEvent<System.Classes.TThread>

%TArrayManager<System.Classes.TThread>g

%TArrayManager<System.Classes.TThread>d

#IEnumerable<System.Classes.TThread>t!@

(TList<System.Classes.TThread>.TEmptyFunc

)TList<System.Classes.TThread>.TEnumerator5

)TList<System.Classes.TThread>.TEnumeratorl

TList<System.Classes.TThread>&

TList<System.Classes.TThread>

#TThreadList<System.Classes.TThread>&

#TThreadList<System.Classes.TThread>

TComponent.Create@$2783$0$Intf

&TComparison<System.Classes.TComponent>

$TComparer<System.Classes.TComponent>2

$TComparer<System.Classes.TComponent>

-TDelegatedComparer<System.Classes.TComponent>8

-TDelegatedComparer<System.Classes.TComponent>

TComponent.Create@$2783$ActRec

#TComponent.GetObservers$2796$0$Intf

#TComponent.GetObservers$2796$1$Intf

#TComponent.GetObservers$2796$ActRec

7TLoginCredentialService.GetLoginCredentials$3070$0$Intf

LPassword

7TLoginCredentialService.GetLoginCredentials$3070$ActRec

TComparison<System.IInterface>

TComparer<System.IInterface>2

TComparer<System.IInterface>\

$TMoveArrayManager<System.IInterface>g

$TMoveArrayManager<System.IInterface>

 .TList`1.Pack$823$0$Intf<System.IInterface>

 @TList`1.Pack$823$ActRec<System.IInterface>

 TComparison<System.Classes.TCollectionItem>

)TComparer<System.Classes.TCollectionItem>2

)TComparer<System.Classes.TCollectionItem>

1TMoveArrayManager<System.Classes.TCollectionItem>g

1TMoveArrayManager<System.Classes.TCollectionItem>

8.TList`1.Pack$823$0$Intf<System.Classes.TCollectionItem>

8@TList`1.Pack$823$ActRec<System.Classes.TCollectionItem>

TComparison<System.TObject>

TComparer<System.TObject>2

TComparer<System.TObject>

!TMoveArrayManager<System.TObject>g

!TMoveArrayManager<System.TObject>

(.TList`1.Pack$823$0$Intf<System.TObject>

(@TList`1.Pack$823$ActRec<System.TObject>

,TMoveArrayManager<System.Classes.TComponent>g

,TMoveArrayManager<System.Classes.TComponent>

3.TList`1.Pack$823$0$Intf<System.Classes.TComponent>

3@TList`1.Pack$823$ActRec<System.Classes.TComponent>

RTList<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>.arrayofT

MIComparer<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

ZTCollectionNotifyEvent<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

Item3TPair<System.Integer,System.Classes.IInterfaceList>

QTArrayManager<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>g

QTArrayManager<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>@

OIEnumerable<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>t!@

TTList<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>.TEmptyFunc

UTList<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>.TEnumerator5

UTList<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>.TEnumerator

ITList<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>&

ITList<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

-TList<System.Classes.IInterfaceList>.arrayofT

(IComparer<System.Classes.IInterfaceList>

,TArrayManager<System.Classes.IInterfaceList>g

,TArrayManager<System.Classes.IInterfaceList>,

*IEnumerable<System.Classes.IInterfaceList>t!@

/TList<System.Classes.IInterfaceList>.TEmptyFunc

0TList<System.Classes.IInterfaceList>.TEnumerator5

0TList<System.Classes.IInterfaceList>.TEnumeratorL

$TList<System.Classes.IInterfaceList>&

$TList<System.Classes.IInterfaceList>

,TComparison<System.Classes.TBasicActionLink>

*TComparer<System.Classes.TBasicActionLink>2

*TComparer<System.Classes.TBasicActionLink>

2TMoveArrayManager<System.Classes.TBasicActionLink>g

2TMoveArrayManager<System.Classes.TBasicActionLink>

9.TList`1.Pack$823$0$Intf<System.Classes.TBasicActionLink>

9@TList`1.Pack$823$ActRec<System.Classes.TBasicActionLink><

9@TList`1.Pack$823$ActRec<System.Classes.TBasicActionLink>

System.Classes(

STList<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>.arrayofT

System.Generics.Collectionsh

NIComparer<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>

[TCollectionNotifyEvent<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>

Item4TPair<System.string,System.Classes.TPersistentClass>

RTArrayManager<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>g

RTArrayManager<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>T

PIEnumerable<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>t!@

UTList<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>.TEmptyFunc

VTList<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>.TEnumerator5

VTList<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>.TEnumerator

JTList<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>&

JTList<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>

,TComparison<System.Classes.TPersistentClass>

*TComparer<System.Classes.TPersistentClass>2

*TComparer<System.Classes.TPersistentClass>H

2TMoveArrayManager<System.Classes.TPersistentClass>g

2TMoveArrayManager<System.Classes.TPersistentClass>

9.TList`1.Pack$823$0$Intf<System.Classes.TPersistentClass>

9@TList`1.Pack$823$ActRec<System.Classes.TPersistentClass>

9@TList`1.Pack$823$ActRec<System.Classes.TPersistentClass><

System.ClassesDOP

%TComparison<System.Classes.TRegGroup>

#TComparer<System.Classes.TRegGroup>2

#TComparer<System.Classes.TRegGroup>L

 TMoveArrayManager<System.Classes.TRegGroup>g

 TMoveArrayManager<System.Classes.TRegGroup>

2.TList`1.Pack$823$0$Intf<System.Classes.TRegGroup>

2@TList`1.Pack$823$ActRec<System.Classes.TRegGroup>

System.Classes<

%TComparison<System.Classes.TIntConst>

#TComparer<System.Classes.TIntConst>2

#TComparer<System.Classes.TIntConst>

 TMoveArrayManager<System.Classes.TIntConst>g

 TMoveArrayManager<System.Classes.TIntConst>

2.TList`1.Pack$823$0$Intf<System.Classes.TIntConst>

2@TList`1.Pack$823$ActRec<System.Classes.TIntConst>

0TComparison<System.Classes.TFindGlobalComponent>

.TComparer<System.Classes.TFindGlobalComponent>2

.TComparer<System.Classes.TFindGlobalComponent>

6TMoveArrayManager<System.Classes.TFindGlobalComponent>g

6TMoveArrayManager<System.Classes.TFindGlobalComponent>

=.TList`1.Pack$823$0$Intf<System.Classes.TFindGlobalComponent>

=@TList`1.Pack$823$ActRec<System.Classes.TFindGlobalComponent>`

=@TList`1.Pack$823$ActRec<System.Classes.TFindGlobalComponent>

System.Classes`

ITComparison<System.Generics.Collections.TList<System.Classes.TComponent>>

GTComparer<System.Generics.Collections.TList<System.Classes.TComponent>>2

GTComparer<System.Generics.Collections.TList<System.Classes.TComponent>><

OTMoveArrayManager<System.Generics.Collections.TList<System.Classes.TComponent>>g

OTMoveArrayManager<System.Generics.Collections.TList<System.Classes.TComponent>><

V.TList`1.Pack$823$0$Intf<System.Generics.Collections.TList<System.Classes.TComponent>>

V@TList`1.Pack$823$ActRec<System.Generics.Collections.TList<System.Classes.TComponent>>

&TComparison<System.Classes.TPropFixup>

$TComparer<System.Classes.TPropFixup>2

$TComparer<System.Classes.TPropFixup>

,TMoveArrayManager<System.Classes.TPropFixup>g

,TMoveArrayManager<System.Classes.TPropFixup>

3.TList`1.Pack$823$0$Intf<System.Classes.TPropFixup>

3@TList`1.Pack$823$ActRec<System.Classes.TPropFixup>

'TComparison<System.Classes.TPersistent>

%TComparer<System.Classes.TPersistent>2

%TComparer<System.Classes.TPersistent>

-TMoveArrayManager<System.Classes.TPersistent>g

-TMoveArrayManager<System.Classes.TPersistent>

4.TList`1.Pack$823$0$Intf<System.Classes.TPersistent>

4@TList`1.Pack$823$ActRec<System.Classes.TPersistent>

#TComparison<System.Classes.TThread>

!TComparer<System.Classes.TThread>2

!TComparer<System.Classes.TThread>

)TMoveArrayManager<System.Classes.TThread>g

)TMoveArrayManager<System.Classes.TThread>|&V

0.TList`1.Pack$823$0$Intf<System.Classes.TThread>

0@TList`1.Pack$823$ActRec<System.Classes.TThread>

%TDelegatedComparer<System.IInterface>8

%TDelegatedComparer<System.IInterface>

2TDelegatedComparer<System.Classes.TCollectionItem>8

2TDelegatedComparer<System.Classes.TCollectionItem>d,V

"TDelegatedComparer<System.TObject>8

"TDelegatedComparer<System.TObject>

OTComparison<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

MTComparer<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>2

MTComparer<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

UTMoveArrayManager<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>g

UTMoveArrayManager<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

\.TList`1.Pack$823$0$Intf<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

\@TList`1.Pack$823$ActRec<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

\@TList`1.Pack$823$ActRec<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>><6V

TComparison<System.Integer>

TComparer<System.Integer>2

TComparer<System.Integer>

!TMoveArrayManager<System.Integer>g

!TMoveArrayManager<System.Integer>0:V

(.TList`1.Pack$823$0$Intf<System.Integer>

(@TList`1.Pack$823$ActRec<System.Integer>

(@TList`1.Pack$823$ActRec<System.Integer>(=V

*TComparison<System.Classes.IInterfaceList>

(TComparer<System.Classes.IInterfaceList>2

(TComparer<System.Classes.IInterfaceList>

0TMoveArrayManager<System.Classes.IInterfaceList>g

0TMoveArrayManager<System.Classes.IInterfaceList>

7.TList`1.Pack$823$0$Intf<System.Classes.IInterfaceList>

7@TList`1.Pack$823$ActRec<System.Classes.IInterfaceList>

3TDelegatedComparer<System.Classes.TBasicActionLink>8

3TDelegatedComparer<System.Classes.TBasicActionLink>

PTComparison<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>

NTComparer<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>2

NTComparer<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>

VTMoveArrayManager<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>g

VTMoveArrayManager<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>

].TList`1.Pack$823$0$Intf<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>

]@TList`1.Pack$823$ActRec<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>

]@TList`1.Pack$823$ActRec<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>dMV

System.Classesh

3TDelegatedComparer<System.Classes.TPersistentClass>8

3TDelegatedComparer<System.Classes.TPersistentClass>

,TDelegatedComparer<System.Classes.TRegGroup>8

,TDelegatedComparer<System.Classes.TRegGroup>

,TDelegatedComparer<System.Classes.TIntConst>8

,TDelegatedComparer<System.Classes.TIntConst>\RV

7TDelegatedComparer<System.Classes.TFindGlobalComponent>8

7TDelegatedComparer<System.Classes.TFindGlobalComponent>

PTDelegatedComparer<System.Generics.Collections.TList<System.Classes.TComponent>>8

PTDelegatedComparer<System.Generics.Collections.TList<System.Classes.TComponent>>

-TDelegatedComparer<System.Classes.TPropFixup>8

-TDelegatedComparer<System.Classes.TPropFixup>

.TDelegatedComparer<System.Classes.TPersistent>8

.TDelegatedComparer<System.Classes.TPersistent>dYV

*TDelegatedComparer<System.Classes.TThread>8

*TDelegatedComparer<System.Classes.TThread>

VTDelegatedComparer<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>8

VTDelegatedComparer<System.Classes.TPair<System.Integer,System.Classes.IInterfaceList>>

"TDelegatedComparer<System.Integer>8

"TDelegatedComparer<System.Integer>

1TDelegatedComparer<System.Classes.IInterfaceList>8

1TDelegatedComparer<System.Classes.IInterfaceList>D`V

WTDelegatedComparer<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>8

WTDelegatedComparer<System.Classes.TPair<System.string,System.Classes.TPersistentClass>>

System.Actions

FHelpKeyword

HelpKeyword

'TArray<System.Actions.TContainedAction>

,TEnumerator<System.Actions.TContainedAction>(

,TEnumerator<System.Actions.TContainedAction>

,TEnumerable<System.Actions.TContainedAction>-

,TEnumerable<System.Actions.TContainedAction>(zV

/TList<System.Actions.TContainedAction>.arrayofT

*IComparer<System.Actions.TContainedAction>

7TCollectionNotifyEvent<System.Actions.TContainedAction>

.TArrayManager<System.Actions.TContainedAction>g

.TArrayManager<System.Actions.TContainedAction> }V

,IEnumerable<System.Actions.TContainedAction>t!@

1TList<System.Actions.TContainedAction>.TEmptyFunc

2TList<System.Actions.TContainedAction>.TEnumerator5

2TList<System.Actions.TContainedAction>.TEnumeratorL

&TList<System.Actions.TContainedAction>&

&TList<System.Actions.TContainedAction>

/TContainedActionList.EnumByCategory$3394$0$Intf

/TContainedActionList.EnumByCategory$3394$ActRec

,TComparison<System.Actions.TContainedAction>

*TComparer<System.Actions.TContainedAction>2

*TComparer<System.Actions.TContainedAction>

2TMoveArrayManager<System.Actions.TContainedAction>g

2TMoveArrayManager<System.Actions.TContainedAction>P

9.TList`1.Pack$823$0$Intf<System.Actions.TContainedAction>

9@TList`1.Pack$823$ActRec<System.Actions.TContainedAction>

9@TList`1.Pack$823$ActRec<System.Actions.TContainedAction>|

3TDelegatedComparer<System.Actions.TContainedAction>8

3TDelegatedComparer<System.Actions.TContainedAction>

Winapi.Wincodec

System.Masks

TMask.TMaskSet

TMask.PMaskSet|

TMask.TMaskStates

TMask.TMaskState

System.DateUtils

TLocalTimeZone.TYearlyChanges4

TLocalTimeZone.TYearlyChangesp

ATPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>

ZTArray<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>

_TEnumerator<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>(

_TEnumerator<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>T

_TEnumerable<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>-

_TEnumerable<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>

MTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TItem

RTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TItemArray

System.Generics.Collections|

IEqualityComparer<System.Word>

#TCollectionNotifyEvent<System.Word>

FTCollectionNotifyEvent<System.DateUtils.TLocalTimeZone.TYearlyChanges>

TLocalTimeZone.TYearlyChanges

TEnumerator<System.Word>(

TEnumerator<System.Word>

TEnumerable<System.Word>-

TEnumerable<System.Word>

VTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TKeyEnumerator;

VTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TKeyEnumerator@

VTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TKeyCollection;

VTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TKeyCollectionX

6TArray<System.DateUtils.TLocalTimeZone.TYearlyChanges>

;TEnumerator<System.DateUtils.TLocalTimeZone.TYearlyChanges>(

;TEnumerator<System.DateUtils.TLocalTimeZone.TYearlyChanges>

;TEnumerable<System.DateUtils.TLocalTimeZone.TYearlyChanges>-

;TEnumerable<System.DateUtils.TLocalTimeZone.TYearlyChanges>l

XTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TValueEnumerator;

XTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TValueEnumerator

XTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TValueCollection;

XTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TValueCollection

WTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TPairEnumerator;

WTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>.TPairEnumerator\

GTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>9

GTDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>t

KeysP

MTObjectDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>M

MTObjectDictionary<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>H

bTList<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>.arrayofT

]IComparer<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>

jTCollectionNotifyEvent<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>

ItemATPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>

aTArrayManager<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>g

aTArrayManager<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>

_IEnumerable<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>t!@

dTList<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>.TEmptyFunc

eTList<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>.TEnumerator5

eTList<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>.TEnumerator

YTList<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>&

YTList<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>

TList<System.Word>.arrayofT

IComparer<System.Word>

TArrayManager<System.Word>g

TArrayManager<System.Word>

IEnumerable<System.Word>t!@

TList<System.Word>.TEmptyFunc

TList<System.Word>.TEnumerator5

TList<System.Word>.TEnumerator

TList<System.Word>&

TList<System.Word>PwW

>TList<System.DateUtils.TLocalTimeZone.TYearlyChanges>.arrayofT

System.Generics.Collections0

9IComparer<System.DateUtils.TLocalTimeZone.TYearlyChanges>

=TArrayManager<System.DateUtils.TLocalTimeZone.TYearlyChanges>g

=TArrayManager<System.DateUtils.TLocalTimeZone.TYearlyChanges>

;IEnumerable<System.DateUtils.TLocalTimeZone.TYearlyChanges>t!@

@TList<System.DateUtils.TLocalTimeZone.TYearlyChanges>.TEmptyFunc

ATList<System.DateUtils.TLocalTimeZone.TYearlyChanges>.TEnumerator5

ATList<System.DateUtils.TLocalTimeZone.TYearlyChanges>.TEnumerator`

5TList<System.DateUtils.TLocalTimeZone.TYearlyChanges>&

5TList<System.DateUtils.TLocalTimeZone.TYearlyChanges>@

_TComparison<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>

]TComparer<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>2

]TComparer<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>@

eTMoveArrayManager<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>g

eTMoveArrayManager<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>p

l.TList`1.Pack$823$0$Intf<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>

l@TList`1.Pack$823$ActRec<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>

l@TList`1.Pack$823$ActRec<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>4

TComparison<System.Word>

TComparer<System.Word>2

TComparer<System.Word>

TMoveArrayManager<System.Word>g

TMoveArrayManager<System.Word><

%.TList`1.Pack$823$0$Intf<System.Word>

%@TList`1.Pack$823$ActRec<System.Word>t

%@TList`1.Pack$823$ActRec<System.Word>,

;TComparison<System.DateUtils.TLocalTimeZone.TYearlyChanges>

9TComparer<System.DateUtils.TLocalTimeZone.TYearlyChanges>2

9TComparer<System.DateUtils.TLocalTimeZone.TYearlyChanges>,

ATMoveArrayManager<System.DateUtils.TLocalTimeZone.TYearlyChanges>g

ATMoveArrayManager<System.DateUtils.TLocalTimeZone.TYearlyChanges>

H.TList`1.Pack$823$0$Intf<System.DateUtils.TLocalTimeZone.TYearlyChanges>

H@TList`1.Pack$823$ActRec<System.DateUtils.TLocalTimeZone.TYearlyChanges>

H@TList`1.Pack$823$ActRec<System.DateUtils.TLocalTimeZone.TYearlyChanges>l

System.DateUtils0

fTDelegatedComparer<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>8

fTDelegatedComparer<System.DateUtils.TPair<System.Word,System.DateUtils.TLocalTimeZone.TYearlyChanges>>

TDelegatedComparer<System.Word>8

TDelegatedComparer<System.Word>

BTDelegatedComparer<System.DateUtils.TLocalTimeZone.TYearlyChanges>8

BTDelegatedComparer<System.DateUtils.TLocalTimeZone.TYearlyChanges>

TDirectory.TFilterPredicate

System.IOUtils

TDirectory.Delete$4036$0$Intf

TDirectory.Delete$4036$ActRec

TDirectory.Delete$4036$ActRec\

!TDirectory.DoGetFiles$4042$0$Intf

!TDirectory.DoGetFiles$4042$ActRec

TDirectory.IsEmpty$4086$0$Intf

TDirectory.IsEmpty$4086$ActRec

DeleteKey

System.IniFiles

TStringHash.THashItem

-TArray<System.IniFiles.TStringHash.THashItem>

2TEnumerator<System.IniFiles.TStringHash.THashItem>(

2TEnumerator<System.IniFiles.TStringHash.THashItem>

2TEnumerable<System.IniFiles.TStringHash.THashItem>-

2TEnumerable<System.IniFiles.TStringHash.THashItem>(

5TList<System.IniFiles.TStringHash.THashItem>.arrayofT

0IComparer<System.IniFiles.TStringHash.THashItem>

=TCollectionNotifyEvent<System.IniFiles.TStringHash.THashItem>

4TArrayManager<System.IniFiles.TStringHash.THashItem>g

4TArrayManager<System.IniFiles.TStringHash.THashItem>H

2IEnumerable<System.IniFiles.TStringHash.THashItem>t!@

7TList<System.IniFiles.TStringHash.THashItem>.TEmptyFunc

8TList<System.IniFiles.TStringHash.THashItem>.TEnumerator5

8TList<System.IniFiles.TStringHash.THashItem>.TEnumerator

,TList<System.IniFiles.TStringHash.THashItem>&

,TList<System.IniFiles.TStringHash.THashItem>X

2TComparison<System.IniFiles.TStringHash.THashItem>

0TComparer<System.IniFiles.TStringHash.THashItem>2

0TComparer<System.IniFiles.TStringHash.THashItem>

8TMoveArrayManager<System.IniFiles.TStringHash.THashItem>g

8TMoveArrayManager<System.IniFiles.TStringHash.THashItem>

?.TList`1.Pack$823$0$Intf<System.IniFiles.TStringHash.THashItem>

?@TList`1.Pack$823$ActRec<System.IniFiles.TStringHash.THashItem>

?@TList`1.Pack$823$ActRec<System.IniFiles.TStringHash.THashItem>(<X

9TDelegatedComparer<System.IniFiles.TStringHash.THashItem>8

9TDelegatedComparer<System.IniFiles.TStringHash.THashItem>

System.Win.Registry

TRegKeyInfo

NumSubKeys

MaxSubKeyLen

FCurrentKey

FRootKey

FCloseRootKey

CloseKey

CreateKey

GetKeyInfo

GetKeyNames

HasSubKeys

KeyExists

LoadKey

MoveKey

OpenKey

OpenKeyReadOnly

ReplaceKey

RestoreKey

SaveKey

UnLoadKey

CurrentKey

LastErrorMsgh5A

RootKey

RootKeyName

Uh.mX

Vcl.Graphics

EInvalidGraphicOperation

SupportsPartialTransparency

SupportsClipboardFormat

Monochrome

System.Contnrs

IsShortCut

Vcl.ActnList

OnExecute$

1.2.7

System.ZLib

Ht.Ht3

Vcl.GraphUtil

System.Win.ComObj

Vcl.Controls

igoParentPassthrough

FAlwaysShowDragImages

AlwaysShowDragImages

toFlickFallbackKeys

Vcl.Controlsh

'TCustomGestureEngine.TGestureEngineFlag

(TCustomGestureEngine.TGestureEngineFlags

Supported

TKeyEvent

TKeyPressEvent

FOnKeyDown

FOnKeyPress

FOnKeyUp

IsHintMsg

FNativeWheelSupport

FWheelSupportMessage

Vcl.StdCtrls

Vcl.StdCtrls-

FPasswordChar

Vcl.StdCtrlsC

PasswordChar, i

OnKeyDown

OnKeyPressp

OnKeyUpL

Vcl.StdCtrlsD

OnKeyUp

TCustomButton.TButtonStyle

Vcl.StdCtrls;

Vcl.StdCtrls2

Vcl.StdCtrls

!TScrollBarStyleHook.TScrollWindow6

!TScrollBarStyleHook.TScrollWindow`

%TCustomEdit.ObserverAdded$3346$0$Intf

%TCustomEdit.ObserverAdded$3346$ActRec

)TCustomCheckBox.ObserverAdded$3558$0$Intf

)TCustomCheckBox.ObserverAdded$3558$ActRec

)TCustomCheckBox.ObserverAdded$3558$ActRec

Vcl.Printers

APort

Port

Vcl.ToolWin

Vcl.ListActns

Vcl.Clipbrd

Vcl.StdActns

Vcl.ComCtrls

Vcl.ComCtrls'

Vcl.ComCtrls;

Vcl.ComCtrls1

cdsShowKeyboardCues

msShiftSelect

FSaveIndexes

Vcl.ComCtrls[

vsReport

Vcl.ComCtrls&

FCustomizeKeyName

Vcl.ComCtrlsV

CustomizeKeyName

acoUpDownKeyDropsList

KeyPress

FUpDownLeftPressed

TComboBoxExEnumerator5

TComboBoxExEnumerator

System.HelpIntfs

UnderstandsKeyword

(TArray<System.HelpIntfs.THelpViewerNode>

-TEnumerator<System.HelpIntfs.THelpViewerNode>(

-TEnumerator<System.HelpIntfs.THelpViewerNode>H

-TEnumerable<System.HelpIntfs.THelpViewerNode>-

-TEnumerable<System.HelpIntfs.THelpViewerNode>

0TList<System.HelpIntfs.THelpViewerNode>.arrayofT

 IComparer<System.HelpIntfs.THelpViewerNode>

8TCollectionNotifyEvent<System.HelpIntfs.THelpViewerNode>

/TArrayManager<System.HelpIntfs.THelpViewerNode>g

/TArrayManager<System.HelpIntfs.THelpViewerNode>

-IEnumerable<System.HelpIntfs.THelpViewerNode>t!@

2TList<System.HelpIntfs.THelpViewerNode>.TEmptyFunc

3TList<System.HelpIntfs.THelpViewerNode>.TEnumerator5

3TList<System.HelpIntfs.THelpViewerNode>.TEnumerator

'TList<System.HelpIntfs.THelpViewerNode>&

'TList<System.HelpIntfs.THelpViewerNode>

-TComparison<System.HelpIntfs.THelpViewerNode>

 TComparer<System.HelpIntfs.THelpViewerNode>2

 TComparer<System.HelpIntfs.THelpViewerNode>

3TMoveArrayManager<System.HelpIntfs.THelpViewerNode>g

3TMoveArrayManager<System.HelpIntfs.THelpViewerNode>

:.TList`1.Pack$823$0$Intf<System.HelpIntfs.THelpViewerNode>

:@TList`1.Pack$823$ActRec<System.HelpIntfs.THelpViewerNode>

4TDelegatedComparer<System.HelpIntfs.THelpViewerNode>8

4TDelegatedComparer<System.HelpIntfs.THelpViewerNode>

Vcl.Dialogs

FURL

Vcl.Dialogs`

Uh.zb

TDefaultLoginCredentials]

LoginEvent

LoginEventUsrPw

TDefaultLoginCredentials\

.TDefaultLoginCredentials.LoginEvent$835$0$Intf

.TDefaultLoginCredentials.LoginEvent$835$ActRec

3TDefaultLoginCredentials.LoginEventUsrPw$837$0$Intf

3TDefaultLoginCredentials.LoginEventUsrPw$837$ActRec8

3TDefaultLoginCredentials.LoginEventUsrPw$837$ActRec

Vcl.ExtCtrls

FProportional

Vcl.ExtCtrls$

Proportional

Vcl.ExtCtrlsF

Vcl.Themes

tcpCategoryPanelGroupDontCare

tcpCategoryPanelGroupRoot

tcpBackground

tcpGradientHeader

tcpThemedHeader

tcpChevronOpenedNormal

tcpChevronOpenedHot

tcpChevronOpenedPressed

tcpChevronClosedNormal

tcpChevronClosedHot

tcpChevronClosedPressed

tcpChevronClosedLeftNormal

tcpChevronClosedLeftHot

tcpChevronClosedLeftPressed

tcpThemedChevronOpenedNormal

tcpThemedChevronOpenedHot

tcpThemedChevronOpenedPressed

tcpThemedChevronClosedNormal

tcpThemedChevronClosedHot

tcpThemedChevronClosedPressed

tcDropDownButtonLeftPressed

tePassword

thHeaderItemLeftPressed

tsArrowBtnLeftPressed

ttbThumbLeftPressed

AuthorURL

TCustomStyleServices.TStyleFlag

TCustomStyleServices.TStyleFlags

 TCustomStyleEngine.TStyleEngineNotification

#TStyleManager.TStyleClassDescriptor

"TStyleManager.TStyleServicesHandle

TStyleManager.TSourceInfo

*TMouseTrackControlStyleHook.TMousePosition

"TArray<Vcl.Themes.TStyleHookClass>

'TEnumerator<Vcl.Themes.TStyleHookClass>(

'TEnumerator<Vcl.Themes.TStyleHookClass>@

'TEnumerable<Vcl.Themes.TStyleHookClass>-

'TEnumerable<Vcl.Themes.TStyleHookClass>

*TList<Vcl.Themes.TStyleHookClass>.arrayofT

System.Generics.CollectionsT

%IComparer<Vcl.Themes.TStyleHookClass>

2TCollectionNotifyEvent<Vcl.Themes.TStyleHookClass>

)TArrayManager<Vcl.Themes.TStyleHookClass>g

)TArrayManager<Vcl.Themes.TStyleHookClass>h

'IEnumerable<Vcl.Themes.TStyleHookClass>t!@

,TList<Vcl.Themes.TStyleHookClass>.TEmptyFunc

-TList<Vcl.Themes.TStyleHookClass>.TEnumerator5

-TList<Vcl.Themes.TStyleHookClass>.TEnumerator

!TList<Vcl.Themes.TStyleHookClass>&

!TList<Vcl.Themes.TStyleHookClass>8

RTPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>

eTArray<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>

jTEnumerator<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>(

jTEnumerator<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>T

jTEnumerable<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>-

jTEnumerable<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>

^TDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TItem

cTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TItemArray

IEqualityComparer<System.TClass>

%TCollectionNotifyEvent<System.TClass>

UTCollectionNotifyEvent<System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>

Item!TList<Vcl.Themes.TStyleHookClass>

TArray<System.TClass>

TEnumerator<System.TClass>(

TEnumerator<System.TClass>

TEnumerable<System.TClass>-

TEnumerable<System.TClass>

gTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TKeyEnumerator;

gTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TKeyEnumerator

gTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TKeyCollection;

gTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TKeyCollection$

4TArray<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>

9TEnumerator<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>(

9TEnumerator<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>

9TEnumerable<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>-

9TEnumerable<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>T

iTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TValueEnumerator;

iTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TValueEnumerator

iTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TValueCollection;

iTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TValueCollection

hTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TPairEnumerator;

hTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>.TPairEnumerator

XTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>9

XTDictionary<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>

Keysd

2TPair<System.string,Vcl.Themes.TSysStyleHookClass>

ETArray<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>

JTEnumerator<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>(

JTEnumerator<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>

JTEnumerable<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>-

JTEnumerable<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>D

>TDictionary<System.string,Vcl.Themes.TSysStyleHookClass>.TItem

CTDictionary<System.string,Vcl.Themes.TSysStyleHookClass>.TItemArray

%TCollectionNotifyEvent<System.string>

5TCollectionNotifyEvent<Vcl.Themes.TSysStyleHookClass>

TEnumerator<System.string>(

TEnumerator<System.string>h

TEnumerable<System.string>-

TEnumerable<System.string>

GTDictionary<System.string,Vcl.Themes.TSysStyleHookClass>.TKeyEnumerator;

GTDictionary<System.string,Vcl.Themes.TSysStyleHookClass>.TKeyEnumerator

GTDictionary<System.string,Vcl.Themes.TSysStyleHookClass>.TKeyCollection;

GTDictionary<System.string,Vcl.Themes.TSysStyleHookClass>.TKeyCollection

%TArray<Vcl.Themes.TSysStyleHookClass>

*TEnumerator<Vcl.Themes.TSysStyleHookClass>(

*TEnumerator<Vcl.Themes.TSysStyleHookClass>D$d

*TEnumerable<Vcl.Themes.TSysStyleHookClass>-

*TEnumerable<Vcl.Themes.TSysStyleHookClass>

ITDictionary<System.string,Vcl.Themes.TSysStyleHookClass>.TValueEnumerator;

ITDictionary<System.string,Vcl.Themes.TSysStyleHookClass>.TValueEnumerator

ITDictionary<System.string,Vcl.Themes.TSysStyleHookClass>.TValueCollection;

ITDictionary<System.string,Vcl.Themes.TSysStyleHookClass>.TValueCollection

HTDictionary<System.string,Vcl.Themes.TSysStyleHookClass>.TPairEnumerator;

HTDictionary<System.string,Vcl.Themes.TSysStyleHookClass>.TPairEnumerator

8TDictionary<System.string,Vcl.Themes.TSysStyleHookClass>9

8TDictionary<System.string,Vcl.Themes.TSysStyleHookClass>

Keys *d

OnKeyNotifyH

>TObjectDictionary<System.string,Vcl.Themes.TSysStyleHookClass>M

>TObjectDictionary<System.string,Vcl.Themes.TSysStyleHookClass>

3TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>

FTArray<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>

KTEnumerator<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>(

KTEnumerator<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>(8d

KTEnumerable<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>-

KTEnumerable<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>

?TDictionary<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>.TItem

DTDictionary<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>.TItemArray

&IEqualityComparer<Winapi.Windows.HWND>

 TCollectionNotifyEvent<Winapi.Windows.HWND>

0TCollectionNotifyEvent<Vcl.Themes.TSysStyleHook>

TArray<Winapi.Windows.HWND>

TEnumerator<Winapi.Windows.HWND>(

TEnumerator<Winapi.Windows.HWND>p>d

TEnumerable<Winapi.Windows.HWND>-

TEnumerable<Winapi.Windows.HWND>

HTDictionary<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>.TKeyEnumerator;

HTDictionary<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>.TKeyEnumerator

HTDictionary<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>.TKeyCollection;

HTDictionary<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>.TKeyCollection

TArray<Vcl.Themes.TSysStyleHook>

%TEnumerator<Vcl.Themes.TSysStyleHook>(

%TEnumerator<Vcl.Themes.TSysStyleHook>dEd

%TEnumerable<Vcl.Themes.TSysStyleHook>-

%TEnumerable<Vcl.Themes.TSysStyleHook>

JTDictionary<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>.TValueEnumerator;

JTDictionary<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>.TValueEnumerator

JTDictionary<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>.TValueCollection;

JTDictionary<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>.TValueCollection

ITDictionary<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>.TPairEnumerator;

ITDictionary<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>.TPairEnumerator0Ld

9TDictionary<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>9

9TDictionary<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>,Nd

Keys0Kd

?TObjectDictionary<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>M

?TObjectDictionary<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>

7TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>

JTArray<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>

OTEnumerator<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>(

OTEnumerator<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>DYd

OTEnumerable<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>-

OTEnumerable<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>

CTDictionary<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>.TItem

HTDictionary<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>.TItemArray

System.Generics.Collections,\d

4TCollectionNotifyEvent<Vcl.Themes.TChildControlInfo>

LTDictionary<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>.TKeyEnumerator;

LTDictionary<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>.TKeyEnumerator\^d

LTDictionary<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>.TKeyCollection;

LTDictionary<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>.TKeyCollection``d

$TArray<Vcl.Themes.TChildControlInfo>

)TEnumerator<Vcl.Themes.TChildControlInfo>(

)TEnumerator<Vcl.Themes.TChildControlInfo>

)TEnumerable<Vcl.Themes.TChildControlInfo>-

)TEnumerable<Vcl.Themes.TChildControlInfo>(dd

NTDictionary<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>.TValueEnumerator;

NTDictionary<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>.TValueEnumerator

NTDictionary<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>.TValueCollection;

NTDictionary<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>.TValueCollection

MTDictionary<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>.TPairEnumerator;

MTDictionary<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>.TPairEnumerator

=TDictionary<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>9

=TDictionary<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>

OnKeyNotify<]d

CTObjectDictionary<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>M

CTObjectDictionary<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>

9TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>

LTArray<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>

QTEnumerator<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>(

QTEnumerator<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>

QTEnumerable<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>-

QTEnumerable<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>

ETDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TItem

JTDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TItemArray

<TCollectionNotifyEvent<Vcl.Themes.TStyleManager.TSourceInfo>

NTDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TKeyEnumerator;

NTDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TKeyEnumeratorH|d

NTDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TKeyCollection;

NTDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TKeyCollectionP~d

,TArray<Vcl.Themes.TStyleManager.TSourceInfo>

1TEnumerator<Vcl.Themes.TStyleManager.TSourceInfo>(

1TEnumerator<Vcl.Themes.TStyleManager.TSourceInfo>

1TEnumerable<Vcl.Themes.TStyleManager.TSourceInfo>-

1TEnumerable<Vcl.Themes.TStyleManager.TSourceInfo>4

PTDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TValueEnumerator;

PTDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TValueEnumerator

PTDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TValueCollection;

PTDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TValueCollection

OTDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TPairEnumerator;

OTDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>.TPairEnumerator

?TDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>9

?TDictionary<System.string,Vcl.Themes.TStyleManager.TSourceInfo>

6TArray<Vcl.Themes.TStyleManager.TStyleClassDescriptor>

;TEnumerator<Vcl.Themes.TStyleManager.TStyleClassDescriptor>(

;TEnumerator<Vcl.Themes.TStyleManager.TStyleClassDescriptor>

;TEnumerable<Vcl.Themes.TStyleManager.TStyleClassDescriptor>-

;TEnumerable<Vcl.Themes.TStyleManager.TStyleClassDescriptor>

>TList<Vcl.Themes.TStyleManager.TStyleClassDescriptor>.arrayofT

9IComparer<Vcl.Themes.TStyleManager.TStyleClassDescriptor>

FTCollectionNotifyEvent<Vcl.Themes.TStyleManager.TStyleClassDescriptor>

Item#TStyleManager.TStyleClassDescriptor

=TArrayManager<Vcl.Themes.TStyleManager.TStyleClassDescriptor>g

=TArrayManager<Vcl.Themes.TStyleManager.TStyleClassDescriptor>

;IEnumerable<Vcl.Themes.TStyleManager.TStyleClassDescriptor>t!@

@TList<Vcl.Themes.TStyleManager.TStyleClassDescriptor>.TEmptyFunc

ATList<Vcl.Themes.TStyleManager.TStyleClassDescriptor>.TEnumerator5

ATList<Vcl.Themes.TStyleManager.TStyleClassDescriptor>.TEnumeratorP

5TList<Vcl.Themes.TStyleManager.TStyleClassDescriptor>&

5TList<Vcl.Themes.TStyleManager.TStyleClassDescriptor>0

*TArray<Vcl.Themes.TCustomStyleEngineClass>

/TEnumerator<Vcl.Themes.TCustomStyleEngineClass>(

/TEnumerator<Vcl.Themes.TCustomStyleEngineClass>

/TEnumerable<Vcl.Themes.TCustomStyleEngineClass>-

/TEnumerable<Vcl.Themes.TCustomStyleEngineClass>

2TList<Vcl.Themes.TCustomStyleEngineClass>.arrayofT

-IComparer<Vcl.Themes.TCustomStyleEngineClass>

:TCollectionNotifyEvent<Vcl.Themes.TCustomStyleEngineClass>

1TArrayManager<Vcl.Themes.TCustomStyleEngineClass>g

1TArrayManager<Vcl.Themes.TCustomStyleEngineClass>

/IEnumerable<Vcl.Themes.TCustomStyleEngineClass>t!@

4TList<Vcl.Themes.TCustomStyleEngineClass>.TEmptyFunc

5TList<Vcl.Themes.TCustomStyleEngineClass>.TEnumerator5

5TList<Vcl.Themes.TCustomStyleEngineClass>.TEnumeratorX

)TList<Vcl.Themes.TCustomStyleEngineClass>&

)TList<Vcl.Themes.TCustomStyleEngineClass>

'TArray<Vcl.Themes.TCustomStyleServices>

,TEnumerator<Vcl.Themes.TCustomStyleServices>(

,TEnumerator<Vcl.Themes.TCustomStyleServices>X

,TEnumerable<Vcl.Themes.TCustomStyleServices>-

,TEnumerable<Vcl.Themes.TCustomStyleServices>

/TList<Vcl.Themes.TCustomStyleServices>.arrayofT

*IComparer<Vcl.Themes.TCustomStyleServices>

7TCollectionNotifyEvent<Vcl.Themes.TCustomStyleServices>

.TArrayManager<Vcl.Themes.TCustomStyleServices>g

.TArrayManager<Vcl.Themes.TCustomStyleServices>

,IEnumerable<Vcl.Themes.TCustomStyleServices>t!@

1TList<Vcl.Themes.TCustomStyleServices>.TEmptyFunc

2TList<Vcl.Themes.TCustomStyleServices>.TEnumerator5

2TList<Vcl.Themes.TCustomStyleServices>.TEnumerator

&TList<Vcl.Themes.TCustomStyleServices>&

&TList<Vcl.Themes.TCustomStyleServices>

TArray<System.Types.TPoint>

TEnumerator<System.Types.TPoint>(

TEnumerator<System.Types.TPoint>

TEnumerable<System.Types.TPoint>-

TEnumerable<System.Types.TPoint>$"e

#TList<System.Types.TPoint>.arrayofT

IComparer<System.Types.TPoint>

 TCollectionNotifyEvent<System.Types.TPoint>

"TArrayManager<System.Types.TPoint>g

"TArrayManager<System.Types.TPoint>

IEnumerable<System.Types.TPoint>t!@

%TList<System.Types.TPoint>.TEmptyFunc

&TList<System.Types.TPoint>.TEnumerator5

&TList<System.Types.TPoint>.TEnumerator

TList<System.Types.TPoint>&

TList<System.Types.TPoint>

'TComparison<Vcl.Themes.TStyleHookClass>

%TComparer<Vcl.Themes.TStyleHookClass>2

%TComparer<Vcl.Themes.TStyleHookClass>\Bg

-TMoveArrayManager<Vcl.Themes.TStyleHookClass>g

-TMoveArrayManager<Vcl.Themes.TStyleHookClass>

4.TList`1.Pack$823$0$Intf<Vcl.Themes.TStyleHookClass>

4@TList`1.Pack$823$ActRec<Vcl.Themes.TStyleHookClass>

4@TList`1.Pack$823$ActRec<Vcl.Themes.TStyleHookClass>8Gg

Vcl.ThemesT

mTList<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>.arrayofT

hIComparer<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>

uTCollectionNotifyEvent<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>

ItemRTPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>

lTArrayManager<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>g

lTArrayManager<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>

jIEnumerable<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>t!@

oTList<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>.TEmptyFunc

pTList<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>.TEnumerator5

pTList<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>.TEnumerator,Og

dTList<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>&

dTList<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>lQg

TList<System.TClass>.arrayofT

IComparer<System.TClass>

TArrayManager<System.TClass>g

TArrayManager<System.TClass>

IEnumerable<System.TClass>t!@

TList<System.TClass>.TEmptyFunc

TList<System.TClass>.TEnumerator5

TList<System.TClass>.TEnumerator

TList<System.TClass>&

TList<System.TClass>0dg

<TList<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>.arrayofT

7IComparer<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>

;TArrayManager<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>g

;TArrayManager<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>

9IEnumerable<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>t!@

>TList<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>.TEmptyFunc

?TList<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>.TEnumerator5

?TList<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>.TEnumerator8ug

3TList<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>&

3TList<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>

MTList<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>.arrayofT

HIComparer<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>

UTCollectionNotifyEvent<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>

Item2TPair<System.string,Vcl.Themes.TSysStyleHookClass>

LTArrayManager<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>g

LTArrayManager<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>(

JIEnumerable<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>t!@

OTList<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>.TEmptyFunc

PTList<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>.TEnumerator5

PTList<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>.TEnumerator

DTList<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>&

DTList<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>

-TList<Vcl.Themes.TSysStyleHookClass>.arrayofT

System.Generics.Collections

(IComparer<Vcl.Themes.TSysStyleHookClass>

,TArrayManager<Vcl.Themes.TSysStyleHookClass>g

,TArrayManager<Vcl.Themes.TSysStyleHookClass>

*IEnumerable<Vcl.Themes.TSysStyleHookClass>t!@

/TList<Vcl.Themes.TSysStyleHookClass>.TEmptyFunc

0TList<Vcl.Themes.TSysStyleHookClass>.TEnumerator5

0TList<Vcl.Themes.TSysStyleHookClass>.TEnumerator

$TList<Vcl.Themes.TSysStyleHookClass>&

$TList<Vcl.Themes.TSysStyleHookClass>

NTList<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>.arrayofT

IIComparer<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>

VTCollectionNotifyEvent<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>

Item3TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>

MTArrayManager<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>g

MTArrayManager<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>

KIEnumerable<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>t!@

PTList<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>.TEmptyFunc

QTList<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>.TEnumerator5

QTList<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>.TEnumeratorl

ETList<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>&

ETList<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>l

#TList<Winapi.Windows.HWND>.arrayofT

System.Generics.Collections0%A

IComparer<Winapi.Windows.HWND>

"TArrayManager<Winapi.Windows.HWND>g

"TArrayManager<Winapi.Windows.HWND>x

IEnumerable<Winapi.Windows.HWND>t!@

%TList<Winapi.Windows.HWND>.TEmptyFunc

&TList<Winapi.Windows.HWND>.TEnumerator5

&TList<Winapi.Windows.HWND>.TEnumeratort

TList<Winapi.Windows.HWND>&

TList<Winapi.Windows.HWND>

(TList<Vcl.Themes.TSysStyleHook>.arrayofT

#IComparer<Vcl.Themes.TSysStyleHook>

'TArrayManager<Vcl.Themes.TSysStyleHook>g

'TArrayManager<Vcl.Themes.TSysStyleHook>

%IEnumerable<Vcl.Themes.TSysStyleHook>t!@

*TList<Vcl.Themes.TSysStyleHook>.TEmptyFunc

 TList<Vcl.Themes.TSysStyleHook>.TEnumerator5

 TList<Vcl.Themes.TSysStyleHook>.TEnumerator

TList<Vcl.Themes.TSysStyleHook>&

TList<Vcl.Themes.TSysStyleHook>p

RTList<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>.arrayofT

MIComparer<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>

ZTCollectionNotifyEvent<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>

Item7TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>

QTArrayManager<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>g

QTArrayManager<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>p

OIEnumerable<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>t!@

TTList<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>.TEmptyFunc

UTList<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>.TEnumerator5

UTList<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>.TEnumerator(

ITList<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>&

ITList<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>0

,TList<Vcl.Themes.TChildControlInfo>.arrayofT

System.Generics.Collections@

'IComparer<Vcl.Themes.TChildControlInfo>

 TArrayManager<Vcl.Themes.TChildControlInfo>g

 TArrayManager<Vcl.Themes.TChildControlInfo>X

)IEnumerable<Vcl.Themes.TChildControlInfo>t!@

.TList<Vcl.Themes.TChildControlInfo>.TEmptyFunc

/TList<Vcl.Themes.TChildControlInfo>.TEnumerator5

/TList<Vcl.Themes.TChildControlInfo>.TEnumeratorx

#TList<Vcl.Themes.TChildControlInfo>&

#TList<Vcl.Themes.TChildControlInfo>4

TTList<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>.arrayofT

OIComparer<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>

\TCollectionNotifyEvent<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>

Item9TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>

STArrayManager<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>g

STArrayManager<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>|

QIEnumerable<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>t!@

VTList<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>.TEmptyFunc

WTList<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>.TEnumerator5

WTList<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>.TEnumerator<

KTList<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>&

KTList<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>H

4TList<Vcl.Themes.TStyleManager.TSourceInfo>.arrayofT

/IComparer<Vcl.Themes.TStyleManager.TSourceInfo>

3TArrayManager<Vcl.Themes.TStyleManager.TSourceInfo>g

3TArrayManager<Vcl.Themes.TStyleManager.TSourceInfo>

1IEnumerable<Vcl.Themes.TStyleManager.TSourceInfo>t!@

6TList<Vcl.Themes.TStyleManager.TSourceInfo>.TEmptyFunc

7TList<Vcl.Themes.TStyleManager.TSourceInfo>.TEnumerator5

7TList<Vcl.Themes.TStyleManager.TSourceInfo>.TEnumerator

 TList<Vcl.Themes.TStyleManager.TSourceInfo>&

 TList<Vcl.Themes.TStyleManager.TSourceInfo>

;TComparison<Vcl.Themes.TStyleManager.TStyleClassDescriptor>

9TComparer<Vcl.Themes.TStyleManager.TStyleClassDescriptor>2

9TComparer<Vcl.Themes.TStyleManager.TStyleClassDescriptor>

ATMoveArrayManager<Vcl.Themes.TStyleManager.TStyleClassDescriptor>g

ATMoveArrayManager<Vcl.Themes.TStyleManager.TStyleClassDescriptor>|8h

H.TList`1.Pack$823$0$Intf<Vcl.Themes.TStyleManager.TStyleClassDescriptor>

H@TList`1.Pack$823$ActRec<Vcl.Themes.TStyleManager.TStyleClassDescriptor>

/TComparison<Vcl.Themes.TCustomStyleEngineClass>

-TComparer<Vcl.Themes.TCustomStyleEngineClass>2

-TComparer<Vcl.Themes.TCustomStyleEngineClass>

5TMoveArrayManager<Vcl.Themes.TCustomStyleEngineClass>g

5TMoveArrayManager<Vcl.Themes.TCustomStyleEngineClass>

<.TList`1.Pack$823$0$Intf<Vcl.Themes.TCustomStyleEngineClass>

<@TList`1.Pack$823$ActRec<Vcl.Themes.TCustomStyleEngineClass>

Vcl.Themes`

,TComparison<Vcl.Themes.TCustomStyleServices>

*TComparer<Vcl.Themes.TCustomStyleServices>2

*TComparer<Vcl.Themes.TCustomStyleServices>$Eh

2TMoveArrayManager<Vcl.Themes.TCustomStyleServices>g

2TMoveArrayManager<Vcl.Themes.TCustomStyleServices>

9.TList`1.Pack$823$0$Intf<Vcl.Themes.TCustomStyleServices>

9@TList`1.Pack$823$ActRec<Vcl.Themes.TCustomStyleServices>tJh

9@TList`1.Pack$823$ActRec<Vcl.Themes.TCustomStyleServices>

TComparison<System.Types.TPoint>

TComparer<System.Types.TPoint>2

TComparer<System.Types.TPoint> Lh

&TMoveArrayManager<System.Types.TPoint>g

&TMoveArrayManager<System.Types.TPoint>

-.TList`1.Pack$823$0$Intf<System.Types.TPoint>

-@TList`1.Pack$823$ActRec<System.Types.TPoint>(Qh

-@TList`1.Pack$823$ActRec<System.Types.TPoint>

.TDelegatedComparer<Vcl.Themes.TStyleHookClass>8

.TDelegatedComparer<Vcl.Themes.TStyleHookClass>

jTComparison<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>

hTComparer<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>2

hTComparer<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>

pTMoveArrayManager<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>g

pTMoveArrayManager<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>

w.TList`1.Pack$823$0$Intf<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>

w@TList`1.Pack$823$ActRec<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>

TComparison<System.TClass>

TComparer<System.TClass>2

TComparer<System.TClass>`]h

TMoveArrayManager<System.TClass>g

TMoveArrayManager<System.TClass>

'.TList`1.Pack$823$0$Intf<System.TClass>

'@TList`1.Pack$823$ActRec<System.TClass>

9TComparison<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>

7TComparer<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>2

7TComparer<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>

?TMoveArrayManager<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>g

?TMoveArrayManager<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>

F.TList`1.Pack$823$0$Intf<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>

F@TList`1.Pack$823$ActRec<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>

F@TList`1.Pack$823$ActRec<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>$ih

JTComparison<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>

HTComparer<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>2

HTComparer<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>pkh

PTMoveArrayManager<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>g

PTMoveArrayManager<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>xmh

W.TList`1.Pack$823$0$Intf<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>

W@TList`1.Pack$823$ActRec<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>

Vcl.ThemesX

*TComparison<Vcl.Themes.TSysStyleHookClass>

(TComparer<Vcl.Themes.TSysStyleHookClass>2

(TComparer<Vcl.Themes.TSysStyleHookClass>Dsh

0TMoveArrayManager<Vcl.Themes.TSysStyleHookClass>g

0TMoveArrayManager<Vcl.Themes.TSysStyleHookClass>

7.TList`1.Pack$823$0$Intf<Vcl.Themes.TSysStyleHookClass>

7@TList`1.Pack$823$ActRec<Vcl.Themes.TSysStyleHookClass>

7@TList`1.Pack$823$ActRec<Vcl.Themes.TSysStyleHookClass>,xh

Vcl.Themes

KTComparison<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>

ITComparer<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>2

ITComparer<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>\zh

QTMoveArrayManager<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>g

QTMoveArrayManager<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>d|h

X.TList`1.Pack$823$0$Intf<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>

X@TList`1.Pack$823$ActRec<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>

TComparison<Winapi.Windows.HWND>

TComparer<Winapi.Windows.HWND>2

TComparer<Winapi.Windows.HWND>0

&TMoveArrayManager<Winapi.Windows.HWND>g

&TMoveArrayManager<Winapi.Windows.HWND>

-.TList`1.Pack$823$0$Intf<Winapi.Windows.HWND>

-@TList`1.Pack$823$ActRec<Winapi.Windows.HWND>8

-@TList`1.Pack$823$ActRec<Winapi.Windows.HWND>

Vcl.Themes0%A

%TComparison<Vcl.Themes.TSysStyleHook>

#TComparer<Vcl.Themes.TSysStyleHook>2

#TComparer<Vcl.Themes.TSysStyleHook>

 TMoveArrayManager<Vcl.Themes.TSysStyleHook>g

 TMoveArrayManager<Vcl.Themes.TSysStyleHook>

2.TList`1.Pack$823$0$Intf<Vcl.Themes.TSysStyleHook>

2@TList`1.Pack$823$ActRec<Vcl.Themes.TSysStyleHook>

OTComparison<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>

MTComparer<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>2

MTComparer<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>

UTMoveArrayManager<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>g

UTMoveArrayManager<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>

\.TList`1.Pack$823$0$Intf<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>

\@TList`1.Pack$823$ActRec<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>

\@TList`1.Pack$823$ActRec<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>x

)TComparison<Vcl.Themes.TChildControlInfo>

'TComparer<Vcl.Themes.TChildControlInfo>2

'TComparer<Vcl.Themes.TChildControlInfo>

/TMoveArrayManager<Vcl.Themes.TChildControlInfo>g

/TMoveArrayManager<Vcl.Themes.TChildControlInfo>

6.TList`1.Pack$823$0$Intf<Vcl.Themes.TChildControlInfo>

6@TList`1.Pack$823$ActRec<Vcl.Themes.TChildControlInfo>

Vcl.Themes@

QTComparison<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>

OTComparer<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>2

OTComparer<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>

WTMoveArrayManager<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>g

WTMoveArrayManager<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>

^.TList`1.Pack$823$0$Intf<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>

^@TList`1.Pack$823$ActRec<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>

1TComparison<Vcl.Themes.TStyleManager.TSourceInfo>

/TComparer<Vcl.Themes.TStyleManager.TSourceInfo>2

/TComparer<Vcl.Themes.TStyleManager.TSourceInfo>

7TMoveArrayManager<Vcl.Themes.TStyleManager.TSourceInfo>g

7TMoveArrayManager<Vcl.Themes.TStyleManager.TSourceInfo>

>.TList`1.Pack$823$0$Intf<Vcl.Themes.TStyleManager.TSourceInfo>

>@TList`1.Pack$823$ActRec<Vcl.Themes.TStyleManager.TSourceInfo>

BTDelegatedComparer<Vcl.Themes.TStyleManager.TStyleClassDescriptor>8

BTDelegatedComparer<Vcl.Themes.TStyleManager.TStyleClassDescriptor>L

6TDelegatedComparer<Vcl.Themes.TCustomStyleEngineClass>8

6TDelegatedComparer<Vcl.Themes.TCustomStyleEngineClass>

3TDelegatedComparer<Vcl.Themes.TCustomStyleServices>8

3TDelegatedComparer<Vcl.Themes.TCustomStyleServices>

'TDelegatedComparer<System.Types.TPoint>8

'TDelegatedComparer<System.Types.TPoint>

qTDelegatedComparer<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>8

qTDelegatedComparer<Vcl.Themes.TPair<System.TClass,System.Generics.Collections.TList<Vcl.Themes.TStyleHookClass>>>,

!TDelegatedComparer<System.TClass>8

!TDelegatedComparer<System.TClass>`

@TDelegatedComparer<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>8

@TDelegatedComparer<Vcl.Themes.TList<Vcl.Themes.TStyleHookClass>>

QTDelegatedComparer<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>8

QTDelegatedComparer<Vcl.Themes.TPair<System.string,Vcl.Themes.TSysStyleHookClass>>

1TDelegatedComparer<Vcl.Themes.TSysStyleHookClass>8

1TDelegatedComparer<Vcl.Themes.TSysStyleHookClass>

RTDelegatedComparer<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>8

RTDelegatedComparer<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TSysStyleHook>>p

'TDelegatedComparer<Winapi.Windows.HWND>8

'TDelegatedComparer<Winapi.Windows.HWND>d

,TDelegatedComparer<Vcl.Themes.TSysStyleHook>8

,TDelegatedComparer<Vcl.Themes.TSysStyleHook>

VTDelegatedComparer<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>8

VTDelegatedComparer<Vcl.Themes.TPair<Winapi.Windows.HWND,Vcl.Themes.TChildControlInfo>>

0TDelegatedComparer<Vcl.Themes.TChildControlInfo>8

0TDelegatedComparer<Vcl.Themes.TChildControlInfo>

XTDelegatedComparer<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>8

XTDelegatedComparer<Vcl.Themes.TPair<System.string,Vcl.Themes.TStyleManager.TSourceInfo>>\

8TDelegatedComparer<Vcl.Themes.TStyleManager.TSourceInfo>8

8TDelegatedComparer<Vcl.Themes.TStyleManager.TSourceInfo>`

Vcl.ImgList

lrMonoChrome

Vcl.Menus

FAutoHotkeys

RethinkHotkeys

AutoHotkeysp

AutoHotkeys

System.Win.Taskbar

System.Win.TaskbarCore

Vcl.Forms

ssHotTrack

Vcl.Forms@

Vcl.Forms;

Vcl.Forms4

poProportional

fsShowing

FWindowState

FKeyPreview

WantChildKey

KeyPreview4&i

WindowState

Vcl.Formsc

KeyPreview

Vcl.Forms4Oj

TApplication.TBiDiKeyboard

BiDiKeyboard

NonBiDiKeyboard

BiDiKeyboardHKL

NonBiDiKeyboardHKL

SetBiDiKeyboard

SetNonBiDiKeyboard

GetBidiKeyboard

GetNonBidiKeyboard

ApplyBiDiKeyboardLayout

ApplyNonBiDiKeyboardLayout

Vcl.Forms0%A

FBiDiKeyboard

FEnumAllWindowsOnActivateHint

FOnActionExecute

Keyword

EnumAllWindowsOnActivateHint

OnActionExecute

!TScrollingStyleHook.TScrollWindow6

!TScrollingStyleHook.TScrollWindow

1TFormStyleHook.TMainMenuBarStyleHook.TMenuBarItem

(:TFormStyleHook.TMainMenuBarStyleHook.:1

FEnterWithKeyboard

$TFormStyleHook.TMainMenuBarStyleHook8

CheckHotKeyItem

$TFormStyleHook.TMainMenuBarStyleHook

EnterWithKeyboard

Vcl.Imaging.pngimage

fKeyword

Vcl.Imaging.jpeg

-2147483648

FMsgQueued

MsgRec

FMsgRelease

TIcsMsgMap

FMsgMap

FMsgLow

FMsgCnt

AllocateMsgHandler

MsgLow

MsgLeft

TWhMaxMsgIDs

SetWndHandlerMaxMsgIDs

sin_port

sin6_port

TEVP_PKEY_st

PEVP_PKEY<~n

TX509_PUBKEY_st

public_key

pkey

PX509_PUBKEYD

cert_info

TNTLM_Msg2_Info

wsoTcpNoDelay

wsoNoHttp10Tunnel

FDnsLookupCheckMsg

FDnsLookupTempMsg

FMsg_WM_ASYNCSELECT

FMsg_WM_ASYNCGETHOSTBYNAME

FMsg_WM_ASYNCGETHOSTBYADDR

FMsg_WM_CLOSE_DELAYED

FMsg_WM_TRIGGER_EXCEPTION

FMsg_WM_TRIGGER_DATA_AVAILABLE

FLocalPortResolved

FPortStr

FPortAssigned

FPortResolved

FPortNum

FLocalPortStr

FLocalPortNum

GetPeerPort

GetXPort

SetTcpNoDelayOption

%SetRoutingInterfaceChangeNotification

THttpTunnelAuthType

THttpTunnelServerAuthTypes

THttpTunnelState

THttpTunnelErrorEvent

THttpTunnelChunkState

THttpTunnelProto

THttpTunnelReconnectRequest

FHttpTunnelAuthChallenge

FHttpTunnelAuthDigestCached

FHttpTunnelAuthDigestValid

FHttpTunnelAuthDigestHash

FHttpTunnelAuthDigestInfo

FHttpTunnelAuthType

FHttpTunnelBuf

FHttpTunnelBufSize

FHttpTunnelChunked

FHttpTunnelChunkRcvd

FHttpTunnelChunkSize

FHttpTunnelChunkState

FHttpTunnelCloseNotified

FHttpTunnelContentLength

FHttpTunnelCurAuthType

FHttpTunnelKeepsAlive

FHttpTunnelLastResponse

FHttpTunnelLmCompatLevel

FHttpTunnelReconnectRequest

FHttpTunnelPassword

FHttpTunnelPort

FHttpTunnelPortAssigned

FHttpTunnelProto

FHttpTunnelRcvdCnt

FHttpTunnelRcvdIdx

FHttpTunnelServer

FHttpTunnelServerAssigned

FHttpTunnelServerAuthTypes

FHttpTunnelState

FHttpTunnelStatusCode

FHttpTunnelUsercode

FHttpTunnelWaitingBody

FMsg_WM_TUNNEL_RECONNECT

FOnHttpTunnelConnected

FOnHttpTunnelError

TCustomHttpTunnelWSocket6

TCustomHttpTunnelWSocket\

FSocksPort

FSocksPortAssigned

FSocksPassword

FBoundPort

FPrivateKey

IncludePrivateKey

PrivateKeyLoadFromPemFile

PrivateKeySaveToPemFile

ACert

VerifyErrMsg

FirstVerifyErrMsg

PrivateKey

PublicKey

SslVerifyMode_PEER"SslVerifyMode_FAIL_IF_NO_PEER_CERT

sslX509_V_FLAG_X509_STRICT sslX509_V_FLAG_ALLOW_PROXY_CERTS

sslOpt_NETSCAPE_CHALLENGE_BUG'sslOpt_NETSCAPE_REUSE_CIPHER_CHANGE_BUG"sslOpt_SSLREF2_REUSE_CERT_TYPE_BUG!sslOpt_MICROSOFT_BIG_SSLV3_BUFFER

FSslCertFile

FSslPassPhrase

FSslPrivKeyFile

TrustCert

Cert

SslCertFile

SslPassPhrase

SslPrivKeyFile

PeerCert

TSslCliCertRequest

FOnSslCliCertRequest

FSslCertChain

FSslPeerCert

FSslSupportsSecureRenegotiation

FMsg_WM_TRIGGER_DATASENT

FMsg_WM_SSL_ASYNCSELECT

FMsg_WM_RESET_SSL

FMsg_WM_BI_SSL_SHUTDOWN

&FMsg_WM_TRIGGER_SSL_SHUTDOWN_COMPLETED

SslCertChain

OnSslCliCertRequest

SslPeerCertpgp

LocalPort

SocksPort

SocksPassword

HttpTunnelAuthType

HttpTunnelPassword

HttpTunnelPort

HttpTunnelServer

HttpTunnelUsercode

OnHttpTunnelError0

OnHttpTunnelConnected$

PortNum0%A

PeerPort

HttpTunnelCurrentAuthType

HttpTunnelBufferSize

HttpTunnelLastResponse

HttpTunnelLmCompatLevel

FMsgID

255.255.255.255

0.0.0.1

Ics_Ssl_EVP_PKEY_IncRefCnt

HTTP/1.

Proxy server must support HTTP/1.1

THttpTunnelWSocket - DataAvailable error

Received header line too long. Increase HttpTunnelBufferSize.

THttpTunnelWSocket - Fatal: Invalid state in TriggerDataAvailable

THttpTunnelWSocket - Fatal: Internal error in WMHttpTunnelReconnect

EHttpContentCodingException

EHttpContentCodingException|

OverbyteIcsHttpContCod

THttpContentCodingClass

THttpContentCoding?

THttpContentCoding

THttpCCodIdentity4

THttpCCodIdentity

THttpCCodStar

THttpContCodItemN

THttpContCodItem

THttpContCodHandlerR

THttpContCodHandlerP

EHttpExceptionD

EHttpException

OverbyteIcsHttpProt

THttpRequest

httpABORT

httpGET

httpPOST

httpPUT

httpHEAD

httpDELETE

httpCLOSE

THttpState

httpReady

httpNotConnected

httpConnected

httpDnsLookup

httpDnsLookupDone

httpWaitingHeader

httpWaitingBody

httpBodyReceived

httpWaitingProxyConnect

httpClosing

httpAborting

THttpChunkState

httpChunkGetSize

httpChunkGetExt

httpChunkGetData

httpChunkSkipDataEnd

httpChunkDone

THttpNTLMState

ntlmMsg1

ntlmMsg2

ntlmMsg3

THttpDigestState

digestMsg1

THttpBasicState

basicMsg1

THttpAuthType

httpAuthNone

httpAuthBasic

httpAuthNtlm

httpAuthDigest

THttpBeforeAuthEvent

THttpRequestDone

THttpCliOption

httpoNoBasicAuth

httpoNoNTLMAuth

httpoBandwidthControl

httpoEnableContentCoding

httpoUseQuality

httpoNoDigestAuth

THttpCliOptions

FMsg_WM_HTTP_REQUEST_DONE

FMsg_WM_HTTP_SET_READY

FMsg_WM_HTTP_LOGIN

FTargetPort

FProxyPort

FPassword

FCurrPassword

FCurrentPort

FNTLMMsg2Info

FProxyNTLMMsg2Info

FWMLoginQueued

THttpCli6

THttpClil

OverbyteIcsHttpProtG

ProxyPort

ProxyPassword

TSslHttpCliV

TSslHttpCli

HTTP/1.0 200

HTTP/1.1 200

HTTP/1.0 200

HTTP/1.1 200

HTTP/1.1 200 OK

HTTP/1.0 200 OK

kvKey

TGpKeyValue

TGpListOperation

operation

HasKey

idpKey

TOmniExecutableKind

TOmniExecutable

TArray<System.Boolean>

TArray<System.Double>

TArray<System.TDateTime>

!TArray<System.SysUtils.Exception>

TArray<System.Extended>

TArray<System.Variant>

TArray<System.WideString>

TArray<System.AnsiString>

"TOmniContainerWindowsEventObserver(

"TOmniContainerWindowsEventObserver %u

$TOmniContainerWindowsMessageObserverV

$TOmniContainerWindowsMessageObserver4&u

&TOmniContainerWindowsEventObserverImpl=

&TOmniContainerWindowsEventObserverImpl

(TOmniContainerWindowsMessageObserverImplh

(TOmniContainerWindowsMessageObserverImpl

TThreadPoolOperation

otpmiThreadPoolOperation

threadPoolOperation

ThreadPoolOperation

tdfExecutable

IsExecuting

MaxExecuting

MsgCompleted

MsgThreadCreated

MsgThreadDestroying

tdfdExecutable

CountExecuting

SetExecutor

owExecutor

TOmniMessageExec4

msgID

TOmniMessageExec

imtStringMsg

imtAddressMsg

imtFuncMsg

ismMsgData

ismMsgName

TOmniInternalStringMsgZ

msgName

msgData

TOmniInternalStringMsg|

MsgData

MsgName

ismMsgMethod

TOmniInternalAddressMsg\

msgMethod

TOmniInternalAddressMsg

MsgMethod

TOmniInternalFuncMsgF

TOmniInternalFuncMsgX

tcoForceExecution

TOmniExecutorType

"TOmniTaskExecutor.TOmniMessageInfo(

oteExecutorType

oteMsgInfo

TOmniTaskExecutor:

Asy_Execute

TOmniTaskExecutor

otExecuting

otExecutor_ref

otTerminateWillCallExecute

forceExecution

otcExecutor

otcOnMessageExec

otcOnTerminatedExec

otcParameters

Join

MsgWait

)TOmniTaskControl.OnTerminated$3615$0$Intf

)TOmniTaskControl.OnTerminated$3615$ActRec

emCurrentMsg

MsgID

aMsgID

aMsgData

mqWinMsgObserver

IOmniTaskExecutor

IOmniPipelineStage

TPipelineSimpleStageDelegate

TPipelineStageDelegate

TPipelineStageDelegateEx

IOmniPipeline

TOmniForkJoinDelegate

IOmniForkJoin

ofjForkJoin

TOmniForkJoin&

TOmniForkJoin<nw

"EJoinException.TJoinInnerException

EJoinException&

EJoinExceptionD

IOmniJoinState

IOmniJoinStateEx

TOmniJoinStateb

TOmniJoinState

TOmniJoinDelegate

IOmniParallelJoin

:TOmniParallelJoin.:1

opjJoinStates

TOmniParallelJoin&

TOmniParallelJoin8

Pipeline

ForkJoin

IOmniCompute<System.Boolean>

%TOmniForkJoinDelegate<System.Boolean>

IOmniForkJoin<System.Boolean>

TOmniForkJoin<System.Boolean>&

TOmniForkJoin<System.Boolean>

%TArray<OtlParallel.TOmniJoinDelegate>

*TEnumerator<OtlParallel.TOmniJoinDelegate>(

*TEnumerator<OtlParallel.TOmniJoinDelegate>$

*TEnumerable<OtlParallel.TOmniJoinDelegate>-

*TEnumerable<OtlParallel.TOmniJoinDelegate>p

-TList<OtlParallel.TOmniJoinDelegate>.arrayofT

System.Generics.Collections4

(IComparer<OtlParallel.TOmniJoinDelegate>

5TCollectionNotifyEvent<OtlParallel.TOmniJoinDelegate>

,TArrayManager<OtlParallel.TOmniJoinDelegate>g

,TArrayManager<OtlParallel.TOmniJoinDelegate>d

*IEnumerable<OtlParallel.TOmniJoinDelegate>t!@

/TList<OtlParallel.TOmniJoinDelegate>.TEmptyFunc

0TList<OtlParallel.TOmniJoinDelegate>.TEnumerator5

0TList<OtlParallel.TOmniJoinDelegate>.TEnumerator

$TList<OtlParallel.TOmniJoinDelegate>&

$TList<OtlParallel.TOmniJoinDelegate>D

)TOmniIteratorIntoDelegate<System.Integer>

 IOmniParallelAggregatorLoop<System.Integer>

%TOmniIteratorDelegate<System.Integer>

)TOmniIteratorTaskDelegate<System.Integer>

*TOmniIteratorStateDelegate<System.Integer>

,IOmniParallelInitializedLoop<System.Integer>

-TOmniIteratorIntoTaskDelegate<System.Integer>

%IOmniParallelIntoLoop<System.Integer>

!IOmniParallelLoop<System.Integer>

IOmniPipelineStageEx

TOmniPipelineStageI

TOmniPipelineStage

TOmniPipeline&

pipelineStage

pipelineStages

GetPipelineStage

TOmniPipeline

PipelineStage

optJoin

otcPriority

GetOnExecute

%TOmniParallelJoin.Execute$3933$0$Intf

%TOmniParallelJoin.Execute$3933$ActRec

%TOmniParallelJoin.Execute$3933$ActRec

"TOmniParallelJoin.Task$3943$0$Intf

"TOmniParallelJoin.Task$3943$ActRec

Parallel.Async$3948$0$Intf

Parallel.Async$3948$ActRec

Parallel.Async$3950$0$Intf

Parallel.Async$3950$ActRec

"Parallel.CompleteQueue$3954$0$Intf

"Parallel.CompleteQueue$3954$ActRec

"Parallel.CompleteQueue$3954$ActRec0

(TOmniParallelLoopBase.Create$3990$0$Intf

#TEnumeratorDelegate<System.Integer>

'TOmniDelegateEnumerator<System.Integer>8

'TOmniDelegateEnumerator<System.Integer>

!TOmniParallelLoop<System.Integer>:

!TOmniParallelLoop<System.Integer>@

(TOmniParallelLoopBase.Create$3990$ActRec

1TOmniParallelLoopBase.InternalExecute$3994$0$Intf

1TOmniParallelLoopBase.InternalExecute$3994$ActRec

1TOmniParallelLoopBase.InternalExecute$3994$ActRecx

1TOmniParallelLoopBase.InternalExecute$3996$0$Intf

1TOmniParallelLoopBase.InternalExecute$3996$ActRec

1TOmniParallelLoopBase.InternalExecute$3998$0$Intf

1TOmniParallelLoopBase.InternalExecute$3998$ActRec

:TOmniParallelLoopBase.InternalExecuteAggregate$4000$0$Intf

:TOmniParallelLoopBase.InternalExecuteAggregate$4000$ActRec

5TOmniParallelLoopBase.InternalExecuteInto$4004$0$Intf

5TOmniParallelLoopBase.InternalExecuteInto$4004$ActRec

<TOmniParallelLoopBase.InternalExecuteIntoOrdered$4008$0$Intf

<TOmniParallelLoopBase.InternalExecuteIntoOrdered$4008$ActRec

<TOmniParallelLoopBase.InternalExecuteIntoOrdered$4008$ActRecD0x

5TOmniParallelLoopBase.InternalExecuteTask$4012$0$Intf

5TOmniParallelLoopBase.InternalExecuteTask$4012$ActRec

5TOmniParallelLoopBase.InternalExecuteTask$4012$ActRec@5x

2TOmniParallelLoopBase.SetAggregatorSum$4015$0$Intf

2TOmniParallelLoopBase.SetAggregatorSum$4015$ActRec

.TOmniParallelLoop.ExecuteAggregate$4033$0$Intf

.TOmniParallelLoop.ExecuteAggregate$4033$ActRec

%TOmniParallelLoop.Execute$4036$0$Intf

%TOmniParallelLoop.Execute$4036$ActRec

%TOmniParallelLoop.Execute$4036$ActRecDHx

%TOmniParallelLoop.Execute$4039$0$Intf

%TOmniParallelLoop.Execute$4039$ActRec

$TOmniParallelLoop.OnStop$4051$0$Intf

$TOmniParallelLoop.OnStop$4051$ActRec

TOmniPipeline.OnStop$4146$0$Intf

TOmniPipeline.OnStop$4146$ActRec

TOmniPipeline.Run$4149$0$Intf

TOmniPipeline.Run$4149$ActRec

!TOmniForkJoin.Compute$4177$0$Intf

!TOmniForkJoin.Compute$4177$ActRec

%TOmniParallelTask.Execute$4182$0$Intf

%TOmniParallelTask.Execute$4182$ActRec

%TOmniParallelTask.Execute$4184$0$Intf

%TOmniParallelTask.Execute$4184$ActRec

.TOmniWorkItem.GetCancellationToken$4196$0$Intf

/Atomic<OtlSync.IOmniCancellationToken>.TFactory

&Atomic<OtlSync.IOmniCancellationToken>W

&Atomic<OtlSync.IOmniCancellationToken>x

.TOmniWorkItem.GetCancellationToken$4196$ActRec

.TOmniWorkItem.GetCancellationToken$4196$ActRecP

)TOmniBackgroundWorker.Execute$4222$0$Intf

)TOmniBackgroundWorker.Execute$4222$ActRec

)TOmniBackgroundWorker.Execute$4222$ActRecH

=.TOmniForkJoin`1.StartWorkerTasks$4172$0$Intf<System.Boolean>

=@TOmniForkJoin`1.StartWorkerTasks$4172$ActRec<System.Boolean>

=@TOmniForkJoin`1.StartWorkerTasks$4172$ActRec<System.Boolean>`

TOmniCompute<System.Boolean>E

TOmniCompute<System.Boolean>

*TComparison<OtlParallel.TOmniJoinDelegate>

(TComparer<OtlParallel.TOmniJoinDelegate>2

(TComparer<OtlParallel.TOmniJoinDelegate>

0TMoveArrayManager<OtlParallel.TOmniJoinDelegate>g

0TMoveArrayManager<OtlParallel.TOmniJoinDelegate>

7.TList`1.Pack$823$0$Intf<OtlParallel.TOmniJoinDelegate>

7@TList`1.Pack$823$ActRec<OtlParallel.TOmniJoinDelegate>

7.TOmniParallelLoop`1.Create$4059$0$Intf<System.Integer>

7@TOmniParallelLoop`1.Create$4059$ActRec<System.Integer>

A.TOmniParallelLoop`1.ExecuteAggregate$4065$0$Intf<System.Integer>

A@TOmniParallelLoop`1.ExecuteAggregate$4065$ActRec<System.Integer>

A.TOmniParallelLoop`1.ExecuteAggregate$4067$0$Intf<System.Integer>

A@TOmniParallelLoop`1.ExecuteAggregate$4067$ActRec<System.Integer>

8.TOmniParallelLoop`1.Execute$4069$0$Intf<System.Integer>

8@TOmniParallelLoop`1.Execute$4069$ActRec<System.Integer>

8.TOmniParallelLoop`1.Execute$4071$0$Intf<System.Integer>

8@TOmniParallelLoop`1.Execute$4071$ActRec<System.Integer>

8.TOmniParallelLoop`1.Execute$4073$0$Intf<System.Integer>

8@TOmniParallelLoop`1.Execute$4073$ActRec<System.Integer>

8.TOmniParallelLoop`1.Execute$4075$0$Intf<System.Integer>

8@TOmniParallelLoop`1.Execute$4075$ActRec<System.Integer>

8.TOmniParallelLoop`1.Execute$4077$0$Intf<System.Integer>

8@TOmniParallelLoop`1.Execute$4077$ActRec<System.Integer>

8@TOmniParallelLoop`1.Execute$4077$ActRec<System.Integer>|

7.TOmniParallelLoop`1.OnStop$4087$0$Intf<System.Integer>

7@TOmniParallelLoop`1.OnStop$4087$ActRec<System.Integer>

7@TOmniParallelLoop`1.OnStop$4087$ActRec<System.Integer>`

@.Atomic`1.Initialize$3259$0$Intf<OtlSync.IOmniCancellationToken>

@@Atomic`1.Initialize$3259$ActRec<OtlSync.IOmniCancellationToken>

@@Atomic`1.Initialize$3259$ActRec<OtlSync.IOmniCancellationToken>H

1TDelegatedComparer<OtlParallel.TOmniJoinDelegate>8

1TDelegatedComparer<OtlParallel.TOmniJoinDelegate>H

teParseObjectKeyName

teParseObjectKeySep

ListKey

tWebM

video_url

audio_url

TArray<MVDDefs.TMediaConteiner>0

$TEnumerator<MVDDefs.TMediaConteiner>(

$TEnumerator<MVDDefs.TMediaConteiner>

$TEnumerable<MVDDefs.TMediaConteiner>-

$TEnumerable<MVDDefs.TMediaConteiner>@

'TList<MVDDefs.TMediaConteiner>.arrayofT0

"IComparer<MVDDefs.TMediaConteiner>

/TCollectionNotifyEvent<MVDDefs.TMediaConteiner>

&TArrayManager<MVDDefs.TMediaConteiner>g

&TArrayManager<MVDDefs.TMediaConteiner>

$IEnumerable<MVDDefs.TMediaConteiner>t!@

)TList<MVDDefs.TMediaConteiner>.TEmptyFunc

*TList<MVDDefs.TMediaConteiner>.TEnumerator5

*TList<MVDDefs.TMediaConteiner>.TEnumerator

TList<MVDDefs.TMediaConteiner>&

TList<MVDDefs.TMediaConteiner>

$TComparison<MVDDefs.TMediaConteiner>

"TComparer<MVDDefs.TMediaConteiner>2

"TComparer<MVDDefs.TMediaConteiner>tTz

*TMoveArrayManager<MVDDefs.TMediaConteiner>g

*TMoveArrayManager<MVDDefs.TMediaConteiner>,Vz

1.TList`1.Pack$823$0$Intf<MVDDefs.TMediaConteiner>

1@TList`1.Pack$823$ActRec<MVDDefs.TMediaConteiner>

1@TList`1.Pack$823$ActRec<MVDDefs.TMediaConteiner>@Yz

 TDelegatedComparer<MVDDefs.TMediaConteiner>8

 TDelegatedComparer<MVDDefs.TMediaConteiner>xZz

FHttpCli

THttpDownloader&

THttpDownloader

Uh.ez

Fimg_url

img_url

GetURL

SetURL

Aurl

MVDHTTP

TUrlData

!TArray<MVDYoutubeParser.TUrlData>

&TEnumerator<MVDYoutubeParser.TUrlData>(

&TEnumerator<MVDYoutubeParser.TUrlData>l

&TEnumerable<MVDYoutubeParser.TUrlData>-

&TEnumerable<MVDYoutubeParser.TUrlData>

)TList<MVDYoutubeParser.TUrlData>.arrayofT

$IComparer<MVDYoutubeParser.TUrlData>

1TCollectionNotifyEvent<MVDYoutubeParser.TUrlData>

(TArrayManager<MVDYoutubeParser.TUrlData>g

(TArrayManager<MVDYoutubeParser.TUrlData>

&IEnumerable<MVDYoutubeParser.TUrlData>t!@

 TList<MVDYoutubeParser.TUrlData>.TEmptyFunc

,TList<MVDYoutubeParser.TUrlData>.TEnumerator5

,TList<MVDYoutubeParser.TUrlData>.TEnumerator

TList<MVDYoutubeParser.TUrlData>&

TList<MVDYoutubeParser.TUrlData>P

&TComparison<MVDYoutubeParser.TUrlData>

$TComparer<MVDYoutubeParser.TUrlData>2

$TComparer<MVDYoutubeParser.TUrlData>

,TMoveArrayManager<MVDYoutubeParser.TUrlData>g

,TMoveArrayManager<MVDYoutubeParser.TUrlData>T

3.TList`1.Pack$823$0$Intf<MVDYoutubeParser.TUrlData>

3@TList`1.Pack$823$ActRec<MVDYoutubeParser.TUrlData>

3@TList`1.Pack$823$ActRec<MVDYoutubeParser.TUrlData>h

-TDelegatedComparer<MVDYoutubeParser.TUrlData>8

-TDelegatedComparer<MVDYoutubeParser.TUrlData>

AURL

FHttpD1

FHttpD2

THttpContainerDownloader&

THttpContainerDownloader|

FCmdLine

TExecAndCapture%

TExecAndCaptureP

CmdLine

(TThreadConvert.ExecAndCapture$367$ActRec

(TThreadConvert.ExecAndCapture$367$ActRec8

Vcl.Buttons

Vcl.Buttons!

Vcl.Buttons4

TList<System.Integer>.arrayofT

IComparer<System.Integer>

TArrayManager<System.Integer>g

TArrayManager<System.Integer>

IEnumerable<System.Integer>t!@

TList<System.Integer>.TEmptyFunc

!TList<System.Integer>.TEnumerator5

!TList<System.Integer>.TEnumerator

TList<System.Integer>&

TList<System.Integer>Pf{

FHttpDownloader

FExecAndCapture

TArray<MVDApp.TItemDownload>

!TEnumerator<MVDApp.TItemDownload>(

!TEnumerator<MVDApp.TItemDownload>l

!TEnumerable<MVDApp.TItemDownload>-

!TEnumerable<MVDApp.TItemDownload>

$TList<MVDApp.TItemDownload>.arrayofT

IComparer<MVDApp.TItemDownload>

,TCollectionNotifyEvent<MVDApp.TItemDownload>

#TArrayManager<MVDApp.TItemDownload>g

#TArrayManager<MVDApp.TItemDownload>h

!IEnumerable<MVDApp.TItemDownload>t!@

&TList<MVDApp.TItemDownload>.TEmptyFunc

'TList<MVDApp.TItemDownload>.TEnumerator5

'TList<MVDApp.TItemDownload>.TEnumeratorh

TList<MVDApp.TItemDownload>&

TList<MVDApp.TItemDownload>

TMVDApp.GetSizeAll$523$0$Intf

TMVDApp.GetSizeAll$523$ActRec

!TComparison<MVDApp.TItemDownload>

TComparer<MVDApp.TItemDownload>2

TComparer<MVDApp.TItemDownload>`

'TMoveArrayManager<MVDApp.TItemDownload>g

'TMoveArrayManager<MVDApp.TItemDownload>

..TList`1.Pack$823$0$Intf<MVDApp.TItemDownload>

.@TList`1.Pack$823$ActRec<MVDApp.TItemDownload>

(TDelegatedComparer<MVDApp.TItemDownload>8

(TDelegatedComparer<MVDApp.TItemDownload>L |

System.Zip

FUTF8Support

UTF8Support

BTPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>

TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>

TArray<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>

TEnumerator<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>(

TEnumerator<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>

TEnumerable<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>-

TEnumerable<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>

TDictionary<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>.TItem

TDictionary<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>.TItemArray

-IEqualityComparer<System.Zip.TZipCompression>

2TCollectionNotifyEvent<System.Zip.TZipCompression>

eTCollectionNotifyEvent<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>

ItemBTPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>

"TArray<System.Zip.TZipCompression>

'TEnumerator<System.Zip.TZipCompression>(

'TEnumerator<System.Zip.TZipCompression>

'TEnumerable<System.Zip.TZipCompression>-

'TEnumerable<System.Zip.TZipCompression>

TDictionary<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>.TKeyEnumerator;

TDictionary<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>.TKeyEnumeratorx;|

TDictionary<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>.TKeyCollection;

TDictionary<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>.TKeyCollection

UTArray<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>

ZTEnumerator<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>(

ZTEnumerator<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>$A|

ZTEnumerable<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>-

ZTEnumerable<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>

TDictionary<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>.TValueEnumerator;

TDictionary<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>.TValueEnumerator

TDictionary<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>.TValueCollection;

TDictionary<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>.TValueCollection(G|

TDictionary<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>.TPairEnumerator;

TDictionary<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>.TPairEnumerator

TDictionary<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>9

ContainsKey<

TDictionary<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>

OnKeyNotify87|

TArray<System.Zip.TZipHeader>6

"TEnumerator<System.Zip.TZipHeader>(

"TEnumerator<System.Zip.TZipHeader>

"TEnumerable<System.Zip.TZipHeader>-

"TEnumerable<System.Zip.TZipHeader>

%TList<System.Zip.TZipHeader>.arrayofT6

IComparer<System.Zip.TZipHeader>

-TCollectionNotifyEvent<System.Zip.TZipHeader>

$TArrayManager<System.Zip.TZipHeader>g

$TArrayManager<System.Zip.TZipHeader>

"IEnumerable<System.Zip.TZipHeader>t!@

'TList<System.Zip.TZipHeader>.TEmptyFunc

(TList<System.Zip.TZipHeader>.TEnumerator5

(TList<System.Zip.TZipHeader>.TEnumerator

TList<System.Zip.TZipHeader>&

TList<System.Zip.TZipHeader>X\|

TZipFile.Create@$7508$0$Intf

TZipFile.Create@$7508$3$Intf

TZipFile.Create@$7508$2$Intf

TZipFile.Create@$7508$1$Intf

TZipFile.Create@$7508$ActRec

TList<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>.arrayofT

IComparer<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>

TCollectionNotifyEvent<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>

TArrayManager<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>g

TArrayManager<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>><

IEnumerable<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>t!@

TList<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>.TEmptyFunc

TList<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>.TEnumerator5

TList<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>.TEnumerator

TList<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>&

TList<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>

*TList<System.Zip.TZipCompression>.arrayofT

%IComparer<System.Zip.TZipCompression>

)TArrayManager<System.Zip.TZipCompression>

)TArrayManager<System.Zip.TZipCompression>l%}

'IEnumerable<System.Zip.TZipCompression>t!@

,TList<System.Zip.TZipCompression>.TEmptyFunc

-TList<System.Zip.TZipCompression>.TEnumerator5

-TList<System.Zip.TZipCompression>.TEnumeratort'}

!TList<System.Zip.TZipCompression>&

!TList<System.Zip.TZipCompression>

]TList<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>.arrayofT

XIComparer<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>

\TArrayManager<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>g

\TArrayManager<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>

ZIEnumerable<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>t!@

_TList<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>.TEmptyFunc

`TList<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>.TEnumerator5

`TList<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>.TEnumerator

TTList<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>&

TTList<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>

"TComparison<System.Zip.TZipHeader>

TComparer<System.Zip.TZipHeader>2

TComparer<System.Zip.TZipHeader>

(TMoveArrayManager<System.Zip.TZipHeader>g

(TMoveArrayManager<System.Zip.TZipHeader>

/.TList`1.Pack$823$0$Intf<System.Zip.TZipHeader>

/@TList`1.Pack$823$ActRec<System.Zip.TZipHeader>

TComparison<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>

TComparer<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>2

TComparer<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>> O}

TMoveArrayManager<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>g

TMoveArrayManager<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>

.TList`1.Pack$823$0$Intf<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>

@TList`1.Pack$823$ActRec<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>

@TList`1.Pack$823$ActRec<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>0V}

'TComparison<System.Zip.TZipCompression>

%TComparer<System.Zip.TZipCompression>2

%TComparer<System.Zip.TZipCompression>

-TMoveArrayManager<System.Zip.TZipCompression>

4.TList`1.Pack$823$0$Intf<System.Zip.TZipCompression>

4@TList`1.Pack$823$ActRec<System.Zip.TZipCompression>

ZTComparison<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>

XTComparer<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>2

XTComparer<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>

`TMoveArrayManager<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>g

`TMoveArrayManager<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>

g.TList`1.Pack$823$0$Intf<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>

g@TList`1.Pack$823$ActRec<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>

)TDelegatedComparer<System.Zip.TZipHeader>8

)TDelegatedComparer<System.Zip.TZipHeader>`f}

TDelegatedComparer<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>8

TDelegatedComparer<System.Zip.TPair<System.Zip.TZipCompression,System.Generics.Collections.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>>

.TDelegatedComparer<System.Zip.TZipCompression>8

.TDelegatedComparer<System.Zip.TZipCompression>

aTDelegatedComparer<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>8

aTDelegatedComparer<System.Zip.TPair<System.Zip.TStreamConstructor,System.Zip.TStreamConstructor>>

FURL_files

FHttpsCli

-hTw}

%TUpdateManager.RequestDone$572$0$Intf

%TUpdateManager.RequestDone$572$ActRecT

%TUpdateManager.RequestDone$572$ActRec

TCPUInstructionSet

TCPUFeatures

FOnGetViewportScale

FOnGetViewportShift

LocalToViewport

ViewportToLocal

GetViewportScale

GetViewportShift

Passed

pboWantArrowKeys

GetViewportRect

ITextSupport

IFontSupport

ICanvasSupport

IDeviceContextSupport

IBitmapContextSupport

IPaintSupport

"TArray<MVDImg32Controls.TBtnImg32>

'TEnumerator<MVDImg32Controls.TBtnImg32>(

'TEnumerator<MVDImg32Controls.TBtnImg32>TF

'TEnumerable<MVDImg32Controls.TBtnImg32>-

'TEnumerable<MVDImg32Controls.TBtnImg32>

*TList<MVDImg32Controls.TBtnImg32>.arrayofT

%IComparer<MVDImg32Controls.TBtnImg32>

2TCollectionNotifyEvent<MVDImg32Controls.TBtnImg32>

)TArrayManager<MVDImg32Controls.TBtnImg32>g

)TArrayManager<MVDImg32Controls.TBtnImg32>tJ

'IEnumerable<MVDImg32Controls.TBtnImg32>t!@

,TList<MVDImg32Controls.TBtnImg32>.TEmptyFunc

-TList<MVDImg32Controls.TBtnImg32>.TEnumerator5

-TList<MVDImg32Controls.TBtnImg32>.TEnumerator

!TList<MVDImg32Controls.TBtnImg32>&

!TList<MVDImg32Controls.TBtnImg32>DO

'TComparison<MVDImg32Controls.TBtnImg32>

%TComparer<MVDImg32Controls.TBtnImg32>2

%TComparer<MVDImg32Controls.TBtnImg32>

-TMoveArrayManager<MVDImg32Controls.TBtnImg32>g

-TMoveArrayManager<MVDImg32Controls.TBtnImg32>d|

4.TList`1.Pack$823$0$Intf<MVDImg32Controls.TBtnImg32>

4@TList`1.Pack$823$ActRec<MVDImg32Controls.TBtnImg32>

.TDelegatedComparer<MVDImg32Controls.TBtnImg32>8

.TDelegatedComparer<MVDImg32Controls.TBtnImg32>

Vcl.Mask

Vcl.Mask@

Vcl.AxCtrls

EInvalidGridOperation

EInvalidGridOperation`

Vcl.Grids

goAlwaysShowEditor

%TCustomGrid.ObserverAdded$6305$0$Intf

%TCustomGrid.ObserverAdded$6305$1$Intf

%TCustomGrid.ObserverAdded$6305$ActRec

ssWebBtn

TacMenuSupport&

TacMenuSupport`

csIndexed

FCrToRedTable

FCrToGreenTable

UpdateIconsIndexes

TacMDIWnd'

TacMDIWnd

HandleAlphaCmd

r.uXh

TAddItemExEvent

acInMouseMsg

IsControlSupported

CurLeft

 |$(;<$}?

Vcl.FileCtrl

TacGetImageIndexEvent

TsShellTreeView

sShellTreeView1

sShellTreeView1Change

TExecOpenDialogEvent

FClickKey

ClickKey

pcWebText

pcWebTextHot

pcEditText_Bypassed

pcEditBG_Bypassed

TacScrollBarsSupport6

TacScrollBarsSupport

TacButtonsSupport6

TacButtonsSupport

TacLabelsSupport6

TacLabelsSupportP<

FMenuSupport

FButtonsSupport

FLabelsSupport

InitConstantIndexes

InitMaskIndexes

MenuSupport

UpdateIndexes

HandleOwnerMsg

TArray<MVDHistory.TCellCtrl>

!TEnumerator<MVDHistory.TCellCtrl>(

!TEnumerator<MVDHistory.TCellCtrl>t

!TEnumerable<MVDHistory.TCellCtrl>-

!TEnumerable<MVDHistory.TCellCtrl>

$TList<MVDHistory.TCellCtrl>.arrayofT

System.Generics.Collections,

IComparer<MVDHistory.TCellCtrl>

,TCollectionNotifyEvent<MVDHistory.TCellCtrl>

#TArrayManager<MVDHistory.TCellCtrl>g

#TArrayManager<MVDHistory.TCellCtrl>l

!IEnumerable<MVDHistory.TCellCtrl>t!@

&TList<MVDHistory.TCellCtrl>.TEmptyFunc

'TList<MVDHistory.TCellCtrl>.TEnumerator5

'TList<MVDHistory.TCellCtrl>.TEnumeratorl

TList<MVDHistory.TCellCtrl>&

TList<MVDHistory.TCellCtrl>

!TComparison<MVDHistory.TCellCtrl>

TComparer<MVDHistory.TCellCtrl>2

TComparer<MVDHistory.TCellCtrl>

'TMoveArrayManager<MVDHistory.TCellCtrl>g

'TMoveArrayManager<MVDHistory.TCellCtrl>h9

..TList`1.Pack$823$0$Intf<MVDHistory.TCellCtrl>

.@TList`1.Pack$823$ActRec<MVDHistory.TCellCtrl>

.@TList`1.Pack$823$ActRec<MVDHistory.TCellCtrl>p<

(TDelegatedComparer<MVDHistory.TCellCtrl>8

(TDelegatedComparer<MVDHistory.TCellCtrl>

Vcl.AppEvnts

Vcl.XPMan

TEditButton.TButtonState

TEditButton.TGlyph7

TEditButton.TGlyph

TEditButton.TButtonPosition

Vcl.Taskbar

edURL

edURLRightButtonClick

edURLKeyPress

cbListKeyUp

acShowAboutBoxExecute

acShowSettingsExecute

acExitExecute

edURLLeftButtonClick

acBetterExecute

acEchouserExecute

acShowTipsExecute

System.SysConst

System.RTLConsts

System.Character

System.Internal.ExcUtils

Winapi.PsAPI

Winapi.SHFolder

Winapi.ImageHlp

System.VarUtils

System.Math

System.Diagnostics

Winapi.Messages

System.AnsiStrings

System.StrUtils

Winapi.WinSock

Winapi.WinInet

OtlCommon.Utils

Winapi.MMSystem

Winapi.TlHelp32

System.Win.ComConst

Vcl.Consts

System.UIConsts

Winapi.MSXMLIntf

Winapi.StructuredQueryCondition

Winapi.PropSys

Winapi.ObjectArray

Winapi.UrlMon

Winapi.RegStr

Winapi.ShellAPI

Winapi.IpExport

Winapi.Winsock2

Winapi.Qos

Winapi.CommCtrl

System.RegularExpressions

System.RegularExpressionsConsts

System.RegularExpressionsAPI

System.Win.Crtl

System.RegularExpressionsCore

System.ObjAuto

Winapi.Dwmapi

Winapi.UxTheme

Winapi.PenInputPanel

Winapi.MsInkAut

Winapi.TpcShrd

Winapi.MultiMon

Winapi.Dlgs

Winapi.CommDlg

Vcl.ComStrs

Winapi.WinSpool

Winapi.RichEdit

Winapi.FlatSB

Winapi.Imm

System.WideStrUtils

Vcl.CategoryButtons

System.Win.StdVCL

Vcl.Imaging.pnglang

System.MaskUtils

Vcl.ExtDlgs

OverbyteIcsUrl

OverbyteIcsNtlmMsgs

MVDYoutubeURL

Vcl.Samples.Gauges

Vcl.Imaging.JConsts

6666666666666666

csshiftjis

windows-936

windows-1250

windows-1251

windows-1252

windows-1253

windows-1254

windows-1255

windows-1256

windows-1257

windows-1258

windows-874

deflate 1.2.7 Copyright 1995-2012 Jean-loup Gailly and Mark Adler

inflate 1.2.7 Copyright 1995-2012 Mark Adler

?456789:;<=

!"#$%&'()* ,-./0123

<4,$?7/'

(3-!0,1'8"5.*2$

1.2.3

inflate 1.2.3 Copyright 1995-2005 Mark Adler

.AUi|

LRap

!$'*-147

"$') -02469;=?

"$&( -/1468:

!$&(*-/135

!#&(*,.1

!"#%&'(* ,-/01345689:;=>?@

!"#$&'(* ,-.01245678:;<>?

!"#$&'() ,-.012346789;<=

"#$%'()*,-./12345789:<

!#$%&()* -./02345689:

!#$%&')* ,./01245679

!"$%&'(* ,-/0123567

!"#%&'(* ,-.012346

!"#$&'() ,-./1234

!"#$%'()*,-./023

!"#$%'()* ,./01

"#$%&()* ,-/0

!#$%&')* ,-.

!"$%&'(* ,-

!"#%&'()*,

!"#$&'()*

!"#$%'()

CUu.AUu

oleaut32.dll

RegOpenKeyExW

RegCloseKey

GetConsoleOutputCP

UnhookWindowsHookEx

SetWindowsHookExW

SetKeyboardState

MsgWaitForMultipleObjectsEx

MsgWaitForMultipleObjects

MapVirtualKeyW

LoadKeyboardLayoutW

GetKeyboardState

GetKeyboardLayoutNameW

GetKeyboardLayoutList

GetKeyboardLayout

GetKeyState

GetKeyNameTextW

EnumWindows

EnumThreadWindows

EnumChildWindows

ActivateKeyboardLayout

gdi32.dll

SetViewportOrgEx

SetViewportExtEx

GetViewportOrgEx

version.dll

PeekNamedPipe

GetWindowsDirectoryA

GetCPInfoExW

GetCPInfo

CreatePipe

RegUnLoadKeyW

RegSaveKeyW

RegRestoreKeyW

RegReplaceKeyW

RegQueryInfoKeyA

RegQueryInfoKeyW

RegOpenKeyExA

RegLoadKeyW

RegFlushKey

RegEnumKeyA

RegEnumKeyExW

RegDeleteKeyW

RegCreateKeyExA

RegCreateKeyExW

ole32.dll

comctl32.dll

shell32.dll

ShellExecuteExA

ShellExecuteExW

ShellExecuteA

ShellExecuteW

wininet.dll

comdlg32.dll

wsock32.dll

msvcrt.dll

winspool.drv

winmm.dll

wintrust.dll

Crypt32.dll

CertFreeCertificateContext

CertGetNameStringW

Imagehlp.dll

ImageGetCertificateData

ImageGetCertificateHeader

ImageEnumerateCertificates

wtsapi32.dll

msimg32.dll

RegDeleteKeyExW

windowscodecs.dll

uxtheme.dll

imm32.dll

DWMAPI.DLL

UmmyVideoDownloader.exe

2/2S2a2u2

8ƒ8D8R8d8l8z8

7#727*8:8

9'9 9/93979;9 ;

0"0&0*0.0

5!5/5<5[5_5

7 7 787=7

0 0$0(0,0004080<0@0`0{0

2(2F2N2V2^2f2n2v2~2

7~7)82878

8)82878?8

2%2X2

11D1Y1g1w1

4F4S4a4u4

8!8%8)8-818|8

8!9/9;9`9|9

6 6$6(6,60646<6]6~6

? ?$?(?0?8?

9Ÿ9

0 0$0,040<0

4 4(4@4_4

8ƒ8F8W8j8{8

1!11T1\1d1l1p1t1x1|1

8‡8F8N8\8l8~8

343F3J3d3k3r3|3

7x7F7N7\7k7y7

7v7D7L7Z7h7

00F0`0n0}0

303}3'404^4

%0U0b0

11F1Y1j1}1

4C4C4R4d4

= =$=(=0=8=@={=

> >$>(>,>0>=>

: :$:(:,:4:<:{:

5V5X5e5v5

8%9x9K;

> >(>0>8>@>

:":&:;:\:

54585[5|5

40444`4}4

4H4F4Y4j4}4

8 8$8,848

0%0-050=0

8 8$8(8,848

> >$>(>0>8>@>~>

060=0^061?1

7v7X7e7v7

8 8$8(858

4-4W4}4

9&9-949;9

=5===[=_={=

:%:>:_:{:

5o6

5#5'5 5/535

4 4L5G5K5O5S5W5[5

5_5J5h5

00D0Q0Y0g0x0

7!7(7/797_7

> >$>(>,>0>4>8>~>

5!5=5^5}5

2#2D2S2a2o2z2

4 4-4E4e4m4u4}4

7(7,707\8

4!5(556<6

4%4/434[4

7-7}8

=)>0>'?3?

:,:;:_:~:

< <$<(<,<

<!<%<)<-<1<5<9<

8$8(8[8}9

6%7U7

2#2C2V2g2y2

8%8-858W8l8}8

88U8h8p8~8

=7=;=[=_=

1 1$1(101

5W5F5N5`5

? ?(?0?8?

6 6$6(6,696

4L4m4

; ;1;;;@<

>#>'> >/>3>7>

; ;0;2<>=}=

4-4F4W4l4}4

7 7$7(7,707

0'101"2]4

70)4741;

9“9C9V9p9~9

1/3

8#9!:::8;

;#;'; ;/;

9 9$969[9

6 6$6(6,60646:6

3%4U4

0$1/1=1_1

9%9,979@9{9

6 6$6(6,6064686<6

= =$=(=,=0=4=8=<=,>@?

VVV.madshi.netX

q%DV}'u

.uwSsoV

w.BAj6

zR:n%d

>.erk

.BM]t_M

ý"0

`Tw%UyQ

v-do}

4 .qS

p.jg3

>%dGW

nf.RG

;.kEVn

uo.tM

fcd.DG

g.VX_

4~.ip

t*.%F

s*%U[

8dg%u

$.ec,P%

.Qs7aq

^%sT`

.wy61$

qm%S8.

333333333333333333

33333833

3333333333333338

:*"*"$3338

33333333

33333333333

3333333333338

33338?383

333333333333

:*3:"$3338

333333333333333

H%%xa11

""""'""'1

)%%'%'%'%dwvtljimtvvd%(%(%(%((

&&& & &  & &

&&& & && &&

-, , ,,-  -

85410..01458

I.ANz

Paint.NET v3.5.11G

IAq%f

,Vcl.Samples.Gauges

yVcl.Consts

(Vcl.Menus

%System.Classes

dSystem.SysConst

,System.Character

ISystem.Internal.ExcUtils

kWinapi.PsAPI

-Winapi.ImageHlp

fSystem.Rtti

YSystem.AnsiStrings

System.StrUtils

RVcl.Dialogs

CVcl.ExtCtrls

eVcl.Forms

hWinapi.UrlMon

4Winapi.RegStr

DWinapi.MsInkAut

'System.UIConsts

iSystem.IOUtils

&System.DateUtils

|System.Actions

:Winapi.Imm

Vcl.ComCtrls

WVcl.ComStrs

bVcl.Printers

8Vcl.ToolWin

jVcl.Clipbrd

NSystem.Win.TaskbarCore

hSystem.Win.Taskbar

NSystem.Contnrs

OVcl.XPMan

"Winapi.WinSock

'OverbyteIcsNtlmMsgs

tVcl.Buttons

sVcl.AxCtrls

<System.Win.StdVCL

UVcl.Mask

bVcl.ExtDlgs

%sPopupClndr

@System.RegularExpressions

0System.RegularExpressionsAPI

&System.RegularExpressionsCore

qOtlCommon.Utils

hSystem.ObjAuto

'Vcl.AppEvnts

Vcl.CategoryButtons

0OverbyteIcsHttpProt

&OverbyteIcsUrl

&MVDHTTP

Font.Charset

Font.Color

Font.Height

Font.Name

Font.Style

Picture.Data

videodownloader.ummy.net

BoundLabel.Indent

BoundLabel.Font.Charset

BoundLabel.Font.Color

BoundLabel.Font.Height

BoundLabel.Font.Name

BoundLabel.Font.Style

BoundLabel.Layout

BoundLabel.MaxWidth

BoundLabel.UseSkinColor

SkinData.SkinSection

GlyphMode.Blend

GlyphMode.Grayed

Margins.Left

Margins.Top

Margins.Right

Margins.Bottom

Glyph.Data

Brush.Color

smtp.gmail.com

[email protected]

bugreport.txt

madExcept.HandleContactForm

madExcept.HandleScreenshotForm

attach a screenshot to the bug report

HorzScrollBar.Visible

VertScrollBar.Smooth

VertScrollBar.Tracking

LeftButton.ImageIndex

RightButton.HotImageIndex

RightButton.ImageIndex

RightButton.PressedImageIndex

RightButton.Visible

OnKeyPress

Constraints.MinHeight

Constraints.MinWidth

BoundLabel.Active

BoundLabel.Caption

FormKeyPress

Constraints.MaxHeight

Constraints.MaxWidth

Pen.Style

Colors.Strings

sEditHexKeyPress

AddedTitle.Font.Charset

AddedTitle.Font.Color

AddedTitle.Font.Height

AddedTitle.Font.Name

AddedTitle.Font.Style

name="Microsoft.Windows.Common-Controls"

version="6.0.0.0"

publicKeyToken="6595b64144ccf1df"

<requestedExecutionLevel

MSWHEEL_ROLLMSG

MSH_WHEELSUPPORT_MSG

MSH_SCROLL_LINES_MSG

.jdbg

PSAPI.dll

NTDLL.DLL

%s-%s

TaskDialogIndirect

ntdll.dll

.madExcept

%exceptMsg%

%bugReport%

Úte%

Útetime%

%computerName%

Þsktop%

%userappdata%

%commonappdata%

cc32150mt.dll

cc32150.dll

screenShot.bmp

madExceptIde_.bpl

mapi32.dll

Tcpip\Parameters

VxD\MSTCP

IpHlpApi.dll

.jpeg

security.dll

secur32.dll

winhttp.dll

WinHttpOpen

WinHttpConnect

WinHttpOpenRequest

WinHttpAddRequestHeaders

WinHttpSendRequest

WinHttpGetIEProxyConfigForCurrentUser

WinHttpGetProxyForUrl

WinHttpSetOption

WinHttpWriteData

WinHttpReceiveResponse

WinHttpQueryHeaders

WinHttpQueryAuthSchemes

WinHttpSetCredentials

WinHttpQueryDataAvailable

WinHttpReadData

WinHttpCloseHandle

hXXps://

hXXp://

%userappdata%\

BugReport

screenShot.png

operating system

hXXp://madExcept.com

<tr><td><button onClick="history.back();" style="height:19.5pt;">

<button onClick="document.getElementById('bugReport').style.visibility='visible';this.style.visibility='hidden';" style="height:19.5pt;">

<textarea id="bugReport" readonly cols="80" rows="20" style="width:100%;height:100%;

Software\Microsoft\Windows

idapi32.dll

GetThreadReport

GetCpuRegisters

kernelbase.dll

madExcept32.dll

c:\sources\madshi\madExcept32.dll

\madExcept\Dlls\madExcept32.dll

ReportLeaksNow

GetLeakReport

ShowLeakReport

madExcept32.dll has the wrong version.

ReportFault

@System@@StartExe$qqrp23System@PackageInfoTablep17System@TLibModule

psapi.dll

setupapi.dll

(%s @ %p)

(class '%s' @ %p)

operator

%s[%d]

%s_%d

.Owner

%s%s%.2d:%.2d

%s%s%.2d

\\?\UNC\

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

crSQLWait

claBurlywood

%s (*.%s)|*.%1:s

%s (%s)|%1:s|

SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes

Invalid ZStream operation!

%s, ClassID: %s

%s (%s)

Items.ItemData

{43826D1E-E718-42EE-BC55-A1E261C37BFE}

%s%s%s%s%s%s%s%s%s%s

Windows

\SYSTEM\CurrentControlSet\Control\Keyboard Layouts\

System\CurrentControlSet\Control\Keyboard Layouts\%.8x

E:\MagicBits\MagicbitVideoDownloader\code\uvd\other\ics\OverbyteIcsWndControl.pas

MsgLow not defined

Msg value out of bound

Msg already registered

Msg not registered

Operation would block

Operation now in progress

Operation already in progress

Socket operation on non-socket

Protocol not supported

Socket type not supported

Operation not supported on socket

Protocol family not supported

Address family not supported by protocol family

WinSock DLL cannot support this application

Unable to load wsock32.dll -

Winsock startup error ws2_32.dll -

ws2_32.dll

Unable to load ws2_32.dll -

wship6.dll

Unable to load wship6.dll -

SSLEAY32.DLL

SSL_get_peer_certificate

SSL_get_peer_cert_chain

SSL_CTX_use_certificate_chain_file

SSL_CTX_use_certificate_file

SSL_CTX_set_default_passwd_cb

SSL_CTX_set_default_passwd_cb_userdata

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey

SSL_CTX_get_cert_store

SSL_CTX_set_client_cert_cb

SSL_CTX_get_client_cert_cb

SSL_get_peer_certificate

SSL_get_peer_cert_chain

SSL_CTX_use_certificate_chain_file

SSL_CTX_use_certificate_file

SSL_CTX_use_certificate

SSL_CTX_set_default_passwd_cb

SSL_CTX_set_default_passwd_cb_userdata

SSL_CTX_use_PrivateKey_file

SSL_CTX_get_cert_store

SSL_CTX_set_client_cert_cb

SSL_CTX_get_client_cert_cb

LIBEAY32.DLL

Unsupported OpenSSL version (0x

Supported versions are 0x

d2i_PrivateKey_bio

i2d_PrivateKey_bio

X509_STORE_add_cert

X509_STORE_CTX_get_current_cert

X509_verify_cert

X509_verify_cert_error_string

X509_check_private_key

EVP_PKEY_new

EVP_PKEY_free

EVP_PKEY_get0

EVP_PKEY_assign

EVP_PKEY_size

EVP_PKEY_bits

RSA_generate_key

EC_KEY_print

PEM_write_bio_PrivateKey

PEM_read_bio_PrivateKey

X509_set_pubkey

X509_PKEY_free

i2d_PrivateKey

d2i_PrivateKey

X509_get_pubkey

X509_PUBKEY_free

PKCS7_add_certificate

gb2312 csgb2312 gbk cp936 ms936 windows-936

shift_jis ms_kanji csshiftjis

us-ascii ascii us ansi_x3.4-1968 iso-ir-6 ansi_x3.4-1986 iso_646.irv:1991 iso646-us ibm367 cp367 csascii

TIcsBufferHandler.Remove: Invalid Len

TIcsBufferHandler.Remove: nothing to remove

TSslWSocket (c) 2003-2010 Francois Piette V1.00.5e

0.0.0.0

Cannot change Port if not closed

Cannot change LocalPort if not closed

Winsock Resolve Port: Invalid Port.

Winsock Resolve Port: Invalid Proto.

Winsock Resolve Port: Cannot convert port '

E:\MagicBits\MagicbitVideoDownloader\code\uvd\other\ics\OverbyteIcsWSocket.pas

setsockopt(IPPROTO_TCP, TCP_NODELAY)

Connect: No Port Specified

Connect (Invalid operation in OnChangeState)

listen: port not assigned

TCustomWSocket.Shutdown

SetSocketFamily: New API requires winsock 2.2 and Windows XP, property "SocketFamily" reset to "sfIPv4"

Multi-Status (WebDAV)

Unsupported Media Type

Unprocessable Entity (WebDAV)

Locked (WebDAV)

Failed Dependency (WebDAV)

Blocked by Windows Parental Controls

HTTP Version Not Supported

Insufficient Storage (WebDAV)

HTTP status code

Not a HTTP status code

Not a HTTP tunnel error

HTTP Proxy -

Can't change socks port if not closed

Can't use Socks when HTTP proxy is used as well

Listening is not supported thru socks server

TCP is the only protocol supported thru socks server

IPv6 not supported with current socks version

command not supported

address type not supported

Error reading info file "%s"

Can't read certificate file "

Can't load private key file "

Certificate file not found "

Error on reading certificate file "

Error reading private key file "

Certificate and private key do not match

Private key not assigned

Error writing private key to file

Error reading certificate from BIO

Error reading private key from BIO

Error writing private key to BIO

Error writing certificate to BIO

%s BIO_ctrl_pending(%s) = %d [%d]

%s BIO_read(%s, 0x%x, %d) = %d [%d]

%s BIO_read(%s, 0x%x, %d) = %d [%d] Data:%s

%s BIO_ctrl(%s, %s, %s, 0x%x) = %d [%d]

%s BIO_ctrl_get_write_guarantee(%s) = %d [%d]

%s BIO_ctrl_get_read_request(%s) = %d [%d]

%s BIO_write(%s, 0x%x, %d) = %d [%d]

%s BIO_write(%s, 0x%x, %d) = %d [%d] Data:%s

%s %d [%d] %s

%s Winsock recv( %d, 0x%x, %d, %d) = %d [%d]

%s my_RealSend (0x%x, %d, %d) = %d [%d]

%s BIO_should_retry(%s) = %d [%d]

TCustomSslWSocket.Do_FD_CLOSE error #

TCustomSslWSocket.Do_FD_READ

SslBio write operation pending:

TCustomSslWSocket.Do_FD_WRITE

TCustomSslWSocket.DoRecv

TCustomSslWSocket.ShutDown

%s TriggerSslShutDownComplete(%d) %d

Renegotiaton not supported

%s ! Cannot start re-negotiation State %d Version (0x%x) RenegotiatePending %d NO_RENEGOTIATION %d HSocket %d

%s PutDataInSslBuffer %s len %d [%d]

%s PutDataInSslBuffer %s [%d] Data:%s

%s SslHandshakeDone(%d) %d. Secure connection with %s, cipher %s, %d secret bits (%d total), session reused=%s

%s PutDataInSendBuffer %s len %d [%d]

%s PutDataInSendBuffer %s [%d] Data:%s

TCP is the only protocol supported by HTTP proxies

HTTP/1.1

Listening is not supported thru HTTP proxy servers

Can't change HTTP proxy authentication if not closed

Can't change HTTP proxy password if not closed

Can't change HTTP proxy port if not closed

Can't change HTTP proxy if not closed

Can't use HTTP proxy when Socks is used as well

Can't change HTTP proxy usercode if not closed

TIcsURL (c) 1997-2012 F. Piette V8.00

http:

%s;q=%s

%s, %s;q=%s

%s, %s

THttpCli (c) 1997-2013 F. Piette V8.04

TSslHttpCli (c) 2008 Francois Piette V1.00.0

%2.2d %s %4.4d %2.2d:%2.2d:%2.2d

application/x-www-form-urlencoded

Mozilla/4.0

State = httpReady

State = httpNotConnected

State = httpConnected

State = httpDnsLookup

State = httpDnsLookupDone

State = httpWaitingHeader

State = httpWaitingBody

State = httpBodyReceived

State = httpWaitingProxyConnect

State = httpClosing

State = httpAborting

PrepareNTLMAuth begin, FStatusCode = %d FProxyAuthNTLMState=%d FAuthNTLMState=%d

PrepareNTLMAuth end, FStatusCode = %d FProxyAuthNTLMState=%d FAuthNTLMState=%d

Login

https

HTTP/

httpChunkDone, end of document

HTTP/1.0

HTTP component

HTTP component has nothing to post or put

document.htm

HTTP no status code (connection closed prematurely)

Insupported HTTP version

TGpIntegerListWalkEnumerator.HandleListChange: Unexpected list operation

List does not allow duplicates ($0%x)

E:\MagicBits\MagicbitVideoDownloader\code\uvd\other\OmniThreadLibrary\src\GpLists.pas

TGpInt64ListWalkEnumerator.HandleListChange: Unexpected list operation

TGpIntegerObjectList.AddObject: Number of items and objects differ

TGpIntegerObjectList.Delete: Number of items and objects differ

TGpIntegerObjectList.InsertObject: Number of items and objects differ

TGpInt64ObjectList.AddObject: Number of items and objects differ

TGpInt64ObjectList.Delete: Number of items and objects differ

TGpInt64ObjectList.InsertObject: Number of items and objects differ

\Software\Microsoft\Windows\CurrentVersion

\Software\Microsoft\Windows NT\CurrentVersion

Windows 3.1

Windows 95 OSR 2

Windows Me

Windows 9x

Windows NT 3.5

Windows NT

Windows Server 2003

Windows Server 2008

Windows Server 2008 or Windows Vista SP1

Windows Server 2008 R2

Windows 7 or Windows Server 2008 R2

Unable to register DSiWin32 hidden window class. %s

Unable to create DSiWin32 hidden window. %s

kernel.dll

E:\MagicBits\MagicbitVideoDownloader\code\uvd\other\OmniThreadLibrary\src\GpStuff.pas

GetGoodHashSize: Only data sizes up to %d are supported

TGpStringHash.Add: Maximum size reached

TGpStringHash.ValueOf: Key %s does not exist

E:\MagicBits\MagicbitVideoDownloader\code\uvd\other\OmniThreadLibrary\src\GpStringHash.pas

E:\MagicBits\MagicbitVideoDownloader\code\uvd\other\OmniThreadLibrary\OtlCommon.pas

TOmniValueContainer.GetItem: Parameter %s does not exist

TOmniValueContainer.GetItem: Container can only be indexed by integer or string.

TOmniValueContainer.SetItem: Container is locked

TOmniValueContainer.SetItem: Container can only be indexed by integer or string.

TOmniValue.Create: invalid data type

TOmniValue.CreateNamed: invalid name type

TOmniValue.CreateNamed: invalid data type

TValue of type %s cannot be converted to TOmniValue

TOmniAffinity.SetMask: Cannot modify system affinity mask.

TOmniExecutable: Wrong kind of executable %s, expected %s

TOmniMessageID.AsString: Unexpected message type %d

E:\MagicBits\MagicbitVideoDownloader\code\uvd\other\OmniThreadLibrary\OtlSync.pas

TOmniCS.Initialize: ocsSync is not properly aligned!

TOmniCS.Initialize: syncIntf is not properly aligned!

E:\MagicBits\MagicbitVideoDownloader\code\uvd\other\OmniThreadLibrary\OtlContainers.pas

TOmniBaseContainer: obcPublicRingBuffer is not %d-aligned

TOmniBaseContainer: obcRecycleRingBuffer is not %d-aligned

TOmniBaseQueue.Create: Maximum block size is %d

TOmniBaseQueue.Dequeue: Message queue is empty

E:\MagicBits\MagicbitVideoDownloader\code\uvd\other\OmniThreadLibrary\OtlCollections.pas

TOTPThreadDataFactory.Execute: Not supported!

%s:%d

%p:%d

TOTPWorkerThread.Execute: Unexpected message %d

Execution queue is too long (%d work items)

Maximum queued time exceeded. Pool = %0:s, Now = %1:s, Max executing = %2:d, Removed entry queue time = %3:s, Removed entry description = %4:s. Active entries: %5:s

TOTPWorker.ScheduleNext: Cannot start more than %d threads due to the implementation limitations

TOTPWorker.SetMonitor: Task can be only monitored with a single monitor

OmniThreadPool manager %s

TOmniThreadPool.SetMaxExecuting: MaxExecuting cannot be larger than %d due to the implementation limitations

function %s( %s ): %s

procedure %s( %s )%s

E:\MagicBits\MagicbitVideoDownloader\code\uvd\other\OmniThreadLibrary\src\DetailedRTTI.pas

E:\MagicBits\MagicbitVideoDownloader\code\uvd\other\OmniThreadLibrary\OtlTaskControl.pas

TOmniTaskExecutor.Asy_Execute: Executor is not set

TOmniTaskExecutor.Asy_RegisterComm: Additional communication support is only available when working with an IOmniWorker

TOmniTaskExecutor.Asy_RegisterWaitObject: WaitObject support is only available when working with an IOmniWorker

TOmniTaskExecutor.Asy_UnregisterComm: Additional communication support is only available when working with an IOmniWorker

TOmniTaskExecutor.Asy_UnregisterWaitObject: WaitObject support is only available when working with an IOmniWorker

TOmniTaskExecutor.CallOmniTimer: Invalid message type

TOmniTaskExecutor.DispatchOmniMessage: Method name not set

TOmniTaskExecutor.DispatchMessage: Cannot find message method %s.%s

TOmniTaskExecutor.DispatchMessage: Class %d was compiled without RTTI

TOmniTaskExecutor.DispatchMessage: Method %s.%s must not return result

TOmniTaskExecutor.GetMethodNameFromInternalMessage: Cannot find method name for method %p

TOmniTaskExecutor.GetMethodNameFromInternalMessage: Internal message type %s is not supported

TOmniTaskExecutor: Method %s.%s has invalid signature. Only following signatures are supported: (Self), (Self, const TOmniValue), (Self, var TObject)

TOmniTaskExecutor: Cannot wait on more than %d handles

TOmniTaskExecutor.SetOptions: Trying to set IOmniWorker specific option(s)

TOmniTaskExecutor.WaitForInit: Wait for init is only available when working with an IOmniWorker

TOmniTaskControl.CancelWith: Cancellation token can only be set before the task is started

TOmniTaskControl.SetMonitor: Monitor can only be assigned while task is not running

TOmniTaskControl.SetMonitor: Task can be only monitored with a single monitor

TOmniTaskControl.SetQueueSize: Cannot set queue size. Queue already exists

UserData can only be indexed by integer or string.

TOmniSharedTaskInfo.GetCancellationToken: ostiCancellationToken is not 4-aligned!

TOmniMessageExec.OnMessage: Unexpected kind %s

TOmniMessageExec.OnTerminated: Unexpected kind %s

TOmniMessageExec.Apply: Unexpected kind %s

E:\MagicBits\MagicbitVideoDownloader\code\uvd\other\OmniThreadLibrary\OtlEventMonitor.pas

TOmniEventMonitorPool.Release: Monitor is not allocated for thread %d

TOmniMessageQueue.Dequeue: Message queue is empty

TOmniCommunicationEndpoint.ReceiveWait: <task terminated> event is not set

TOmniCommunicationEndpoint.Send: Queue is full

TOmniCommunicationEndpoint.SendWait: <task terminated> event is not set

TOmniTwoWayChannel.OtherEndpoint: Invalid endpoint!

E:\MagicBits\MagicbitVideoDownloader\code\uvd\other\OmniThreadLibrary\OtlDataManager.pas

Join worker #%d

Parallel.Async

E:\MagicBits\MagicbitVideoDownloader\code\uvd\other\OmniThreadLibrary\OtlParallel.pas

Parallel.ForEach worker #

TOmniPipeline.Run: Pipeline is already running

Pipeline stage #%d

%s worker %d

Atomic<T>.Initialize: storage is not properly aligned!

Atomic<T>.Initialize: tmpT is not properly aligned!

Atomic<T>.Initialize: Unsupported type

TOmniValue: CastFrom<%s> is broken!

Value %d is too big to fit into %s

debug_log.txt

http=

SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E028DBDA-EEE7-48A0-ADF7-D250589A02C5}_is1

Software\Microsoft\Windows\CurrentVersion\Uninstall\{E028DBDA-EEE7-48A0-ADF7-D250589A02C5}_is1

Windows NT 3.0

Windows NT 4.0

Windows NT 5.0

Windows NT 5.1

Windows NT 6.0

Windows NT 6.1

Windows NT 6.2

Windows NT 6.3

Opera/9.80 (

) Presto/2.12.388 Version/12.14

E:\MagicBits\MagicbitVideoDownloader\code\uvd\other\superobject.pas

Unsuported variant data type: %d

Network.proxy

Network.port

User.GUID

settings.uvd

%d%s %d%s %d%s

%d%s %d%s

%d:%2.2d:%2.2d

%d:%2.2d

Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko

Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko

Mozilla/5.0 (Windows; I; Windows NT 5.1; ru; rv:1.9.2.13) Gecko/20100101 Firefox/4.0

Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:16.0) Gecko/20120815 Firefox/16.0

Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36

Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36

Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1944.0 Safari/537.36

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36

Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.116 Safari/537.36

Mozilla/5.0 (iPad; U; CPU OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B334b Safari/531.21.10

Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0

Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20120101 Firefox/29.0

Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0

Mozilla/5.0 (X11; OpenBSD amd64; rv:28.0) Gecko/20100101 Firefox/28.0

Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0

Mozilla/5.0 (Windows NT 6.1; rv:27.3) Gecko/20130101 Firefox/27.3

GetSizeFileByURL. StatusCode =

GetSizeFileByURL.

GetStrByURL. StatusCode =

GetStrByURL.

url_encoded_fmt_stream_map

ratebypass=

&ratebypass=yes

</BaseURL>

youtube.com

VVV.youtube.com

youtu.be

VVV.youtu.be

.sig||

hXXp://i.ytimg.com/vi/%s/sddefault.jpg

hXXp://i.ytimg.com/vi/%s/hqdefault.jpg

hXXp://gdata.youtube.com/feeds/api/videos/%s?v=2&alt=json&

entry.media$group.yt$duration.seconds

entry.media$group.media$description.$t

entry.author[0].name.$t

entry.media$group.media$title.$t

hXXp://VVV.youtube.com/watch?v=%s

hXXp://VVV.youtube.com/get_video_info?video_id=%s&asv=3&el=info&sts=%s&

VideoServiceIntf.GetLastError dur=0

VideoServiceIntf.GetLastError errorcode=100

VideoServiceIntf.GetLastError errorcode=101

VideoServiceIntf.GetLastError errorcode=150

MediaElement.ListMediaConteiner.Count =

Failed to create pipe for standard input. System error message:

Failed to create pipe for standard output. System error message:

Failed creating the console process. System error msg:

v=1&tid=%s&cid=%s&an=%s&av=%s&ul=%s&t=event&ec=%s&ea=%s&el=%s&ev=%s&cd=%s

hXXp://VVV.google-analytics.com/collect

v=1&tid=%s&cid=%s&an=%s&ul=%s&av=%s&t=screenview&cd=%s&ua=%s

v=1&tid=%s&cid=%s&an=%s&ul=%s&av=%s&&exf=1&t=exception&exd=%s&ua=%s

ffmpeg -i "%s" -i "%s" -c copy "%s"

ffmpeg -i "%s" -q:a 0 "%s"

ffmpeg -i "%s" -q:a 2 "%s"

ffmpeg -i "%s" -q:a 6 "%s"

ffmpeg -i "%s" -q:a 8 "%s"

ffmpeg -i "%s" -q:a 9 "%s"

v.mp4

a.mp4

450-1000

00:00-04:00

04:00-10:00

10:00-40:00

40:00-90:00

hXXp://37.130.231.86/update/version.txt

RegProto.exe

old.exe

clean.txt

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E028DBDA-EEE7-48A0-ADF7-D250589A02C5}_is1

E:\MagicBits\MagicbitVideoDownloader\code\uvd\other\Graphics32\GR32_System.pas

E:\MagicBits\MagicbitVideoDownloader\code\uvd\other\Graphics32\GR32_Resamplers.pas

E:\MagicBits\MagicbitVideoDownloader\code\uvd\other\Graphics32\GR32_Layers.pas

E:\MagicBits\MagicbitVideoDownloader\code\uvd\other\Graphics32\GR32_Image.pas

E:\MagicBits\MagicbitVideoDownloader\code\uvd\other\Graphics32\GR32.pas

Unpaired TThreadPersistent.EndUpdate

olepro32.dll

WEBBUTTON

Webdings

Cannot load image. %s not supported for %s files.

Cannot load image. Palette in %s file is invalid.

Cannot load image. Invalid or unexpected %s image format.

Cannot load image. CRC error found in %s file.

Cannot load image. Extra compressed data found in %s file.

Cannot load image. Compression error found in %s file.

Invalid color format in %s file.

Conversion between indexed and non-indexed pixel formats is not supported.

acMDIIcons

Unable to retrieve folder details for "%s". Error code $%x

Error Setting Path: %s

%s: Missing call to LoadColumnDetails

Rename to %s failed

Error setting path: "%s"

Options.dat

E:\Acntrls\acnt_f\DelphiXE6\sSkinManager.pas

c:\Skins

extracted.asz

1.tmp

.JPEG

2.tmp

Please, update skins to latest or contact the AlphaControls support for upgrading of existing skin.

This version of the skin have not complete support by used AlphaControls package release.

item.mc.VideoResolution

item.mc.AudioBitrate

item.mc.MediaType

item.mc.Transform

item.mc.video_url

item.mc.video_file

item.mc.video_size

item.mc.audio_url

item.mc.audio_file

item.mc.audio_size

item.sd1.filename

item.sd1.total

item.sd1.position

item.sd1.status

item.sd2.filename

item.sd2.total

item.sd2.position

item.sd2.status

item.StatusItem

item.url

item.basepath

item.position

item.image_preview

hXXp://videodownloader.ummy.net

hXXp://videodownloader.ummy.net/assets/icons/icon-100.png

hXXp://vk.com/share.php?url=

hXXp://VVV.odnoklassniki.ru/dk?st.cmd=addShare&st.s=1&st._surl=

&st.comments=

hXXp://VVV.facebook.com/sharer.php?s=100&p[url]=

hXXps://plus.google.com/share?url=

madExceptWizard_.bpl

tips.eng

hXXp://videodownloader.ummy.net/ru/kupit.html

hXXp://videodownloader.ummy.net/buy.html

ffmpeg.exe

portable

Report an error

hXXp://videodownloader.ummy.net/ru/u-menya-est-ideya.html

hXXp://videodownloader.ummy.net/ive-got-an-idea.html

hXXps://savefrom.userecho.com/forum/33103-ummy-video-downloaderru/

hXXps://savefrom.userecho.com/forum/33104-ummy-video-downloaderen/

Portable Network Graphics

E:\MagicBits\MagicbitVideoDownloader\code\uvd\other\OmniThreadLibrary\OtlTask.pas

Portable network graphics (AlphaControls)

CRASPIPETTE

66006666

Add to custom colors set8Listbox (%s) style must be virtual in order to set Count

Error setting %s.Count

Can't set size from '%s'

Hebrew (Windows)

Thai (Windows)

Turkish (Windows)

Vietnamese (Windows)

Western European (Windows)"GetCoding must be overridden in %s0Reverse transformation is not implemented in %s.0Forward transformation is not implemented in %s.

Baltic (Windows)

Central European (Windows)

Cyrillic (Windows)

Greek (Windows)

jThis "Portable Network Graphics" image is invalid because the decoder found an unexpected end of the file.8This "Portable Network Graphics" image contains no data.]The program tried to add a existent critical chunk to the current image which is not allowed.IIt's not allowed to add a new chunk because the current image is invalid.7The png image could not be loaded from the resource ID.oSome operation could not be performed because the system is out of resources. Close some windows and try again.

Setting bit transparency color is not allowed for png images containing alpha value for each pixel (COLOR_RGBALPHA and COLOR_GRAYSCALEALPHA)OThis operation is not valid because the current image contains no valid header.4The new size provided for image resizing is invalid.oThe "Portable Network Graphics" could not be created because invalid image type parameters have being provided.&Cannot change the size of a JPEG image

JPEG error #%d

Arabic (Windows)

Invalid ownerE%d is an invalid PageIndex value. PageIndex must be between 0 and %d=This control requires version 4.70 or greater of COMCTL32.DLLjThis "Portable Network Graphics" image is not valid because it contains invalid pieces of data (crc error)yThe "Portable Network Graphics" image could not be loaded because one of its main piece of data (ihdr) might be corruptedUThis "Portable Network Graphics" image is invalid because it has missing image parts.[Could not decompress the image because it contains invalid compressed data.

Description: BThe "Portable Network Graphics" image contains an invalid palette.

The file being read is not a valid "Portable Network Graphics" image because it contains an invalid header. This file may be corrupted, try obtaining it againnThis "Portable Network Graphics" image is not supported or it might be invalid.

This "Portable Network Graphics" image is not supported because either its width or height exceeds the maximum size of 65535 pixels.

There is no such palette entry.dThis "Portable Network Graphics" image contains an unknown critical part which could not be decoded.pThis "Portable Network Graphics" image is encoded with an unknown compression scheme which could not be decoded.cThis "Portable Network Graphics" image uses an unknown interlace scheme which could not be decoded.-The chunks must be compatible to be assigned.

OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters

Failed to clear tab control Failed to delete tab at index %d"Failed to retrieve tab at index %d Failed to get object at index %d"Failed to set tab "%s" at index %d Failed to set object at index %d<MultiLine must be True when TabPosition is tpLeft or tpRight

Invalid item level assignment Invalid level (%d) for item "%s"

Unable to load style '%s'

Unable to load styles: %s

Style '%s' already registered#Style class '%s' already registered

Style '%s' not found

Style class '%s' not found

Invalid style format)Class '%s' is already registered for '%s'%Class '%s' is not registered for '%s'

%s parameter cannot be nil#Feature not supported by this style

Style '%s' is not registered"Cannot unregister the system style

Login

Error setting %s.Count8Listbox (%s) style must be virtual in order to set Count#No OnGetItem event handler assigned

UTF-7Ênnot remove shell notification icon"PageControl must first be assigned"%s requires Windows Vista or later

Button%d

RadioButton%d

Clipboard does not support Icons

Cannot open clipboard: %s Operation not supported on selected printer.There is no default printer currently selected/Menu '%s' is already being used by another form

- Dock zone has no controlLError loading dock zone from the stream. Expecting version %d, but found %d.,Multiselect mode must be on for this feature7Length of value array must be >= length of prompt array

&Password

Value must be between %d and %d

Grid too large for operation Too many rows or columns deleted

Invalid input value7Invalid input value. Use escape key to abandon changes

Enhanced Metafiles$Parent given is not a parent of '%s'

%s property out of range

%s on %s@GroupIndex cannot be less than a previous menu item's GroupIndex

Invalid operation on TOleGraphic$Unknown picture file extension (.%s)

Unsupported clipboard format

Canvas does not allow drawing#Text format flag '%s' not supported

Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent windowGNo single cast observer with ID %d was added to the observer collectionFNo multi cast observer with ID %d was added to the observer collection

Invalid date string: %s

Invalid time string: %s

Invalid time Offset string: %s0Tab position incompatible with current tab style0Tab style incompatible with current tab position

Scan line index out of range!Cannot change the size of an iconÊnnot change the size of a WIC Image8Windows taskbar only supports %d buttons on preview tabs Could not register tab. Error ÔFailed to set bitmap as thumbnail preview. Error: %d*Failed to set bitmap as preview. Error: %d

Error writing zip file"Invalid Zip Local Header signature$Invalid Zip Central Header signature1Support for compression method not registered: %s

Observer is not supportedLCannot have multiple single cast observers added to the observers collection4The object does not implement the observer interface

Windows Server 2003 R2

Windows Server 2012

Windows Server 2012 R2

Windows 8.10%s interface is not supported on this OS version'Could not initialize taskbar. Error: %d

No help found for %s

Duplicates not allowed5Insufficient RTTI available to support this operation

Parameter count mismatch<Type '%s' is not declared in the interface section of a unit7VAR and OUT arguments must match parameter type exactly,Specified Login Credential Service not found"%s (Version %d.%d, Build %d, %5:s):%s Service Pack %4:d (Version %1:d.%2:d, Build %3:d, %5:s)

The drive cannot be found The specified file was not foundWThe given "%s" local time is invalid (situated within the missing period prior to DST).$No help viewer that supports filters

Invalid Timeout value: %s

Timespan too longbThe duration cannot be returned because the absolute value exceeds the value of TTimeSpan.MaxValue

No help found for context %d

Thread creation error: %s

Thread Error: %s (%d)-Cannot terminate an externally created thread,Cannot wait for an externally created thread2Cannot call Start on a running or suspended thread;Cannot call CheckTerminated on an externally created thread9Cannot call SetReturnValue on an externally create thread

Parameter %s cannot be nil'Parameter %s cannot be a negative value*Input buffer exceeded for %s = %d, %s = %d

The specified path is too long The specified path was not found The path format is not supported$The specified directory is not empty

List count out of bounds (%d)

List index out of bounds (%d) Out of memory while expanding memory stream)%s has not been registered as a COM class

Error reading %s%s%s: %s

Failed to create key %s

Failed to get data for '%s'

Failed to set data for '%s'

Resource %s not found

%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group

Property %s does not exist

#A component named %s already exists%String list does not allow duplicates

Cannot create file "%s". %s

Cannot open file "%s". %s

Invalid file name - %s

'%s' is an invalid mask at (%d)$''%s'' is not a valid component name

Invalid property element: %s

Invalid property type: %s

Invalid data type for '%s'

Item not found ($0%x) List capacity out of bounds (%d)

Invalid destination array"Character index out of bounds (%d)

Start index out of bounds (%d)

Invalid count (%d)

Invalid destination index (%d)

Ancestor for '%s' not found

Cannot assign a %s to a %s

Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread

Class %s not found

A class named %s already exists%List does not allow duplicates ($0%x)

December(Monitor support function not initialized

%s (%s, line %d)

Abstract Error?Access violation at address %p in module '%s'. %s of address %p

System Error. Code: %d.

,Custom variant type (%s%.4x) is out of range/Custom variant type (%s%.4x) already used by %s*Custom variant type (%s%.4x) is not usable2Too many custom variant types have been registered5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)

Operation not supported

External exception %x

Interface not supported

Application Error1Format '%s' invalid or incompatible with argument

No argument for format '%s'"Variant method calls not supported

Invalid variant operation

Invalid NULL variant operation%Invalid variant operation (%s%.8x)

Integer overflow Invalid floating point operation

Invalid pointer operation

Invalid class typecast0Access violation at address %p. %s of address %p

Privileged instruction(Exception %s in module %s at %p.

<unknown>!'%s' is not a valid integer value('%s' is not a valid floating point value

'%s' is not a valid date

'%s' is not a valid time!'%s' is not a valid date and time '%d.%d' is not a valid timestamp

'%s' is not a valid GUID value

I/O error %d

1.3.0.3

IEXPLORE.EXE_2032:

.text

`.data

.idata

.rsrc

@.reloc

u\j.Xf9

j.Xf9

USER32.dll

api-ms-win-downlevel-shell32-l1-1-0.dll

IEFRAME.dll

SHELL32.dll

iexplore.pdb

api-ms-win-downlevel-shlwapi-l1-1-0.dll

iertutil.dll

api-ms-win-downlevel-advapi32-l1-1-0.dll

KERNEL32.dll

msvcrt.dll

_wcmdln

_amsg_exit

RegOpenKeyExW

RegCloseKey

<!-- Note: This manifest needs to be kept in sync with iexplore.exe.manifest -->

<assemblyIdentity version="5.1.0.0"

name="Microsoft.InternetExplorer"

<windowsSettings>

<dpiAware xmlns="hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>

</windowsSettings>

<!--The ID below indicates application support for Windows 8 -->

<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>

KEYW

.ENNNG.

a.ry.v

l.igM4

?1%SGf

xh.JW^

.97777"7" " " !

3.... ))

8888888888888

8888888888

.lPV)

úW1

.ApX/

H.ZAf

ð[U

%s!FK

1YYYY1YY9GEAA=77YRNNNW:.VT1

888777777

Y.hilkRROMLK=C,

..(((($$

3...((((%

3....(.''$

3.2...((((%

33.2....(,'

55323222...

(%&'00443445?

00.,,,4(

000.,,9(

0020..9(

003200;(

(#'( (''''!'!

Microsoft.InternetExplorer.Default

Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe

{28fb17e0-d393-439d-9a21-9474a070473a}

imm32.dll

Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}

Kernel32.dll

"%s" %s

kernel32.dll

IEXPLORE.EXE

{00000000-0000-0000-0000-000000000000}

\\?\Volume

Imaging_CreateWebPagePreview_Perftrack

Browseui_Tabs_Tearoff_BetweenWindows

Browseui_Tabs_Tearoff_BetweenWindows_TabProc

Frame_URLEntered

Imaging_CreateWebPagePreview

WS_ExecuteQuery

Shdocvw_BaseBrowser_FireEvent_WindowStateChanged

IdleTask_Execution_Time

Shdocvw_BaseBrowser_FireEvent_BeforeScriptExecute

IMTravelLogMVC_TravelURL

10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)

Windows

10.00.9200.16521

browser.exe_3792:

.text

`.rdata

@.data

.rsrc

@.reloc

HtdHtHHHt.HH

j.Yf;

_tcPVj@

.PjRW

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\chrome_exe_main_win.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\client_util.cc

No valid Chrome version found

Failed to load Chrome DLL from

ChromeMain

RelaunchChromeBrowserWithNewCommandLineIfNeeded

Could not find exported function

allow-insecure-websocket-from-https-origin

disable-webgl

disable-web-security

enable-experimental-web-platform-features

enable-tcp-fastopen

enable-viewport

enable-viewport-meta

enable-vtune-support

enable-webgl-draft-extensions

enable-webgl-image-chromium

enable-web-midi

enable-webkit-find-restart

ignore-certificate-errors

remote-debugging-port

renderer-cmd-prefix

testing-fixed-http-port

testing-fixed-https-port

trace-upload-url

utility-cmd-prefix

zygote-cmd-prefix

disable-webrtc-hw-decoding

disable-webrtc-encryption

disable-webrtc-hw-encoding

enable-webrtc-hw-vp8-encoding

enable-webrtc-hw-h264-encoding

disable-webaudio

opera

1.3.21.115

%s-x-x

Chrome

0.0.0.0-devel

%s-%x

url-chunk

font_key_name

subresource_url

CHROME_MAIN_TIME

%x-%x

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\google_update_settings.cc

auto-launch-chrome

chrome

chrome-sxs

new-setup-exe

register-dev-chrome

register-url-protocol

rename-browser-exe

update-setup-exe

toast-results-key

Cannot initialize AppCommands from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_commands.cc

Failed to open key "

Skipping over key "

make-browser-default-after-import

silent-first-import

ya_permanent_state.brand_id

ya_permanent_state.base_host

ya_permanent_state.partner_id

ya_permanent_state.uninstall_survey_url

yandex.ru

iexplore.exe

googlechromeapphost

googlechromeframe

Cannot initialize an AppCommand from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_command.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\language_selector.cc

CHROME_BREAKPAD_PIPE_NAME

CHROME_BREAKPAD_EVENT_NAME

d:\buildagent\work\9d1bc32700498ce4\src\components\crash\app\breakpad_win.cc

NTDLL.DLL

kernel32.dll

d:\buildagent\work\9d1bc32700498ce4\src\sandbox\win\src\sandbox_policy_base.cc

CreateNamedPipeW

NtCreateKey

NtOpenKey

NtOpenKeyEx

AudioCaptureAllowedUrls

AutoSelectCertificateForUrls

ChromeFrameContentTypes

ChromeFrameRendererSettings

ChromeOsLockOnIdleSuspend

ChromeOsMultiProfileUserBehavior

ChromeOsReleaseChannel

ChromeOsReleaseChannelDelegated

CloudPrintProxyEnabled

CloudPrintSubmitEnabled

ContentPackManualBehaviorURLs

CookiesAllowedForUrls

CookiesBlockedForUrls

CookiesSessionOnlyForUrls

DefaultSearchProviderAlternateURLs

DefaultSearchProviderIconURL

DefaultSearchProviderImageURL

DefaultSearchProviderImageURLPostParams

DefaultSearchProviderInstantURL

DefaultSearchProviderInstantURLPostParams

DefaultSearchProviderKeyword

DefaultSearchProviderNewTabURL

DefaultSearchProviderSearchTermsReplacementKey

DefaultSearchProviderSearchURL

DefaultSearchProviderSearchURLPostParams

DefaultSearchProviderSuggestURL

DefaultSearchProviderSuggestURLPostParams

DeviceAllowRedeemChromeOsRegistrationOffers

DeviceLocalAccountAutoLoginBailoutEnabled

DeviceLocalAccountAutoLoginDelay

DeviceLocalAccountAutoLoginId

DeviceLoginScreenDefaultHighContrastEnabled

DeviceLoginScreenDefaultLargeCursorEnabled

DeviceLoginScreenDefaultScreenMagnifierType

DeviceLoginScreenDefaultSpokenFeedbackEnabled

DeviceLoginScreenDefaultVirtualKeyboardEnabled

DeviceLoginScreenPowerManagement

DeviceLoginScreenSaverId

DeviceLoginScreenSaverTimeout

DeviceMetricsReportingEnabled

DeviceStartUpUrls

DeviceUpdateHttpDownloadsEnabled

EnableAuthNegotiatePort

EnableDeprecatedWebPlatformFeatures

EnableOriginBoundCerts

EnableWebBasedSignin

EnterpriseWebStoreName

EnterpriseWebStoreURL

HideWebStoreIcon

HideWebStorePromo

ImagesAllowedForUrls

ImagesBlockedForUrls

ImportAutofillFormData

ImportBookmarks

ImportHistory

ImportHomepage

ImportSavedPasswords

ImportSearchEngine

JavaScriptAllowedForUrls

JavaScriptBlockedForUrls

KeyboardDefaultToFunctionKeys

MetricsReportingEnabled

NotificationsAllowedForUrls

NotificationsBlockedForUrls

PasswordManagerAllowShowPasswords

PasswordManagerEnabled

PluginsAllowedForUrls

PluginsBlockedForUrls

PopupsAllowedForUrls

PopupsBlockedForUrls

ProxyBypassList

ProxyPacUrl

RemoteAccessHostAllowClientPairing

RemoteAccessHostAllowGnubbyAuth

RemoteAccessHostAllowRelayedConnection

RemoteAccessHostDomain

RemoteAccessHostFirewallTraversal

RemoteAccessHostRequireCurtain

RemoteAccessHostRequireTwoFactor

RemoteAccessHostTalkGadgetPrefix

RemoteAccessHostUdpPortRange

RenderInChromeFrameList

ReportDeviceActivityTimes

ReportDeviceBootMode

ReportDeviceLocation

ReportDeviceNetworkInterfaces

ReportDeviceUsers

ReportDeviceVersionInfo

RestoreOnStartupURLs

ShowAppsShortcutInBookmarkBar

SuppressChromeFrameTurndownPrompt

TermsOfServiceURL

TouchVirtualKeyboardEnabled

URLBlacklist

URLWhitelist

VideoCaptureAllowedUrls

VirtualKeyboardEnabled

update_url

^update_url:

CHROME_VERSION

CHROME_SAFE_MODE

2676A9A2-D919-4FEE-9187-152100393AB2

ignore-urlfetcher-cert-requests

install-chrome-app

install-ephemeral-app-from-webstore

pack-extension-key

permission-request-api-url

promo-server-url

proxy-bypass-list

proxy-pac-url

remember-cert-error-decisions

spelling-service-feedback-url

try-chrome-again

variations-server-url

winhttp-proxy-resolver

ya-url-copy-safe-text

skip-first-import

plugins-metadata-server-url

windows8-search

allow-http-screen-capture

app-list-start-page-url

apps-checkout-url

apps-gallery-download-url

apps-gallery-url

apps-gallery-update-url

certificate-transparency-log

disable-extensions-http-throttling

disable-password-manager-reauthentication

disable-quic-port-selection

disable-save-password-bubble

disable-web-resources

enable-auth-negotiate-port

enable-npn-http

enable-quic-port-selection

enable-save-password-bubble

enable-sdch-over-https

enable-user-controlled-alternate-protocol-ports

enable-websocket-over-spdy

enable-website-settings-manager

explicitly-allowed-ports

extensions-not-webstore

help-url

40.0.2214.3645

CHROME_HEADLESS

CHROME_LOG_FILE

CHROME_METRO_CONNECTED

CHROMEOS_SESSION_LOG_DIR

CHROME_CRASHED

CHROME_RESTART

profile.ephemeral_mode

profile.icon_version

session.restore_on_startup

session.restore_on_startup_migrated

session.startup_urls_migration_time

session.restore_to_homepage_if_empty

profile.exited_cleanly

profile.exit_type

profile.managed.custodian_email

profile.managed.custodian_name

profile.managed.custodian_profile_image_url

profile.managed.custodian_profile_url

profile.managed.manual_hosts

profile.managed.manual_urls

profile.managed.second_custodian_email

profile.managed.second_custodian_name

profile.managed.second_custodian_profile_image_url

profile.managed.second_custodian_profile_url

profile.managed.shared_settings

session.startup_urls

session.urls_to_restore_on_startup

intl.app_locale

intl.charset_default

intl.accept_languages

intl.applied_brand_package_accept_languages

intl.static_encodings

webkit.webprefs.fonts.standard.Zyyy

webkit.webprefs.fonts.fixed.Zyyy

webkit.webprefs.fonts.serif.Zyyy

webkit.webprefs.fonts.sansserif.Zyyy

webkit.webprefs.fonts.cursive.Zyyy

webkit.webprefs.fonts.fantasy.Zyyy

webkit.webprefs.fonts.pictograph.Zyyy

webkit.webprefs.fonts.standard

webkit.webprefs.fonts.fixed

webkit.webprefs.fonts.serif

webkit.webprefs.fonts.sansserif

webkit.webprefs.fonts.cursive

webkit.webprefs.fonts.fantasy

webkit.webprefs.fonts.pictograph

webkit.webprefs.fonts.standard.Arab

webkit.webprefs.fonts.fixed.Arab

webkit.webprefs.fonts.serif.Arab

webkit.webprefs.fonts.sansserif.Arab

webkit.webprefs.fonts.standard.Cyrl

webkit.webprefs.fonts.fixed.Cyrl

webkit.webprefs.fonts.serif.Cyrl

webkit.webprefs.fonts.sansserif.Cyrl

webkit.webprefs.fonts.standard.Grek

webkit.webprefs.fonts.fixed.Grek

webkit.webprefs.fonts.serif.Grek

webkit.webprefs.fonts.sansserif.Grek

webkit.webprefs.fonts.standard.Jpan

webkit.webprefs.fonts.fixed.Jpan

webkit.webprefs.fonts.serif.Jpan

webkit.webprefs.fonts.sansserif.Jpan

webkit.webprefs.fonts.standard.Hang

webkit.webprefs.fonts.fixed.Hang

webkit.webprefs.fonts.serif.Hang

webkit.webprefs.fonts.sansserif.Hang

webkit.webprefs.fonts.cursive.Hang

webkit.webprefs.fonts.standard.Hans

webkit.webprefs.fonts.fixed.Hans

webkit.webprefs.fonts.serif.Hans

webkit.webprefs.fonts.sansserif.Hans

webkit.webprefs.fonts.standard.Hant

webkit.webprefs.fonts.fixed.Hant

webkit.webprefs.fonts.serif.Hant

webkit.webprefs.fonts.sansserif.Hant

webkit.webprefs.default_font_size

webkit.webprefs.default_fixed_font_size

webkit.webprefs.minimum_font_size

webkit.webprefs.minimum_logical_font_size

webkit.webprefs.javascript_enabled

webkit.webprefs.web_security_enabled

webkit.webprefs.javascript_can_open_windows_automatically

webkit.webprefs.loads_images_automatically

webkit.webprefs.plugins_enabled

webkit.webprefs.dom_paste_enabled

webkit.webprefs.shrinks_standalone_images_to_fit

webkit.webprefs.uses_universal_detector

webkit.webprefs.text_areas_are_resizable

webkit.webprefs.java_enabled

webkit.webprefs.tabs_to_links

webkit.webprefs.allow_displaying_insecure_content

webkit.webprefs.allow_running_insecure_content

safebrowsing.enabled

safebrowsing.extended_reporting_enabled

safebrowsing.proceed_anyway_disabled

safebrowsing.incident_report_sent

safebrowsing.incidents_sent

incognito.mode_availability

search.suggest_enabled

browser.confirm_to_quit

security.cookie_behavior

download.prompt_for_download

alternate_error_pages.enabled

dns_prefetching.startup_list

dns_prefetching.host_referral_list

spdy.disabled

net.http_server_properties

spdy.servers

spdy.alternate_protocol

protocol.disabled_schemes

instant_ui.zero_suggest_url_prefix

local_state.multiple_profile_prefs_version

dns_prefetching.enabled

net.network_prediction_options

hide_web_store_icon

browser.show_home_button

browser.show_ya_button

browser.show_tablo_on_click

browser.last_session_empty

browser.session_empty

browser.use_mouse_gestures

browser.enable_page_expiration

browser.do_not_count_page_expiration_infobar_closings

profile.recently_selected_encodings

browser.clear_data.browsing_history

browser.clear_data.download_history

browser.clear_data.cache

browser.clear_data.cookies

browser.clear_data.passwords

browser.clear_data.form_data

browser.clear_data.hosted_apps_data

browser.clear_data.content_licenses

browser.enable_spellchecking

browser.speechinput_censor_results

browser.speechinput_tray_notification_shown_contexts

browser.enabled_labs_experiments

ya.experiments_edited_by_user

ya.distrib_default_experiments

browser.enable_autospellcorrect

history.saving_disabled

ya.settings.text_wrap

history.deleting_enabled

settings.force_safesearch

settings.history_recorded

browser.clear_data.time_period

browser.last_clear_browsing_data_time

extensions.theme.pack

extensions.theme.id

extensions.theme.images

extensions.theme.colors

extensions.theme.tints

extensions.theme.properties

extensions.ui.developer_mode

extensions.commands

plugins.last_internal_directory

plugins.plugins_list

plugins.plugins_disabled

plugins.plugins_disabled_exceptions

plugins.plugins_enabled

plugins.migrated_to_pepper_flash

plugins.removed_old_component_pepper_flash_settings

plugins.show_details

plugins.allow_outdated

plugins.always_authorize

plugins.metadata

plugins.resource_cache_update

browser.check_default_browser

browser.default_browser_setting_enabled

browser.custom_chrome_frame

profile.content_settings.plugin_whitelist

profile.block_third_party_cookies

profile.clear_site_data_on_exit

partition.default_zoom_level

profile.default_zoom_level

partition.per_host_zoom_levels

profile.per_host_zoom_levels

autofill.data_model_default

autofill.pay_without_wallet

autofill.wallet_location_disclosure

autofill.save_data

autofill.wallet_shipping_same_as_billing

autofill.generated_card_bubble_times_shown

autofill.rac_dialog_defaults

breadcrumbs.enabled

push_to_call.enabled

push_to_call.wasenabled

ya.disk.want_install

context_translate.enabled

context_translate.translate_words

enable_deprecated_web_platform_features

import_last_source_browser

import_autofill_form_data

import_bookmarks

import_history

import_home_page

import_saved_passwords

import_cookies

import_last_session

import_extensions

import_speed_dial

import_other

ya.statistics.import_rollback

ya.import_new_source_type

ya.import_new_source_profile

import_search_engine

profile.avatar_index

profile.using_default_name

profile.name

profile.using_default_avatar

profile.using_gaia_avatar

profile.managed_user_id

profile.gaia_info_update_time

profile.gaia_info_picture_url

profile.avatar_bubble_tutorial_shown

printing.enabled

printing.print_preview_disabled

profile.managed.default_filtering_behavior

profile.managed_user_creation_allowed

profile.managed_users

profile.reset_prompt_memento

message_center.disabled_extension_ids

message_center.disabled_system_component_ids

message_center.welcome_notification_dismissed

message_center.welcome_notification_dismissed_local

message_center.welcome_notification_previously_popped_up

message_center.welcome_notification_expiration_timestamp

fullscreen.allowed

local_discovery.notifications_enabled

prefs.preference_reset_time

ya.prefetch.latest_update_list

ya.tablo_pins.instance_id

gcm.channel_enabled

gcm.push_messaging_registration_count

easy_unlock.allowed

easy_unlock.enabled

easy_unlock.pairing

easy_unlock.proximity_required

easy_unlock.show_tutorial

zerosuggest.cachedresults

signin.error_stats_update_time

ssl.rev_checking.enabled

ssl.rev_checking.required_for_local_anchors

ssl.version_min

ssl.version_max

ssl.version_fallback_min

ssl.cipher_suites.blacklist

ssl.ssl_record_splitting.disabled

ssl.ssl_blocking_bypassed

user_experience_metrics.reporting_enabled

profile.last_used

profile.last_active_profiles

profile.profiles_created

profile.info_cache

profile.created_by_version

profile.reset_prompt_mementos

user_experience_metrics.stability.page_load_count

user_experience_metrics.stability.renderer_crash_count

user_experience_metrics.stability.extension_renderer_crash_count

user_experience_metrics.stability.renderer_hang_count

user_experience_metrics.stability.child_process_crash_count

user_experience_metrics.stability.other_user_crash_count

user_experience_metrics.stability.kernel_crash_count

user_experience_metrics.stability.system_unclean_shutdowns

user_experience_metrics.stability.plugin_stats2

uninstall_metrics.page_load_count

uninstall_metrics.last_launch_time_sec

uninstall_metrics.last_observed_running_time_sec

browser.suppress_default_browser_prompt_for_version

browser.window_placement

browser.window_placement_popup

task_manager.window_placement

browser.app_window_placement

renderer.memory_cache.size

download.default_directory

download.default_directory_display_name

download.extensions_to_open

download.directory_upgrade

download.open_pdf_in_system_reader

savefile.default_directory

savefile.type

select_file_dialogs.allowed

filebrowser.tasks.default_by_mime_type

filebrowser.tasks.default_by_suffix

selectfile.last_directory

browser.hung_plugin_detect_freq

browser.plugin_message_response_timeout

spellcheck.dictionary

spellcheck.use_spelling_service

protocol_handler.excluded_schemes

safe_browsing.client_key

safe_browsing.wrapped_key

options_window.last_tab_index

certificate_manager_window.last_tab_index

browser.show_omnibox_share_buttons

browser.last_redirect_origin

shutdown.type

shutdown.num_processes

shutdown.num_processes_slow

restart.last.session.on.shutdown

was.restarted

relaunch.mode

extensions.disabled

plugins.disable_plugin_finder

ntp.app_page_names

ntp.collapsed_open_tabs

ntp.collapsed_foreign_sessions

ntp.collapsed_recently_closed_tabs

ntp.collapsed_snapshot_document

ntp.collapsed_sync_promo

ntp.date_resource_server

ntp.most_visited_blacklist

ntp.promo_desktop_session_found

ntp.promo_resource_cache_update

ntp.shown_bookmarks_folder

ntp.shown_page

ntp.tips_resource_server

ntp.webstore_enabled

devtools.adb_key

devtools.disabled

devtools.discover_usb_devices

devtools.edited_files

devtools.file_system_paths

devtools.open_docked

devtools.port_forwarding_enabled

devtools.port_forwarding_default_set

devtools.port_forwarding_config

google.services.password_hash

invalidation_service.use_gcm_channel

sync_promo.startup_count

sync_promo.user_skipped

sync_promo.show_on_first_run_allowed

sync_promo.show_ntp_bubble

browser.web_app.create_on_desktop

browser.web_app.create_in_apps_menu

browser.web_app.create_in_quick_launch_bar

geolocation.access_token

media.default_audio_capture_device

media.default_video_capture_Device

media.device_id_salt

remote_access.host_firewall_traversal

remote_access.host_require_two_factor

remote_access.host_domain

remote_access.host_talkgadget_prefix

remote_access.host_require_curtain

remote_access.host_allow_client_pairing

remote_access.host_allow_gnubby_auth

remote_access.host_allow_relayed_connection

remote_access.host_udp_port_range

printing.print_preview_sticky_settings

cloud_print.dialog_size.width

cloud_print.dialog_size.height

cloud_print.signin_dialog_size.width

cloud_print.signin_dialog_size.height

cloud_print.enabled

cloud_print.proxy_id

cloud_print.auth_token

cloud_print.xmpp_auth_token

cloud_print.email

cloud_print.print_system_settings

cloud_print.enable_job_poll

cloud_print.robot_refresh_token

cloud_print.robot_email

cloud_print.user_settings.connectNewPrinters

cloud_print.xmpp_ping_enabled

cloud_print.xmpp_ping_timeout_sec

cloud_print.user_settings.printers

cloud_print.submit_enabled

cloud_print.user_settings

net.max_connections_per_proxy

hardware.audio_capture_enabled

hardware.audio_capture_allowed_urls

hardware.video_capture_enabled

hardware.video_capture_allowed_urls

hotword.search_enabled_2

hotword.always_on_search_enabled

hotword.audio_logging_enabled

hotword.audio_history_enabled

hotword.previous_language

browser.clear_lso_data_enabled

browser.pepper_flash_settings_enabled

browser.disk_cache_dir

browser.disk_cache_size

browser.last_default_status

browser.media_cache_size

cros.system.releaseChannel

feedback.performance_tracing_enabled

background_contents.registered

browser.shown_autolaunch_infobar

auth.schemes

auth.disable_negotiate_cname_lookup

auth.enable_negotiate_port

auth.server_whitelist

auth.negotiate_delegate_whitelist

auth.gssapi_library_name

auth.allow_cross_origin_prompt

async_dns.enabled

custom_handlers.registered_protocol_handlers

custom_handlers.ignored_protocol_handlers

custom_handlers.policy.registered_protocol_handlers

custom_handlers.policy.ignored_protocol_handlers

custom_handlers.enabled

background_mode.enabled

hardware_acceleration_mode.enabled

policy.device_refresh_rate

message_center.showed_first_run_balloon

message_center.show_icon

message_center.was_forced_on_taskbar

browser.attempted_to_enable_autoupdate

media_galleries.gallery_id

media_galleries.remembered_galleries

media_galleries.last_scan_time

shelf_chrome_icon_index

gesture.max_separation_for_gesture_touches_in_pixels

gesture.semi_long_press_time_in_ms

gesture.tab_scrub_activation_delay_in_ms

gesture.fling_max_cancel_to_down_time_in_ms

gesture.fling_max_tap_gap_time_in_ms

overscroll.horizontal_threshold_complete

overscroll.vertical_threshold_complete

overscroll.minimum_threshold_start

overscroll.minimum_threshold_start_touchpad

overscroll.vertical_threshold_start

overscroll.horizontal_resist_threshold

overscroll.vertical_resist_threshold

ya.send_install

ya.last_welcome_page_version

ya.clids

ya.banerid

ya.update_failures

ya.update_last_failure

ya.welcome_page

ya.custom_cookies

ya.bar.ui

ya.bar.uuid

ya.bar.r1

ya.statistics.last_default_check_time

ya.statistics.enabled

ya.tab_finder_enabled_once

ya.crash_dumps_checkbox_was_set

ya.crash_dumps_checkbox_was_set_at_1_0_1084_5404

ya.disk.installer_etag

ya.vk.show_infobar

ya.vk.last_shown

ya.vk.clicks_left

ya.last_runned_version

ya.last_runned_partner_id

ya.education.enabled

ya.custo_education.enabled

ya.searchness.enabled

ya.all_sb_chunks_downloaded_time

ya.splitview.enabled

ya.splitview.visible

ya.sync.device.push_id

ya.sync.device.name

ya.block_flash

ya.extensions_to_replace

ya.mute_state

ya.background_animation.enabled

ya.background_animation.disable_on_low_battery

ya.notifications.extension_settings_migrated

ya.notifications.migrated_fb_token

ya.notifications.migrated_fb_token_expires_in

ya.notifications.migrated_vk_token

ya.notifications.migrated_vk_token_expires_in

ya.notifications.silent_mode_until

ya.notifications.silent_mode

ya.notifications.fb.enabled

ya.notifications.fb.show.comments

ya.notifications.fb.show.friend_requests

ya.notifications.fb.show.messages

ya.notifications.fb.view_content

ya.notifications.fb.num_invitations_shown

ya.notifications.fb.last_time_invitation_shown

ya.notifications.fb.share_accepted

ya.notifications.fb.last_share_propose_time

ya.notifications.vk.enabled

ya.notifications.vk.show.comments

ya.notifications.vk.show.friend_requests

ya.notifications.vk.show.messages

ya.notifications.vk.view_content

ya.notifications.vk.num_invitations_shown

ya.notifications.vk.last_time_invitation_shown

ya.notifications.vk.share_accepted

ya.notifications.vk.last_share_propose_time

ya.notifications.yamail.enabled

ya.notifications.yamail.view_content

show.comments

show.friend_requests

show.messages

omnibox-infobar-panel.enabled

omnibox-infobar-panel.disabled

searchness.disabled

ya.persist_state_updated

network_profile.warnings_left

network_profile.last_warning_time

ya.feedback.update_date

ya.smartback.dictionary_last_modified

torrents.open_mode

apps.app_launch_for_metro_restart

apps.app_launch_for_metro_restart_profile

apps.shortcuts_version

module_conflict.bubble_shown

settings.privacy.drm_salt

settings.privacy.drm_enabled

browser.allow_discard_tabs

browser.allow_discard_tabs_updated

profile.extensions.activity_log.num_consumers_active

proxy.quick_check_enabled

profile.browser_guest_enabled

profile.add_person_enabled

ya.show_newtab_search_arrow

ya.popup_block_enabled

ya.plugin_restricted_document_kinds

ya.custo_tab_activation_order_on_tab_close

ya.custo_ui_first_time_launch

easy_unlock.hardlock_state

password_bubble.timestamp

password_bubble.nopes

password_bubble.interactions

ya.tablo.snapshot_click_map

license_url

feedback.url

conf_policy_url

hXXp://legal.yandex.ru/browser_agreement/

hXXp://legal.yandex.ru/confidential/

SHELL32.dll

ole32.dll

OLEAUT32.dll

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

%s-%Iu

u\uX

Dictionary keys must be quoted.

Unsupported encoding. JSON must be UTF-8.

full-memory-crash-report

(0x%X)

Error (0x%X) while retrieving error. (0x%X)

(%d = %3.1f%%)

Histogram: %s recorded %d samples

(flags = 0x%x)

PlatformFile.UnknownErrors.Windows

user32.dll

0123456789

.syzygy

.thunks

Line: %i, column: %i, %s

D:\BuildAgent\work\9d1bc32700498ce4\src\out\Release\initialexe\browser.exe.pdb

browser.exe

ClearBreakpadPipeEnvironmentVariable

ClearCrashKeyValueImpl

SetCrashKeyValueImpl

SignalChromeElf

browser_elf.dll

WINMM.dll

VERSION.dll

SHLWAPI.dll

RegEnumKeyExW

RegQueryInfoKeyW

RegCreateKeyExW

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

GetAsyncKeyState

CloseWindowStation

CreateWindowStationW

SetProcessWindowStation

USER32.dll

GetProcessHeap

GetWindowsDirectoryW

CreateIoCompletionPort

GetProcessHandleCount

KERNEL32.dll

USERENV.dll

WTSAPI32.dll

GetCPInfo

SetNamedPipeHandleState

TransactNamedPipe

WaitNamedPipeW

zcÁ

40.0.2214.3645-00000ed0-00084ecb

.ccc]

.IDATx

.aU/@G

\]]]]_]^

.owO[

.RwuWee

o.yST

G.HIJ

]]][\^__^\]`

i.snh

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="Win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><dependency><dependentAssembly><assemblyIdentity type="win32" name="40.0.2214.3645" version="40.0.2214.3645" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>

0%1X2

0"0)040=0

9%:0:>:]:~:

5-5v5}5

4$4044484

1 1$1(1,10141

8,;0;4;8;<;

6(7,707\7

5$5(5,50545

2 2$2(2,2024282<2

1 1$1,1@1`1

7 7$7(7,707

registering_chrome

uninstalling_chrome_frame

eyndxstp.exe

{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}

app_host.exe

browser.dll

browser_child.dll

npbrowser_frame.dll

browser_frame_helper.dll

browser_frame_helper.exe

browser_launcher.exe

metro_driver.dll

new_browser.exe

old_browser.exe

delegate_execute.exe

nacl64.exe

setup.exe

InstallerSuccessLaunchCmdLine

YandexSSHTM

{45033924-ABD6-4063-AD60-71925CDE206E}

{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}

{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}

Browse the web

Software\Microsoft\Windows\CurrentVersion\Uninstall\Chromium

-chrome

-chromeframe

{8A69D345-D564-463C-AFF1-A69D9E530F96}

{430FD4D0-B729-4F61-AA34-91526481799D}

GoogleUpdateSetup.exe

CFEndTempOptOutCmd

CFOptInCmd

CFOptOutCmd

CFTempOptOutCmd

UninstallCmdLine

WebAccessible

3E40F524-16FA-440A-B919-B44AB355B174

service_update.exe

winrt_helper.dll

{5FAFC90A-D443-4E4F-B69B-DA1F8D553C6C}

d-d-%d

hXXp://browser.

%d.%d.%d

Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser

Google Chrome App Launcher

ChromeAppList

tSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher

{8BA986DA-5100-405E-AA35-86F34A02ACBF}

Google Chrome Frame

Google\Chrome Frame

Chrome in a Frame.

Uninstall Chrome Frame

Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame

\\.\pipe\GoogleCrashServices\

\\.\pipe\YandexCrashServices

error %u

ntdll.dll

chrome.exe

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_TEXT

HKEY_PERFORMANCE_NLSTEXT

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

pipe\

kernelbase.dll

eKey

gdi32.dll

xntdll.dll

wow_helper.exe"

shell32.dll

Reported Crashes.txt

testing_interface.dll

Origin Bound Certs

Certificate Revocation Lists

Custom Dictionary.txt

Login Data

Cached Theme.pak

Web Applications

pepflashplayer.dll

CHROME_METRO_NAV_SEARCH_REQUEST

CHROME_METRO_GET_CURRENT_TAB_INFO

CHROME_METRO_SETTINGS_COMMAND

gcswf32.dll

pdf.dll

yapdf.dll

yadocviewer.dll

npmedia_plugin.dll

pepper/libppeffects.dll

Crash Reports

crash_service.exe

script.log

resources.pak

${windows}

hunspecified-crash-key

%u.%s

reported

mscoree.dll

ADVAPI32.DLL

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

USER32.DLL

portuguese-brazilian

dbghelp.dll

rpcrt4.dll

crash_service.exe --max-reports=10

%s\%s.dmp

x-x-x-xx-xxxxxx

Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32

Software\Microsoft\Windows\CurrentVersion\Run

.Chrome_MessagePumpWindow_%p

Ndebug.log

.\debug.log

\StringFileInfo\xx\%ls

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Crash Reports\events\3792.crashed

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe

chrome_exe

40.0.2214.115

15.2.2214.3645

browser.exe_3152:

.text

`.rdata

@.data

.rsrc

@.reloc

HtdHtHHHt.HH

j.Yf;

_tcPVj@

.PjRW

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\chrome_exe_main_win.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\client_util.cc

No valid Chrome version found

Failed to load Chrome DLL from

ChromeMain

RelaunchChromeBrowserWithNewCommandLineIfNeeded

Could not find exported function

allow-insecure-websocket-from-https-origin

disable-webgl

disable-web-security

enable-experimental-web-platform-features

enable-tcp-fastopen

enable-viewport

enable-viewport-meta

enable-vtune-support

enable-webgl-draft-extensions

enable-webgl-image-chromium

enable-web-midi

enable-webkit-find-restart

ignore-certificate-errors

remote-debugging-port

renderer-cmd-prefix

testing-fixed-http-port

testing-fixed-https-port

trace-upload-url

utility-cmd-prefix

zygote-cmd-prefix

disable-webrtc-hw-decoding

disable-webrtc-encryption

disable-webrtc-hw-encoding

enable-webrtc-hw-vp8-encoding

enable-webrtc-hw-h264-encoding

disable-webaudio

opera

1.3.21.115

%s-x-x

Chrome

0.0.0.0-devel

%s-%x

url-chunk

font_key_name

subresource_url

CHROME_MAIN_TIME

%x-%x

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\google_update_settings.cc

auto-launch-chrome

chrome

chrome-sxs

new-setup-exe

register-dev-chrome

register-url-protocol

rename-browser-exe

update-setup-exe

toast-results-key

Cannot initialize AppCommands from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_commands.cc

Failed to open key "

Skipping over key "

make-browser-default-after-import

silent-first-import

ya_permanent_state.brand_id

ya_permanent_state.base_host

ya_permanent_state.partner_id

ya_permanent_state.uninstall_survey_url

yandex.ru

iexplore.exe

googlechromeapphost

googlechromeframe

Cannot initialize an AppCommand from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_command.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\language_selector.cc

CHROME_BREAKPAD_PIPE_NAME

CHROME_BREAKPAD_EVENT_NAME

d:\buildagent\work\9d1bc32700498ce4\src\components\crash\app\breakpad_win.cc

NTDLL.DLL

kernel32.dll

d:\buildagent\work\9d1bc32700498ce4\src\sandbox\win\src\sandbox_policy_base.cc

CreateNamedPipeW

NtCreateKey

NtOpenKey

NtOpenKeyEx

AudioCaptureAllowedUrls

AutoSelectCertificateForUrls

ChromeFrameContentTypes

ChromeFrameRendererSettings

ChromeOsLockOnIdleSuspend

ChromeOsMultiProfileUserBehavior

ChromeOsReleaseChannel

ChromeOsReleaseChannelDelegated

CloudPrintProxyEnabled

CloudPrintSubmitEnabled

ContentPackManualBehaviorURLs

CookiesAllowedForUrls

CookiesBlockedForUrls

CookiesSessionOnlyForUrls

DefaultSearchProviderAlternateURLs

DefaultSearchProviderIconURL

DefaultSearchProviderImageURL

DefaultSearchProviderImageURLPostParams

DefaultSearchProviderInstantURL

DefaultSearchProviderInstantURLPostParams

DefaultSearchProviderKeyword

DefaultSearchProviderNewTabURL

DefaultSearchProviderSearchTermsReplacementKey

DefaultSearchProviderSearchURL

DefaultSearchProviderSearchURLPostParams

DefaultSearchProviderSuggestURL

DefaultSearchProviderSuggestURLPostParams

DeviceAllowRedeemChromeOsRegistrationOffers

DeviceLocalAccountAutoLoginBailoutEnabled

DeviceLocalAccountAutoLoginDelay

DeviceLocalAccountAutoLoginId

DeviceLoginScreenDefaultHighContrastEnabled

DeviceLoginScreenDefaultLargeCursorEnabled

DeviceLoginScreenDefaultScreenMagnifierType

DeviceLoginScreenDefaultSpokenFeedbackEnabled

DeviceLoginScreenDefaultVirtualKeyboardEnabled

DeviceLoginScreenPowerManagement

DeviceLoginScreenSaverId

DeviceLoginScreenSaverTimeout

DeviceMetricsReportingEnabled

DeviceStartUpUrls

DeviceUpdateHttpDownloadsEnabled

EnableAuthNegotiatePort

EnableDeprecatedWebPlatformFeatures

EnableOriginBoundCerts

EnableWebBasedSignin

EnterpriseWebStoreName

EnterpriseWebStoreURL

HideWebStoreIcon

HideWebStorePromo

ImagesAllowedForUrls

ImagesBlockedForUrls

ImportAutofillFormData

ImportBookmarks

ImportHistory

ImportHomepage

ImportSavedPasswords

ImportSearchEngine

JavaScriptAllowedForUrls

JavaScriptBlockedForUrls

KeyboardDefaultToFunctionKeys

MetricsReportingEnabled

NotificationsAllowedForUrls

NotificationsBlockedForUrls

PasswordManagerAllowShowPasswords

PasswordManagerEnabled

PluginsAllowedForUrls

PluginsBlockedForUrls

PopupsAllowedForUrls

PopupsBlockedForUrls

ProxyBypassList

ProxyPacUrl

RemoteAccessHostAllowClientPairing

RemoteAccessHostAllowGnubbyAuth

RemoteAccessHostAllowRelayedConnection

RemoteAccessHostDomain

RemoteAccessHostFirewallTraversal

RemoteAccessHostRequireCurtain

RemoteAccessHostRequireTwoFactor

RemoteAccessHostTalkGadgetPrefix

RemoteAccessHostUdpPortRange

RenderInChromeFrameList

ReportDeviceActivityTimes

ReportDeviceBootMode

ReportDeviceLocation

ReportDeviceNetworkInterfaces

ReportDeviceUsers

ReportDeviceVersionInfo

RestoreOnStartupURLs

ShowAppsShortcutInBookmarkBar

SuppressChromeFrameTurndownPrompt

TermsOfServiceURL

TouchVirtualKeyboardEnabled

URLBlacklist

URLWhitelist

VideoCaptureAllowedUrls

VirtualKeyboardEnabled

update_url

^update_url:

CHROME_VERSION

CHROME_SAFE_MODE

2676A9A2-D919-4FEE-9187-152100393AB2

ignore-urlfetcher-cert-requests

install-chrome-app

install-ephemeral-app-from-webstore

pack-extension-key

permission-request-api-url

promo-server-url

proxy-bypass-list

proxy-pac-url

remember-cert-error-decisions

spelling-service-feedback-url

try-chrome-again

variations-server-url

winhttp-proxy-resolver

ya-url-copy-safe-text

skip-first-import

plugins-metadata-server-url

windows8-search

allow-http-screen-capture

app-list-start-page-url

apps-checkout-url

apps-gallery-download-url

apps-gallery-url

apps-gallery-update-url

certificate-transparency-log

disable-extensions-http-throttling

disable-password-manager-reauthentication

disable-quic-port-selection

disable-save-password-bubble

disable-web-resources

enable-auth-negotiate-port

enable-npn-http

enable-quic-port-selection

enable-save-password-bubble

enable-sdch-over-https

enable-user-controlled-alternate-protocol-ports

enable-websocket-over-spdy

enable-website-settings-manager

explicitly-allowed-ports

extensions-not-webstore

help-url

40.0.2214.3645

CHROME_HEADLESS

CHROME_LOG_FILE

CHROME_METRO_CONNECTED

CHROMEOS_SESSION_LOG_DIR

CHROME_CRASHED

CHROME_RESTART

profile.ephemeral_mode

profile.icon_version

session.restore_on_startup

session.restore_on_startup_migrated

session.startup_urls_migration_time

session.restore_to_homepage_if_empty

profile.exited_cleanly

profile.exit_type

profile.managed.custodian_email

profile.managed.custodian_name

profile.managed.custodian_profile_image_url

profile.managed.custodian_profile_url

profile.managed.manual_hosts

profile.managed.manual_urls

profile.managed.second_custodian_email

profile.managed.second_custodian_name

profile.managed.second_custodian_profile_image_url

profile.managed.second_custodian_profile_url

profile.managed.shared_settings

session.startup_urls

session.urls_to_restore_on_startup

intl.app_locale

intl.charset_default

intl.accept_languages

intl.applied_brand_package_accept_languages

intl.static_encodings

webkit.webprefs.fonts.standard.Zyyy

webkit.webprefs.fonts.fixed.Zyyy

webkit.webprefs.fonts.serif.Zyyy

webkit.webprefs.fonts.sansserif.Zyyy

webkit.webprefs.fonts.cursive.Zyyy

webkit.webprefs.fonts.fantasy.Zyyy

webkit.webprefs.fonts.pictograph.Zyyy

webkit.webprefs.fonts.standard

webkit.webprefs.fonts.fixed

webkit.webprefs.fonts.serif

webkit.webprefs.fonts.sansserif

webkit.webprefs.fonts.cursive

webkit.webprefs.fonts.fantasy

webkit.webprefs.fonts.pictograph

webkit.webprefs.fonts.standard.Arab

webkit.webprefs.fonts.fixed.Arab

webkit.webprefs.fonts.serif.Arab

webkit.webprefs.fonts.sansserif.Arab

webkit.webprefs.fonts.standard.Cyrl

webkit.webprefs.fonts.fixed.Cyrl

webkit.webprefs.fonts.serif.Cyrl

webkit.webprefs.fonts.sansserif.Cyrl

webkit.webprefs.fonts.standard.Grek

webkit.webprefs.fonts.fixed.Grek

webkit.webprefs.fonts.serif.Grek

webkit.webprefs.fonts.sansserif.Grek

webkit.webprefs.fonts.standard.Jpan

webkit.webprefs.fonts.fixed.Jpan

webkit.webprefs.fonts.serif.Jpan

webkit.webprefs.fonts.sansserif.Jpan

webkit.webprefs.fonts.standard.Hang

webkit.webprefs.fonts.fixed.Hang

webkit.webprefs.fonts.serif.Hang

webkit.webprefs.fonts.sansserif.Hang

webkit.webprefs.fonts.cursive.Hang

webkit.webprefs.fonts.standard.Hans

webkit.webprefs.fonts.fixed.Hans

webkit.webprefs.fonts.serif.Hans

webkit.webprefs.fonts.sansserif.Hans

webkit.webprefs.fonts.standard.Hant

webkit.webprefs.fonts.fixed.Hant

webkit.webprefs.fonts.serif.Hant

webkit.webprefs.fonts.sansserif.Hant

webkit.webprefs.default_font_size

webkit.webprefs.default_fixed_font_size

webkit.webprefs.minimum_font_size

webkit.webprefs.minimum_logical_font_size

webkit.webprefs.javascript_enabled

webkit.webprefs.web_security_enabled

webkit.webprefs.javascript_can_open_windows_automatically

webkit.webprefs.loads_images_automatically

webkit.webprefs.plugins_enabled

webkit.webprefs.dom_paste_enabled

webkit.webprefs.shrinks_standalone_images_to_fit

webkit.webprefs.uses_universal_detector

webkit.webprefs.text_areas_are_resizable

webkit.webprefs.java_enabled

webkit.webprefs.tabs_to_links

webkit.webprefs.allow_displaying_insecure_content

webkit.webprefs.allow_running_insecure_content

safebrowsing.enabled

safebrowsing.extended_reporting_enabled

safebrowsing.proceed_anyway_disabled

safebrowsing.incident_report_sent

safebrowsing.incidents_sent

incognito.mode_availability

search.suggest_enabled

browser.confirm_to_quit

security.cookie_behavior

download.prompt_for_download

alternate_error_pages.enabled

dns_prefetching.startup_list

dns_prefetching.host_referral_list

spdy.disabled

net.http_server_properties

spdy.servers

spdy.alternate_protocol

protocol.disabled_schemes

instant_ui.zero_suggest_url_prefix

local_state.multiple_profile_prefs_version

dns_prefetching.enabled

net.network_prediction_options

hide_web_store_icon

browser.show_home_button

browser.show_ya_button

browser.show_tablo_on_click

browser.last_session_empty

browser.session_empty

browser.use_mouse_gestures

browser.enable_page_expiration

browser.do_not_count_page_expiration_infobar_closings

profile.recently_selected_encodings

browser.clear_data.browsing_history

browser.clear_data.download_history

browser.clear_data.cache

browser.clear_data.cookies

browser.clear_data.passwords

browser.clear_data.form_data

browser.clear_data.hosted_apps_data

browser.clear_data.content_licenses

browser.enable_spellchecking

browser.speechinput_censor_results

browser.speechinput_tray_notification_shown_contexts

browser.enabled_labs_experiments

ya.experiments_edited_by_user

ya.distrib_default_experiments

browser.enable_autospellcorrect

history.saving_disabled

ya.settings.text_wrap

history.deleting_enabled

settings.force_safesearch

settings.history_recorded

browser.clear_data.time_period

browser.last_clear_browsing_data_time

extensions.theme.pack

extensions.theme.id

extensions.theme.images

extensions.theme.colors

extensions.theme.tints

extensions.theme.properties

extensions.ui.developer_mode

extensions.commands

plugins.last_internal_directory

plugins.plugins_list

plugins.plugins_disabled

plugins.plugins_disabled_exceptions

plugins.plugins_enabled

plugins.migrated_to_pepper_flash

plugins.removed_old_component_pepper_flash_settings

plugins.show_details

plugins.allow_outdated

plugins.always_authorize

plugins.metadata

plugins.resource_cache_update

browser.check_default_browser

browser.default_browser_setting_enabled

browser.custom_chrome_frame

profile.content_settings.plugin_whitelist

profile.block_third_party_cookies

profile.clear_site_data_on_exit

partition.default_zoom_level

profile.default_zoom_level

partition.per_host_zoom_levels

profile.per_host_zoom_levels

autofill.data_model_default

autofill.pay_without_wallet

autofill.wallet_location_disclosure

autofill.save_data

autofill.wallet_shipping_same_as_billing

autofill.generated_card_bubble_times_shown

autofill.rac_dialog_defaults

breadcrumbs.enabled

push_to_call.enabled

push_to_call.wasenabled

ya.disk.want_install

context_translate.enabled

context_translate.translate_words

enable_deprecated_web_platform_features

import_last_source_browser

import_autofill_form_data

import_bookmarks

import_history

import_home_page

import_saved_passwords

import_cookies

import_last_session

import_extensions

import_speed_dial

import_other

ya.statistics.import_rollback

ya.import_new_source_type

ya.import_new_source_profile

import_search_engine

profile.avatar_index

profile.using_default_name

profile.name

profile.using_default_avatar

profile.using_gaia_avatar

profile.managed_user_id

profile.gaia_info_update_time

profile.gaia_info_picture_url

profile.avatar_bubble_tutorial_shown

printing.enabled

printing.print_preview_disabled

profile.managed.default_filtering_behavior

profile.managed_user_creation_allowed

profile.managed_users

profile.reset_prompt_memento

message_center.disabled_extension_ids

message_center.disabled_system_component_ids

message_center.welcome_notification_dismissed

message_center.welcome_notification_dismissed_local

message_center.welcome_notification_previously_popped_up

message_center.welcome_notification_expiration_timestamp

fullscreen.allowed

local_discovery.notifications_enabled

prefs.preference_reset_time

ya.prefetch.latest_update_list

ya.tablo_pins.instance_id

gcm.channel_enabled

gcm.push_messaging_registration_count

easy_unlock.allowed

easy_unlock.enabled

easy_unlock.pairing

easy_unlock.proximity_required

easy_unlock.show_tutorial

zerosuggest.cachedresults

signin.error_stats_update_time

ssl.rev_checking.enabled

ssl.rev_checking.required_for_local_anchors

ssl.version_min

ssl.version_max

ssl.version_fallback_min

ssl.cipher_suites.blacklist

ssl.ssl_record_splitting.disabled

ssl.ssl_blocking_bypassed

user_experience_metrics.reporting_enabled

profile.last_used

profile.last_active_profiles

profile.profiles_created

profile.info_cache

profile.created_by_version

profile.reset_prompt_mementos

user_experience_metrics.stability.page_load_count

user_experience_metrics.stability.renderer_crash_count

user_experience_metrics.stability.extension_renderer_crash_count

user_experience_metrics.stability.renderer_hang_count

user_experience_metrics.stability.child_process_crash_count

user_experience_metrics.stability.other_user_crash_count

user_experience_metrics.stability.kernel_crash_count

user_experience_metrics.stability.system_unclean_shutdowns

user_experience_metrics.stability.plugin_stats2

uninstall_metrics.page_load_count

uninstall_metrics.last_launch_time_sec

uninstall_metrics.last_observed_running_time_sec

browser.suppress_default_browser_prompt_for_version

browser.window_placement

browser.window_placement_popup

task_manager.window_placement

browser.app_window_placement

renderer.memory_cache.size

download.default_directory

download.default_directory_display_name

download.extensions_to_open

download.directory_upgrade

download.open_pdf_in_system_reader

savefile.default_directory

savefile.type

select_file_dialogs.allowed

filebrowser.tasks.default_by_mime_type

filebrowser.tasks.default_by_suffix

selectfile.last_directory

browser.hung_plugin_detect_freq

browser.plugin_message_response_timeout

spellcheck.dictionary

spellcheck.use_spelling_service

protocol_handler.excluded_schemes

safe_browsing.client_key

safe_browsing.wrapped_key

options_window.last_tab_index

certificate_manager_window.last_tab_index

browser.show_omnibox_share_buttons

browser.last_redirect_origin

shutdown.type

shutdown.num_processes

shutdown.num_processes_slow

restart.last.session.on.shutdown

was.restarted

relaunch.mode

extensions.disabled

plugins.disable_plugin_finder

ntp.app_page_names

ntp.collapsed_open_tabs

ntp.collapsed_foreign_sessions

ntp.collapsed_recently_closed_tabs

ntp.collapsed_snapshot_document

ntp.collapsed_sync_promo

ntp.date_resource_server

ntp.most_visited_blacklist

ntp.promo_desktop_session_found

ntp.promo_resource_cache_update

ntp.shown_bookmarks_folder

ntp.shown_page

ntp.tips_resource_server

ntp.webstore_enabled

devtools.adb_key

devtools.disabled

devtools.discover_usb_devices

devtools.edited_files

devtools.file_system_paths

devtools.open_docked

devtools.port_forwarding_enabled

devtools.port_forwarding_default_set

devtools.port_forwarding_config

google.services.password_hash

invalidation_service.use_gcm_channel

sync_promo.startup_count

sync_promo.user_skipped

sync_promo.show_on_first_run_allowed

sync_promo.show_ntp_bubble

browser.web_app.create_on_desktop

browser.web_app.create_in_apps_menu

browser.web_app.create_in_quick_launch_bar

geolocation.access_token

media.default_audio_capture_device

media.default_video_capture_Device

media.device_id_salt

remote_access.host_firewall_traversal

remote_access.host_require_two_factor

remote_access.host_domain

remote_access.host_talkgadget_prefix

remote_access.host_require_curtain

remote_access.host_allow_client_pairing

remote_access.host_allow_gnubby_auth

remote_access.host_allow_relayed_connection

remote_access.host_udp_port_range

printing.print_preview_sticky_settings

cloud_print.dialog_size.width

cloud_print.dialog_size.height

cloud_print.signin_dialog_size.width

cloud_print.signin_dialog_size.height

cloud_print.enabled

cloud_print.proxy_id

cloud_print.auth_token

cloud_print.xmpp_auth_token

cloud_print.email

cloud_print.print_system_settings

cloud_print.enable_job_poll

cloud_print.robot_refresh_token

cloud_print.robot_email

cloud_print.user_settings.connectNewPrinters

cloud_print.xmpp_ping_enabled

cloud_print.xmpp_ping_timeout_sec

cloud_print.user_settings.printers

cloud_print.submit_enabled

cloud_print.user_settings

net.max_connections_per_proxy

hardware.audio_capture_enabled

hardware.audio_capture_allowed_urls

hardware.video_capture_enabled

hardware.video_capture_allowed_urls

hotword.search_enabled_2

hotword.always_on_search_enabled

hotword.audio_logging_enabled

hotword.audio_history_enabled

hotword.previous_language

browser.clear_lso_data_enabled

browser.pepper_flash_settings_enabled

browser.disk_cache_dir

browser.disk_cache_size

browser.last_default_status

browser.media_cache_size

cros.system.releaseChannel

feedback.performance_tracing_enabled

background_contents.registered

browser.shown_autolaunch_infobar

auth.schemes

auth.disable_negotiate_cname_lookup

auth.enable_negotiate_port

auth.server_whitelist

auth.negotiate_delegate_whitelist

auth.gssapi_library_name

auth.allow_cross_origin_prompt

async_dns.enabled

custom_handlers.registered_protocol_handlers

custom_handlers.ignored_protocol_handlers

custom_handlers.policy.registered_protocol_handlers

custom_handlers.policy.ignored_protocol_handlers

custom_handlers.enabled

background_mode.enabled

hardware_acceleration_mode.enabled

policy.device_refresh_rate

message_center.showed_first_run_balloon

message_center.show_icon

message_center.was_forced_on_taskbar

browser.attempted_to_enable_autoupdate

media_galleries.gallery_id

media_galleries.remembered_galleries

media_galleries.last_scan_time

shelf_chrome_icon_index

gesture.max_separation_for_gesture_touches_in_pixels

gesture.semi_long_press_time_in_ms

gesture.tab_scrub_activation_delay_in_ms

gesture.fling_max_cancel_to_down_time_in_ms

gesture.fling_max_tap_gap_time_in_ms

overscroll.horizontal_threshold_complete

overscroll.vertical_threshold_complete

overscroll.minimum_threshold_start

overscroll.minimum_threshold_start_touchpad

overscroll.vertical_threshold_start

overscroll.horizontal_resist_threshold

overscroll.vertical_resist_threshold

ya.send_install

ya.last_welcome_page_version

ya.clids

ya.banerid

ya.update_failures

ya.update_last_failure

ya.welcome_page

ya.custom_cookies

ya.bar.ui

ya.bar.uuid

ya.bar.r1

ya.statistics.last_default_check_time

ya.statistics.enabled

ya.tab_finder_enabled_once

ya.crash_dumps_checkbox_was_set

ya.crash_dumps_checkbox_was_set_at_1_0_1084_5404

ya.disk.installer_etag

ya.vk.show_infobar

ya.vk.last_shown

ya.vk.clicks_left

ya.last_runned_version

ya.last_runned_partner_id

ya.education.enabled

ya.custo_education.enabled

ya.searchness.enabled

ya.all_sb_chunks_downloaded_time

ya.splitview.enabled

ya.splitview.visible

ya.sync.device.push_id

ya.sync.device.name

ya.block_flash

ya.extensions_to_replace

ya.mute_state

ya.background_animation.enabled

ya.background_animation.disable_on_low_battery

ya.notifications.extension_settings_migrated

ya.notifications.migrated_fb_token

ya.notifications.migrated_fb_token_expires_in

ya.notifications.migrated_vk_token

ya.notifications.migrated_vk_token_expires_in

ya.notifications.silent_mode_until

ya.notifications.silent_mode

ya.notifications.fb.enabled

ya.notifications.fb.show.comments

ya.notifications.fb.show.friend_requests

ya.notifications.fb.show.messages

ya.notifications.fb.view_content

ya.notifications.fb.num_invitations_shown

ya.notifications.fb.last_time_invitation_shown

ya.notifications.fb.share_accepted

ya.notifications.fb.last_share_propose_time

ya.notifications.vk.enabled

ya.notifications.vk.show.comments

ya.notifications.vk.show.friend_requests

ya.notifications.vk.show.messages

ya.notifications.vk.view_content

ya.notifications.vk.num_invitations_shown

ya.notifications.vk.last_time_invitation_shown

ya.notifications.vk.share_accepted

ya.notifications.vk.last_share_propose_time

ya.notifications.yamail.enabled

ya.notifications.yamail.view_content

show.comments

show.friend_requests

show.messages

omnibox-infobar-panel.enabled

omnibox-infobar-panel.disabled

searchness.disabled

ya.persist_state_updated

network_profile.warnings_left

network_profile.last_warning_time

ya.feedback.update_date

ya.smartback.dictionary_last_modified

torrents.open_mode

apps.app_launch_for_metro_restart

apps.app_launch_for_metro_restart_profile

apps.shortcuts_version

module_conflict.bubble_shown

settings.privacy.drm_salt

settings.privacy.drm_enabled

browser.allow_discard_tabs

browser.allow_discard_tabs_updated

profile.extensions.activity_log.num_consumers_active

proxy.quick_check_enabled

profile.browser_guest_enabled

profile.add_person_enabled

ya.show_newtab_search_arrow

ya.popup_block_enabled

ya.plugin_restricted_document_kinds

ya.custo_tab_activation_order_on_tab_close

ya.custo_ui_first_time_launch

easy_unlock.hardlock_state

password_bubble.timestamp

password_bubble.nopes

password_bubble.interactions

ya.tablo.snapshot_click_map

license_url

feedback.url

conf_policy_url

hXXp://legal.yandex.ru/browser_agreement/

hXXp://legal.yandex.ru/confidential/

SHELL32.dll

ole32.dll

OLEAUT32.dll

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

%s-%Iu

u\uX

Dictionary keys must be quoted.

Unsupported encoding. JSON must be UTF-8.

full-memory-crash-report

(0x%X)

Error (0x%X) while retrieving error. (0x%X)

(%d = %3.1f%%)

Histogram: %s recorded %d samples

(flags = 0x%x)

PlatformFile.UnknownErrors.Windows

user32.dll

0123456789

.syzygy

.thunks

Line: %i, column: %i, %s

D:\BuildAgent\work\9d1bc32700498ce4\src\out\Release\initialexe\browser.exe.pdb

browser.exe

ClearBreakpadPipeEnvironmentVariable

ClearCrashKeyValueImpl

SetCrashKeyValueImpl

SignalChromeElf

browser_elf.dll

WINMM.dll

VERSION.dll

SHLWAPI.dll

RegEnumKeyExW

RegQueryInfoKeyW

RegCreateKeyExW

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

GetAsyncKeyState

CloseWindowStation

CreateWindowStationW

SetProcessWindowStation

USER32.dll

GetProcessHeap

GetWindowsDirectoryW

CreateIoCompletionPort

GetProcessHandleCount

KERNEL32.dll

USERENV.dll

WTSAPI32.dll

GetCPInfo

SetNamedPipeHandleState

TransactNamedPipe

WaitNamedPipeW

zcÁ

.ccc]

.IDATx

.aU/@G

\]]]]_]^

.owO[

.RwuWee

o.yST

G.HIJ

]]][\^__^\]`

i.snh

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="Win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><dependency><dependentAssembly><assemblyIdentity type="win32" name="40.0.2214.3645" version="40.0.2214.3645" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>

0%1X2

0"0)040=0

9%:0:>:]:~:

5-5v5}5

4$4044484

1 1$1(1,10141

8,;0;4;8;<;

6(7,707\7

5$5(5,50545

2 2$2(2,2024282<2

1 1$1,1@1`1

7 7$7(7,707

registering_chrome

uninstalling_chrome_frame

eyndxstp.exe

{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}

app_host.exe

browser.dll

browser_child.dll

npbrowser_frame.dll

browser_frame_helper.dll

browser_frame_helper.exe

browser_launcher.exe

metro_driver.dll

new_browser.exe

old_browser.exe

delegate_execute.exe

nacl64.exe

setup.exe

InstallerSuccessLaunchCmdLine

YandexSSHTM

{45033924-ABD6-4063-AD60-71925CDE206E}

{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}

{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}

Browse the web

Software\Microsoft\Windows\CurrentVersion\Uninstall\Chromium

-chrome

-chromeframe

{8A69D345-D564-463C-AFF1-A69D9E530F96}

{430FD4D0-B729-4F61-AA34-91526481799D}

GoogleUpdateSetup.exe

CFEndTempOptOutCmd

CFOptInCmd

CFOptOutCmd

CFTempOptOutCmd

UninstallCmdLine

WebAccessible

3E40F524-16FA-440A-B919-B44AB355B174

service_update.exe

winrt_helper.dll

{5FAFC90A-D443-4E4F-B69B-DA1F8D553C6C}

d-d-%d

hXXp://browser.

%d.%d.%d

Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser

Google Chrome App Launcher

ChromeAppList

tSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher

{8BA986DA-5100-405E-AA35-86F34A02ACBF}

Google Chrome Frame

Google\Chrome Frame

Chrome in a Frame.

Uninstall Chrome Frame

Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame

\\.\pipe\GoogleCrashServices\

\\.\pipe\YandexCrashServices

error %u

ntdll.dll

chrome.exe

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_TEXT

HKEY_PERFORMANCE_NLSTEXT

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

pipe\

kernelbase.dll

eKey

gdi32.dll

xntdll.dll

wow_helper.exe"

shell32.dll

Reported Crashes.txt

testing_interface.dll

Origin Bound Certs

Certificate Revocation Lists

Custom Dictionary.txt

Login Data

Cached Theme.pak

Web Applications

pepflashplayer.dll

CHROME_METRO_NAV_SEARCH_REQUEST

CHROME_METRO_GET_CURRENT_TAB_INFO

CHROME_METRO_SETTINGS_COMMAND

gcswf32.dll

pdf.dll

yapdf.dll

yadocviewer.dll

npmedia_plugin.dll

pepper/libppeffects.dll

Crash Reports

crash_service.exe

script.log

resources.pak

${windows}

hunspecified-crash-key

%u.%s

reported

mscoree.dll

ADVAPI32.DLL

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

USER32.DLL

portuguese-brazilian

dbghelp.dll

rpcrt4.dll

crash_service.exe --max-reports=10

%s\%s.dmp

x-x-x-xx-xxxxxx

Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32

Software\Microsoft\Windows\CurrentVersion\Run

.Chrome_MessagePumpWindow_%p

Ndebug.log

.\debug.log

\StringFileInfo\xx\%ls

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Crash Reports\events\3152.crashed

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe

chrome_exe

40.0.2214.115

15.2.2214.3645

crash_service.exe_4016:

.text

`.rdata

@.data

.rsrc

@.reloc

j.Yf;

_tcPVj@

.PjRW

d:\buildagent\work\9d1bc32700498ce4\src\chrome\tools\crash_service\main.cc

session start. cmdline is [

CHROME_VERSION

CHROME_SAFE_MODE

2676A9A2-D919-4FEE-9187-152100393AB2

ignore-urlfetcher-cert-requests

install-chrome-app

install-ephemeral-app-from-webstore

pack-extension-key

permission-request-api-url

promo-server-url

proxy-bypass-list

proxy-pac-url

remember-cert-error-decisions

spelling-service-feedback-url

try-chrome-again

variations-server-url

winhttp-proxy-resolver

ya-url-copy-safe-text

skip-first-import

plugins-metadata-server-url

windows8-search

allow-http-screen-capture

app-list-start-page-url

apps-checkout-url

apps-gallery-download-url

apps-gallery-url

apps-gallery-update-url

certificate-transparency-log

disable-extensions-http-throttling

disable-password-manager-reauthentication

disable-quic-port-selection

disable-save-password-bubble

disable-web-resources

enable-auth-negotiate-port

enable-npn-http

enable-quic-port-selection

enable-save-password-bubble

enable-sdch-over-https

enable-user-controlled-alternate-protocol-ports

enable-websocket-over-spdy

enable-website-settings-manager

explicitly-allowed-ports

extensions-not-webstore

help-url

max-reports

reporter

pipe-name

CHROME_BREAKPAD_PIPE_NAME

CHROME_BREAKPAD_EVENT_NAME

d:\buildagent\work\9d1bc32700498ce4\src\components\crash\tools\crash_service.cc

pipe name is

reporter is

reports/day

trying to send report for pid =

checking for unsent reports in

we're done with unsent reports

dumps reported :

license_url

feedback.url

conf_policy_url

hXXp://legal.yandex.ru/browser_agreement/

hXXp://legal.yandex.ru/confidential/

SHELL32.dll

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

googlechromeapphost

googlechromeframe

ya_permanent_state.brand_id

ya_permanent_state.base_host

ya_permanent_state.partner_id

ya_permanent_state.uninstall_survey_url

yandex.ru

iexplore.exe

auto-launch-chrome

chrome

chrome-sxs

new-setup-exe

register-dev-chrome

register-url-protocol

rename-browser-exe

update-setup-exe

toast-results-key

make-browser-default-after-import

silent-first-import

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\language_selector.cc

profile.ephemeral_mode

profile.icon_version

session.restore_on_startup

session.restore_on_startup_migrated

session.startup_urls_migration_time

session.restore_to_homepage_if_empty

profile.exited_cleanly

profile.exit_type

profile.managed.custodian_email

profile.managed.custodian_name

profile.managed.custodian_profile_image_url

profile.managed.custodian_profile_url

profile.managed.manual_hosts

profile.managed.manual_urls

profile.managed.second_custodian_email

profile.managed.second_custodian_name

profile.managed.second_custodian_profile_image_url

profile.managed.second_custodian_profile_url

profile.managed.shared_settings

session.startup_urls

session.urls_to_restore_on_startup

intl.app_locale

intl.charset_default

intl.accept_languages

intl.applied_brand_package_accept_languages

intl.static_encodings

webkit.webprefs.fonts.standard.Zyyy

webkit.webprefs.fonts.fixed.Zyyy

webkit.webprefs.fonts.serif.Zyyy

webkit.webprefs.fonts.sansserif.Zyyy

webkit.webprefs.fonts.cursive.Zyyy

webkit.webprefs.fonts.fantasy.Zyyy

webkit.webprefs.fonts.pictograph.Zyyy

webkit.webprefs.fonts.standard

webkit.webprefs.fonts.fixed

webkit.webprefs.fonts.serif

webkit.webprefs.fonts.sansserif

webkit.webprefs.fonts.cursive

webkit.webprefs.fonts.fantasy

webkit.webprefs.fonts.pictograph

webkit.webprefs.fonts.standard.Arab

webkit.webprefs.fonts.fixed.Arab

webkit.webprefs.fonts.serif.Arab

webkit.webprefs.fonts.sansserif.Arab

webkit.webprefs.fonts.standard.Cyrl

webkit.webprefs.fonts.fixed.Cyrl

webkit.webprefs.fonts.serif.Cyrl

webkit.webprefs.fonts.sansserif.Cyrl

webkit.webprefs.fonts.standard.Grek

webkit.webprefs.fonts.fixed.Grek

webkit.webprefs.fonts.serif.Grek

webkit.webprefs.fonts.sansserif.Grek

webkit.webprefs.fonts.standard.Jpan

webkit.webprefs.fonts.fixed.Jpan

webkit.webprefs.fonts.serif.Jpan

webkit.webprefs.fonts.sansserif.Jpan

webkit.webprefs.fonts.standard.Hang

webkit.webprefs.fonts.fixed.Hang

webkit.webprefs.fonts.serif.Hang

webkit.webprefs.fonts.sansserif.Hang

webkit.webprefs.fonts.cursive.Hang

webkit.webprefs.fonts.standard.Hans

webkit.webprefs.fonts.fixed.Hans

webkit.webprefs.fonts.serif.Hans

webkit.webprefs.fonts.sansserif.Hans

webkit.webprefs.fonts.standard.Hant

webkit.webprefs.fonts.fixed.Hant

webkit.webprefs.fonts.serif.Hant

webkit.webprefs.fonts.sansserif.Hant

webkit.webprefs.default_font_size

webkit.webprefs.default_fixed_font_size

webkit.webprefs.minimum_font_size

webkit.webprefs.minimum_logical_font_size

webkit.webprefs.javascript_enabled

webkit.webprefs.web_security_enabled

webkit.webprefs.javascript_can_open_windows_automatically

webkit.webprefs.loads_images_automatically

webkit.webprefs.plugins_enabled

webkit.webprefs.dom_paste_enabled

webkit.webprefs.shrinks_standalone_images_to_fit

webkit.webprefs.uses_universal_detector

webkit.webprefs.text_areas_are_resizable

webkit.webprefs.java_enabled

webkit.webprefs.tabs_to_links

webkit.webprefs.allow_displaying_insecure_content

webkit.webprefs.allow_running_insecure_content

safebrowsing.enabled

safebrowsing.extended_reporting_enabled

safebrowsing.proceed_anyway_disabled

safebrowsing.incident_report_sent

safebrowsing.incidents_sent

incognito.mode_availability

search.suggest_enabled

browser.confirm_to_quit

security.cookie_behavior

download.prompt_for_download

alternate_error_pages.enabled

dns_prefetching.startup_list

dns_prefetching.host_referral_list

spdy.disabled

net.http_server_properties

spdy.servers

spdy.alternate_protocol

protocol.disabled_schemes

instant_ui.zero_suggest_url_prefix

local_state.multiple_profile_prefs_version

dns_prefetching.enabled

net.network_prediction_options

hide_web_store_icon

browser.show_home_button

browser.show_ya_button

browser.show_tablo_on_click

browser.last_session_empty

browser.session_empty

browser.use_mouse_gestures

browser.enable_page_expiration

browser.do_not_count_page_expiration_infobar_closings

profile.recently_selected_encodings

browser.clear_data.browsing_history

browser.clear_data.download_history

browser.clear_data.cache

browser.clear_data.cookies

browser.clear_data.passwords

browser.clear_data.form_data

browser.clear_data.hosted_apps_data

browser.clear_data.content_licenses

browser.enable_spellchecking

browser.speechinput_censor_results

browser.speechinput_tray_notification_shown_contexts

browser.enabled_labs_experiments

ya.experiments_edited_by_user

ya.distrib_default_experiments

browser.enable_autospellcorrect

history.saving_disabled

ya.settings.text_wrap

history.deleting_enabled

settings.force_safesearch

settings.history_recorded

browser.clear_data.time_period

browser.last_clear_browsing_data_time

extensions.theme.pack

extensions.theme.id

extensions.theme.images

extensions.theme.colors

extensions.theme.tints

extensions.theme.properties

extensions.ui.developer_mode

extensions.commands

plugins.last_internal_directory

plugins.plugins_list

plugins.plugins_disabled

plugins.plugins_disabled_exceptions

plugins.plugins_enabled

plugins.migrated_to_pepper_flash

plugins.removed_old_component_pepper_flash_settings

plugins.show_details

plugins.allow_outdated

plugins.always_authorize

plugins.metadata

plugins.resource_cache_update

browser.check_default_browser

browser.default_browser_setting_enabled

browser.custom_chrome_frame

profile.content_settings.plugin_whitelist

profile.block_third_party_cookies

profile.clear_site_data_on_exit

partition.default_zoom_level

profile.default_zoom_level

partition.per_host_zoom_levels

profile.per_host_zoom_levels

autofill.data_model_default

autofill.pay_without_wallet

autofill.wallet_location_disclosure

autofill.save_data

autofill.wallet_shipping_same_as_billing

autofill.generated_card_bubble_times_shown

autofill.rac_dialog_defaults

breadcrumbs.enabled

push_to_call.enabled

push_to_call.wasenabled

ya.disk.want_install

context_translate.enabled

context_translate.translate_words

enable_deprecated_web_platform_features

import_last_source_browser

import_autofill_form_data

import_bookmarks

import_history

import_home_page

import_saved_passwords

import_cookies

import_last_session

import_extensions

import_speed_dial

import_other

ya.statistics.import_rollback

ya.import_new_source_type

ya.import_new_source_profile

import_search_engine

profile.avatar_index

profile.using_default_name

profile.name

profile.using_default_avatar

profile.using_gaia_avatar

profile.managed_user_id

profile.gaia_info_update_time

profile.gaia_info_picture_url

profile.avatar_bubble_tutorial_shown

printing.enabled

printing.print_preview_disabled

profile.managed.default_filtering_behavior

profile.managed_user_creation_allowed

profile.managed_users

profile.reset_prompt_memento

message_center.disabled_extension_ids

message_center.disabled_system_component_ids

message_center.welcome_notification_dismissed

message_center.welcome_notification_dismissed_local

message_center.welcome_notification_previously_popped_up

message_center.welcome_notification_expiration_timestamp

fullscreen.allowed

local_discovery.notifications_enabled

prefs.preference_reset_time

ya.prefetch.latest_update_list

ya.tablo_pins.instance_id

gcm.channel_enabled

gcm.push_messaging_registration_count

easy_unlock.allowed

easy_unlock.enabled

easy_unlock.pairing

easy_unlock.proximity_required

easy_unlock.show_tutorial

zerosuggest.cachedresults

signin.error_stats_update_time

ssl.rev_checking.enabled

ssl.rev_checking.required_for_local_anchors

ssl.version_min

ssl.version_max

ssl.version_fallback_min

ssl.cipher_suites.blacklist

ssl.ssl_record_splitting.disabled

ssl.ssl_blocking_bypassed

user_experience_metrics.reporting_enabled

profile.last_used

profile.last_active_profiles

profile.profiles_created

profile.info_cache

profile.created_by_version

profile.reset_prompt_mementos

user_experience_metrics.stability.page_load_count

user_experience_metrics.stability.renderer_crash_count

user_experience_metrics.stability.extension_renderer_crash_count

user_experience_metrics.stability.renderer_hang_count

user_experience_metrics.stability.child_process_crash_count

user_experience_metrics.stability.other_user_crash_count

user_experience_metrics.stability.kernel_crash_count

user_experience_metrics.stability.system_unclean_shutdowns

user_experience_metrics.stability.plugin_stats2

uninstall_metrics.page_load_count

uninstall_metrics.last_launch_time_sec

uninstall_metrics.last_observed_running_time_sec

browser.suppress_default_browser_prompt_for_version

browser.window_placement

browser.window_placement_popup

task_manager.window_placement

browser.app_window_placement

renderer.memory_cache.size

download.default_directory

download.default_directory_display_name

download.extensions_to_open

download.directory_upgrade

download.open_pdf_in_system_reader

savefile.default_directory

savefile.type

select_file_dialogs.allowed

filebrowser.tasks.default_by_mime_type

filebrowser.tasks.default_by_suffix

selectfile.last_directory

browser.hung_plugin_detect_freq

browser.plugin_message_response_timeout

spellcheck.dictionary

spellcheck.use_spelling_service

protocol_handler.excluded_schemes

safe_browsing.client_key

safe_browsing.wrapped_key

options_window.last_tab_index

certificate_manager_window.last_tab_index

browser.show_omnibox_share_buttons

browser.last_redirect_origin

shutdown.type

shutdown.num_processes

shutdown.num_processes_slow

restart.last.session.on.shutdown

was.restarted

relaunch.mode

extensions.disabled

plugins.disable_plugin_finder

ntp.app_page_names

ntp.collapsed_open_tabs

ntp.collapsed_foreign_sessions

ntp.collapsed_recently_closed_tabs

ntp.collapsed_snapshot_document

ntp.collapsed_sync_promo

ntp.date_resource_server

ntp.most_visited_blacklist

ntp.promo_desktop_session_found

ntp.promo_resource_cache_update

ntp.shown_bookmarks_folder

ntp.shown_page

ntp.tips_resource_server

ntp.webstore_enabled

devtools.adb_key

devtools.disabled

devtools.discover_usb_devices

devtools.edited_files

devtools.file_system_paths

devtools.open_docked

devtools.port_forwarding_enabled

devtools.port_forwarding_default_set

devtools.port_forwarding_config

google.services.password_hash

invalidation_service.use_gcm_channel

sync_promo.startup_count

sync_promo.user_skipped

sync_promo.show_on_first_run_allowed

sync_promo.show_ntp_bubble

browser.web_app.create_on_desktop

browser.web_app.create_in_apps_menu

browser.web_app.create_in_quick_launch_bar

geolocation.access_token

media.default_audio_capture_device

media.default_video_capture_Device

media.device_id_salt

remote_access.host_firewall_traversal

remote_access.host_require_two_factor

remote_access.host_domain

remote_access.host_talkgadget_prefix

remote_access.host_require_curtain

remote_access.host_allow_client_pairing

remote_access.host_allow_gnubby_auth

remote_access.host_allow_relayed_connection

remote_access.host_udp_port_range

printing.print_preview_sticky_settings

cloud_print.dialog_size.width

cloud_print.dialog_size.height

cloud_print.signin_dialog_size.width

cloud_print.signin_dialog_size.height

cloud_print.enabled

cloud_print.proxy_id

cloud_print.auth_token

cloud_print.xmpp_auth_token

cloud_print.email

cloud_print.print_system_settings

cloud_print.enable_job_poll

cloud_print.robot_refresh_token

cloud_print.robot_email

cloud_print.user_settings.connectNewPrinters

cloud_print.xmpp_ping_enabled

cloud_print.xmpp_ping_timeout_sec

cloud_print.user_settings.printers

cloud_print.submit_enabled

cloud_print.user_settings

net.max_connections_per_proxy

hardware.audio_capture_enabled

hardware.audio_capture_allowed_urls

hardware.video_capture_enabled

hardware.video_capture_allowed_urls

hotword.search_enabled_2

hotword.always_on_search_enabled

hotword.audio_logging_enabled

hotword.audio_history_enabled

hotword.previous_language

browser.clear_lso_data_enabled

browser.pepper_flash_settings_enabled

browser.disk_cache_dir

browser.disk_cache_size

browser.last_default_status

browser.media_cache_size

cros.system.releaseChannel

feedback.performance_tracing_enabled

background_contents.registered

browser.shown_autolaunch_infobar

auth.schemes

auth.disable_negotiate_cname_lookup

auth.enable_negotiate_port

auth.server_whitelist

auth.negotiate_delegate_whitelist

auth.gssapi_library_name

auth.allow_cross_origin_prompt

async_dns.enabled

custom_handlers.registered_protocol_handlers

custom_handlers.ignored_protocol_handlers

custom_handlers.policy.registered_protocol_handlers

custom_handlers.policy.ignored_protocol_handlers

custom_handlers.enabled

background_mode.enabled

hardware_acceleration_mode.enabled

policy.device_refresh_rate

message_center.showed_first_run_balloon

message_center.show_icon

message_center.was_forced_on_taskbar

browser.attempted_to_enable_autoupdate

media_galleries.gallery_id

media_galleries.remembered_galleries

media_galleries.last_scan_time

shelf_chrome_icon_index

gesture.max_separation_for_gesture_touches_in_pixels

gesture.semi_long_press_time_in_ms

gesture.tab_scrub_activation_delay_in_ms

gesture.fling_max_cancel_to_down_time_in_ms

gesture.fling_max_tap_gap_time_in_ms

overscroll.horizontal_threshold_complete

overscroll.vertical_threshold_complete

overscroll.minimum_threshold_start

overscroll.minimum_threshold_start_touchpad

overscroll.vertical_threshold_start

overscroll.horizontal_resist_threshold

overscroll.vertical_resist_threshold

ya.send_install

ya.last_welcome_page_version

ya.clids

ya.banerid

ya.update_failures

ya.update_last_failure

ya.welcome_page

ya.custom_cookies

ya.bar.ui

ya.bar.uuid

ya.bar.r1

ya.statistics.last_default_check_time

ya.statistics.enabled

ya.tab_finder_enabled_once

ya.crash_dumps_checkbox_was_set

ya.crash_dumps_checkbox_was_set_at_1_0_1084_5404

ya.disk.installer_etag

ya.vk.show_infobar

ya.vk.last_shown

ya.vk.clicks_left

ya.last_runned_version

ya.last_runned_partner_id

ya.education.enabled

ya.custo_education.enabled

ya.searchness.enabled

ya.all_sb_chunks_downloaded_time

ya.splitview.enabled

ya.splitview.visible

ya.sync.device.push_id

ya.sync.device.name

ya.block_flash

ya.extensions_to_replace

ya.mute_state

ya.background_animation.enabled

ya.background_animation.disable_on_low_battery

ya.notifications.extension_settings_migrated

ya.notifications.migrated_fb_token

ya.notifications.migrated_fb_token_expires_in

ya.notifications.migrated_vk_token

ya.notifications.migrated_vk_token_expires_in

ya.notifications.silent_mode_until

ya.notifications.silent_mode

ya.notifications.fb.enabled

ya.notifications.fb.show.comments

ya.notifications.fb.show.friend_requests

ya.notifications.fb.show.messages

ya.notifications.fb.view_content

ya.notifications.fb.num_invitations_shown

ya.notifications.fb.last_time_invitation_shown

ya.notifications.fb.share_accepted

ya.notifications.fb.last_share_propose_time

ya.notifications.vk.enabled

ya.notifications.vk.show.comments

ya.notifications.vk.show.friend_requests

ya.notifications.vk.show.messages

ya.notifications.vk.view_content

ya.notifications.vk.num_invitations_shown

ya.notifications.vk.last_time_invitation_shown

ya.notifications.vk.share_accepted

ya.notifications.vk.last_share_propose_time

ya.notifications.yamail.enabled

ya.notifications.yamail.view_content

show.comments

show.friend_requests

show.messages

omnibox-infobar-panel.enabled

omnibox-infobar-panel.disabled

searchness.disabled

ya.persist_state_updated

network_profile.warnings_left

network_profile.last_warning_time

ya.feedback.update_date

ya.smartback.dictionary_last_modified

torrents.open_mode

apps.app_launch_for_metro_restart

apps.app_launch_for_metro_restart_profile

apps.shortcuts_version

module_conflict.bubble_shown

settings.privacy.drm_salt

settings.privacy.drm_enabled

browser.allow_discard_tabs

browser.allow_discard_tabs_updated

profile.extensions.activity_log.num_consumers_active

proxy.quick_check_enabled

profile.browser_guest_enabled

profile.add_person_enabled

ya.show_newtab_search_arrow

ya.popup_block_enabled

ya.plugin_restricted_document_kinds

ya.custo_tab_activation_order_on_tab_close

ya.custo_ui_first_time_launch

easy_unlock.hardlock_state

password_bubble.timestamp

password_bubble.nopes

password_bubble.interactions

ya.tablo.snapshot_click_map

\uX

Dictionary keys must be quoted.

Unsupported encoding. JSON must be UTF-8.

user.js

PlatformFile.UnknownErrors.Windows

0123456789

Histogram: %s recorded %d samples

(flags = 0x%x)

(%d = %3.1f%%)

Line: %i, column: %i, %s

D:\BuildAgent\work\9d1bc32700498ce4\src\out\Release\crash_service.exe.pdb

SHFileOperationW

WINMM.dll

InternetCrackUrlW

HttpOpenRequestW

HttpAddRequestHeadersW

HttpSendRequestW

HttpQueryInfoW

WININET.dll

RegCreateKeyExW

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

GetWindowsDirectoryW

ConnectNamedPipe

DisconnectNamedPipe

CreateNamedPipeW

KERNEL32.dll

ole32.dll

USER32.dll

GetProcessHeap

GetCPInfo

OLEAUT32.dll

zcÁ

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>

2(2;2#3-3

0!0(010=0

< <&<,<0<5<<<

;!;<;[;};

;';-;:;|;

8"9(9,90949

<$=1=<>~>

7$8/858\8

4 4$4(4,4044484<4@4

2 2$2(2,20242

1 1<1@1`1

operation_log.txt

gcswf32.dll

pdf.dll

yapdf.dll

yadocviewer.dll

npmedia_plugin.dll

pepper/libppeffects.dll

Crash Reports

crash_service.exe

script.log

resources.pak

shell32.dll

browser.exe

metro_driver.dll

Reported Crashes.txt

testing_interface.dll

browser.dll

Origin Bound Certs

Certificate Revocation Lists

Custom Dictionary.txt

Login Data

Cached Theme.pak

Web Applications

pepflashplayer.dll

CHROME_METRO_NAV_SEARCH_REQUEST

CHROME_METRO_GET_CURRENT_TAB_INFO

CHROME_METRO_SETTINGS_COMMAND

\\.\pipe\YandexCrashServices

hXXp://crash-reports.browser.yandex.net/submit

crash_checkpoint.txt

uploads.log

*.dmp

%u.%s

reported

verifier.dll

dbghelp.dll

rpcrt4.dll

x-x-x-xx-xxxxxx

Breakpad/1.0 (Windows)

https

%sXX

mscoree.dll

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

USER32.DLL

portuguese-brazilian

{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}

{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}

Browse the web

Software\Microsoft\Windows\CurrentVersion\Uninstall\Chromium

Google Chrome App Launcher

ChromeAppList

tSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher

{8BA986DA-5100-405E-AA35-86F34A02ACBF}

Google Chrome Frame

Google\Chrome Frame

Chrome in a Frame.

Uninstall Chrome Frame

Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame

registering_chrome

uninstalling_chrome_frame

{5FAFC90A-D443-4E4F-B69B-DA1F8D553C6C}

d-d-%d

hXXp://browser.

%d.%d.%d

mSoftware\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser

YandexSSHTM

{45033924-ABD6-4063-AD60-71925CDE206E}

eyndxstp.exe

{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}

app_host.exe

browser_child.dll

npbrowser_frame.dll

browser_frame_helper.dll

browser_frame_helper.exe

browser_launcher.exe

new_browser.exe

old_browser.exe

delegate_execute.exe

nacl64.exe

setup.exe

InstallerSuccessLaunchCmdLine

3E40F524-16FA-440A-B919-B44AB355B174

-chrome

-chromeframe

service_update.exe

winrt_helper.dll

{8A69D345-D564-463C-AFF1-A69D9E530F96}

{430FD4D0-B729-4F61-AA34-91526481799D}

GoogleUpdateSetup.exe

CFEndTempOptOutCmd

CFOptInCmd

CFOptOutCmd

CFTempOptOutCmd

UninstallCmdLine

WebAccessible

.Chrome_MessagePumpWindow_%p

Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32

Software\Microsoft\Windows\CurrentVersion\Run

Ndebug.log

.\debug.log

kernel32.dll

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\crash_service.exe

browser.exe_2800:

.text

`.rdata

@.data

.rsrc

@.reloc

HtdHtHHHt.HH

j.Yf;

_tcPVj@

.PjRW

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\chrome_exe_main_win.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\client_util.cc

No valid Chrome version found

Failed to load Chrome DLL from

ChromeMain

RelaunchChromeBrowserWithNewCommandLineIfNeeded

Could not find exported function

allow-insecure-websocket-from-https-origin

disable-webgl

disable-web-security

enable-experimental-web-platform-features

enable-tcp-fastopen

enable-viewport

enable-viewport-meta

enable-vtune-support

enable-webgl-draft-extensions

enable-webgl-image-chromium

enable-web-midi

enable-webkit-find-restart

ignore-certificate-errors

remote-debugging-port

renderer-cmd-prefix

testing-fixed-http-port

testing-fixed-https-port

trace-upload-url

utility-cmd-prefix

zygote-cmd-prefix

disable-webrtc-hw-decoding

disable-webrtc-encryption

disable-webrtc-hw-encoding

enable-webrtc-hw-vp8-encoding

enable-webrtc-hw-h264-encoding

disable-webaudio

opera

1.3.21.115

%s-x-x

Chrome

0.0.0.0-devel

%s-%x

url-chunk

font_key_name

subresource_url

CHROME_MAIN_TIME

%x-%x

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\google_update_settings.cc

auto-launch-chrome

chrome

chrome-sxs

new-setup-exe

register-dev-chrome

register-url-protocol

rename-browser-exe

update-setup-exe

toast-results-key

Cannot initialize AppCommands from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_commands.cc

Failed to open key "

Skipping over key "

make-browser-default-after-import

silent-first-import

ya_permanent_state.brand_id

ya_permanent_state.base_host

ya_permanent_state.partner_id

ya_permanent_state.uninstall_survey_url

yandex.ru

iexplore.exe

googlechromeapphost

googlechromeframe

Cannot initialize an AppCommand from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_command.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\language_selector.cc

CHROME_BREAKPAD_PIPE_NAME

CHROME_BREAKPAD_EVENT_NAME

d:\buildagent\work\9d1bc32700498ce4\src\components\crash\app\breakpad_win.cc

NTDLL.DLL

kernel32.dll

d:\buildagent\work\9d1bc32700498ce4\src\sandbox\win\src\sandbox_policy_base.cc

CreateNamedPipeW

NtCreateKey

NtOpenKey

NtOpenKeyEx

AudioCaptureAllowedUrls

AutoSelectCertificateForUrls

ChromeFrameContentTypes

ChromeFrameRendererSettings

ChromeOsLockOnIdleSuspend

ChromeOsMultiProfileUserBehavior

ChromeOsReleaseChannel

ChromeOsReleaseChannelDelegated

CloudPrintProxyEnabled

CloudPrintSubmitEnabled

ContentPackManualBehaviorURLs

CookiesAllowedForUrls

CookiesBlockedForUrls

CookiesSessionOnlyForUrls

DefaultSearchProviderAlternateURLs

DefaultSearchProviderIconURL

DefaultSearchProviderImageURL

DefaultSearchProviderImageURLPostParams

DefaultSearchProviderInstantURL

DefaultSearchProviderInstantURLPostParams

DefaultSearchProviderKeyword

DefaultSearchProviderNewTabURL

DefaultSearchProviderSearchTermsReplacementKey

DefaultSearchProviderSearchURL

DefaultSearchProviderSearchURLPostParams

DefaultSearchProviderSuggestURL

DefaultSearchProviderSuggestURLPostParams

DeviceAllowRedeemChromeOsRegistrationOffers

DeviceLocalAccountAutoLoginBailoutEnabled

DeviceLocalAccountAutoLoginDelay

DeviceLocalAccountAutoLoginId

DeviceLoginScreenDefaultHighContrastEnabled

DeviceLoginScreenDefaultLargeCursorEnabled

DeviceLoginScreenDefaultScreenMagnifierType

DeviceLoginScreenDefaultSpokenFeedbackEnabled

DeviceLoginScreenDefaultVirtualKeyboardEnabled

DeviceLoginScreenPowerManagement

DeviceLoginScreenSaverId

DeviceLoginScreenSaverTimeout

DeviceMetricsReportingEnabled

DeviceStartUpUrls

DeviceUpdateHttpDownloadsEnabled

EnableAuthNegotiatePort

EnableDeprecatedWebPlatformFeatures

EnableOriginBoundCerts

EnableWebBasedSignin

EnterpriseWebStoreName

EnterpriseWebStoreURL

HideWebStoreIcon

HideWebStorePromo

ImagesAllowedForUrls

ImagesBlockedForUrls

ImportAutofillFormData

ImportBookmarks

ImportHistory

ImportHomepage

ImportSavedPasswords

ImportSearchEngine

JavaScriptAllowedForUrls

JavaScriptBlockedForUrls

KeyboardDefaultToFunctionKeys

MetricsReportingEnabled

NotificationsAllowedForUrls

NotificationsBlockedForUrls

PasswordManagerAllowShowPasswords

PasswordManagerEnabled

PluginsAllowedForUrls

PluginsBlockedForUrls

PopupsAllowedForUrls

PopupsBlockedForUrls

ProxyBypassList

ProxyPacUrl

RemoteAccessHostAllowClientPairing

RemoteAccessHostAllowGnubbyAuth

RemoteAccessHostAllowRelayedConnection

RemoteAccessHostDomain

RemoteAccessHostFirewallTraversal

RemoteAccessHostRequireCurtain

RemoteAccessHostRequireTwoFactor

RemoteAccessHostTalkGadgetPrefix

RemoteAccessHostUdpPortRange

RenderInChromeFrameList

ReportDeviceActivityTimes

ReportDeviceBootMode

ReportDeviceLocation

ReportDeviceNetworkInterfaces

ReportDeviceUsers

ReportDeviceVersionInfo

RestoreOnStartupURLs

ShowAppsShortcutInBookmarkBar

SuppressChromeFrameTurndownPrompt

TermsOfServiceURL

TouchVirtualKeyboardEnabled

URLBlacklist

URLWhitelist

VideoCaptureAllowedUrls

VirtualKeyboardEnabled

update_url

^update_url:

CHROME_VERSION

CHROME_SAFE_MODE

2676A9A2-D919-4FEE-9187-152100393AB2

ignore-urlfetcher-cert-requests

install-chrome-app

install-ephemeral-app-from-webstore

pack-extension-key

permission-request-api-url

promo-server-url

proxy-bypass-list

proxy-pac-url

remember-cert-error-decisions

spelling-service-feedback-url

try-chrome-again

variations-server-url

winhttp-proxy-resolver

ya-url-copy-safe-text

skip-first-import

plugins-metadata-server-url

windows8-search

allow-http-screen-capture

app-list-start-page-url

apps-checkout-url

apps-gallery-download-url

apps-gallery-url

apps-gallery-update-url

certificate-transparency-log

disable-extensions-http-throttling

disable-password-manager-reauthentication

disable-quic-port-selection

disable-save-password-bubble

disable-web-resources

enable-auth-negotiate-port

enable-npn-http

enable-quic-port-selection

enable-save-password-bubble

enable-sdch-over-https

enable-user-controlled-alternate-protocol-ports

enable-websocket-over-spdy

enable-website-settings-manager

explicitly-allowed-ports

extensions-not-webstore

help-url

40.0.2214.3645

CHROME_HEADLESS

CHROME_LOG_FILE

CHROME_METRO_CONNECTED

CHROMEOS_SESSION_LOG_DIR

CHROME_CRASHED

CHROME_RESTART

profile.ephemeral_mode

profile.icon_version

session.restore_on_startup

session.restore_on_startup_migrated

session.startup_urls_migration_time

session.restore_to_homepage_if_empty

profile.exited_cleanly

profile.exit_type

profile.managed.custodian_email

profile.managed.custodian_name

profile.managed.custodian_profile_image_url

profile.managed.custodian_profile_url

profile.managed.manual_hosts

profile.managed.manual_urls

profile.managed.second_custodian_email

profile.managed.second_custodian_name

profile.managed.second_custodian_profile_image_url

profile.managed.second_custodian_profile_url

profile.managed.shared_settings

session.startup_urls

session.urls_to_restore_on_startup

intl.app_locale

intl.charset_default

intl.accept_languages

intl.applied_brand_package_accept_languages

intl.static_encodings

webkit.webprefs.fonts.standard.Zyyy

webkit.webprefs.fonts.fixed.Zyyy

webkit.webprefs.fonts.serif.Zyyy

webkit.webprefs.fonts.sansserif.Zyyy

webkit.webprefs.fonts.cursive.Zyyy

webkit.webprefs.fonts.fantasy.Zyyy

webkit.webprefs.fonts.pictograph.Zyyy

webkit.webprefs.fonts.standard

webkit.webprefs.fonts.fixed

webkit.webprefs.fonts.serif

webkit.webprefs.fonts.sansserif

webkit.webprefs.fonts.cursive

webkit.webprefs.fonts.fantasy

webkit.webprefs.fonts.pictograph

webkit.webprefs.fonts.standard.Arab

webkit.webprefs.fonts.fixed.Arab

webkit.webprefs.fonts.serif.Arab

webkit.webprefs.fonts.sansserif.Arab

webkit.webprefs.fonts.standard.Cyrl

webkit.webprefs.fonts.fixed.Cyrl

webkit.webprefs.fonts.serif.Cyrl

webkit.webprefs.fonts.sansserif.Cyrl

webkit.webprefs.fonts.standard.Grek

webkit.webprefs.fonts.fixed.Grek

webkit.webprefs.fonts.serif.Grek

webkit.webprefs.fonts.sansserif.Grek

webkit.webprefs.fonts.standard.Jpan

webkit.webprefs.fonts.fixed.Jpan

webkit.webprefs.fonts.serif.Jpan

webkit.webprefs.fonts.sansserif.Jpan

webkit.webprefs.fonts.standard.Hang

webkit.webprefs.fonts.fixed.Hang

webkit.webprefs.fonts.serif.Hang

webkit.webprefs.fonts.sansserif.Hang

webkit.webprefs.fonts.cursive.Hang

webkit.webprefs.fonts.standard.Hans

webkit.webprefs.fonts.fixed.Hans

webkit.webprefs.fonts.serif.Hans

webkit.webprefs.fonts.sansserif.Hans

webkit.webprefs.fonts.standard.Hant

webkit.webprefs.fonts.fixed.Hant

webkit.webprefs.fonts.serif.Hant

webkit.webprefs.fonts.sansserif.Hant

webkit.webprefs.default_font_size

webkit.webprefs.default_fixed_font_size

webkit.webprefs.minimum_font_size

webkit.webprefs.minimum_logical_font_size

webkit.webprefs.javascript_enabled

webkit.webprefs.web_security_enabled

webkit.webprefs.javascript_can_open_windows_automatically

webkit.webprefs.loads_images_automatically

webkit.webprefs.plugins_enabled

webkit.webprefs.dom_paste_enabled

webkit.webprefs.shrinks_standalone_images_to_fit

webkit.webprefs.uses_universal_detector

webkit.webprefs.text_areas_are_resizable

webkit.webprefs.java_enabled

webkit.webprefs.tabs_to_links

webkit.webprefs.allow_displaying_insecure_content

webkit.webprefs.allow_running_insecure_content

safebrowsing.enabled

safebrowsing.extended_reporting_enabled

safebrowsing.proceed_anyway_disabled

safebrowsing.incident_report_sent

safebrowsing.incidents_sent

incognito.mode_availability

search.suggest_enabled

browser.confirm_to_quit

security.cookie_behavior

download.prompt_for_download

alternate_error_pages.enabled

dns_prefetching.startup_list

dns_prefetching.host_referral_list

spdy.disabled

net.http_server_properties

spdy.servers

spdy.alternate_protocol

protocol.disabled_schemes

instant_ui.zero_suggest_url_prefix

local_state.multiple_profile_prefs_version

dns_prefetching.enabled

net.network_prediction_options

hide_web_store_icon

browser.show_home_button

browser.show_ya_button

browser.show_tablo_on_click

browser.last_session_empty

browser.session_empty

browser.use_mouse_gestures

browser.enable_page_expiration

browser.do_not_count_page_expiration_infobar_closings

profile.recently_selected_encodings

browser.clear_data.browsing_history

browser.clear_data.download_history

browser.clear_data.cache

browser.clear_data.cookies

browser.clear_data.passwords

browser.clear_data.form_data

browser.clear_data.hosted_apps_data

browser.clear_data.content_licenses

browser.enable_spellchecking

browser.speechinput_censor_results

browser.speechinput_tray_notification_shown_contexts

browser.enabled_labs_experiments

ya.experiments_edited_by_user

ya.distrib_default_experiments

browser.enable_autospellcorrect

history.saving_disabled

ya.settings.text_wrap

history.deleting_enabled

settings.force_safesearch

settings.history_recorded

browser.clear_data.time_period

browser.last_clear_browsing_data_time

extensions.theme.pack

extensions.theme.id

extensions.theme.images

extensions.theme.colors

extensions.theme.tints

extensions.theme.properties

extensions.ui.developer_mode

extensions.commands

plugins.last_internal_directory

plugins.plugins_list

plugins.plugins_disabled

plugins.plugins_disabled_exceptions

plugins.plugins_enabled

plugins.migrated_to_pepper_flash

plugins.removed_old_component_pepper_flash_settings

plugins.show_details

plugins.allow_outdated

plugins.always_authorize

plugins.metadata

plugins.resource_cache_update

browser.check_default_browser

browser.default_browser_setting_enabled

browser.custom_chrome_frame

profile.content_settings.plugin_whitelist

profile.block_third_party_cookies

profile.clear_site_data_on_exit

partition.default_zoom_level

profile.default_zoom_level

partition.per_host_zoom_levels

profile.per_host_zoom_levels

autofill.data_model_default

autofill.pay_without_wallet

autofill.wallet_location_disclosure

autofill.save_data

autofill.wallet_shipping_same_as_billing

autofill.generated_card_bubble_times_shown

autofill.rac_dialog_defaults

breadcrumbs.enabled

push_to_call.enabled

push_to_call.wasenabled

ya.disk.want_install

context_translate.enabled

context_translate.translate_words

enable_deprecated_web_platform_features

import_last_source_browser

import_autofill_form_data

import_bookmarks

import_history

import_home_page

import_saved_passwords

import_cookies

import_last_session

import_extensions

import_speed_dial

import_other

ya.statistics.import_rollback

ya.import_new_source_type

ya.import_new_source_profile

import_search_engine

profile.avatar_index

profile.using_default_name

profile.name

profile.using_default_avatar

profile.using_gaia_avatar

profile.managed_user_id

profile.gaia_info_update_time

profile.gaia_info_picture_url

profile.avatar_bubble_tutorial_shown

printing.enabled

printing.print_preview_disabled

profile.managed.default_filtering_behavior

profile.managed_user_creation_allowed

profile.managed_users

profile.reset_prompt_memento

message_center.disabled_extension_ids

message_center.disabled_system_component_ids

message_center.welcome_notification_dismissed

message_center.welcome_notification_dismissed_local

message_center.welcome_notification_previously_popped_up

message_center.welcome_notification_expiration_timestamp

fullscreen.allowed

local_discovery.notifications_enabled

prefs.preference_reset_time

ya.prefetch.latest_update_list

ya.tablo_pins.instance_id

gcm.channel_enabled

gcm.push_messaging_registration_count

easy_unlock.allowed

easy_unlock.enabled

easy_unlock.pairing

easy_unlock.proximity_required

easy_unlock.show_tutorial

zerosuggest.cachedresults

signin.error_stats_update_time

ssl.rev_checking.enabled

ssl.rev_checking.required_for_local_anchors

ssl.version_min

ssl.version_max

ssl.version_fallback_min

ssl.cipher_suites.blacklist

ssl.ssl_record_splitting.disabled

ssl.ssl_blocking_bypassed

user_experience_metrics.reporting_enabled

profile.last_used

profile.last_active_profiles

profile.profiles_created

profile.info_cache

profile.created_by_version

profile.reset_prompt_mementos

user_experience_metrics.stability.page_load_count

user_experience_metrics.stability.renderer_crash_count

user_experience_metrics.stability.extension_renderer_crash_count

user_experience_metrics.stability.renderer_hang_count

user_experience_metrics.stability.child_process_crash_count

user_experience_metrics.stability.other_user_crash_count

user_experience_metrics.stability.kernel_crash_count

user_experience_metrics.stability.system_unclean_shutdowns

user_experience_metrics.stability.plugin_stats2

uninstall_metrics.page_load_count

uninstall_metrics.last_launch_time_sec

uninstall_metrics.last_observed_running_time_sec

browser.suppress_default_browser_prompt_for_version

browser.window_placement

browser.window_placement_popup

task_manager.window_placement

browser.app_window_placement

renderer.memory_cache.size

download.default_directory

download.default_directory_display_name

download.extensions_to_open

download.directory_upgrade

download.open_pdf_in_system_reader

savefile.default_directory

savefile.type

select_file_dialogs.allowed

filebrowser.tasks.default_by_mime_type

filebrowser.tasks.default_by_suffix

selectfile.last_directory

browser.hung_plugin_detect_freq

browser.plugin_message_response_timeout

spellcheck.dictionary

spellcheck.use_spelling_service

protocol_handler.excluded_schemes

safe_browsing.client_key

safe_browsing.wrapped_key

options_window.last_tab_index

certificate_manager_window.last_tab_index

browser.show_omnibox_share_buttons

browser.last_redirect_origin

shutdown.type

shutdown.num_processes

shutdown.num_processes_slow

restart.last.session.on.shutdown

was.restarted

relaunch.mode

extensions.disabled

plugins.disable_plugin_finder

ntp.app_page_names

ntp.collapsed_open_tabs

ntp.collapsed_foreign_sessions

ntp.collapsed_recently_closed_tabs

ntp.collapsed_snapshot_document

ntp.collapsed_sync_promo

ntp.date_resource_server

ntp.most_visited_blacklist

ntp.promo_desktop_session_found

ntp.promo_resource_cache_update

ntp.shown_bookmarks_folder

ntp.shown_page

ntp.tips_resource_server

ntp.webstore_enabled

devtools.adb_key

devtools.disabled

devtools.discover_usb_devices

devtools.edited_files

devtools.file_system_paths

devtools.open_docked

devtools.port_forwarding_enabled

devtools.port_forwarding_default_set

devtools.port_forwarding_config

google.services.password_hash

invalidation_service.use_gcm_channel

sync_promo.startup_count

sync_promo.user_skipped

sync_promo.show_on_first_run_allowed

sync_promo.show_ntp_bubble

browser.web_app.create_on_desktop

browser.web_app.create_in_apps_menu

browser.web_app.create_in_quick_launch_bar

geolocation.access_token

media.default_audio_capture_device

media.default_video_capture_Device

media.device_id_salt

remote_access.host_firewall_traversal

remote_access.host_require_two_factor

remote_access.host_domain

remote_access.host_talkgadget_prefix

remote_access.host_require_curtain

remote_access.host_allow_client_pairing

remote_access.host_allow_gnubby_auth

remote_access.host_allow_relayed_connection

remote_access.host_udp_port_range

printing.print_preview_sticky_settings

cloud_print.dialog_size.width

cloud_print.dialog_size.height

cloud_print.signin_dialog_size.width

cloud_print.signin_dialog_size.height

cloud_print.enabled

cloud_print.proxy_id

cloud_print.auth_token

cloud_print.xmpp_auth_token

cloud_print.email

cloud_print.print_system_settings

cloud_print.enable_job_poll

cloud_print.robot_refresh_token

cloud_print.robot_email

cloud_print.user_settings.connectNewPrinters

cloud_print.xmpp_ping_enabled

cloud_print.xmpp_ping_timeout_sec

cloud_print.user_settings.printers

cloud_print.submit_enabled

cloud_print.user_settings

net.max_connections_per_proxy

hardware.audio_capture_enabled

hardware.audio_capture_allowed_urls

hardware.video_capture_enabled

hardware.video_capture_allowed_urls

hotword.search_enabled_2

hotword.always_on_search_enabled

hotword.audio_logging_enabled

hotword.audio_history_enabled

hotword.previous_language

browser.clear_lso_data_enabled

browser.pepper_flash_settings_enabled

browser.disk_cache_dir

browser.disk_cache_size

browser.last_default_status

browser.media_cache_size

cros.system.releaseChannel

feedback.performance_tracing_enabled

background_contents.registered

browser.shown_autolaunch_infobar

auth.schemes

auth.disable_negotiate_cname_lookup

auth.enable_negotiate_port

auth.server_whitelist

auth.negotiate_delegate_whitelist

auth.gssapi_library_name

auth.allow_cross_origin_prompt

async_dns.enabled

custom_handlers.registered_protocol_handlers

custom_handlers.ignored_protocol_handlers

custom_handlers.policy.registered_protocol_handlers

custom_handlers.policy.ignored_protocol_handlers

custom_handlers.enabled

background_mode.enabled

hardware_acceleration_mode.enabled

policy.device_refresh_rate

message_center.showed_first_run_balloon

message_center.show_icon

message_center.was_forced_on_taskbar

browser.attempted_to_enable_autoupdate

media_galleries.gallery_id

media_galleries.remembered_galleries

media_galleries.last_scan_time

shelf_chrome_icon_index

gesture.max_separation_for_gesture_touches_in_pixels

gesture.semi_long_press_time_in_ms

gesture.tab_scrub_activation_delay_in_ms

gesture.fling_max_cancel_to_down_time_in_ms

gesture.fling_max_tap_gap_time_in_ms

overscroll.horizontal_threshold_complete

overscroll.vertical_threshold_complete

overscroll.minimum_threshold_start

overscroll.minimum_threshold_start_touchpad

overscroll.vertical_threshold_start

overscroll.horizontal_resist_threshold

overscroll.vertical_resist_threshold

ya.send_install

ya.last_welcome_page_version

ya.clids

ya.banerid

ya.update_failures

ya.update_last_failure

ya.welcome_page

ya.custom_cookies

ya.bar.ui

ya.bar.uuid

ya.bar.r1

ya.statistics.last_default_check_time

ya.statistics.enabled

ya.tab_finder_enabled_once

ya.crash_dumps_checkbox_was_set

ya.crash_dumps_checkbox_was_set_at_1_0_1084_5404

ya.disk.installer_etag

ya.vk.show_infobar

ya.vk.last_shown

ya.vk.clicks_left

ya.last_runned_version

ya.last_runned_partner_id

ya.education.enabled

ya.custo_education.enabled

ya.searchness.enabled

ya.all_sb_chunks_downloaded_time

ya.splitview.enabled

ya.splitview.visible

ya.sync.device.push_id

ya.sync.device.name

ya.block_flash

ya.extensions_to_replace

ya.mute_state

ya.background_animation.enabled

ya.background_animation.disable_on_low_battery

ya.notifications.extension_settings_migrated

ya.notifications.migrated_fb_token

ya.notifications.migrated_fb_token_expires_in

ya.notifications.migrated_vk_token

ya.notifications.migrated_vk_token_expires_in

ya.notifications.silent_mode_until

ya.notifications.silent_mode

ya.notifications.fb.enabled

ya.notifications.fb.show.comments

ya.notifications.fb.show.friend_requests

ya.notifications.fb.show.messages

ya.notifications.fb.view_content

ya.notifications.fb.num_invitations_shown

ya.notifications.fb.last_time_invitation_shown

ya.notifications.fb.share_accepted

ya.notifications.fb.last_share_propose_time

ya.notifications.vk.enabled

ya.notifications.vk.show.comments

ya.notifications.vk.show.friend_requests

ya.notifications.vk.show.messages

ya.notifications.vk.view_content

ya.notifications.vk.num_invitations_shown

ya.notifications.vk.last_time_invitation_shown

ya.notifications.vk.share_accepted

ya.notifications.vk.last_share_propose_time

ya.notifications.yamail.enabled

ya.notifications.yamail.view_content

show.comments

show.friend_requests

show.messages

omnibox-infobar-panel.enabled

omnibox-infobar-panel.disabled

searchness.disabled

ya.persist_state_updated

network_profile.warnings_left

network_profile.last_warning_time

ya.feedback.update_date

ya.smartback.dictionary_last_modified

torrents.open_mode

apps.app_launch_for_metro_restart

apps.app_launch_for_metro_restart_profile

apps.shortcuts_version

module_conflict.bubble_shown

settings.privacy.drm_salt

settings.privacy.drm_enabled

browser.allow_discard_tabs

browser.allow_discard_tabs_updated

profile.extensions.activity_log.num_consumers_active

proxy.quick_check_enabled

profile.browser_guest_enabled

profile.add_person_enabled

ya.show_newtab_search_arrow

ya.popup_block_enabled

ya.plugin_restricted_document_kinds

ya.custo_tab_activation_order_on_tab_close

ya.custo_ui_first_time_launch

easy_unlock.hardlock_state

password_bubble.timestamp

password_bubble.nopes

password_bubble.interactions

ya.tablo.snapshot_click_map

license_url

feedback.url

conf_policy_url

hXXp://legal.yandex.ru/browser_agreement/

hXXp://legal.yandex.ru/confidential/

SHELL32.dll

ole32.dll

OLEAUT32.dll

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

%s-%Iu

u\uX

Dictionary keys must be quoted.

Unsupported encoding. JSON must be UTF-8.

full-memory-crash-report

(0x%X)

Error (0x%X) while retrieving error. (0x%X)

(%d = %3.1f%%)

Histogram: %s recorded %d samples

(flags = 0x%x)

PlatformFile.UnknownErrors.Windows

user32.dll

0123456789

.syzygy

.thunks

Line: %i, column: %i, %s

D:\BuildAgent\work\9d1bc32700498ce4\src\out\Release\initialexe\browser.exe.pdb

browser.exe

ClearBreakpadPipeEnvironmentVariable

ClearCrashKeyValueImpl

SetCrashKeyValueImpl

SignalChromeElf

browser_elf.dll

WINMM.dll

VERSION.dll

SHLWAPI.dll

RegEnumKeyExW

RegQueryInfoKeyW

RegCreateKeyExW

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

GetAsyncKeyState

CloseWindowStation

CreateWindowStationW

SetProcessWindowStation

USER32.dll

GetProcessHeap

GetWindowsDirectoryW

CreateIoCompletionPort

GetProcessHandleCount

KERNEL32.dll

USERENV.dll

WTSAPI32.dll

GetCPInfo

SetNamedPipeHandleState

TransactNamedPipe

WaitNamedPipeW

zcÁ

.ccc]

.IDATx

.aU/@G

\]]]]_]^

.owO[

.RwuWee

o.yST

G.HIJ

]]][\^__^\]`

i.snh

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="Win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><dependency><dependentAssembly><assemblyIdentity type="win32" name="40.0.2214.3645" version="40.0.2214.3645" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>

0%1X2

0"0)040=0

9%:0:>:]:~:

5-5v5}5

4$4044484

1 1$1(1,10141

8,;0;4;8;<;

6(7,707\7

5$5(5,50545

2 2$2(2,2024282<2

1 1$1,1@1`1

7 7$7(7,707

registering_chrome

uninstalling_chrome_frame

eyndxstp.exe

{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}

app_host.exe

browser.dll

browser_child.dll

npbrowser_frame.dll

browser_frame_helper.dll

browser_frame_helper.exe

browser_launcher.exe

metro_driver.dll

new_browser.exe

old_browser.exe

delegate_execute.exe

nacl64.exe

setup.exe

InstallerSuccessLaunchCmdLine

YandexSSHTM

{45033924-ABD6-4063-AD60-71925CDE206E}

{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}

{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}

Browse the web

Software\Microsoft\Windows\CurrentVersion\Uninstall\Chromium

-chrome

-chromeframe

{8A69D345-D564-463C-AFF1-A69D9E530F96}

{430FD4D0-B729-4F61-AA34-91526481799D}

GoogleUpdateSetup.exe

CFEndTempOptOutCmd

CFOptInCmd

CFOptOutCmd

CFTempOptOutCmd

UninstallCmdLine

WebAccessible

3E40F524-16FA-440A-B919-B44AB355B174

service_update.exe

winrt_helper.dll

{5FAFC90A-D443-4E4F-B69B-DA1F8D553C6C}

d-d-%d

hXXp://browser.

%d.%d.%d

Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser

Google Chrome App Launcher

ChromeAppList

tSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher

{8BA986DA-5100-405E-AA35-86F34A02ACBF}

Google Chrome Frame

Google\Chrome Frame

Chrome in a Frame.

Uninstall Chrome Frame

Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame

\\.\pipe\GoogleCrashServices\

\\.\pipe\YandexCrashServices

error %u

ntdll.dll

chrome.exe

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_TEXT

HKEY_PERFORMANCE_NLSTEXT

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

pipe\

kernelbase.dll

eKey

gdi32.dll

xntdll.dll

wow_helper.exe"

shell32.dll

Reported Crashes.txt

testing_interface.dll

Origin Bound Certs

Certificate Revocation Lists

Custom Dictionary.txt

Login Data

Cached Theme.pak

Web Applications

pepflashplayer.dll

CHROME_METRO_NAV_SEARCH_REQUEST

CHROME_METRO_GET_CURRENT_TAB_INFO

CHROME_METRO_SETTINGS_COMMAND

gcswf32.dll

pdf.dll

yapdf.dll

yadocviewer.dll

npmedia_plugin.dll

pepper/libppeffects.dll

Crash Reports

crash_service.exe

script.log

resources.pak

${windows}

hunspecified-crash-key

%u.%s

reported

mscoree.dll

ADVAPI32.DLL

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

USER32.DLL

portuguese-brazilian

dbghelp.dll

rpcrt4.dll

crash_service.exe --max-reports=10

%s\%s.dmp

x-x-x-xx-xxxxxx

Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32

Software\Microsoft\Windows\CurrentVersion\Run

.Chrome_MessagePumpWindow_%p

Ndebug.log

.\debug.log

\StringFileInfo\xx\%ls

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Crash Reports\events\2800.crashed

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe

chrome_exe

40.0.2214.115

15.2.2214.3645

browser.exe_2800_rwx_14E0A000_000F5000:

=.IAH

[RRh%x

P4%C|

browser.exe_2800_rwx_1570A000_000F5000:

[RRh%x

browser.exe_2800_rwx_15D0A000_00078000:

h%CQ4

BrowserManager.exe_3680:

.text

`.rdata

@.data

.rsrc

@.reloc

[email protected]

SShk~

<:%u4

t8Ht.HHt#

.FAy$

uIu

#t.Ht

.6.78.9:;

B.CDEFFG

j.Yf;

_tcPVj@

.PjRW

n%X*-

Tu.AUu

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

operator

GetProcessWindowStation

CryptoMaterial: this object does not support precomputation

\Local Storage\chrome-extension_mgkbofmmnlpcojllljenlamflhidfkna_0.localstorage

CREATE TABLE ItemTable(key TEXT,value BLOB NOT NULL);

INSERT INTO ItemTable(key,value) VALUES(?,?)

select id, short_name, url from keywords where sync_guid='

SQL error:

CHROME

FIREFOX

OPERA

OPERA_BLINK

SQLite format 3

REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYWITHOUTERELEASEATTACHAVINGROUPDATEBEGINNERECURSIVEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTRIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY

CREATE TABLE sqlite_master(

sql text

3.8.7

CREATE TEMP TABLE sqlite_temp_master(

search_url

.NET not found

d:d:d

hrcheck::operator =

.html key val

Ext   Url - Ok

TBrowserList::SetIEKeyInXPAsDefaultBrowser

b.CapPath is empty

Can't load library shell32.dll

Rigester Firefox as default browser with Mozilla's utils

Mozilla's helper.exe path:

windows-1251

implementation::Chrome::IsPreferencesFileHaveExtensions

web_url

chrome_settings_overrides

keyword

implementation::Chrome::ExtensionsManager::AppendExtension

implementation::Chrome::ExtensionsManager::GetGoogleChromeBrowserInstalledExtensionsIds

implementation::Chrome::ExtensionsManager::ReadExtensions

implementation::Chrome::ReadExtensions

ya.ru

yandex.ru

yandex.ua

yandex.kz

yandex.by

yandex.com

yandex.com.tr

mail.ru

rambler.ru

google.ru

google.com

bing.com

ru.yahoo.com

yahoo.com

symantec.com

mcafee.com

trendmicro.com.ru

esetnod32.ru

kaspersky.ru

vk.com

vkontakte.ru

odnoklassniki.ru

facebook.com

twitter.com

ask.fm

formspring.me

fb.com

ucoz.ru

liveinternet.ru

ShellExecuteEx

need check show-dlg.exe

Dangerous urls:

TKey::Monitor

RegOpenKeyEx

TKey::Continue

TKey::OnChange

TDefaultBrowserKey::TDefaultBrowserKey

Ok, key exist.

TDefaultBrowserKey::OnChange

TRegisteredApplicationKey::TRegisteredApplicationKey

Key created.

TRegisteredApplicationKey::OnChange

TInstalledApplicationKey::OnChange

TInstalledApplicationKey_User32::TInstalledApplicationKey_User32

Can't load locale.xml

Can't open Uninstall key.

RegEnumKeyEx

Can't load advapi32.dll

Function CreateProcessWithTokenW not found in advapi32.dll

cmdline:

Web Data file?

[email protected] dialog was opened

TMonitor::CheckBrowserExe

marked as installed, but .exe does not exist.

ChromeSetup.exe

YandexElement uptime

YandexElement installer finished. Call FindChanges at 3 sec.

OperaCrutchPath

Opera crutch:

template_url_data

Can't load Seeder.dll

GetHomepageUrl

SetHomepageUrl

GetStartPage not found in seeder.dll

ReleaseStartPage not found in seeder.dll

m_GetDfltQS res: !0, Id: 0, It maybe read GC QS error in seeder.dll

SearchEngine->Url is NULL, try to restore

Restored url is different:

dflt || url is NULL

Id not changed, but url is different.

QS not found, url:

values for URLSearchHooks

Url is NULL

Should not take not yandex Urls

application/x-moz-keywordsearch

backup error: Url is NULL.

, url:

Url is empty

SetCookie not found in seeder.dll

clck.yandex.ru

Can't get exe path from shortcut:

ImportDlgParams error.

BrowserManagerGUI.exe started, try to show...

No path to BrowserManagerGUI.exe.

BrowserManagerGUI.exe

show-dlg.exe terminated

[email protected] was

Windows Vista or later

Windows XP or Windows Server 2003

Version less than Windows XP

m_tnd.uID == 0

MakeVersionUrl

Mail.Ru -

Chrome - Google Chrome

@Mail.Ru -

Mail.Ru - Chrome Web Ma

- Google Chrome

@Mail.Ru - Chrome Web Ma

Yahoo Extension - Chrome Web Ma

Google Arama - Chrome Web Ma

- Chrome Web Ma

Yandex arama - Chrome Web Ma

Yandex - Chrome Web Ma

Chrome Web Ma

- Uygulamalar - Google Chrome

@Mail.Ru - Chrome Web Store - Google Chrome

MSN Homepage & Bing Search Engine - Chrome Web Ma

Google Search - Chrome Web Store - Google Chrome

Mail.Ru - Chrome Web Store - Google Chrome

- Chrome Web Store - Google Chrome

Yahoo Extension - Chrome Web Store - Google Chrome

Yandex arama - Chrome Web Store - Google Chrome

Yandex.Homepage - Chrome Web Store - Google Chrome

Yandex - Chrome Web Store - Google Chrome

MSN Homepage & Bing Search Engine - Chrome Web Store - Google Chrome

Opera'y

lan Web taray

Opera

Opera

NullRNG: NullRNG should only be passed to functions that don't need to generate random bytes

: this object doesn't support multiple channels

Line %d, Column %d

xx.xx.xxxx

d.d.d

Log started at: %s

Can't open key:

JustUtil::EnumKeys

JustUtil::RemoveKey

RegOpenKeyExW

Can't delete key.

Can't create key:

TEnvironment::Execute

Not Windows NT

%d.%d.%d.%d

vendor.xml

The key in Software\Yandex founded.

Try to check key under Vista

Key not exist.

The key in Software\AppDataLow\Yandex founded.

JustUtil::ExportDlgParams

JustUtil::ImportParams

JustUtil::ImportDlgParams

Microsoft Windows 98

SQLITE_

d-d-d d:d:d

d-d-d

failed to allocate %u bytes of memory

failed memory resize %u to %u bytes

API call with %s database connection pointer

922337203685477580

RowKey

GetProcessHeap

os_win.c:%d: (%lu) %s(%s) - %s

delayed %dms for lock/sharing conflict

%s-shm

%s%c%s

recovered %d pages from %s

recovered %d frames from WAL file %s

cannot limit WAL size: %s

invalid page number %d

Failed to read ptrmap key=%d

2nd reference to page %d

%d of %d pages missing from overflow list starting at %d

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

freelist leaf count too big on page %d

failed to get page %d

unable to get the page. error code=%d

Page %d:

On tree page %d cell %d:

btreeInitPage() returns error code %d

On page %d at right child:

Corruption detected in cell %d on page %d

Fragmentation of %d bytes reported as %d on page %d

Multiple uses for byte %d of page %d

Pointer map page %d is referenced

Page %d is never used

unknown database %s

Outstanding page count goes from %d to %d during this analysis

%s(%d)

%s-mjXXXXXX9XXz

MJ collide: %s

MJ delete: %s

FOREIGN KEY constraint failed

-mjX9X

unable to use function %s in the requested context

bind on a busy prepared statement: [%s]

zeroblob(%d)

FOREIGN KEY

%s constraint failed: %s

abort at %d in [%s]: %s

cannot open savepoint - SQL statements in progress

%s constraint failed

cannot release savepoint - SQL statements in progress

no such savepoint: %s

cannot commit transaction - SQL statements in progress

sqlite_temp_master

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

sqlite_master

cannot change %s wal mode from within a transaction

statement aborts at %d: [%s] %s

database table is locked: %s

cannot open value of type %s

cannot open table without rowid: %s

cannot open virtual table: %s

no such column: "%s"

cannot open view: %s

indexed

foreign key

cannot open %s column for writing

misuse of aliased aggregate %s

%s: %s.%s

%s: %s.%s.%s

%s prohibited in partial index WHERE clauses

%s: %s

%s prohibited in CHECK constraints

not authorized to use function: %s

%r %s BY term out of range - should be between 1 and %d

too many terms in %s BY clause

Expression tree is too large (maximum depth %d)

too many SQL variables

variable number must be between ?1 and ?%d

too many columns in %s

EXECUTE %s%s SUBQUERY %d

misuse of aggregate: %s()

hex literal too big: %s

%s%.*s"%w"

%.*s"%w"%s

sqlite_rename_trigger

sqlite_rename_table

sqlite_rename_parent

type='trigger' AND (%s)

%s OR name=%Q

sqlite_

there is already another table or index with this name: %s

table %s may not be altered

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

view %s may not be altered

sqlite_sequence

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

Cannot add a PRIMARY KEY column

UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q

sqlite_stat1

sqlite_altertab_%s

sqlite_stat3

CREATE TABLE %Q.%s(%s)

sqlite_stat4

DELETE FROM %Q.%s WHERE %s=%Q

SELECT tbl,idx,stat FROM %Q.sqlite_stat1

too many attached databases - max %d

database %s is already in use

unable to open database: %s

cannot detach database %s

no such database: %s

database %s is locked

sqlite_attach

sqlite_detach

%s cannot use variables

%s %T cannot reference objects in database %s

access to %s.%s.%s is prohibited

access to %s.%s is prohibited

object name reserved for internal use: %s

there is already an index named %s

duplicate column name: %s

too many columns on %s

table "%s" has more than one primary key

default value of column [%s] is not constant

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

PRIMARY KEY missing on table %s

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

CREATE %s %.*s

CREATE TABLE %Q.sqlite_sequence(name,seq)

view %s is circularly defined

sqlite_stat%d

UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

DELETE FROM %Q.sqlite_sequence WHERE name=%Q

table %s may not be dropped

sqlite_stat

use DROP VIEW to delete view %s

use DROP TABLE to delete table %s

number of columns in foreign key does not match the number of columns in the referenced table

foreign key on %s should reference only one column of table %T

unknown column "%s" in foreign key definition

cannot create a TEMP index on non-TEMP table "%s"

views may not be indexed

table %s may not be indexed

there is already a table named %s

virtual tables may not be indexed

sqlite_autoindex_%s_%d

index %s already exists

table %s has no column named %s

CREATE%s INDEX %.*s

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

no such index: %S

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

a JOIN clause is required before %s

%s.%s

unable to identify the object to be reindexed

%s.rowid

no such collation sequence: %s

duplicate WITH table name: %s

cannot modify %s because it is a view

table %s may not be modified

sqlite_source_id

sqlite_version

sqlite_compileoption_used

sqlite_log

sqlite_compileoption_get

foreign key mismatch - "%w" referencing "%w"

table %S has no column named %s

%d values for %d columns

table %S has %d columns but %d values were supplied

unable to open shared library [%s]

sqlite3_extension_init

sqlite3_

no entry point [%s] in shared library [%s]

automatic extension loading failed: %s

error during initialization: %s

defer_foreign_keys

foreign_key_list

foreign_key_check

foreign_keys

NULL value in %s.%s

*** in database %s ***

unsupported encoding: %s

malformed database schema (%s)

%s - %s

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

unsupported file format

database schema is locked: %s

unknown or unsupported join type: %T %T%s%T

a NATURAL join may not have an ON or USING clause

RIGHT and FULL OUTER JOINs are not currently supported

cannot join using column %s - column not present in both tables

cannot have both ON and USING clauses in the same join

USE TEMP B-TREE FOR %s

COMPOUND SUBQUERIES %d AND %d %s(%s)

%s:%d

column%d

LIMIT clause should come after %s not before

ORDER BY clause should come after %s not before

SELECTs to the left and right of %s do not have the same number of result columns

multiple references to recursive table: %s

no such index: %s

table %s has %d values for %d columns

circular reference: %s

recursive reference in a subquery: %s

multiple recursive references: %s

too many references to "%s": max 65535

sqlite_sq_%p

no such table: %s

%s.%s.%s

SCAN TABLE %s%s%s

sqlite3_get_table() called with two or more incompatible queries

cannot create %s trigger on view: %S

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

cannot create INSTEAD OF trigger on table: %S

no such trigger: %S

no such column: %s

-- TRIGGER %s

cannot VACUUM - SQL statements in progress

PRAGMA vacuum_db.synchronous=OFF

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND coalesce(rootpage,1)>0

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND coalesce(rootpage,1)>0

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d

vtable constructor did not declare schema: %s

vtable constructor failed: %s

no such module: %s

automatic index on %s(%s)

table %s: xBestIndex returned an invalid plan

ANY(%s)

SUBQUERY %d

AS %s

TABLE %s

PRIMARY KEY

INDEX %s

COVERING INDEX %s

USING INTEGER PRIMARY KEY

%s.xBestIndex() malfunction

VIRTUAL TABLE INDEX %d:%s

at most %d tables in a join

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

SQL logic error or missing database

unknown operation

large file support is disabled

unknown database: %s

no such %s mode: %s

no such vfs: %s

%s mode not allowed: %s

misuse at line %d of [%.10s]

database corruption at line %d of [%.10s]

cannot open file at line %d of [%.10s]

C:\BuildAgent\work\aefcf70f046f33fb\Release\BrowserManager.pdb

GdiplusShutdown

gdiplus.dll

KERNEL32.dll

EnumChildWindows

USER32.dll

GDI32.dll

RegNotifyChangeKeyValue

RegCloseKey

RegEnumKeyExW

CryptImportKey

CryptDestroyKey

ADVAPI32.dll

ShellExecuteW

ShellExecuteExW

SHELL32.dll

ole32.dll

OLEAUT32.dll

SHLWAPI.dll

WS2_32.dll

VERSION.dll

PSAPI.DLL

GetCPInfo

RegDeleteKeyW

RegCreateKeyExW

zcÁ

GET /click/dtype=stred/pid=12/cid=72085/path=%s/* HTTP/1.1

User-Agent: curl/1.1

Host: clck.yandex.ru

Accept: *.*

.?AVPublicKey@CryptoPP@@

.?AV?$ASN1CryptoMaterial@VPublicKey@CryptoPP@@@CryptoPP@@

.?AVX509PublicKey@CryptoPP@@

.?AVTInstalledApplicationKey_User64@@

.?AVTInstalledApplicationKey_User32@@

.?AVTInstalledApplicationKey@@

.?AVTKey@@

.?AVTInstalledApplicationKey_Machine64@@

.?AVTInstalledApplicationKey_Machine32@@

.?AVTRegisteredApplicationKey@@

.?AVTDefaultBrowserKey@@

.PAVRSAFunction@CryptoPP@@

.?AUNoChannelSupport@BufferedTransformation@CryptoPP@@

<requestedExecutionLevel level='asInvoker' uiAccess='false' />

1"191[1}1

>">3>:>@>

8!9/939@9

7Œ:|:F;M;T;];d;k;

? ?$?(?,?0?4?

2%2U2

> >$>(>,>

2(272\2~2

004080<0

8 8$8(8,8

,?0?4?8?<?@?

3,383@3`3|3

combase.dll

kernel32.dll

mscoree.dll

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

portuguese-brazilian

USER32.DLL

BrowserManager.exe

Software\Microsoft\Windows\CurrentVersion\Run

InstallerSuccessLaunchCmdLine

.Version

locale.xml

Google Chrome

@Mail.Ru

Mozilla Firefox

Opera

{yandex:baseURL}

{google:baseURL}

google.ua

google.by

google.kz

google.com.tr

google.com.ua

google.com.by

go.mail.ru

%systemroot%\Microsoft.NET\Framework

%d.%d

change.list

{9B8F4903-6357-422b-9081-68D0FE17DFF5}

FIREFOX.EXE

IEXPLORE.EXE

OperaStable

Opera Developer

Nichrome

safari.exe

\URLAssociations

.html

Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice

SOFTWARE\Classes\Applications\iexplore.exe\shell\open\command

Software\Classes\.htm

Software\Classes\.html

URL:File Transfer Protocol

Software\Classes\ftp

@ieframe.dll,-905

Software\Classes\ftp\shell

Software\Classes\ftp\shell\open\command

"%1",,-1,0,,,,

Software\Classes\ftp\shell\open\ddeexec

URL:HyperText Transfer Protocol

Software\Classes\http

@ieframe.dll,-903

Software\Classes\http\shell

Software\Classes\http\shell\open\command

Software\Classes\http\shell\open\ddeexec

URL:HyperText Transfer Protocol with Privacy

Software\Classes\https

@ieframe.dll,-904

Software\Classes\https\shell

Software\Classes\https\shell\open\command

Software\Classes\https\shell\open\ddeexec

rShell32.dll

\uninstall\helper.exe /SetAsDefaultAppUser

SYSTEM\CurrentControlSet\services\Tcpip\Parameters

%SystemRoot%\system32\drivers\etc\

u\fixhosts.exe

MagicKey

{34700894-16CA-43a3-91E2-4A393296F164}

e\show-dlg.exe

statistics.xml

Software\Microsoft\Windows\CurrentVersion\Uninstall

SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall

loc.txt

tray_msg

{F6940649-CF51-4f0a-83A0-D75DD6F97DAD}-opt-m3-wnd-helper

{F6940649-CF51-4f0a-83A0-D75DD6F97DAD}-br_opt-m3-wnd-helper

{F6940649-CF51-4f0a-83A0-D75DD6F97DAD}-popup-m3-wnd-helper

{F6940649-CF51-4f0a-83A0-D75DD6F97DAD}-about-m3-wnd-helper

M3-{68AED032-01D8-4e68-9C75-AB6FD5E5D673}

{715F00D8-4727-4036-ACA6-4F8744777EB2}

.run-

.chrome.exe

{DB4DADFC-F3DC-476a-B164-2A39659FEAB6}

\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}

@ieframe.dll,-12512

hXXp://VVV.bing.com/search?q={searchTerms}&FORM=IE8SRC

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

rAdvapi32.dll

m3-new.log

BrowserManagerShow.exe

t\BrowserManagerShow.exe:res

\u2-ctrl.exe:res

{D60DE913-EB89-48d2-A455-9F6C687EEC97}-OnResolve

opera.exe

firefox.exe

kchromesetup.exe

eYandexElement.exe

Software\Opera Software

launcher.exe

VVV.google.com

search.live.com

com.tr

nredir.opera.com

\Web Data

hXXps://chrome.google.com/webstore/detail/

Seeder.dll

:\Seeder.dll

.google.

Software\Microsoft\Internet Explorer\URLSearchHooks

{CFBFAE00-17A6-11D0-99CB-00C04FD64497}

INSERT OR REPLACE INTO keywords (id, input_encodings, favicon_url, instant_url,keyword, short_name, prepopulate_id, url, suggest_url, sync_guid, show_in_default_list) VALUES('13','UTF-8','hXXp://VVV.yandex.ru/favicon.ico','','yandex.ru','%prod','15','hXXp://yandex.%dom/yandsearch?clid=%clid&text={searchTerms}','hXXp://suggest.yandex.%dom/suggest-ff.cgi?part={searchTerms}','', 1)

<SearchPlugin xmlns="hXXp://VVV.mozilla.org/2006/browser/search/">

<Url type="text/html" method="GET" template="hXXp://yandex.%dom/yandsearch?text={searchTerms}&from=os&clid=%clid"/>

<Url type="application/x-suggestions json" method="GET" template="hXXp://suggest.yandex.%dom/suggest-ff.cgi?part={searchTerms}"/>

<Url type="application/x-moz-keywordsearch" method="GET" template="hXXp://yandex.%dom/yandsearch?clid=œlid&text={searchTerms}"/>

URL=hXXp://yandex.ru/yandsearch?clid=%clid&text=%s

ru_logo.ico

en_logo.ico

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\%scopeId]

"URL"="hXXp://yandex.%dom/yandsearch?clid=%clid&text={searchTerms}"

"SuggestionsURL_JSON"="hXXp://suggest.yandex.%dom/suggest-ff.cgi?part={searchTerms}"

%scopeId

yandex.xml

%clid

œlid

; expires = Wed, 01 - Jan - 2020 00:00 : 00 GMT; Domain = .yandex.ru

.yandex.ru

extensions.json

prefs.js

Web Data

\Opera\Opera\widgets\widgets.dat

iexplore.exe

nichrome.exe

dragon.exe

browser.exe

tr-tr.facebook.com

mail.ru.lnk

{F6940649-CF51-4f0a-83A0-D75DD6F97DAD}-

Guard.Mail.ru

[email protected]

hXXp://download.cdn.yandex.net/bm/version.tr.rss

hXXp://download.cdn.yandex.net/bm/version.rss

hXXp://download.cdn.yandex.net/bm/version.kk.rss

hXXp://download.cdn.yandex.net/bm/version.uk.rss

hXXp://soft.export.yandex.ru/status.xml

https

hXXp://

yandex.net

dGuardMailRu.exe

MozillaDialogClass

OperaWindowClass

Opera

Use Opera as default web browser

Opera,

- Opera

Chrome_WidgetWin_0

Chrome_WidgetWin_1

Tercihler - Opera

Preferences - Opera

Ayarlar - Google Chrome

Settings - Google Chrome

- Nichrome

Mail.ru:

SOFTWARE\Google\Chrome\Extensions

shell32.dll

\StringFileInfo\xx\%s

SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

Microsoft Windows

Web Edition

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q246009

Microsoft Windows 95

Microsoft Windows Millennium Edition

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManager.exe

2.1.2.577

browser.exe_2488:

.text

`.rdata

@.data

.rsrc

@.reloc

HtdHtHHHt.HH

j.Yf;

_tcPVj@

.PjRW

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\chrome_exe_main_win.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\client_util.cc

No valid Chrome version found

Failed to load Chrome DLL from

ChromeMain

RelaunchChromeBrowserWithNewCommandLineIfNeeded

Could not find exported function

allow-insecure-websocket-from-https-origin

disable-webgl

disable-web-security

enable-experimental-web-platform-features

enable-tcp-fastopen

enable-viewport

enable-viewport-meta

enable-vtune-support

enable-webgl-draft-extensions

enable-webgl-image-chromium

enable-web-midi

enable-webkit-find-restart

ignore-certificate-errors

remote-debugging-port

renderer-cmd-prefix

testing-fixed-http-port

testing-fixed-https-port

trace-upload-url

utility-cmd-prefix

zygote-cmd-prefix

disable-webrtc-hw-decoding

disable-webrtc-encryption

disable-webrtc-hw-encoding

enable-webrtc-hw-vp8-encoding

enable-webrtc-hw-h264-encoding

disable-webaudio

opera

1.3.21.115

%s-x-x

Chrome

0.0.0.0-devel

%s-%x

url-chunk

font_key_name

subresource_url

CHROME_MAIN_TIME

%x-%x

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\google_update_settings.cc

auto-launch-chrome

chrome

chrome-sxs

new-setup-exe

register-dev-chrome

register-url-protocol

rename-browser-exe

update-setup-exe

toast-results-key

Cannot initialize AppCommands from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_commands.cc

Failed to open key "

Skipping over key "

make-browser-default-after-import

silent-first-import

ya_permanent_state.brand_id

ya_permanent_state.base_host

ya_permanent_state.partner_id

ya_permanent_state.uninstall_survey_url

yandex.ru

iexplore.exe

googlechromeapphost

googlechromeframe

Cannot initialize an AppCommand from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_command.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\language_selector.cc

CHROME_BREAKPAD_PIPE_NAME

CHROME_BREAKPAD_EVENT_NAME

d:\buildagent\work\9d1bc32700498ce4\src\components\crash\app\breakpad_win.cc

NTDLL.DLL

kernel32.dll

d:\buildagent\work\9d1bc32700498ce4\src\sandbox\win\src\sandbox_policy_base.cc

CreateNamedPipeW

NtCreateKey

NtOpenKey

NtOpenKeyEx

AudioCaptureAllowedUrls

AutoSelectCertificateForUrls

ChromeFrameContentTypes

ChromeFrameRendererSettings

ChromeOsLockOnIdleSuspend

ChromeOsMultiProfileUserBehavior

ChromeOsReleaseChannel

ChromeOsReleaseChannelDelegated

CloudPrintProxyEnabled

CloudPrintSubmitEnabled

ContentPackManualBehaviorURLs

CookiesAllowedForUrls

CookiesBlockedForUrls

CookiesSessionOnlyForUrls

DefaultSearchProviderAlternateURLs

DefaultSearchProviderIconURL

DefaultSearchProviderImageURL

DefaultSearchProviderImageURLPostParams

DefaultSearchProviderInstantURL

DefaultSearchProviderInstantURLPostParams

DefaultSearchProviderKeyword

DefaultSearchProviderNewTabURL

DefaultSearchProviderSearchTermsReplacementKey

DefaultSearchProviderSearchURL

DefaultSearchProviderSearchURLPostParams

DefaultSearchProviderSuggestURL

DefaultSearchProviderSuggestURLPostParams

DeviceAllowRedeemChromeOsRegistrationOffers

DeviceLocalAccountAutoLoginBailoutEnabled

DeviceLocalAccountAutoLoginDelay

DeviceLocalAccountAutoLoginId

DeviceLoginScreenDefaultHighContrastEnabled

DeviceLoginScreenDefaultLargeCursorEnabled

DeviceLoginScreenDefaultScreenMagnifierType

DeviceLoginScreenDefaultSpokenFeedbackEnabled

DeviceLoginScreenDefaultVirtualKeyboardEnabled

DeviceLoginScreenPowerManagement

DeviceLoginScreenSaverId

DeviceLoginScreenSaverTimeout

DeviceMetricsReportingEnabled

DeviceStartUpUrls

DeviceUpdateHttpDownloadsEnabled

EnableAuthNegotiatePort

EnableDeprecatedWebPlatformFeatures

EnableOriginBoundCerts

EnableWebBasedSignin

EnterpriseWebStoreName

EnterpriseWebStoreURL

HideWebStoreIcon

HideWebStorePromo

ImagesAllowedForUrls

ImagesBlockedForUrls

ImportAutofillFormData

ImportBookmarks

ImportHistory

ImportHomepage

ImportSavedPasswords

ImportSearchEngine

JavaScriptAllowedForUrls

JavaScriptBlockedForUrls

KeyboardDefaultToFunctionKeys

MetricsReportingEnabled

NotificationsAllowedForUrls

NotificationsBlockedForUrls

PasswordManagerAllowShowPasswords

PasswordManagerEnabled

PluginsAllowedForUrls

PluginsBlockedForUrls

PopupsAllowedForUrls

PopupsBlockedForUrls

ProxyBypassList

ProxyPacUrl

RemoteAccessHostAllowClientPairing

RemoteAccessHostAllowGnubbyAuth

RemoteAccessHostAllowRelayedConnection

RemoteAccessHostDomain

RemoteAccessHostFirewallTraversal

RemoteAccessHostRequireCurtain

RemoteAccessHostRequireTwoFactor

RemoteAccessHostTalkGadgetPrefix

RemoteAccessHostUdpPortRange

RenderInChromeFrameList

ReportDeviceActivityTimes

ReportDeviceBootMode

ReportDeviceLocation

ReportDeviceNetworkInterfaces

ReportDeviceUsers

ReportDeviceVersionInfo

RestoreOnStartupURLs

ShowAppsShortcutInBookmarkBar

SuppressChromeFrameTurndownPrompt

TermsOfServiceURL

TouchVirtualKeyboardEnabled

URLBlacklist

URLWhitelist

VideoCaptureAllowedUrls

VirtualKeyboardEnabled

update_url

^update_url:

CHROME_VERSION

CHROME_SAFE_MODE

2676A9A2-D919-4FEE-9187-152100393AB2

ignore-urlfetcher-cert-requests

install-chrome-app

install-ephemeral-app-from-webstore

pack-extension-key

permission-request-api-url

promo-server-url

proxy-bypass-list

proxy-pac-url

remember-cert-error-decisions

spelling-service-feedback-url

try-chrome-again

variations-server-url

winhttp-proxy-resolver

ya-url-copy-safe-text

skip-first-import

plugins-metadata-server-url

windows8-search

allow-http-screen-capture

app-list-start-page-url

apps-checkout-url

apps-gallery-download-url

apps-gallery-url

apps-gallery-update-url

certificate-transparency-log

disable-extensions-http-throttling

disable-password-manager-reauthentication

disable-quic-port-selection

disable-save-password-bubble

disable-web-resources

enable-auth-negotiate-port

enable-npn-http

enable-quic-port-selection

enable-save-password-bubble

enable-sdch-over-https

enable-user-controlled-alternate-protocol-ports

enable-websocket-over-spdy

enable-website-settings-manager

explicitly-allowed-ports

extensions-not-webstore

help-url

40.0.2214.3645

CHROME_HEADLESS

CHROME_LOG_FILE

CHROME_METRO_CONNECTED

CHROMEOS_SESSION_LOG_DIR

CHROME_CRASHED

CHROME_RESTART

profile.ephemeral_mode

profile.icon_version

session.restore_on_startup

session.restore_on_startup_migrated

session.startup_urls_migration_time

session.restore_to_homepage_if_empty

profile.exited_cleanly

profile.exit_type

profile.managed.custodian_email

profile.managed.custodian_name

profile.managed.custodian_profile_image_url

profile.managed.custodian_profile_url

profile.managed.manual_hosts

profile.managed.manual_urls

profile.managed.second_custodian_email

profile.managed.second_custodian_name

profile.managed.second_custodian_profile_image_url

profile.managed.second_custodian_profile_url

profile.managed.shared_settings

session.startup_urls

session.urls_to_restore_on_startup

intl.app_locale

intl.charset_default

intl.accept_languages

intl.applied_brand_package_accept_languages

intl.static_encodings

webkit.webprefs.fonts.standard.Zyyy

webkit.webprefs.fonts.fixed.Zyyy

webkit.webprefs.fonts.serif.Zyyy

webkit.webprefs.fonts.sansserif.Zyyy

webkit.webprefs.fonts.cursive.Zyyy

webkit.webprefs.fonts.fantasy.Zyyy

webkit.webprefs.fonts.pictograph.Zyyy

webkit.webprefs.fonts.standard

webkit.webprefs.fonts.fixed

webkit.webprefs.fonts.serif

webkit.webprefs.fonts.sansserif

webkit.webprefs.fonts.cursive

webkit.webprefs.fonts.fantasy

webkit.webprefs.fonts.pictograph

webkit.webprefs.fonts.standard.Arab

webkit.webprefs.fonts.fixed.Arab

webkit.webprefs.fonts.serif.Arab

webkit.webprefs.fonts.sansserif.Arab

webkit.webprefs.fonts.standard.Cyrl

webkit.webprefs.fonts.fixed.Cyrl

webkit.webprefs.fonts.serif.Cyrl

webkit.webprefs.fonts.sansserif.Cyrl

webkit.webprefs.fonts.standard.Grek

webkit.webprefs.fonts.fixed.Grek

webkit.webprefs.fonts.serif.Grek

webkit.webprefs.fonts.sansserif.Grek

webkit.webprefs.fonts.standard.Jpan

webkit.webprefs.fonts.fixed.Jpan

webkit.webprefs.fonts.serif.Jpan

webkit.webprefs.fonts.sansserif.Jpan

webkit.webprefs.fonts.standard.Hang

webkit.webprefs.fonts.fixed.Hang

webkit.webprefs.fonts.serif.Hang

webkit.webprefs.fonts.sansserif.Hang

webkit.webprefs.fonts.cursive.Hang

webkit.webprefs.fonts.standard.Hans

webkit.webprefs.fonts.fixed.Hans

webkit.webprefs.fonts.serif.Hans

webkit.webprefs.fonts.sansserif.Hans

webkit.webprefs.fonts.standard.Hant

webkit.webprefs.fonts.fixed.Hant

webkit.webprefs.fonts.serif.Hant

webkit.webprefs.fonts.sansserif.Hant

webkit.webprefs.default_font_size

webkit.webprefs.default_fixed_font_size

webkit.webprefs.minimum_font_size

webkit.webprefs.minimum_logical_font_size

webkit.webprefs.javascript_enabled

webkit.webprefs.web_security_enabled

webkit.webprefs.javascript_can_open_windows_automatically

webkit.webprefs.loads_images_automatically

webkit.webprefs.plugins_enabled

webkit.webprefs.dom_paste_enabled

webkit.webprefs.shrinks_standalone_images_to_fit

webkit.webprefs.uses_universal_detector

webkit.webprefs.text_areas_are_resizable

webkit.webprefs.java_enabled

webkit.webprefs.tabs_to_links

webkit.webprefs.allow_displaying_insecure_content

webkit.webprefs.allow_running_insecure_content

safebrowsing.enabled

safebrowsing.extended_reporting_enabled

safebrowsing.proceed_anyway_disabled

safebrowsing.incident_report_sent

safebrowsing.incidents_sent

incognito.mode_availability

search.suggest_enabled

browser.confirm_to_quit

security.cookie_behavior

download.prompt_for_download

alternate_error_pages.enabled

dns_prefetching.startup_list

dns_prefetching.host_referral_list

spdy.disabled

net.http_server_properties

spdy.servers

spdy.alternate_protocol

protocol.disabled_schemes

instant_ui.zero_suggest_url_prefix

local_state.multiple_profile_prefs_version

dns_prefetching.enabled

net.network_prediction_options

hide_web_store_icon

browser.show_home_button

browser.show_ya_button

browser.show_tablo_on_click

browser.last_session_empty

browser.session_empty

browser.use_mouse_gestures

browser.enable_page_expiration

browser.do_not_count_page_expiration_infobar_closings

profile.recently_selected_encodings

browser.clear_data.browsing_history

browser.clear_data.download_history

browser.clear_data.cache

browser.clear_data.cookies

browser.clear_data.passwords

browser.clear_data.form_data

browser.clear_data.hosted_apps_data

browser.clear_data.content_licenses

browser.enable_spellchecking

browser.speechinput_censor_results

browser.speechinput_tray_notification_shown_contexts

browser.enabled_labs_experiments

ya.experiments_edited_by_user

ya.distrib_default_experiments

browser.enable_autospellcorrect

history.saving_disabled

ya.settings.text_wrap

history.deleting_enabled

settings.force_safesearch

settings.history_recorded

browser.clear_data.time_period

browser.last_clear_browsing_data_time

extensions.theme.pack

extensions.theme.id

extensions.theme.images

extensions.theme.colors

extensions.theme.tints

extensions.theme.properties

extensions.ui.developer_mode

extensions.commands

plugins.last_internal_directory

plugins.plugins_list

plugins.plugins_disabled

plugins.plugins_disabled_exceptions

plugins.plugins_enabled

plugins.migrated_to_pepper_flash

plugins.removed_old_component_pepper_flash_settings

plugins.show_details

plugins.allow_outdated

plugins.always_authorize

plugins.metadata

plugins.resource_cache_update

browser.check_default_browser

browser.default_browser_setting_enabled

browser.custom_chrome_frame

profile.content_settings.plugin_whitelist

profile.block_third_party_cookies

profile.clear_site_data_on_exit

partition.default_zoom_level

profile.default_zoom_level

partition.per_host_zoom_levels

profile.per_host_zoom_levels

autofill.data_model_default

autofill.pay_without_wallet

autofill.wallet_location_disclosure

autofill.save_data

autofill.wallet_shipping_same_as_billing

autofill.generated_card_bubble_times_shown

autofill.rac_dialog_defaults

breadcrumbs.enabled

push_to_call.enabled

push_to_call.wasenabled

ya.disk.want_install

context_translate.enabled

context_translate.translate_words

enable_deprecated_web_platform_features

import_last_source_browser

import_autofill_form_data

import_bookmarks

import_history

import_home_page

import_saved_passwords

import_cookies

import_last_session

import_extensions

import_speed_dial

import_other

ya.statistics.import_rollback

ya.import_new_source_type

ya.import_new_source_profile

import_search_engine

profile.avatar_index

profile.using_default_name

profile.name

profile.using_default_avatar

profile.using_gaia_avatar

profile.managed_user_id

profile.gaia_info_update_time

profile.gaia_info_picture_url

profile.avatar_bubble_tutorial_shown

printing.enabled

printing.print_preview_disabled

profile.managed.default_filtering_behavior

profile.managed_user_creation_allowed

profile.managed_users

profile.reset_prompt_memento

message_center.disabled_extension_ids

message_center.disabled_system_component_ids

message_center.welcome_notification_dismissed

message_center.welcome_notification_dismissed_local

message_center.welcome_notification_previously_popped_up

message_center.welcome_notification_expiration_timestamp

fullscreen.allowed

local_discovery.notifications_enabled

prefs.preference_reset_time

ya.prefetch.latest_update_list

ya.tablo_pins.instance_id

gcm.channel_enabled

gcm.push_messaging_registration_count

easy_unlock.allowed

easy_unlock.enabled

easy_unlock.pairing

easy_unlock.proximity_required

easy_unlock.show_tutorial

zerosuggest.cachedresults

signin.error_stats_update_time

ssl.rev_checking.enabled

ssl.rev_checking.required_for_local_anchors

ssl.version_min

ssl.version_max

ssl.version_fallback_min

ssl.cipher_suites.blacklist

ssl.ssl_record_splitting.disabled

ssl.ssl_blocking_bypassed

user_experience_metrics.reporting_enabled

profile.last_used

profile.last_active_profiles

profile.profiles_created

profile.info_cache

profile.created_by_version

profile.reset_prompt_mementos

user_experience_metrics.stability.page_load_count

user_experience_metrics.stability.renderer_crash_count

user_experience_metrics.stability.extension_renderer_crash_count

user_experience_metrics.stability.renderer_hang_count

user_experience_metrics.stability.child_process_crash_count

user_experience_metrics.stability.other_user_crash_count

user_experience_metrics.stability.kernel_crash_count

user_experience_metrics.stability.system_unclean_shutdowns

user_experience_metrics.stability.plugin_stats2

uninstall_metrics.page_load_count

uninstall_metrics.last_launch_time_sec

uninstall_metrics.last_observed_running_time_sec

browser.suppress_default_browser_prompt_for_version

browser.window_placement

browser.window_placement_popup

task_manager.window_placement

browser.app_window_placement

renderer.memory_cache.size

download.default_directory

download.default_directory_display_name

download.extensions_to_open

download.directory_upgrade

download.open_pdf_in_system_reader

savefile.default_directory

savefile.type

select_file_dialogs.allowed

filebrowser.tasks.default_by_mime_type

filebrowser.tasks.default_by_suffix

selectfile.last_directory

browser.hung_plugin_detect_freq

browser.plugin_message_response_timeout

spellcheck.dictionary

spellcheck.use_spelling_service

protocol_handler.excluded_schemes

safe_browsing.client_key

safe_browsing.wrapped_key

options_window.last_tab_index

certificate_manager_window.last_tab_index

browser.show_omnibox_share_buttons

browser.last_redirect_origin

shutdown.type

shutdown.num_processes

shutdown.num_processes_slow

restart.last.session.on.shutdown

was.restarted

relaunch.mode

extensions.disabled

plugins.disable_plugin_finder

ntp.app_page_names

ntp.collapsed_open_tabs

ntp.collapsed_foreign_sessions

ntp.collapsed_recently_closed_tabs

ntp.collapsed_snapshot_document

ntp.collapsed_sync_promo

ntp.date_resource_server

ntp.most_visited_blacklist

ntp.promo_desktop_session_found

ntp.promo_resource_cache_update

ntp.shown_bookmarks_folder

ntp.shown_page

ntp.tips_resource_server

ntp.webstore_enabled

devtools.adb_key

devtools.disabled

devtools.discover_usb_devices

devtools.edited_files

devtools.file_system_paths

devtools.open_docked

devtools.port_forwarding_enabled

devtools.port_forwarding_default_set

devtools.port_forwarding_config

google.services.password_hash

invalidation_service.use_gcm_channel

sync_promo.startup_count

sync_promo.user_skipped

sync_promo.show_on_first_run_allowed

sync_promo.show_ntp_bubble

browser.web_app.create_on_desktop

browser.web_app.create_in_apps_menu

browser.web_app.create_in_quick_launch_bar

geolocation.access_token

media.default_audio_capture_device

media.default_video_capture_Device

media.device_id_salt

remote_access.host_firewall_traversal

remote_access.host_require_two_factor

remote_access.host_domain

remote_access.host_talkgadget_prefix

remote_access.host_require_curtain

remote_access.host_allow_client_pairing

remote_access.host_allow_gnubby_auth

remote_access.host_allow_relayed_connection

remote_access.host_udp_port_range

printing.print_preview_sticky_settings

cloud_print.dialog_size.width

cloud_print.dialog_size.height

cloud_print.signin_dialog_size.width

cloud_print.signin_dialog_size.height

cloud_print.enabled

cloud_print.proxy_id

cloud_print.auth_token

cloud_print.xmpp_auth_token

cloud_print.email

cloud_print.print_system_settings

cloud_print.enable_job_poll

cloud_print.robot_refresh_token

cloud_print.robot_email

cloud_print.user_settings.connectNewPrinters

cloud_print.xmpp_ping_enabled

cloud_print.xmpp_ping_timeout_sec

cloud_print.user_settings.printers

cloud_print.submit_enabled

cloud_print.user_settings

net.max_connections_per_proxy

hardware.audio_capture_enabled

hardware.audio_capture_allowed_urls

hardware.video_capture_enabled

hardware.video_capture_allowed_urls

hotword.search_enabled_2

hotword.always_on_search_enabled

hotword.audio_logging_enabled

hotword.audio_history_enabled

hotword.previous_language

browser.clear_lso_data_enabled

browser.pepper_flash_settings_enabled

browser.disk_cache_dir

browser.disk_cache_size

browser.last_default_status

browser.media_cache_size

cros.system.releaseChannel

feedback.performance_tracing_enabled

background_contents.registered

browser.shown_autolaunch_infobar

auth.schemes

auth.disable_negotiate_cname_lookup

auth.enable_negotiate_port

auth.server_whitelist

auth.negotiate_delegate_whitelist

auth.gssapi_library_name

auth.allow_cross_origin_prompt

async_dns.enabled

custom_handlers.registered_protocol_handlers

custom_handlers.ignored_protocol_handlers

custom_handlers.policy.registered_protocol_handlers

custom_handlers.policy.ignored_protocol_handlers

custom_handlers.enabled

background_mode.enabled

hardware_acceleration_mode.enabled

policy.device_refresh_rate

message_center.showed_first_run_balloon

message_center.show_icon

message_center.was_forced_on_taskbar

browser.attempted_to_enable_autoupdate

media_galleries.gallery_id

media_galleries.remembered_galleries

media_galleries.last_scan_time

shelf_chrome_icon_index

gesture.max_separation_for_gesture_touches_in_pixels

gesture.semi_long_press_time_in_ms

gesture.tab_scrub_activation_delay_in_ms

gesture.fling_max_cancel_to_down_time_in_ms

gesture.fling_max_tap_gap_time_in_ms

overscroll.horizontal_threshold_complete

overscroll.vertical_threshold_complete

overscroll.minimum_threshold_start

overscroll.minimum_threshold_start_touchpad

overscroll.vertical_threshold_start

overscroll.horizontal_resist_threshold

overscroll.vertical_resist_threshold

ya.send_install

ya.last_welcome_page_version

ya.clids

ya.banerid

ya.update_failures

ya.update_last_failure

ya.welcome_page

ya.custom_cookies

ya.bar.ui

ya.bar.uuid

ya.bar.r1

ya.statistics.last_default_check_time

ya.statistics.enabled

ya.tab_finder_enabled_once

ya.crash_dumps_checkbox_was_set

ya.crash_dumps_checkbox_was_set_at_1_0_1084_5404

ya.disk.installer_etag

ya.vk.show_infobar

ya.vk.last_shown

ya.vk.clicks_left

ya.last_runned_version

ya.last_runned_partner_id

ya.education.enabled

ya.custo_education.enabled

ya.searchness.enabled

ya.all_sb_chunks_downloaded_time

ya.splitview.enabled

ya.splitview.visible

ya.sync.device.push_id

ya.sync.device.name

ya.block_flash

ya.extensions_to_replace

ya.mute_state

ya.background_animation.enabled

ya.background_animation.disable_on_low_battery

ya.notifications.extension_settings_migrated

ya.notifications.migrated_fb_token

ya.notifications.migrated_fb_token_expires_in

ya.notifications.migrated_vk_token

ya.notifications.migrated_vk_token_expires_in

ya.notifications.silent_mode_until

ya.notifications.silent_mode

ya.notifications.fb.enabled

ya.notifications.fb.show.comments

ya.notifications.fb.show.friend_requests

ya.notifications.fb.show.messages

ya.notifications.fb.view_content

ya.notifications.fb.num_invitations_shown

ya.notifications.fb.last_time_invitation_shown

ya.notifications.fb.share_accepted

ya.notifications.fb.last_share_propose_time

ya.notifications.vk.enabled

ya.notifications.vk.show.comments

ya.notifications.vk.show.friend_requests

ya.notifications.vk.show.messages

ya.notifications.vk.view_content

ya.notifications.vk.num_invitations_shown

ya.notifications.vk.last_time_invitation_shown

ya.notifications.vk.share_accepted

ya.notifications.vk.last_share_propose_time

ya.notifications.yamail.enabled

ya.notifications.yamail.view_content

show.comments

show.friend_requests

show.messages

omnibox-infobar-panel.enabled

omnibox-infobar-panel.disabled

searchness.disabled

ya.persist_state_updated

network_profile.warnings_left

network_profile.last_warning_time

ya.feedback.update_date

ya.smartback.dictionary_last_modified

torrents.open_mode

apps.app_launch_for_metro_restart

apps.app_launch_for_metro_restart_profile

apps.shortcuts_version

module_conflict.bubble_shown

settings.privacy.drm_salt

settings.privacy.drm_enabled

browser.allow_discard_tabs

browser.allow_discard_tabs_updated

profile.extensions.activity_log.num_consumers_active

proxy.quick_check_enabled

profile.browser_guest_enabled

profile.add_person_enabled

ya.show_newtab_search_arrow

ya.popup_block_enabled

ya.plugin_restricted_document_kinds

ya.custo_tab_activation_order_on_tab_close

ya.custo_ui_first_time_launch

easy_unlock.hardlock_state

password_bubble.timestamp

password_bubble.nopes

password_bubble.interactions

ya.tablo.snapshot_click_map

license_url

feedback.url

conf_policy_url

hXXp://legal.yandex.ru/browser_agreement/

hXXp://legal.yandex.ru/confidential/

SHELL32.dll

ole32.dll

OLEAUT32.dll

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

%s-%Iu

u\uX

Dictionary keys must be quoted.

Unsupported encoding. JSON must be UTF-8.

full-memory-crash-report

(0x%X)

Error (0x%X) while retrieving error. (0x%X)

(%d = %3.1f%%)

Histogram: %s recorded %d samples

(flags = 0x%x)

PlatformFile.UnknownErrors.Windows

user32.dll

0123456789

.syzygy

.thunks

Line: %i, column: %i, %s

D:\BuildAgent\work\9d1bc32700498ce4\src\out\Release\initialexe\browser.exe.pdb

browser.exe

ClearBreakpadPipeEnvironmentVariable

ClearCrashKeyValueImpl

SetCrashKeyValueImpl

SignalChromeElf

browser_elf.dll

WINMM.dll

VERSION.dll

SHLWAPI.dll

RegEnumKeyExW

RegQueryInfoKeyW

RegCreateKeyExW

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

GetAsyncKeyState

CloseWindowStation

CreateWindowStationW

SetProcessWindowStation

USER32.dll

GetProcessHeap

GetWindowsDirectoryW

CreateIoCompletionPort

GetProcessHandleCount

KERNEL32.dll

USERENV.dll

WTSAPI32.dll

GetCPInfo

SetNamedPipeHandleState

TransactNamedPipe

WaitNamedPipeW

zcÁ

{.Bv{.oQ{.

.ccc]

.IDATx

.aU/@G

\]]]]_]^

.owO[

.RwuWee

o.yST

G.HIJ

]]][\^__^\]`

i.snh

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="Win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><dependency><dependentAssembly><assemblyIdentity type="win32" name="40.0.2214.3645" version="40.0.2214.3645" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>

0%1X2

0"0)040=0

9%:0:>:]:~:

5-5v5}5

4$4044484

1 1$1(1,10141

8,;0;4;8;<;

6(7,707\7

5$5(5,50545

2 2$2(2,2024282<2

1 1$1,1@1`1

7 7$7(7,707

registering_chrome

uninstalling_chrome_frame

eyndxstp.exe

{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}

app_host.exe

browser.dll

browser_child.dll

npbrowser_frame.dll

browser_frame_helper.dll

browser_frame_helper.exe

browser_launcher.exe

metro_driver.dll

new_browser.exe

old_browser.exe

delegate_execute.exe

nacl64.exe

setup.exe

InstallerSuccessLaunchCmdLine

YandexSSHTM

{45033924-ABD6-4063-AD60-71925CDE206E}

{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}

{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}

Browse the web

Software\Microsoft\Windows\CurrentVersion\Uninstall\Chromium

-chrome

-chromeframe

{8A69D345-D564-463C-AFF1-A69D9E530F96}

{430FD4D0-B729-4F61-AA34-91526481799D}

GoogleUpdateSetup.exe

CFEndTempOptOutCmd

CFOptInCmd

CFOptOutCmd

CFTempOptOutCmd

UninstallCmdLine

WebAccessible

3E40F524-16FA-440A-B919-B44AB355B174

service_update.exe

winrt_helper.dll

{5FAFC90A-D443-4E4F-B69B-DA1F8D553C6C}

d-d-%d

hXXp://browser.

%d.%d.%d

Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser

Google Chrome App Launcher

ChromeAppList

tSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher

{8BA986DA-5100-405E-AA35-86F34A02ACBF}

Google Chrome Frame

Google\Chrome Frame

Chrome in a Frame.

Uninstall Chrome Frame

Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame

\\.\pipe\GoogleCrashServices\

\\.\pipe\YandexCrashServices

error %u

ntdll.dll

chrome.exe

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_TEXT

HKEY_PERFORMANCE_NLSTEXT

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

pipe\

kernelbase.dll

eKey

gdi32.dll

xntdll.dll

wow_helper.exe"

shell32.dll

Reported Crashes.txt

testing_interface.dll

Origin Bound Certs

Certificate Revocation Lists

Custom Dictionary.txt

Login Data

Cached Theme.pak

Web Applications

pepflashplayer.dll

CHROME_METRO_NAV_SEARCH_REQUEST

CHROME_METRO_GET_CURRENT_TAB_INFO

CHROME_METRO_SETTINGS_COMMAND

gcswf32.dll

pdf.dll

yapdf.dll

yadocviewer.dll

npmedia_plugin.dll

pepper/libppeffects.dll

Crash Reports

crash_service.exe

script.log

resources.pak

${windows}

hunspecified-crash-key

%u.%s

reported

mscoree.dll

ADVAPI32.DLL

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

USER32.DLL

portuguese-brazilian

dbghelp.dll

rpcrt4.dll

crash_service.exe --max-reports=10

%s\%s.dmp

x-x-x-xx-xxxxxx

Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32

Software\Microsoft\Windows\CurrentVersion\Run

.Chrome_MessagePumpWindow_%p

Ndebug.log

.\debug.log

\StringFileInfo\xx\%ls

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Crash Reports\events\2488.crashed

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe

chrome_exe

40.0.2214.115

15.2.2214.3645

browser.exe_2488_rwx_3580A000_000F5000:

<9#Z.FA$

=.ha"

=.ha"u

e/Z.QRR

I3Z.QRR

I3Z.QRRP

U6Z.QRR

Z.QRRP

<]IZ.FQ&

IZ.FI*

Z.iwZ.

e/Z.QRRP

P_.im^.

browser.exe_2752:

.text

`.rdata

@.data

.rsrc

@.reloc

HtdHtHHHt.HH

j.Yf;

_tcPVj@

.PjRW

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\chrome_exe_main_win.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\client_util.cc

No valid Chrome version found

Failed to load Chrome DLL from

ChromeMain

RelaunchChromeBrowserWithNewCommandLineIfNeeded

Could not find exported function

allow-insecure-websocket-from-https-origin

disable-webgl

disable-web-security

enable-experimental-web-platform-features

enable-tcp-fastopen

enable-viewport

enable-viewport-meta

enable-vtune-support

enable-webgl-draft-extensions

enable-webgl-image-chromium

enable-web-midi

enable-webkit-find-restart

ignore-certificate-errors

remote-debugging-port

renderer-cmd-prefix

testing-fixed-http-port

testing-fixed-https-port

trace-upload-url

utility-cmd-prefix

zygote-cmd-prefix

disable-webrtc-hw-decoding

disable-webrtc-encryption

disable-webrtc-hw-encoding

enable-webrtc-hw-vp8-encoding

enable-webrtc-hw-h264-encoding

disable-webaudio

opera

1.3.21.115

%s-x-x

Chrome

0.0.0.0-devel

%s-%x

url-chunk

font_key_name

subresource_url

CHROME_MAIN_TIME

%x-%x

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\google_update_settings.cc

auto-launch-chrome

chrome

chrome-sxs

new-setup-exe

register-dev-chrome

register-url-protocol

rename-browser-exe

update-setup-exe

toast-results-key

Cannot initialize AppCommands from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_commands.cc

Failed to open key "

Skipping over key "

make-browser-default-after-import

silent-first-import

ya_permanent_state.brand_id

ya_permanent_state.base_host

ya_permanent_state.partner_id

ya_permanent_state.uninstall_survey_url

yandex.ru

iexplore.exe

googlechromeapphost

googlechromeframe

Cannot initialize an AppCommand from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_command.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\language_selector.cc

CHROME_BREAKPAD_PIPE_NAME

CHROME_BREAKPAD_EVENT_NAME

d:\buildagent\work\9d1bc32700498ce4\src\components\crash\app\breakpad_win.cc

NTDLL.DLL

kernel32.dll

d:\buildagent\work\9d1bc32700498ce4\src\sandbox\win\src\sandbox_policy_base.cc

CreateNamedPipeW

NtCreateKey

NtOpenKey

NtOpenKeyEx

AudioCaptureAllowedUrls

AutoSelectCertificateForUrls

ChromeFrameContentTypes

ChromeFrameRendererSettings

ChromeOsLockOnIdleSuspend

ChromeOsMultiProfileUserBehavior

ChromeOsReleaseChannel

ChromeOsReleaseChannelDelegated

CloudPrintProxyEnabled

CloudPrintSubmitEnabled

ContentPackManualBehaviorURLs

CookiesAllowedForUrls

CookiesBlockedForUrls

CookiesSessionOnlyForUrls

DefaultSearchProviderAlternateURLs

DefaultSearchProviderIconURL

DefaultSearchProviderImageURL

DefaultSearchProviderImageURLPostParams

DefaultSearchProviderInstantURL

DefaultSearchProviderInstantURLPostParams

DefaultSearchProviderKeyword

DefaultSearchProviderNewTabURL

DefaultSearchProviderSearchTermsReplacementKey

DefaultSearchProviderSearchURL

DefaultSearchProviderSearchURLPostParams

DefaultSearchProviderSuggestURL

DefaultSearchProviderSuggestURLPostParams

DeviceAllowRedeemChromeOsRegistrationOffers

DeviceLocalAccountAutoLoginBailoutEnabled

DeviceLocalAccountAutoLoginDelay

DeviceLocalAccountAutoLoginId

DeviceLoginScreenDefaultHighContrastEnabled

DeviceLoginScreenDefaultLargeCursorEnabled

DeviceLoginScreenDefaultScreenMagnifierType

DeviceLoginScreenDefaultSpokenFeedbackEnabled

DeviceLoginScreenDefaultVirtualKeyboardEnabled

DeviceLoginScreenPowerManagement

DeviceLoginScreenSaverId

DeviceLoginScreenSaverTimeout

DeviceMetricsReportingEnabled

DeviceStartUpUrls

DeviceUpdateHttpDownloadsEnabled

EnableAuthNegotiatePort

EnableDeprecatedWebPlatformFeatures

EnableOriginBoundCerts

EnableWebBasedSignin

EnterpriseWebStoreName

EnterpriseWebStoreURL

HideWebStoreIcon

HideWebStorePromo

ImagesAllowedForUrls

ImagesBlockedForUrls

ImportAutofillFormData

ImportBookmarks

ImportHistory

ImportHomepage

ImportSavedPasswords

ImportSearchEngine

JavaScriptAllowedForUrls

JavaScriptBlockedForUrls

KeyboardDefaultToFunctionKeys

MetricsReportingEnabled

NotificationsAllowedForUrls

NotificationsBlockedForUrls

PasswordManagerAllowShowPasswords

PasswordManagerEnabled

PluginsAllowedForUrls

PluginsBlockedForUrls

PopupsAllowedForUrls

PopupsBlockedForUrls

ProxyBypassList

ProxyPacUrl

RemoteAccessHostAllowClientPairing

RemoteAccessHostAllowGnubbyAuth

RemoteAccessHostAllowRelayedConnection

RemoteAccessHostDomain

RemoteAccessHostFirewallTraversal

RemoteAccessHostRequireCurtain

RemoteAccessHostRequireTwoFactor

RemoteAccessHostTalkGadgetPrefix

RemoteAccessHostUdpPortRange

RenderInChromeFrameList

ReportDeviceActivityTimes

ReportDeviceBootMode

ReportDeviceLocation

ReportDeviceNetworkInterfaces

ReportDeviceUsers

ReportDeviceVersionInfo

RestoreOnStartupURLs

ShowAppsShortcutInBookmarkBar

SuppressChromeFrameTurndownPrompt

TermsOfServiceURL

TouchVirtualKeyboardEnabled

URLBlacklist

URLWhitelist

VideoCaptureAllowedUrls

VirtualKeyboardEnabled

update_url

^update_url:

CHROME_VERSION

CHROME_SAFE_MODE

2676A9A2-D919-4FEE-9187-152100393AB2

ignore-urlfetcher-cert-requests

install-chrome-app

install-ephemeral-app-from-webstore

pack-extension-key

permission-request-api-url

promo-server-url

proxy-bypass-list

proxy-pac-url

remember-cert-error-decisions

spelling-service-feedback-url

try-chrome-again

variations-server-url

winhttp-proxy-resolver

ya-url-copy-safe-text

skip-first-import

plugins-metadata-server-url

windows8-search

allow-http-screen-capture

app-list-start-page-url

apps-checkout-url

apps-gallery-download-url

apps-gallery-url

apps-gallery-update-url

certificate-transparency-log

disable-extensions-http-throttling

disable-password-manager-reauthentication

disable-quic-port-selection

disable-save-password-bubble

disable-web-resources

enable-auth-negotiate-port

enable-npn-http

enable-quic-port-selection

enable-save-password-bubble

enable-sdch-over-https

enable-user-controlled-alternate-protocol-ports

enable-websocket-over-spdy

enable-website-settings-manager

explicitly-allowed-ports

extensions-not-webstore

help-url

40.0.2214.3645

CHROME_HEADLESS

CHROME_LOG_FILE

CHROME_METRO_CONNECTED

CHROMEOS_SESSION_LOG_DIR

CHROME_CRASHED

CHROME_RESTART

profile.ephemeral_mode

profile.icon_version

session.restore_on_startup

session.restore_on_startup_migrated

session.startup_urls_migration_time

session.restore_to_homepage_if_empty

profile.exited_cleanly

profile.exit_type

profile.managed.custodian_email

profile.managed.custodian_name

profile.managed.custodian_profile_image_url

profile.managed.custodian_profile_url

profile.managed.manual_hosts

profile.managed.manual_urls

profile.managed.second_custodian_email

profile.managed.second_custodian_name

profile.managed.second_custodian_profile_image_url

profile.managed.second_custodian_profile_url

profile.managed.shared_settings

session.startup_urls

session.urls_to_restore_on_startup

intl.app_locale

intl.charset_default

intl.accept_languages

intl.applied_brand_package_accept_languages

intl.static_encodings

webkit.webprefs.fonts.standard.Zyyy

webkit.webprefs.fonts.fixed.Zyyy

webkit.webprefs.fonts.serif.Zyyy

webkit.webprefs.fonts.sansserif.Zyyy

webkit.webprefs.fonts.cursive.Zyyy

webkit.webprefs.fonts.fantasy.Zyyy

webkit.webprefs.fonts.pictograph.Zyyy

webkit.webprefs.fonts.standard

webkit.webprefs.fonts.fixed

webkit.webprefs.fonts.serif

webkit.webprefs.fonts.sansserif

webkit.webprefs.fonts.cursive

webkit.webprefs.fonts.fantasy

webkit.webprefs.fonts.pictograph

webkit.webprefs.fonts.standard.Arab

webkit.webprefs.fonts.fixed.Arab

webkit.webprefs.fonts.serif.Arab

webkit.webprefs.fonts.sansserif.Arab

webkit.webprefs.fonts.standard.Cyrl

webkit.webprefs.fonts.fixed.Cyrl

webkit.webprefs.fonts.serif.Cyrl

webkit.webprefs.fonts.sansserif.Cyrl

webkit.webprefs.fonts.standard.Grek

webkit.webprefs.fonts.fixed.Grek

webkit.webprefs.fonts.serif.Grek

webkit.webprefs.fonts.sansserif.Grek

webkit.webprefs.fonts.standard.Jpan

webkit.webprefs.fonts.fixed.Jpan

webkit.webprefs.fonts.serif.Jpan

webkit.webprefs.fonts.sansserif.Jpan

webkit.webprefs.fonts.standard.Hang

webkit.webprefs.fonts.fixed.Hang

webkit.webprefs.fonts.serif.Hang

webkit.webprefs.fonts.sansserif.Hang

webkit.webprefs.fonts.cursive.Hang

webkit.webprefs.fonts.standard.Hans

webkit.webprefs.fonts.fixed.Hans

webkit.webprefs.fonts.serif.Hans

webkit.webprefs.fonts.sansserif.Hans

webkit.webprefs.fonts.standard.Hant

webkit.webprefs.fonts.fixed.Hant

webkit.webprefs.fonts.serif.Hant

webkit.webprefs.fonts.sansserif.Hant

webkit.webprefs.default_font_size

webkit.webprefs.default_fixed_font_size

webkit.webprefs.minimum_font_size

webkit.webprefs.minimum_logical_font_size

webkit.webprefs.javascript_enabled

webkit.webprefs.web_security_enabled

webkit.webprefs.javascript_can_open_windows_automatically

webkit.webprefs.loads_images_automatically

webkit.webprefs.plugins_enabled

webkit.webprefs.dom_paste_enabled

webkit.webprefs.shrinks_standalone_images_to_fit

webkit.webprefs.uses_universal_detector

webkit.webprefs.text_areas_are_resizable

webkit.webprefs.java_enabled

webkit.webprefs.tabs_to_links

webkit.webprefs.allow_displaying_insecure_content

webkit.webprefs.allow_running_insecure_content

safebrowsing.enabled

safebrowsing.extended_reporting_enabled

safebrowsing.proceed_anyway_disabled

safebrowsing.incident_report_sent

safebrowsing.incidents_sent

incognito.mode_availability

search.suggest_enabled

browser.confirm_to_quit

security.cookie_behavior

download.prompt_for_download

alternate_error_pages.enabled

dns_prefetching.startup_list

dns_prefetching.host_referral_list

spdy.disabled

net.http_server_properties

spdy.servers

spdy.alternate_protocol

protocol.disabled_schemes

instant_ui.zero_suggest_url_prefix

local_state.multiple_profile_prefs_version

dns_prefetching.enabled

net.network_prediction_options

hide_web_store_icon

browser.show_home_button

browser.show_ya_button

browser.show_tablo_on_click

browser.last_session_empty

browser.session_empty

browser.use_mouse_gestures

browser.enable_page_expiration

browser.do_not_count_page_expiration_infobar_closings

profile.recently_selected_encodings

browser.clear_data.browsing_history

browser.clear_data.download_history

browser.clear_data.cache

browser.clear_data.cookies

browser.clear_data.passwords

browser.clear_data.form_data

browser.clear_data.hosted_apps_data

browser.clear_data.content_licenses

browser.enable_spellchecking

browser.speechinput_censor_results

browser.speechinput_tray_notification_shown_contexts

browser.enabled_labs_experiments

ya.experiments_edited_by_user

ya.distrib_default_experiments

browser.enable_autospellcorrect

history.saving_disabled

ya.settings.text_wrap

history.deleting_enabled

settings.force_safesearch

settings.history_recorded

browser.clear_data.time_period

browser.last_clear_browsing_data_time

extensions.theme.pack

extensions.theme.id

extensions.theme.images

extensions.theme.colors

extensions.theme.tints

extensions.theme.properties

extensions.ui.developer_mode

extensions.commands

plugins.last_internal_directory

plugins.plugins_list

plugins.plugins_disabled

plugins.plugins_disabled_exceptions

plugins.plugins_enabled

plugins.migrated_to_pepper_flash

plugins.removed_old_component_pepper_flash_settings

plugins.show_details

plugins.allow_outdated

plugins.always_authorize

plugins.metadata

plugins.resource_cache_update

browser.check_default_browser

browser.default_browser_setting_enabled

browser.custom_chrome_frame

profile.content_settings.plugin_whitelist

profile.block_third_party_cookies

profile.clear_site_data_on_exit

partition.default_zoom_level

profile.default_zoom_level

partition.per_host_zoom_levels

profile.per_host_zoom_levels

autofill.data_model_default

autofill.pay_without_wallet

autofill.wallet_location_disclosure

autofill.save_data

autofill.wallet_shipping_same_as_billing

autofill.generated_card_bubble_times_shown

autofill.rac_dialog_defaults

breadcrumbs.enabled

push_to_call.enabled

push_to_call.wasenabled

ya.disk.want_install

context_translate.enabled

context_translate.translate_words

enable_deprecated_web_platform_features

import_last_source_browser

import_autofill_form_data

import_bookmarks

import_history

import_home_page

import_saved_passwords

import_cookies

import_last_session

import_extensions

import_speed_dial

import_other

ya.statistics.import_rollback

ya.import_new_source_type

ya.import_new_source_profile

import_search_engine

profile.avatar_index

profile.using_default_name

profile.name

profile.using_default_avatar

profile.using_gaia_avatar

profile.managed_user_id

profile.gaia_info_update_time

profile.gaia_info_picture_url

profile.avatar_bubble_tutorial_shown

printing.enabled

printing.print_preview_disabled

profile.managed.default_filtering_behavior

profile.managed_user_creation_allowed

profile.managed_users

profile.reset_prompt_memento

message_center.disabled_extension_ids

message_center.disabled_system_component_ids

message_center.welcome_notification_dismissed

message_center.welcome_notification_dismissed_local

message_center.welcome_notification_previously_popped_up

message_center.welcome_notification_expiration_timestamp

fullscreen.allowed

local_discovery.notifications_enabled

prefs.preference_reset_time

ya.prefetch.latest_update_list

ya.tablo_pins.instance_id

gcm.channel_enabled

gcm.push_messaging_registration_count

easy_unlock.allowed

easy_unlock.enabled

easy_unlock.pairing

easy_unlock.proximity_required

easy_unlock.show_tutorial

zerosuggest.cachedresults

signin.error_stats_update_time

ssl.rev_checking.enabled

ssl.rev_checking.required_for_local_anchors

ssl.version_min

ssl.version_max

ssl.version_fallback_min

ssl.cipher_suites.blacklist

ssl.ssl_record_splitting.disabled

ssl.ssl_blocking_bypassed

user_experience_metrics.reporting_enabled

profile.last_used

profile.last_active_profiles

profile.profiles_created

profile.info_cache

profile.created_by_version

profile.reset_prompt_mementos

user_experience_metrics.stability.page_load_count

user_experience_metrics.stability.renderer_crash_count

user_experience_metrics.stability.extension_renderer_crash_count

user_experience_metrics.stability.renderer_hang_count

user_experience_metrics.stability.child_process_crash_count

user_experience_metrics.stability.other_user_crash_count

user_experience_metrics.stability.kernel_crash_count

user_experience_metrics.stability.system_unclean_shutdowns

user_experience_metrics.stability.plugin_stats2

uninstall_metrics.page_load_count

uninstall_metrics.last_launch_time_sec

uninstall_metrics.last_observed_running_time_sec

browser.suppress_default_browser_prompt_for_version

browser.window_placement

browser.window_placement_popup

task_manager.window_placement

browser.app_window_placement

renderer.memory_cache.size

download.default_directory

download.default_directory_display_name

download.extensions_to_open

download.directory_upgrade

download.open_pdf_in_system_reader

savefile.default_directory

savefile.type

select_file_dialogs.allowed

filebrowser.tasks.default_by_mime_type

filebrowser.tasks.default_by_suffix

selectfile.last_directory

browser.hung_plugin_detect_freq

browser.plugin_message_response_timeout

spellcheck.dictionary

spellcheck.use_spelling_service

protocol_handler.excluded_schemes

safe_browsing.client_key

safe_browsing.wrapped_key

options_window.last_tab_index

certificate_manager_window.last_tab_index

browser.show_omnibox_share_buttons

browser.last_redirect_origin

shutdown.type

shutdown.num_processes

shutdown.num_processes_slow

restart.last.session.on.shutdown

was.restarted

relaunch.mode

extensions.disabled

plugins.disable_plugin_finder

ntp.app_page_names

ntp.collapsed_open_tabs

ntp.collapsed_foreign_sessions

ntp.collapsed_recently_closed_tabs

ntp.collapsed_snapshot_document

ntp.collapsed_sync_promo

ntp.date_resource_server

ntp.most_visited_blacklist

ntp.promo_desktop_session_found

ntp.promo_resource_cache_update

ntp.shown_bookmarks_folder

ntp.shown_page

ntp.tips_resource_server

ntp.webstore_enabled

devtools.adb_key

devtools.disabled

devtools.discover_usb_devices

devtools.edited_files

devtools.file_system_paths

devtools.open_docked

devtools.port_forwarding_enabled

devtools.port_forwarding_default_set

devtools.port_forwarding_config

google.services.password_hash

invalidation_service.use_gcm_channel

sync_promo.startup_count

sync_promo.user_skipped

sync_promo.show_on_first_run_allowed

sync_promo.show_ntp_bubble

browser.web_app.create_on_desktop

browser.web_app.create_in_apps_menu

browser.web_app.create_in_quick_launch_bar

geolocation.access_token

media.default_audio_capture_device

media.default_video_capture_Device

media.device_id_salt

remote_access.host_firewall_traversal

remote_access.host_require_two_factor

remote_access.host_domain

remote_access.host_talkgadget_prefix

remote_access.host_require_curtain

remote_access.host_allow_client_pairing

remote_access.host_allow_gnubby_auth

remote_access.host_allow_relayed_connection

remote_access.host_udp_port_range

printing.print_preview_sticky_settings

cloud_print.dialog_size.width

cloud_print.dialog_size.height

cloud_print.signin_dialog_size.width

cloud_print.signin_dialog_size.height

cloud_print.enabled

cloud_print.proxy_id

cloud_print.auth_token

cloud_print.xmpp_auth_token

cloud_print.email

cloud_print.print_system_settings

cloud_print.enable_job_poll

cloud_print.robot_refresh_token

cloud_print.robot_email

cloud_print.user_settings.connectNewPrinters

cloud_print.xmpp_ping_enabled

cloud_print.xmpp_ping_timeout_sec

cloud_print.user_settings.printers

cloud_print.submit_enabled

cloud_print.user_settings

net.max_connections_per_proxy

hardware.audio_capture_enabled

hardware.audio_capture_allowed_urls

hardware.video_capture_enabled

hardware.video_capture_allowed_urls

hotword.search_enabled_2

hotword.always_on_search_enabled

hotword.audio_logging_enabled

hotword.audio_history_enabled

hotword.previous_language

browser.clear_lso_data_enabled

browser.pepper_flash_settings_enabled

browser.disk_cache_dir

browser.disk_cache_size

browser.last_default_status

browser.media_cache_size

cros.system.releaseChannel

feedback.performance_tracing_enabled

background_contents.registered

browser.shown_autolaunch_infobar

auth.schemes

auth.disable_negotiate_cname_lookup

auth.enable_negotiate_port

auth.server_whitelist

auth.negotiate_delegate_whitelist

auth.gssapi_library_name

auth.allow_cross_origin_prompt

async_dns.enabled

custom_handlers.registered_protocol_handlers

custom_handlers.ignored_protocol_handlers

custom_handlers.policy.registered_protocol_handlers

custom_handlers.policy.ignored_protocol_handlers

custom_handlers.enabled

background_mode.enabled

hardware_acceleration_mode.enabled

policy.device_refresh_rate

message_center.showed_first_run_balloon

message_center.show_icon

message_center.was_forced_on_taskbar

browser.attempted_to_enable_autoupdate

media_galleries.gallery_id

media_galleries.remembered_galleries

media_galleries.last_scan_time

shelf_chrome_icon_index

gesture.max_separation_for_gesture_touches_in_pixels

gesture.semi_long_press_time_in_ms

gesture.tab_scrub_activation_delay_in_ms

gesture.fling_max_cancel_to_down_time_in_ms

gesture.fling_max_tap_gap_time_in_ms

overscroll.horizontal_threshold_complete

overscroll.vertical_threshold_complete

overscroll.minimum_threshold_start

overscroll.minimum_threshold_start_touchpad

overscroll.vertical_threshold_start

overscroll.horizontal_resist_threshold

overscroll.vertical_resist_threshold

ya.send_install

ya.last_welcome_page_version

ya.clids

ya.banerid

ya.update_failures

ya.update_last_failure

ya.welcome_page

ya.custom_cookies

ya.bar.ui

ya.bar.uuid

ya.bar.r1

ya.statistics.last_default_check_time

ya.statistics.enabled

ya.tab_finder_enabled_once

ya.crash_dumps_checkbox_was_set

ya.crash_dumps_checkbox_was_set_at_1_0_1084_5404

ya.disk.installer_etag

ya.vk.show_infobar

ya.vk.last_shown

ya.vk.clicks_left

ya.last_runned_version

ya.last_runned_partner_id

ya.education.enabled

ya.custo_education.enabled

ya.searchness.enabled

ya.all_sb_chunks_downloaded_time

ya.splitview.enabled

ya.splitview.visible

ya.sync.device.push_id

ya.sync.device.name

ya.block_flash

ya.extensions_to_replace

ya.mute_state

ya.background_animation.enabled

ya.background_animation.disable_on_low_battery

ya.notifications.extension_settings_migrated

ya.notifications.migrated_fb_token

ya.notifications.migrated_fb_token_expires_in

ya.notifications.migrated_vk_token

ya.notifications.migrated_vk_token_expires_in

ya.notifications.silent_mode_until

ya.notifications.silent_mode

ya.notifications.fb.enabled

ya.notifications.fb.show.comments

ya.notifications.fb.show.friend_requests

ya.notifications.fb.show.messages

ya.notifications.fb.view_content

ya.notifications.fb.num_invitations_shown

ya.notifications.fb.last_time_invitation_shown

ya.notifications.fb.share_accepted

ya.notifications.fb.last_share_propose_time

ya.notifications.vk.enabled

ya.notifications.vk.show.comments

ya.notifications.vk.show.friend_requests

ya.notifications.vk.show.messages

ya.notifications.vk.view_content

ya.notifications.vk.num_invitations_shown

ya.notifications.vk.last_time_invitation_shown

ya.notifications.vk.share_accepted

ya.notifications.vk.last_share_propose_time

ya.notifications.yamail.enabled

ya.notifications.yamail.view_content

show.comments

show.friend_requests

show.messages

omnibox-infobar-panel.enabled

omnibox-infobar-panel.disabled

searchness.disabled

ya.persist_state_updated

network_profile.warnings_left

network_profile.last_warning_time

ya.feedback.update_date

ya.smartback.dictionary_last_modified

torrents.open_mode

apps.app_launch_for_metro_restart

apps.app_launch_for_metro_restart_profile

apps.shortcuts_version

module_conflict.bubble_shown

settings.privacy.drm_salt

settings.privacy.drm_enabled

browser.allow_discard_tabs

browser.allow_discard_tabs_updated

profile.extensions.activity_log.num_consumers_active

proxy.quick_check_enabled

profile.browser_guest_enabled

profile.add_person_enabled

ya.show_newtab_search_arrow

ya.popup_block_enabled

ya.plugin_restricted_document_kinds

ya.custo_tab_activation_order_on_tab_close

ya.custo_ui_first_time_launch

easy_unlock.hardlock_state

password_bubble.timestamp

password_bubble.nopes

password_bubble.interactions

ya.tablo.snapshot_click_map

license_url

feedback.url

conf_policy_url

hXXp://legal.yandex.ru/browser_agreement/

hXXp://legal.yandex.ru/confidential/

SHELL32.dll

ole32.dll

OLEAUT32.dll

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

%s-%Iu

u\uX

Dictionary keys must be quoted.

Unsupported encoding. JSON must be UTF-8.

full-memory-crash-report

(0x%X)

Error (0x%X) while retrieving error. (0x%X)

(%d = %3.1f%%)

Histogram: %s recorded %d samples

(flags = 0x%x)

PlatformFile.UnknownErrors.Windows

user32.dll

0123456789

.syzygy

.thunks

Line: %i, column: %i, %s

D:\BuildAgent\work\9d1bc32700498ce4\src\out\Release\initialexe\browser.exe.pdb

browser.exe

ClearBreakpadPipeEnvironmentVariable

ClearCrashKeyValueImpl

SetCrashKeyValueImpl

SignalChromeElf

browser_elf.dll

WINMM.dll

VERSION.dll

SHLWAPI.dll

RegEnumKeyExW

RegQueryInfoKeyW

RegCreateKeyExW

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

GetAsyncKeyState

CloseWindowStation

CreateWindowStationW

SetProcessWindowStation

USER32.dll

GetProcessHeap

GetWindowsDirectoryW

CreateIoCompletionPort

GetProcessHandleCount

KERNEL32.dll

USERENV.dll

WTSAPI32.dll

GetCPInfo

SetNamedPipeHandleState

TransactNamedPipe

WaitNamedPipeW

zcÁ

.ccc]

.IDATx

.aU/@G

\]]]]_]^

.owO[

.RwuWee

o.yST

G.HIJ

]]][\^__^\]`

i.snh

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="Win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><dependency><dependentAssembly><assemblyIdentity type="win32" name="40.0.2214.3645" version="40.0.2214.3645" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>

0%1X2

0"0)040=0

9%:0:>:]:~:

5-5v5}5

4$4044484

1 1$1(1,10141

8,;0;4;8;<;

6(7,707\7

5$5(5,50545

2 2$2(2,2024282<2

1 1$1,1@1`1

7 7$7(7,707

registering_chrome

uninstalling_chrome_frame

eyndxstp.exe

{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}

app_host.exe

browser.dll

browser_child.dll

npbrowser_frame.dll

browser_frame_helper.dll

browser_frame_helper.exe

browser_launcher.exe

metro_driver.dll

new_browser.exe

old_browser.exe

delegate_execute.exe

nacl64.exe

setup.exe

InstallerSuccessLaunchCmdLine

YandexSSHTM

{45033924-ABD6-4063-AD60-71925CDE206E}

{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}

{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}

Browse the web

Software\Microsoft\Windows\CurrentVersion\Uninstall\Chromium

-chrome

-chromeframe

{8A69D345-D564-463C-AFF1-A69D9E530F96}

{430FD4D0-B729-4F61-AA34-91526481799D}

GoogleUpdateSetup.exe

CFEndTempOptOutCmd

CFOptInCmd

CFOptOutCmd

CFTempOptOutCmd

UninstallCmdLine

WebAccessible

3E40F524-16FA-440A-B919-B44AB355B174

service_update.exe

winrt_helper.dll

{5FAFC90A-D443-4E4F-B69B-DA1F8D553C6C}

d-d-%d

hXXp://browser.

%d.%d.%d

Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser

Google Chrome App Launcher

ChromeAppList

tSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher

{8BA986DA-5100-405E-AA35-86F34A02ACBF}

Google Chrome Frame

Google\Chrome Frame

Chrome in a Frame.

Uninstall Chrome Frame

Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame

\\.\pipe\GoogleCrashServices\

\\.\pipe\YandexCrashServices

error %u

ntdll.dll

chrome.exe

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_TEXT

HKEY_PERFORMANCE_NLSTEXT

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

pipe\

kernelbase.dll

eKey

gdi32.dll

xntdll.dll

wow_helper.exe"

shell32.dll

Reported Crashes.txt

testing_interface.dll

Origin Bound Certs

Certificate Revocation Lists

Custom Dictionary.txt

Login Data

Cached Theme.pak

Web Applications

pepflashplayer.dll

CHROME_METRO_NAV_SEARCH_REQUEST

CHROME_METRO_GET_CURRENT_TAB_INFO

CHROME_METRO_SETTINGS_COMMAND

gcswf32.dll

pdf.dll

yapdf.dll

yadocviewer.dll

npmedia_plugin.dll

pepper/libppeffects.dll

Crash Reports

crash_service.exe

script.log

resources.pak

${windows}

hunspecified-crash-key

%u.%s

reported

mscoree.dll

ADVAPI32.DLL

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

USER32.DLL

portuguese-brazilian

dbghelp.dll

rpcrt4.dll

crash_service.exe --max-reports=10

%s\%s.dmp

x-x-x-xx-xxxxxx

Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32

Software\Microsoft\Windows\CurrentVersion\Run

.Chrome_MessagePumpWindow_%p

Ndebug.log

.\debug.log

\StringFileInfo\xx\%ls

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Crash Reports\events\2752.crashed

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe

chrome_exe

40.0.2214.115

15.2.2214.3645

browser.exe_1060:

.text

`.rdata

@.data

.rsrc

@.reloc

HtdHtHHHt.HH

j.Yf;

_tcPVj@

.PjRW

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\chrome_exe_main_win.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\client_util.cc

No valid Chrome version found

Failed to load Chrome DLL from

ChromeMain

RelaunchChromeBrowserWithNewCommandLineIfNeeded

Could not find exported function

allow-insecure-websocket-from-https-origin

disable-webgl

disable-web-security

enable-experimental-web-platform-features

enable-tcp-fastopen

enable-viewport

enable-viewport-meta

enable-vtune-support

enable-webgl-draft-extensions

enable-webgl-image-chromium

enable-web-midi

enable-webkit-find-restart

ignore-certificate-errors

remote-debugging-port

renderer-cmd-prefix

testing-fixed-http-port

testing-fixed-https-port

trace-upload-url

utility-cmd-prefix

zygote-cmd-prefix

disable-webrtc-hw-decoding

disable-webrtc-encryption

disable-webrtc-hw-encoding

enable-webrtc-hw-vp8-encoding

enable-webrtc-hw-h264-encoding

disable-webaudio

opera

1.3.21.115

%s-x-x

Chrome

0.0.0.0-devel

%s-%x

url-chunk

font_key_name

subresource_url

CHROME_MAIN_TIME

%x-%x

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\google_update_settings.cc

auto-launch-chrome

chrome

chrome-sxs

new-setup-exe

register-dev-chrome

register-url-protocol

rename-browser-exe

update-setup-exe

toast-results-key

Cannot initialize AppCommands from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_commands.cc

Failed to open key "

Skipping over key "

make-browser-default-after-import

silent-first-import

ya_permanent_state.brand_id

ya_permanent_state.base_host

ya_permanent_state.partner_id

ya_permanent_state.uninstall_survey_url

yandex.ru

iexplore.exe

googlechromeapphost

googlechromeframe

Cannot initialize an AppCommand from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_command.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\language_selector.cc

CHROME_BREAKPAD_PIPE_NAME

CHROME_BREAKPAD_EVENT_NAME

d:\buildagent\work\9d1bc32700498ce4\src\components\crash\app\breakpad_win.cc

NTDLL.DLL

kernel32.dll

d:\buildagent\work\9d1bc32700498ce4\src\sandbox\win\src\sandbox_policy_base.cc

CreateNamedPipeW

NtCreateKey

NtOpenKey

NtOpenKeyEx

AudioCaptureAllowedUrls

AutoSelectCertificateForUrls

ChromeFrameContentTypes

ChromeFrameRendererSettings

ChromeOsLockOnIdleSuspend

ChromeOsMultiProfileUserBehavior

ChromeOsReleaseChannel

ChromeOsReleaseChannelDelegated

CloudPrintProxyEnabled

CloudPrintSubmitEnabled

ContentPackManualBehaviorURLs

CookiesAllowedForUrls

CookiesBlockedForUrls

CookiesSessionOnlyForUrls

DefaultSearchProviderAlternateURLs

DefaultSearchProviderIconURL

DefaultSearchProviderImageURL

DefaultSearchProviderImageURLPostParams

DefaultSearchProviderInstantURL

DefaultSearchProviderInstantURLPostParams

DefaultSearchProviderKeyword

DefaultSearchProviderNewTabURL

DefaultSearchProviderSearchTermsReplacementKey

DefaultSearchProviderSearchURL

DefaultSearchProviderSearchURLPostParams

DefaultSearchProviderSuggestURL

DefaultSearchProviderSuggestURLPostParams

DeviceAllowRedeemChromeOsRegistrationOffers

DeviceLocalAccountAutoLoginBailoutEnabled

DeviceLocalAccountAutoLoginDelay

DeviceLocalAccountAutoLoginId

DeviceLoginScreenDefaultHighContrastEnabled

DeviceLoginScreenDefaultLargeCursorEnabled

DeviceLoginScreenDefaultScreenMagnifierType

DeviceLoginScreenDefaultSpokenFeedbackEnabled

DeviceLoginScreenDefaultVirtualKeyboardEnabled

DeviceLoginScreenPowerManagement

DeviceLoginScreenSaverId

DeviceLoginScreenSaverTimeout

DeviceMetricsReportingEnabled

DeviceStartUpUrls

DeviceUpdateHttpDownloadsEnabled

EnableAuthNegotiatePort

EnableDeprecatedWebPlatformFeatures

EnableOriginBoundCerts

EnableWebBasedSignin

EnterpriseWebStoreName

EnterpriseWebStoreURL

HideWebStoreIcon

HideWebStorePromo

ImagesAllowedForUrls

ImagesBlockedForUrls

ImportAutofillFormData

ImportBookmarks

ImportHistory

ImportHomepage

ImportSavedPasswords

ImportSearchEngine

JavaScriptAllowedForUrls

JavaScriptBlockedForUrls

KeyboardDefaultToFunctionKeys

MetricsReportingEnabled

NotificationsAllowedForUrls

NotificationsBlockedForUrls

PasswordManagerAllowShowPasswords

PasswordManagerEnabled

PluginsAllowedForUrls

PluginsBlockedForUrls

PopupsAllowedForUrls

PopupsBlockedForUrls

ProxyBypassList

ProxyPacUrl

RemoteAccessHostAllowClientPairing

RemoteAccessHostAllowGnubbyAuth

RemoteAccessHostAllowRelayedConnection

RemoteAccessHostDomain

RemoteAccessHostFirewallTraversal

RemoteAccessHostRequireCurtain

RemoteAccessHostRequireTwoFactor

RemoteAccessHostTalkGadgetPrefix

RemoteAccessHostUdpPortRange

RenderInChromeFrameList

ReportDeviceActivityTimes

ReportDeviceBootMode

ReportDeviceLocation

ReportDeviceNetworkInterfaces

ReportDeviceUsers

ReportDeviceVersionInfo

RestoreOnStartupURLs

ShowAppsShortcutInBookmarkBar

SuppressChromeFrameTurndownPrompt

TermsOfServiceURL

TouchVirtualKeyboardEnabled

URLBlacklist

URLWhitelist

VideoCaptureAllowedUrls

VirtualKeyboardEnabled

update_url

^update_url:

CHROME_VERSION

CHROME_SAFE_MODE

2676A9A2-D919-4FEE-9187-152100393AB2

ignore-urlfetcher-cert-requests

install-chrome-app

install-ephemeral-app-from-webstore

pack-extension-key

permission-request-api-url

promo-server-url

proxy-bypass-list

proxy-pac-url

remember-cert-error-decisions

spelling-service-feedback-url

try-chrome-again

variations-server-url

winhttp-proxy-resolver

ya-url-copy-safe-text

skip-first-import

plugins-metadata-server-url

windows8-search

allow-http-screen-capture

app-list-start-page-url

apps-checkout-url

apps-gallery-download-url

apps-gallery-url

apps-gallery-update-url

certificate-transparency-log

disable-extensions-http-throttling

disable-password-manager-reauthentication

disable-quic-port-selection

disable-save-password-bubble

disable-web-resources

enable-auth-negotiate-port

enable-npn-http

enable-quic-port-selection

enable-save-password-bubble

enable-sdch-over-https

enable-user-controlled-alternate-protocol-ports

enable-websocket-over-spdy

enable-website-settings-manager

explicitly-allowed-ports

extensions-not-webstore

help-url

40.0.2214.3645

CHROME_HEADLESS

CHROME_LOG_FILE

CHROME_METRO_CONNECTED

CHROMEOS_SESSION_LOG_DIR

CHROME_CRASHED

CHROME_RESTART

profile.ephemeral_mode

profile.icon_version

session.restore_on_startup

session.restore_on_startup_migrated

session.startup_urls_migration_time

session.restore_to_homepage_if_empty

profile.exited_cleanly

profile.exit_type

profile.managed.custodian_email

profile.managed.custodian_name

profile.managed.custodian_profile_image_url

profile.managed.custodian_profile_url

profile.managed.manual_hosts

profile.managed.manual_urls

profile.managed.second_custodian_email

profile.managed.second_custodian_name

profile.managed.second_custodian_profile_image_url

profile.managed.second_custodian_profile_url

profile.managed.shared_settings

session.startup_urls

session.urls_to_restore_on_startup

intl.app_locale

intl.charset_default

intl.accept_languages

intl.applied_brand_package_accept_languages

intl.static_encodings

webkit.webprefs.fonts.standard.Zyyy

webkit.webprefs.fonts.fixed.Zyyy

webkit.webprefs.fonts.serif.Zyyy

webkit.webprefs.fonts.sansserif.Zyyy

webkit.webprefs.fonts.cursive.Zyyy

webkit.webprefs.fonts.fantasy.Zyyy

webkit.webprefs.fonts.pictograph.Zyyy

webkit.webprefs.fonts.standard

webkit.webprefs.fonts.fixed

webkit.webprefs.fonts.serif

webkit.webprefs.fonts.sansserif

webkit.webprefs.fonts.cursive

webkit.webprefs.fonts.fantasy

webkit.webprefs.fonts.pictograph

webkit.webprefs.fonts.standard.Arab

webkit.webprefs.fonts.fixed.Arab

webkit.webprefs.fonts.serif.Arab

webkit.webprefs.fonts.sansserif.Arab

webkit.webprefs.fonts.standard.Cyrl

webkit.webprefs.fonts.fixed.Cyrl

webkit.webprefs.fonts.serif.Cyrl

webkit.webprefs.fonts.sansserif.Cyrl

webkit.webprefs.fonts.standard.Grek

webkit.webprefs.fonts.fixed.Grek

webkit.webprefs.fonts.serif.Grek

webkit.webprefs.fonts.sansserif.Grek

webkit.webprefs.fonts.standard.Jpan

webkit.webprefs.fonts.fixed.Jpan

webkit.webprefs.fonts.serif.Jpan

webkit.webprefs.fonts.sansserif.Jpan

webkit.webprefs.fonts.standard.Hang

webkit.webprefs.fonts.fixed.Hang

webkit.webprefs.fonts.serif.Hang

webkit.webprefs.fonts.sansserif.Hang

webkit.webprefs.fonts.cursive.Hang

webkit.webprefs.fonts.standard.Hans

webkit.webprefs.fonts.fixed.Hans

webkit.webprefs.fonts.serif.Hans

webkit.webprefs.fonts.sansserif.Hans

webkit.webprefs.fonts.standard.Hant

webkit.webprefs.fonts.fixed.Hant

webkit.webprefs.fonts.serif.Hant

webkit.webprefs.fonts.sansserif.Hant

webkit.webprefs.default_font_size

webkit.webprefs.default_fixed_font_size

webkit.webprefs.minimum_font_size

webkit.webprefs.minimum_logical_font_size

webkit.webprefs.javascript_enabled

webkit.webprefs.web_security_enabled

webkit.webprefs.javascript_can_open_windows_automatically

webkit.webprefs.loads_images_automatically

webkit.webprefs.plugins_enabled

webkit.webprefs.dom_paste_enabled

webkit.webprefs.shrinks_standalone_images_to_fit

webkit.webprefs.uses_universal_detector

webkit.webprefs.text_areas_are_resizable

webkit.webprefs.java_enabled

webkit.webprefs.tabs_to_links

webkit.webprefs.allow_displaying_insecure_content

webkit.webprefs.allow_running_insecure_content

safebrowsing.enabled

safebrowsing.extended_reporting_enabled

safebrowsing.proceed_anyway_disabled

safebrowsing.incident_report_sent

safebrowsing.incidents_sent

incognito.mode_availability

search.suggest_enabled

browser.confirm_to_quit

security.cookie_behavior

download.prompt_for_download

alternate_error_pages.enabled

dns_prefetching.startup_list

dns_prefetching.host_referral_list

spdy.disabled

net.http_server_properties

spdy.servers

spdy.alternate_protocol

protocol.disabled_schemes

instant_ui.zero_suggest_url_prefix

local_state.multiple_profile_prefs_version

dns_prefetching.enabled

net.network_prediction_options

hide_web_store_icon

browser.show_home_button

browser.show_ya_button

browser.show_tablo_on_click

browser.last_session_empty

browser.session_empty

browser.use_mouse_gestures

browser.enable_page_expiration

browser.do_not_count_page_expiration_infobar_closings

profile.recently_selected_encodings

browser.clear_data.browsing_history

browser.clear_data.download_history

browser.clear_data.cache

browser.clear_data.cookies

browser.clear_data.passwords

browser.clear_data.form_data

browser.clear_data.hosted_apps_data

browser.clear_data.content_licenses

browser.enable_spellchecking

browser.speechinput_censor_results

browser.speechinput_tray_notification_shown_contexts

browser.enabled_labs_experiments

ya.experiments_edited_by_user

ya.distrib_default_experiments

browser.enable_autospellcorrect

history.saving_disabled

ya.settings.text_wrap

history.deleting_enabled

settings.force_safesearch

settings.history_recorded

browser.clear_data.time_period

browser.last_clear_browsing_data_time

extensions.theme.pack

extensions.theme.id

extensions.theme.images

extensions.theme.colors

extensions.theme.tints

extensions.theme.properties

extensions.ui.developer_mode

extensions.commands

plugins.last_internal_directory

plugins.plugins_list

plugins.plugins_disabled

plugins.plugins_disabled_exceptions

plugins.plugins_enabled

plugins.migrated_to_pepper_flash

plugins.removed_old_component_pepper_flash_settings

plugins.show_details

plugins.allow_outdated

plugins.always_authorize

plugins.metadata

plugins.resource_cache_update

browser.check_default_browser

browser.default_browser_setting_enabled

browser.custom_chrome_frame

profile.content_settings.plugin_whitelist

profile.block_third_party_cookies

profile.clear_site_data_on_exit

partition.default_zoom_level

profile.default_zoom_level

partition.per_host_zoom_levels

profile.per_host_zoom_levels

autofill.data_model_default

autofill.pay_without_wallet

autofill.wallet_location_disclosure

autofill.save_data

autofill.wallet_shipping_same_as_billing

autofill.generated_card_bubble_times_shown

autofill.rac_dialog_defaults

breadcrumbs.enabled

push_to_call.enabled

push_to_call.wasenabled

ya.disk.want_install

context_translate.enabled

context_translate.translate_words

enable_deprecated_web_platform_features

import_last_source_browser

import_autofill_form_data

import_bookmarks

import_history

import_home_page

import_saved_passwords

import_cookies

import_last_session

import_extensions

import_speed_dial

import_other

ya.statistics.import_rollback

ya.import_new_source_type

ya.import_new_source_profile

import_search_engine

profile.avatar_index

profile.using_default_name

profile.name

profile.using_default_avatar

profile.using_gaia_avatar

profile.managed_user_id

profile.gaia_info_update_time

profile.gaia_info_picture_url

profile.avatar_bubble_tutorial_shown

printing.enabled

printing.print_preview_disabled

profile.managed.default_filtering_behavior

profile.managed_user_creation_allowed

profile.managed_users

profile.reset_prompt_memento

message_center.disabled_extension_ids

message_center.disabled_system_component_ids

message_center.welcome_notification_dismissed

message_center.welcome_notification_dismissed_local

message_center.welcome_notification_previously_popped_up

message_center.welcome_notification_expiration_timestamp

fullscreen.allowed

local_discovery.notifications_enabled

prefs.preference_reset_time

ya.prefetch.latest_update_list

ya.tablo_pins.instance_id

gcm.channel_enabled

gcm.push_messaging_registration_count

easy_unlock.allowed

easy_unlock.enabled

easy_unlock.pairing

easy_unlock.proximity_required

easy_unlock.show_tutorial

zerosuggest.cachedresults

signin.error_stats_update_time

ssl.rev_checking.enabled

ssl.rev_checking.required_for_local_anchors

ssl.version_min

ssl.version_max

ssl.version_fallback_min

ssl.cipher_suites.blacklist

ssl.ssl_record_splitting.disabled

ssl.ssl_blocking_bypassed

user_experience_metrics.reporting_enabled

profile.last_used

profile.last_active_profiles

profile.profiles_created

profile.info_cache

profile.created_by_version

profile.reset_prompt_mementos

user_experience_metrics.stability.page_load_count

user_experience_metrics.stability.renderer_crash_count

user_experience_metrics.stability.extension_renderer_crash_count

user_experience_metrics.stability.renderer_hang_count

user_experience_metrics.stability.child_process_crash_count

user_experience_metrics.stability.other_user_crash_count

user_experience_metrics.stability.kernel_crash_count

user_experience_metrics.stability.system_unclean_shutdowns

user_experience_metrics.stability.plugin_stats2

uninstall_metrics.page_load_count

uninstall_metrics.last_launch_time_sec

uninstall_metrics.last_observed_running_time_sec

browser.suppress_default_browser_prompt_for_version

browser.window_placement

browser.window_placement_popup

task_manager.window_placement

browser.app_window_placement

renderer.memory_cache.size

download.default_directory

download.default_directory_display_name

download.extensions_to_open

download.directory_upgrade

download.open_pdf_in_system_reader

savefile.default_directory

savefile.type

select_file_dialogs.allowed

filebrowser.tasks.default_by_mime_type

filebrowser.tasks.default_by_suffix

selectfile.last_directory

browser.hung_plugin_detect_freq

browser.plugin_message_response_timeout

spellcheck.dictionary

spellcheck.use_spelling_service

protocol_handler.excluded_schemes

safe_browsing.client_key

safe_browsing.wrapped_key

options_window.last_tab_index

certificate_manager_window.last_tab_index

browser.show_omnibox_share_buttons

browser.last_redirect_origin

shutdown.type

shutdown.num_processes

shutdown.num_processes_slow

restart.last.session.on.shutdown

was.restarted

relaunch.mode

extensions.disabled

plugins.disable_plugin_finder

ntp.app_page_names

ntp.collapsed_open_tabs

ntp.collapsed_foreign_sessions

ntp.collapsed_recently_closed_tabs

ntp.collapsed_snapshot_document

ntp.collapsed_sync_promo

ntp.date_resource_server

ntp.most_visited_blacklist

ntp.promo_desktop_session_found

ntp.promo_resource_cache_update

ntp.shown_bookmarks_folder

ntp.shown_page

ntp.tips_resource_server

ntp.webstore_enabled

devtools.adb_key

devtools.disabled

devtools.discover_usb_devices

devtools.edited_files

devtools.file_system_paths

devtools.open_docked

devtools.port_forwarding_enabled

devtools.port_forwarding_default_set

devtools.port_forwarding_config

google.services.password_hash

invalidation_service.use_gcm_channel

sync_promo.startup_count

sync_promo.user_skipped

sync_promo.show_on_first_run_allowed

sync_promo.show_ntp_bubble

browser.web_app.create_on_desktop

browser.web_app.create_in_apps_menu

browser.web_app.create_in_quick_launch_bar

geolocation.access_token

media.default_audio_capture_device

media.default_video_capture_Device

media.device_id_salt

remote_access.host_firewall_traversal

remote_access.host_require_two_factor

remote_access.host_domain

remote_access.host_talkgadget_prefix

remote_access.host_require_curtain

remote_access.host_allow_client_pairing

remote_access.host_allow_gnubby_auth

remote_access.host_allow_relayed_connection

remote_access.host_udp_port_range

printing.print_preview_sticky_settings

cloud_print.dialog_size.width

cloud_print.dialog_size.height

cloud_print.signin_dialog_size.width

cloud_print.signin_dialog_size.height

cloud_print.enabled

cloud_print.proxy_id

cloud_print.auth_token

cloud_print.xmpp_auth_token

cloud_print.email

cloud_print.print_system_settings

cloud_print.enable_job_poll

cloud_print.robot_refresh_token

cloud_print.robot_email

cloud_print.user_settings.connectNewPrinters

cloud_print.xmpp_ping_enabled

cloud_print.xmpp_ping_timeout_sec

cloud_print.user_settings.printers

cloud_print.submit_enabled

cloud_print.user_settings

net.max_connections_per_proxy

hardware.audio_capture_enabled

hardware.audio_capture_allowed_urls

hardware.video_capture_enabled

hardware.video_capture_allowed_urls

hotword.search_enabled_2

hotword.always_on_search_enabled

hotword.audio_logging_enabled

hotword.audio_history_enabled

hotword.previous_language

browser.clear_lso_data_enabled

browser.pepper_flash_settings_enabled

browser.disk_cache_dir

browser.disk_cache_size

browser.last_default_status

browser.media_cache_size

cros.system.releaseChannel

feedback.performance_tracing_enabled

background_contents.registered

browser.shown_autolaunch_infobar

auth.schemes

auth.disable_negotiate_cname_lookup

auth.enable_negotiate_port

auth.server_whitelist

auth.negotiate_delegate_whitelist

auth.gssapi_library_name

auth.allow_cross_origin_prompt

async_dns.enabled

custom_handlers.registered_protocol_handlers

custom_handlers.ignored_protocol_handlers

custom_handlers.policy.registered_protocol_handlers

custom_handlers.policy.ignored_protocol_handlers

custom_handlers.enabled

background_mode.enabled

hardware_acceleration_mode.enabled

policy.device_refresh_rate

message_center.showed_first_run_balloon

message_center.show_icon

message_center.was_forced_on_taskbar

browser.attempted_to_enable_autoupdate

media_galleries.gallery_id

media_galleries.remembered_galleries

media_galleries.last_scan_time

shelf_chrome_icon_index

gesture.max_separation_for_gesture_touches_in_pixels

gesture.semi_long_press_time_in_ms

gesture.tab_scrub_activation_delay_in_ms

gesture.fling_max_cancel_to_down_time_in_ms

gesture.fling_max_tap_gap_time_in_ms

overscroll.horizontal_threshold_complete

overscroll.vertical_threshold_complete

overscroll.minimum_threshold_start

overscroll.minimum_threshold_start_touchpad

overscroll.vertical_threshold_start

overscroll.horizontal_resist_threshold

overscroll.vertical_resist_threshold

ya.send_install

ya.last_welcome_page_version

ya.clids

ya.banerid

ya.update_failures

ya.update_last_failure

ya.welcome_page

ya.custom_cookies

ya.bar.ui

ya.bar.uuid

ya.bar.r1

ya.statistics.last_default_check_time

ya.statistics.enabled

ya.tab_finder_enabled_once

ya.crash_dumps_checkbox_was_set

ya.crash_dumps_checkbox_was_set_at_1_0_1084_5404

ya.disk.installer_etag

ya.vk.show_infobar

ya.vk.last_shown

ya.vk.clicks_left

ya.last_runned_version

ya.last_runned_partner_id

ya.education.enabled

ya.custo_education.enabled

ya.searchness.enabled

ya.all_sb_chunks_downloaded_time

ya.splitview.enabled

ya.splitview.visible

ya.sync.device.push_id

ya.sync.device.name

ya.block_flash

ya.extensions_to_replace

ya.mute_state

ya.background_animation.enabled

ya.background_animation.disable_on_low_battery

ya.notifications.extension_settings_migrated

ya.notifications.migrated_fb_token

ya.notifications.migrated_fb_token_expires_in

ya.notifications.migrated_vk_token

ya.notifications.migrated_vk_token_expires_in

ya.notifications.silent_mode_until

ya.notifications.silent_mode

ya.notifications.fb.enabled

ya.notifications.fb.show.comments

ya.notifications.fb.show.friend_requests

ya.notifications.fb.show.messages

ya.notifications.fb.view_content

ya.notifications.fb.num_invitations_shown

ya.notifications.fb.last_time_invitation_shown

ya.notifications.fb.share_accepted

ya.notifications.fb.last_share_propose_time

ya.notifications.vk.enabled

ya.notifications.vk.show.comments

ya.notifications.vk.show.friend_requests

ya.notifications.vk.show.messages

ya.notifications.vk.view_content

ya.notifications.vk.num_invitations_shown

ya.notifications.vk.last_time_invitation_shown

ya.notifications.vk.share_accepted

ya.notifications.vk.last_share_propose_time

ya.notifications.yamail.enabled

ya.notifications.yamail.view_content

show.comments

show.friend_requests

show.messages

omnibox-infobar-panel.enabled

omnibox-infobar-panel.disabled

searchness.disabled

ya.persist_state_updated

network_profile.warnings_left

network_profile.last_warning_time

ya.feedback.update_date

ya.smartback.dictionary_last_modified

torrents.open_mode

apps.app_launch_for_metro_restart

apps.app_launch_for_metro_restart_profile

apps.shortcuts_version

module_conflict.bubble_shown

settings.privacy.drm_salt

settings.privacy.drm_enabled

browser.allow_discard_tabs

browser.allow_discard_tabs_updated

profile.extensions.activity_log.num_consumers_active

proxy.quick_check_enabled

profile.browser_guest_enabled

profile.add_person_enabled

ya.show_newtab_search_arrow

ya.popup_block_enabled

ya.plugin_restricted_document_kinds

ya.custo_tab_activation_order_on_tab_close

ya.custo_ui_first_time_launch

easy_unlock.hardlock_state

password_bubble.timestamp

password_bubble.nopes

password_bubble.interactions

ya.tablo.snapshot_click_map

license_url

feedback.url

conf_policy_url

hXXp://legal.yandex.ru/browser_agreement/

hXXp://legal.yandex.ru/confidential/

SHELL32.dll

ole32.dll

OLEAUT32.dll

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

%s-%Iu

u\uX

Dictionary keys must be quoted.

Unsupported encoding. JSON must be UTF-8.

full-memory-crash-report

(0x%X)

Error (0x%X) while retrieving error. (0x%X)

(%d = %3.1f%%)

Histogram: %s recorded %d samples

(flags = 0x%x)

PlatformFile.UnknownErrors.Windows

user32.dll

0123456789

.syzygy

.thunks

Line: %i, column: %i, %s

D:\BuildAgent\work\9d1bc32700498ce4\src\out\Release\initialexe\browser.exe.pdb

browser.exe

ClearBreakpadPipeEnvironmentVariable

ClearCrashKeyValueImpl

SetCrashKeyValueImpl

SignalChromeElf

browser_elf.dll

WINMM.dll

VERSION.dll

SHLWAPI.dll

RegEnumKeyExW

RegQueryInfoKeyW

RegCreateKeyExW

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

GetAsyncKeyState

CloseWindowStation

CreateWindowStationW

SetProcessWindowStation

USER32.dll

GetProcessHeap

GetWindowsDirectoryW

CreateIoCompletionPort

GetProcessHandleCount

KERNEL32.dll

USERENV.dll

WTSAPI32.dll

GetCPInfo

SetNamedPipeHandleState

TransactNamedPipe

WaitNamedPipeW

zcÁ

.ccc]

.IDATx

.aU/@G

\]]]]_]^

.owO[

.RwuWee

o.yST

G.HIJ

]]][\^__^\]`

i.snh

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="Win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><dependency><dependentAssembly><assemblyIdentity type="win32" name="40.0.2214.3645" version="40.0.2214.3645" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>

0%1X2

0"0)040=0

9%:0:>:]:~:

5-5v5}5

4$4044484

1 1$1(1,10141

8,;0;4;8;<;

6(7,707\7

5$5(5,50545

2 2$2(2,2024282<2

1 1$1,1@1`1

7 7$7(7,707

registering_chrome

uninstalling_chrome_frame

eyndxstp.exe

{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}

app_host.exe

browser.dll

browser_child.dll

npbrowser_frame.dll

browser_frame_helper.dll

browser_frame_helper.exe

browser_launcher.exe

metro_driver.dll

new_browser.exe

old_browser.exe

delegate_execute.exe

nacl64.exe

setup.exe

InstallerSuccessLaunchCmdLine

YandexSSHTM

{45033924-ABD6-4063-AD60-71925CDE206E}

{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}

{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}

Browse the web

Software\Microsoft\Windows\CurrentVersion\Uninstall\Chromium

-chrome

-chromeframe

{8A69D345-D564-463C-AFF1-A69D9E530F96}

{430FD4D0-B729-4F61-AA34-91526481799D}

GoogleUpdateSetup.exe

CFEndTempOptOutCmd

CFOptInCmd

CFOptOutCmd

CFTempOptOutCmd

UninstallCmdLine

WebAccessible

3E40F524-16FA-440A-B919-B44AB355B174

service_update.exe

winrt_helper.dll

{5FAFC90A-D443-4E4F-B69B-DA1F8D553C6C}

d-d-%d

hXXp://browser.

%d.%d.%d

Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser

Google Chrome App Launcher

ChromeAppList

tSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher

{8BA986DA-5100-405E-AA35-86F34A02ACBF}

Google Chrome Frame

Google\Chrome Frame

Chrome in a Frame.

Uninstall Chrome Frame

Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame

\\.\pipe\GoogleCrashServices\

\\.\pipe\YandexCrashServices

error %u

ntdll.dll

chrome.exe

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_TEXT

HKEY_PERFORMANCE_NLSTEXT

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

pipe\

kernelbase.dll

eKey

gdi32.dll

xntdll.dll

wow_helper.exe"

shell32.dll

Reported Crashes.txt

testing_interface.dll

Origin Bound Certs

Certificate Revocation Lists

Custom Dictionary.txt

Login Data

Cached Theme.pak

Web Applications

pepflashplayer.dll

CHROME_METRO_NAV_SEARCH_REQUEST

CHROME_METRO_GET_CURRENT_TAB_INFO

CHROME_METRO_SETTINGS_COMMAND

gcswf32.dll

pdf.dll

yapdf.dll

yadocviewer.dll

npmedia_plugin.dll

pepper/libppeffects.dll

Crash Reports

crash_service.exe

script.log

resources.pak

${windows}

hunspecified-crash-key

%u.%s

reported

mscoree.dll

ADVAPI32.DLL

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

USER32.DLL

portuguese-brazilian

dbghelp.dll

rpcrt4.dll

crash_service.exe --max-reports=10

%s\%s.dmp

x-x-x-xx-xxxxxx

Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32

Software\Microsoft\Windows\CurrentVersion\Run

.Chrome_MessagePumpWindow_%p

Ndebug.log

.\debug.log

\StringFileInfo\xx\%ls

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Crash Reports\events\1060.crashed

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe

chrome_exe

40.0.2214.115

15.2.2214.3645

browser.exe_2752_rwx_2590A000_000F5000:

Vh%Sj&h

hÅ<h}

PVh%s

browser.exe_2752_rwx_2E70A000_000F5000:

Vh%ua&h

h!Br.RPRPjZ

Br.RPRPjZ

Sr.RPRPjZ

PSSSh

r.RPRPjZ

r.RPRPjf

 s.RPRPjZ

browser.exe_2456:

.text

`.rdata

@.data

.rsrc

@.reloc

HtdHtHHHt.HH

j.Yf;

_tcPVj@

.PjRW

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\chrome_exe_main_win.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\client_util.cc

No valid Chrome version found

Failed to load Chrome DLL from

ChromeMain

RelaunchChromeBrowserWithNewCommandLineIfNeeded

Could not find exported function

allow-insecure-websocket-from-https-origin

disable-webgl

disable-web-security

enable-experimental-web-platform-features

enable-tcp-fastopen

enable-viewport

enable-viewport-meta

enable-vtune-support

enable-webgl-draft-extensions

enable-webgl-image-chromium

enable-web-midi

enable-webkit-find-restart

ignore-certificate-errors

remote-debugging-port

renderer-cmd-prefix

testing-fixed-http-port

testing-fixed-https-port

trace-upload-url

utility-cmd-prefix

zygote-cmd-prefix

disable-webrtc-hw-decoding

disable-webrtc-encryption

disable-webrtc-hw-encoding

enable-webrtc-hw-vp8-encoding

enable-webrtc-hw-h264-encoding

disable-webaudio

opera

1.3.21.115

%s-x-x

Chrome

0.0.0.0-devel

%s-%x

url-chunk

font_key_name

subresource_url

CHROME_MAIN_TIME

%x-%x

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\google_update_settings.cc

auto-launch-chrome

chrome

chrome-sxs

new-setup-exe

register-dev-chrome

register-url-protocol

rename-browser-exe

update-setup-exe

toast-results-key

Cannot initialize AppCommands from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_commands.cc

Failed to open key "

Skipping over key "

make-browser-default-after-import

silent-first-import

ya_permanent_state.brand_id

ya_permanent_state.base_host

ya_permanent_state.partner_id

ya_permanent_state.uninstall_survey_url

yandex.ru

iexplore.exe

googlechromeapphost

googlechromeframe

Cannot initialize an AppCommand from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_command.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\language_selector.cc

CHROME_BREAKPAD_PIPE_NAME

CHROME_BREAKPAD_EVENT_NAME

d:\buildagent\work\9d1bc32700498ce4\src\components\crash\app\breakpad_win.cc

NTDLL.DLL

kernel32.dll

d:\buildagent\work\9d1bc32700498ce4\src\sandbox\win\src\sandbox_policy_base.cc

CreateNamedPipeW

NtCreateKey

NtOpenKey

NtOpenKeyEx

AudioCaptureAllowedUrls

AutoSelectCertificateForUrls

ChromeFrameContentTypes

ChromeFrameRendererSettings

ChromeOsLockOnIdleSuspend

ChromeOsMultiProfileUserBehavior

ChromeOsReleaseChannel

ChromeOsReleaseChannelDelegated

CloudPrintProxyEnabled

CloudPrintSubmitEnabled

ContentPackManualBehaviorURLs

CookiesAllowedForUrls

CookiesBlockedForUrls

CookiesSessionOnlyForUrls

DefaultSearchProviderAlternateURLs

DefaultSearchProviderIconURL

DefaultSearchProviderImageURL

DefaultSearchProviderImageURLPostParams

DefaultSearchProviderInstantURL

DefaultSearchProviderInstantURLPostParams

DefaultSearchProviderKeyword

DefaultSearchProviderNewTabURL

DefaultSearchProviderSearchTermsReplacementKey

DefaultSearchProviderSearchURL

DefaultSearchProviderSearchURLPostParams

DefaultSearchProviderSuggestURL

DefaultSearchProviderSuggestURLPostParams

DeviceAllowRedeemChromeOsRegistrationOffers

DeviceLocalAccountAutoLoginBailoutEnabled

DeviceLocalAccountAutoLoginDelay

DeviceLocalAccountAutoLoginId

DeviceLoginScreenDefaultHighContrastEnabled

DeviceLoginScreenDefaultLargeCursorEnabled

DeviceLoginScreenDefaultScreenMagnifierType

DeviceLoginScreenDefaultSpokenFeedbackEnabled

DeviceLoginScreenDefaultVirtualKeyboardEnabled

DeviceLoginScreenPowerManagement

DeviceLoginScreenSaverId

DeviceLoginScreenSaverTimeout

DeviceMetricsReportingEnabled

DeviceStartUpUrls

DeviceUpdateHttpDownloadsEnabled

EnableAuthNegotiatePort

EnableDeprecatedWebPlatformFeatures

EnableOriginBoundCerts

EnableWebBasedSignin

EnterpriseWebStoreName

EnterpriseWebStoreURL

HideWebStoreIcon

HideWebStorePromo

ImagesAllowedForUrls

ImagesBlockedForUrls

ImportAutofillFormData

ImportBookmarks

ImportHistory

ImportHomepage

ImportSavedPasswords

ImportSearchEngine

JavaScriptAllowedForUrls

JavaScriptBlockedForUrls

KeyboardDefaultToFunctionKeys

MetricsReportingEnabled

NotificationsAllowedForUrls

NotificationsBlockedForUrls

PasswordManagerAllowShowPasswords

PasswordManagerEnabled

PluginsAllowedForUrls

PluginsBlockedForUrls

PopupsAllowedForUrls

PopupsBlockedForUrls

ProxyBypassList

ProxyPacUrl

RemoteAccessHostAllowClientPairing

RemoteAccessHostAllowGnubbyAuth

RemoteAccessHostAllowRelayedConnection

RemoteAccessHostDomain

RemoteAccessHostFirewallTraversal

RemoteAccessHostRequireCurtain

RemoteAccessHostRequireTwoFactor

RemoteAccessHostTalkGadgetPrefix

RemoteAccessHostUdpPortRange

RenderInChromeFrameList

ReportDeviceActivityTimes

ReportDeviceBootMode

ReportDeviceLocation

ReportDeviceNetworkInterfaces

ReportDeviceUsers

ReportDeviceVersionInfo

RestoreOnStartupURLs

ShowAppsShortcutInBookmarkBar

SuppressChromeFrameTurndownPrompt

TermsOfServiceURL

TouchVirtualKeyboardEnabled

URLBlacklist

URLWhitelist

VideoCaptureAllowedUrls

VirtualKeyboardEnabled

update_url

^update_url:

CHROME_VERSION

CHROME_SAFE_MODE

2676A9A2-D919-4FEE-9187-152100393AB2

ignore-urlfetcher-cert-requests

install-chrome-app

install-ephemeral-app-from-webstore

pack-extension-key

permission-request-api-url

promo-server-url

proxy-bypass-list

proxy-pac-url

remember-cert-error-decisions

spelling-service-feedback-url

try-chrome-again

variations-server-url

winhttp-proxy-resolver

ya-url-copy-safe-text

skip-first-import

plugins-metadata-server-url

windows8-search

allow-http-screen-capture

app-list-start-page-url

apps-checkout-url

apps-gallery-download-url

apps-gallery-url

apps-gallery-update-url

certificate-transparency-log

disable-extensions-http-throttling

disable-password-manager-reauthentication

disable-quic-port-selection

disable-save-password-bubble

disable-web-resources

enable-auth-negotiate-port

enable-npn-http

enable-quic-port-selection

enable-save-password-bubble

enable-sdch-over-https

enable-user-controlled-alternate-protocol-ports

enable-websocket-over-spdy

enable-website-settings-manager

explicitly-allowed-ports

extensions-not-webstore

help-url

40.0.2214.3645

CHROME_HEADLESS

CHROME_LOG_FILE

CHROME_METRO_CONNECTED

CHROMEOS_SESSION_LOG_DIR

CHROME_CRASHED

CHROME_RESTART

profile.ephemeral_mode

profile.icon_version

session.restore_on_startup

session.restore_on_startup_migrated

session.startup_urls_migration_time

session.restore_to_homepage_if_empty

profile.exited_cleanly

profile.exit_type

profile.managed.custodian_email

profile.managed.custodian_name

profile.managed.custodian_profile_image_url

profile.managed.custodian_profile_url

profile.managed.manual_hosts

profile.managed.manual_urls

profile.managed.second_custodian_email

profile.managed.second_custodian_name

profile.managed.second_custodian_profile_image_url

profile.managed.second_custodian_profile_url

profile.managed.shared_settings

session.startup_urls

session.urls_to_restore_on_startup

intl.app_locale

intl.charset_default

intl.accept_languages

intl.applied_brand_package_accept_languages

intl.static_encodings

webkit.webprefs.fonts.standard.Zyyy

webkit.webprefs.fonts.fixed.Zyyy

webkit.webprefs.fonts.serif.Zyyy

webkit.webprefs.fonts.sansserif.Zyyy

webkit.webprefs.fonts.cursive.Zyyy

webkit.webprefs.fonts.fantasy.Zyyy

webkit.webprefs.fonts.pictograph.Zyyy

webkit.webprefs.fonts.standard

webkit.webprefs.fonts.fixed

webkit.webprefs.fonts.serif

webkit.webprefs.fonts.sansserif

webkit.webprefs.fonts.cursive

webkit.webprefs.fonts.fantasy

webkit.webprefs.fonts.pictograph

webkit.webprefs.fonts.standard.Arab

webkit.webprefs.fonts.fixed.Arab

webkit.webprefs.fonts.serif.Arab

webkit.webprefs.fonts.sansserif.Arab

webkit.webprefs.fonts.standard.Cyrl

webkit.webprefs.fonts.fixed.Cyrl

webkit.webprefs.fonts.serif.Cyrl

webkit.webprefs.fonts.sansserif.Cyrl

webkit.webprefs.fonts.standard.Grek

webkit.webprefs.fonts.fixed.Grek

webkit.webprefs.fonts.serif.Grek

webkit.webprefs.fonts.sansserif.Grek

webkit.webprefs.fonts.standard.Jpan

webkit.webprefs.fonts.fixed.Jpan

webkit.webprefs.fonts.serif.Jpan

webkit.webprefs.fonts.sansserif.Jpan

webkit.webprefs.fonts.standard.Hang

webkit.webprefs.fonts.fixed.Hang

webkit.webprefs.fonts.serif.Hang

webkit.webprefs.fonts.sansserif.Hang

webkit.webprefs.fonts.cursive.Hang

webkit.webprefs.fonts.standard.Hans

webkit.webprefs.fonts.fixed.Hans

webkit.webprefs.fonts.serif.Hans

webkit.webprefs.fonts.sansserif.Hans

webkit.webprefs.fonts.standard.Hant

webkit.webprefs.fonts.fixed.Hant

webkit.webprefs.fonts.serif.Hant

webkit.webprefs.fonts.sansserif.Hant

webkit.webprefs.default_font_size

webkit.webprefs.default_fixed_font_size

webkit.webprefs.minimum_font_size

webkit.webprefs.minimum_logical_font_size

webkit.webprefs.javascript_enabled

webkit.webprefs.web_security_enabled

webkit.webprefs.javascript_can_open_windows_automatically

webkit.webprefs.loads_images_automatically

webkit.webprefs.plugins_enabled

webkit.webprefs.dom_paste_enabled

webkit.webprefs.shrinks_standalone_images_to_fit

webkit.webprefs.uses_universal_detector

webkit.webprefs.text_areas_are_resizable

webkit.webprefs.java_enabled

webkit.webprefs.tabs_to_links

webkit.webprefs.allow_displaying_insecure_content

webkit.webprefs.allow_running_insecure_content

safebrowsing.enabled

safebrowsing.extended_reporting_enabled

safebrowsing.proceed_anyway_disabled

safebrowsing.incident_report_sent

safebrowsing.incidents_sent

incognito.mode_availability

search.suggest_enabled

browser.confirm_to_quit

security.cookie_behavior

download.prompt_for_download

alternate_error_pages.enabled

dns_prefetching.startup_list

dns_prefetching.host_referral_list

spdy.disabled

net.http_server_properties

spdy.servers

spdy.alternate_protocol

protocol.disabled_schemes

instant_ui.zero_suggest_url_prefix

local_state.multiple_profile_prefs_version

dns_prefetching.enabled

net.network_prediction_options

hide_web_store_icon

browser.show_home_button

browser.show_ya_button

browser.show_tablo_on_click

browser.last_session_empty

browser.session_empty

browser.use_mouse_gestures

browser.enable_page_expiration

browser.do_not_count_page_expiration_infobar_closings

profile.recently_selected_encodings

browser.clear_data.browsing_history

browser.clear_data.download_history

browser.clear_data.cache

browser.clear_data.cookies

browser.clear_data.passwords

browser.clear_data.form_data

browser.clear_data.hosted_apps_data

browser.clear_data.content_licenses

browser.enable_spellchecking

browser.speechinput_censor_results

browser.speechinput_tray_notification_shown_contexts

browser.enabled_labs_experiments

ya.experiments_edited_by_user

ya.distrib_default_experiments

browser.enable_autospellcorrect

history.saving_disabled

ya.settings.text_wrap

history.deleting_enabled

settings.force_safesearch

settings.history_recorded

browser.clear_data.time_period

browser.last_clear_browsing_data_time

extensions.theme.pack

extensions.theme.id

extensions.theme.images

extensions.theme.colors

extensions.theme.tints

extensions.theme.properties

extensions.ui.developer_mode

extensions.commands

plugins.last_internal_directory

plugins.plugins_list

plugins.plugins_disabled

plugins.plugins_disabled_exceptions

plugins.plugins_enabled

plugins.migrated_to_pepper_flash

plugins.removed_old_component_pepper_flash_settings

plugins.show_details

plugins.allow_outdated

plugins.always_authorize

plugins.metadata

plugins.resource_cache_update

browser.check_default_browser

browser.default_browser_setting_enabled

browser.custom_chrome_frame

profile.content_settings.plugin_whitelist

profile.block_third_party_cookies

profile.clear_site_data_on_exit

partition.default_zoom_level

profile.default_zoom_level

partition.per_host_zoom_levels

profile.per_host_zoom_levels

autofill.data_model_default

autofill.pay_without_wallet

autofill.wallet_location_disclosure

autofill.save_data

autofill.wallet_shipping_same_as_billing

autofill.generated_card_bubble_times_shown

autofill.rac_dialog_defaults

breadcrumbs.enabled

push_to_call.enabled

push_to_call.wasenabled

ya.disk.want_install

context_translate.enabled

context_translate.translate_words

enable_deprecated_web_platform_features

import_last_source_browser

import_autofill_form_data

import_bookmarks

import_history

import_home_page

import_saved_passwords

import_cookies

import_last_session

import_extensions

import_speed_dial

import_other

ya.statistics.import_rollback

ya.import_new_source_type

ya.import_new_source_profile

import_search_engine

profile.avatar_index

profile.using_default_name

profile.name

profile.using_default_avatar

profile.using_gaia_avatar

profile.managed_user_id

profile.gaia_info_update_time

profile.gaia_info_picture_url

profile.avatar_bubble_tutorial_shown

printing.enabled

printing.print_preview_disabled

profile.managed.default_filtering_behavior

profile.managed_user_creation_allowed

profile.managed_users

profile.reset_prompt_memento

message_center.disabled_extension_ids

message_center.disabled_system_component_ids

message_center.welcome_notification_dismissed

message_center.welcome_notification_dismissed_local

message_center.welcome_notification_previously_popped_up

message_center.welcome_notification_expiration_timestamp

fullscreen.allowed

local_discovery.notifications_enabled

prefs.preference_reset_time

ya.prefetch.latest_update_list

ya.tablo_pins.instance_id

gcm.channel_enabled

gcm.push_messaging_registration_count

easy_unlock.allowed

easy_unlock.enabled

easy_unlock.pairing

easy_unlock.proximity_required

easy_unlock.show_tutorial

zerosuggest.cachedresults

signin.error_stats_update_time

ssl.rev_checking.enabled

ssl.rev_checking.required_for_local_anchors

ssl.version_min

ssl.version_max

ssl.version_fallback_min

ssl.cipher_suites.blacklist

ssl.ssl_record_splitting.disabled

ssl.ssl_blocking_bypassed

user_experience_metrics.reporting_enabled

profile.last_used

profile.last_active_profiles

profile.profiles_created

profile.info_cache

profile.created_by_version

profile.reset_prompt_mementos

user_experience_metrics.stability.page_load_count

user_experience_metrics.stability.renderer_crash_count

user_experience_metrics.stability.extension_renderer_crash_count

user_experience_metrics.stability.renderer_hang_count

user_experience_metrics.stability.child_process_crash_count

user_experience_metrics.stability.other_user_crash_count

user_experience_metrics.stability.kernel_crash_count

user_experience_metrics.stability.system_unclean_shutdowns

user_experience_metrics.stability.plugin_stats2

uninstall_metrics.page_load_count

uninstall_metrics.last_launch_time_sec

uninstall_metrics.last_observed_running_time_sec

browser.suppress_default_browser_prompt_for_version

browser.window_placement

browser.window_placement_popup

task_manager.window_placement

browser.app_window_placement

renderer.memory_cache.size

download.default_directory

download.default_directory_display_name

download.extensions_to_open

download.directory_upgrade

download.open_pdf_in_system_reader

savefile.default_directory

savefile.type

select_file_dialogs.allowed

filebrowser.tasks.default_by_mime_type

filebrowser.tasks.default_by_suffix

selectfile.last_directory

browser.hung_plugin_detect_freq

browser.plugin_message_response_timeout

spellcheck.dictionary

spellcheck.use_spelling_service

protocol_handler.excluded_schemes

safe_browsing.client_key

safe_browsing.wrapped_key

options_window.last_tab_index

certificate_manager_window.last_tab_index

browser.show_omnibox_share_buttons

browser.last_redirect_origin

shutdown.type

shutdown.num_processes

shutdown.num_processes_slow

restart.last.session.on.shutdown

was.restarted

relaunch.mode

extensions.disabled

plugins.disable_plugin_finder

ntp.app_page_names

ntp.collapsed_open_tabs

ntp.collapsed_foreign_sessions

ntp.collapsed_recently_closed_tabs

ntp.collapsed_snapshot_document

ntp.collapsed_sync_promo

ntp.date_resource_server

ntp.most_visited_blacklist

ntp.promo_desktop_session_found

ntp.promo_resource_cache_update

ntp.shown_bookmarks_folder

ntp.shown_page

ntp.tips_resource_server

ntp.webstore_enabled

devtools.adb_key

devtools.disabled

devtools.discover_usb_devices

devtools.edited_files

devtools.file_system_paths

devtools.open_docked

devtools.port_forwarding_enabled

devtools.port_forwarding_default_set

devtools.port_forwarding_config

google.services.password_hash

invalidation_service.use_gcm_channel

sync_promo.startup_count

sync_promo.user_skipped

sync_promo.show_on_first_run_allowed

sync_promo.show_ntp_bubble

browser.web_app.create_on_desktop

browser.web_app.create_in_apps_menu

browser.web_app.create_in_quick_launch_bar

geolocation.access_token

media.default_audio_capture_device

media.default_video_capture_Device

media.device_id_salt

remote_access.host_firewall_traversal

remote_access.host_require_two_factor

remote_access.host_domain

remote_access.host_talkgadget_prefix

remote_access.host_require_curtain

remote_access.host_allow_client_pairing

remote_access.host_allow_gnubby_auth

remote_access.host_allow_relayed_connection

remote_access.host_udp_port_range

printing.print_preview_sticky_settings

cloud_print.dialog_size.width

cloud_print.dialog_size.height

cloud_print.signin_dialog_size.width

cloud_print.signin_dialog_size.height

cloud_print.enabled

cloud_print.proxy_id

cloud_print.auth_token

cloud_print.xmpp_auth_token

cloud_print.email

cloud_print.print_system_settings

cloud_print.enable_job_poll

cloud_print.robot_refresh_token

cloud_print.robot_email

cloud_print.user_settings.connectNewPrinters

cloud_print.xmpp_ping_enabled

cloud_print.xmpp_ping_timeout_sec

cloud_print.user_settings.printers

cloud_print.submit_enabled

cloud_print.user_settings

net.max_connections_per_proxy

hardware.audio_capture_enabled

hardware.audio_capture_allowed_urls

hardware.video_capture_enabled

hardware.video_capture_allowed_urls

hotword.search_enabled_2

hotword.always_on_search_enabled

hotword.audio_logging_enabled

hotword.audio_history_enabled

hotword.previous_language

browser.clear_lso_data_enabled

browser.pepper_flash_settings_enabled

browser.disk_cache_dir

browser.disk_cache_size

browser.last_default_status

browser.media_cache_size

cros.system.releaseChannel

feedback.performance_tracing_enabled

background_contents.registered

browser.shown_autolaunch_infobar

auth.schemes

auth.disable_negotiate_cname_lookup

auth.enable_negotiate_port

auth.server_whitelist

auth.negotiate_delegate_whitelist

auth.gssapi_library_name

auth.allow_cross_origin_prompt

async_dns.enabled

custom_handlers.registered_protocol_handlers

custom_handlers.ignored_protocol_handlers

custom_handlers.policy.registered_protocol_handlers

custom_handlers.policy.ignored_protocol_handlers

custom_handlers.enabled

background_mode.enabled

hardware_acceleration_mode.enabled

policy.device_refresh_rate

message_center.showed_first_run_balloon

message_center.show_icon

message_center.was_forced_on_taskbar

browser.attempted_to_enable_autoupdate

media_galleries.gallery_id

media_galleries.remembered_galleries

media_galleries.last_scan_time

shelf_chrome_icon_index

gesture.max_separation_for_gesture_touches_in_pixels

gesture.semi_long_press_time_in_ms

gesture.tab_scrub_activation_delay_in_ms

gesture.fling_max_cancel_to_down_time_in_ms

gesture.fling_max_tap_gap_time_in_ms

overscroll.horizontal_threshold_complete

overscroll.vertical_threshold_complete

overscroll.minimum_threshold_start

overscroll.minimum_threshold_start_touchpad

overscroll.vertical_threshold_start

overscroll.horizontal_resist_threshold

overscroll.vertical_resist_threshold

ya.send_install

ya.last_welcome_page_version

ya.clids

ya.banerid

ya.update_failures

ya.update_last_failure

ya.welcome_page

ya.custom_cookies

ya.bar.ui

ya.bar.uuid

ya.bar.r1

ya.statistics.last_default_check_time

ya.statistics.enabled

ya.tab_finder_enabled_once

ya.crash_dumps_checkbox_was_set

ya.crash_dumps_checkbox_was_set_at_1_0_1084_5404

ya.disk.installer_etag

ya.vk.show_infobar

ya.vk.last_shown

ya.vk.clicks_left

ya.last_runned_version

ya.last_runned_partner_id

ya.education.enabled

ya.custo_education.enabled

ya.searchness.enabled

ya.all_sb_chunks_downloaded_time

ya.splitview.enabled

ya.splitview.visible

ya.sync.device.push_id

ya.sync.device.name

ya.block_flash

ya.extensions_to_replace

ya.mute_state

ya.background_animation.enabled

ya.background_animation.disable_on_low_battery

ya.notifications.extension_settings_migrated

ya.notifications.migrated_fb_token

ya.notifications.migrated_fb_token_expires_in

ya.notifications.migrated_vk_token

ya.notifications.migrated_vk_token_expires_in

ya.notifications.silent_mode_until

ya.notifications.silent_mode

ya.notifications.fb.enabled

ya.notifications.fb.show.comments

ya.notifications.fb.show.friend_requests

ya.notifications.fb.show.messages

ya.notifications.fb.view_content

ya.notifications.fb.num_invitations_shown

ya.notifications.fb.last_time_invitation_shown

ya.notifications.fb.share_accepted

ya.notifications.fb.last_share_propose_time

ya.notifications.vk.enabled

ya.notifications.vk.show.comments

ya.notifications.vk.show.friend_requests

ya.notifications.vk.show.messages

ya.notifications.vk.view_content

ya.notifications.vk.num_invitations_shown

ya.notifications.vk.last_time_invitation_shown

ya.notifications.vk.share_accepted

ya.notifications.vk.last_share_propose_time

ya.notifications.yamail.enabled

ya.notifications.yamail.view_content

show.comments

show.friend_requests

show.messages

omnibox-infobar-panel.enabled

omnibox-infobar-panel.disabled

searchness.disabled

ya.persist_state_updated

network_profile.warnings_left

network_profile.last_warning_time

ya.feedback.update_date

ya.smartback.dictionary_last_modified

torrents.open_mode

apps.app_launch_for_metro_restart

apps.app_launch_for_metro_restart_profile

apps.shortcuts_version

module_conflict.bubble_shown

settings.privacy.drm_salt

settings.privacy.drm_enabled

browser.allow_discard_tabs

browser.allow_discard_tabs_updated

profile.extensions.activity_log.num_consumers_active

proxy.quick_check_enabled

profile.browser_guest_enabled

profile.add_person_enabled

ya.show_newtab_search_arrow

ya.popup_block_enabled

ya.plugin_restricted_document_kinds

ya.custo_tab_activation_order_on_tab_close

ya.custo_ui_first_time_launch

easy_unlock.hardlock_state

password_bubble.timestamp

password_bubble.nopes

password_bubble.interactions

ya.tablo.snapshot_click_map

license_url

feedback.url

conf_policy_url

hXXp://legal.yandex.ru/browser_agreement/

hXXp://legal.yandex.ru/confidential/

SHELL32.dll

ole32.dll

OLEAUT32.dll

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

%s-%Iu

u\uX

Dictionary keys must be quoted.

Unsupported encoding. JSON must be UTF-8.

full-memory-crash-report

(0x%X)

Error (0x%X) while retrieving error. (0x%X)

(%d = %3.1f%%)

Histogram: %s recorded %d samples

(flags = 0x%x)

PlatformFile.UnknownErrors.Windows

user32.dll

0123456789

.syzygy

.thunks

Line: %i, column: %i, %s

D:\BuildAgent\work\9d1bc32700498ce4\src\out\Release\initialexe\browser.exe.pdb

browser.exe

ClearBreakpadPipeEnvironmentVariable

ClearCrashKeyValueImpl

SetCrashKeyValueImpl

SignalChromeElf

browser_elf.dll

WINMM.dll

VERSION.dll

SHLWAPI.dll

RegEnumKeyExW

RegQueryInfoKeyW

RegCreateKeyExW

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

GetAsyncKeyState

CloseWindowStation

CreateWindowStationW

SetProcessWindowStation

USER32.dll

GetProcessHeap

GetWindowsDirectoryW

CreateIoCompletionPort

GetProcessHandleCount

KERNEL32.dll

USERENV.dll

WTSAPI32.dll

GetCPInfo

SetNamedPipeHandleState

TransactNamedPipe

WaitNamedPipeW

zcÁ

.ccc]

.IDATx

.aU/@G

\]]]]_]^

.owO[

.RwuWee

o.yST

G.HIJ

]]][\^__^\]`

i.snh

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="Win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><dependency><dependentAssembly><assemblyIdentity type="win32" name="40.0.2214.3645" version="40.0.2214.3645" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>

0%1X2

0"0)040=0

9%:0:>:]:~:

5-5v5}5

4$4044484

1 1$1(1,10141

8,;0;4;8;<;

6(7,707\7

5$5(5,50545

2 2$2(2,2024282<2

1 1$1,1@1`1

7 7$7(7,707

registering_chrome

uninstalling_chrome_frame

eyndxstp.exe

{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}

app_host.exe

browser.dll

browser_child.dll

npbrowser_frame.dll

browser_frame_helper.dll

browser_frame_helper.exe

browser_launcher.exe

metro_driver.dll

new_browser.exe

old_browser.exe

delegate_execute.exe

nacl64.exe

setup.exe

InstallerSuccessLaunchCmdLine

YandexSSHTM

{45033924-ABD6-4063-AD60-71925CDE206E}

{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}

{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}

Browse the web

Software\Microsoft\Windows\CurrentVersion\Uninstall\Chromium

-chrome

-chromeframe

{8A69D345-D564-463C-AFF1-A69D9E530F96}

{430FD4D0-B729-4F61-AA34-91526481799D}

GoogleUpdateSetup.exe

CFEndTempOptOutCmd

CFOptInCmd

CFOptOutCmd

CFTempOptOutCmd

UninstallCmdLine

WebAccessible

3E40F524-16FA-440A-B919-B44AB355B174

service_update.exe

winrt_helper.dll

{5FAFC90A-D443-4E4F-B69B-DA1F8D553C6C}

d-d-%d

hXXp://browser.

%d.%d.%d

Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser

Google Chrome App Launcher

ChromeAppList

tSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher

{8BA986DA-5100-405E-AA35-86F34A02ACBF}

Google Chrome Frame

Google\Chrome Frame

Chrome in a Frame.

Uninstall Chrome Frame

Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame

\\.\pipe\GoogleCrashServices\

\\.\pipe\YandexCrashServices

error %u

ntdll.dll

chrome.exe

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_TEXT

HKEY_PERFORMANCE_NLSTEXT

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

pipe\

kernelbase.dll

eKey

gdi32.dll

xntdll.dll

wow_helper.exe"

shell32.dll

Reported Crashes.txt

testing_interface.dll

Origin Bound Certs

Certificate Revocation Lists

Custom Dictionary.txt

Login Data

Cached Theme.pak

Web Applications

pepflashplayer.dll

CHROME_METRO_NAV_SEARCH_REQUEST

CHROME_METRO_GET_CURRENT_TAB_INFO

CHROME_METRO_SETTINGS_COMMAND

gcswf32.dll

pdf.dll

yapdf.dll

yadocviewer.dll

npmedia_plugin.dll

pepper/libppeffects.dll

Crash Reports

crash_service.exe

script.log

resources.pak

${windows}

hunspecified-crash-key

%u.%s

reported

mscoree.dll

ADVAPI32.DLL

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

USER32.DLL

portuguese-brazilian

dbghelp.dll

rpcrt4.dll

crash_service.exe --max-reports=10

%s\%s.dmp

x-x-x-xx-xxxxxx

Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32

Software\Microsoft\Windows\CurrentVersion\Run

.Chrome_MessagePumpWindow_%p

Ndebug.log

.\debug.log

\StringFileInfo\xx\%ls

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Crash Reports\events\2456.crashed

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe

chrome_exe

40.0.2214.115

15.2.2214.3645

browser.exe_3932:

.text

`.rdata

@.data

.rsrc

@.reloc

HtdHtHHHt.HH

j.Yf;

_tcPVj@

.PjRW

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\chrome_exe_main_win.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\client_util.cc

No valid Chrome version found

Failed to load Chrome DLL from

ChromeMain

RelaunchChromeBrowserWithNewCommandLineIfNeeded

Could not find exported function

allow-insecure-websocket-from-https-origin

disable-webgl

disable-web-security

enable-experimental-web-platform-features

enable-tcp-fastopen

enable-viewport

enable-viewport-meta

enable-vtune-support

enable-webgl-draft-extensions

enable-webgl-image-chromium

enable-web-midi

enable-webkit-find-restart

ignore-certificate-errors

remote-debugging-port

renderer-cmd-prefix

testing-fixed-http-port

testing-fixed-https-port

trace-upload-url

utility-cmd-prefix

zygote-cmd-prefix

disable-webrtc-hw-decoding

disable-webrtc-encryption

disable-webrtc-hw-encoding

enable-webrtc-hw-vp8-encoding

enable-webrtc-hw-h264-encoding

disable-webaudio

opera

1.3.21.115

%s-x-x

Chrome

0.0.0.0-devel

%s-%x

url-chunk

font_key_name

subresource_url

CHROME_MAIN_TIME

%x-%x

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\google_update_settings.cc

auto-launch-chrome

chrome

chrome-sxs

new-setup-exe

register-dev-chrome

register-url-protocol

rename-browser-exe

update-setup-exe

toast-results-key

Cannot initialize AppCommands from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_commands.cc

Failed to open key "

Skipping over key "

make-browser-default-after-import

silent-first-import

ya_permanent_state.brand_id

ya_permanent_state.base_host

ya_permanent_state.partner_id

ya_permanent_state.uninstall_survey_url

yandex.ru

iexplore.exe

googlechromeapphost

googlechromeframe

Cannot initialize an AppCommand from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_command.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\language_selector.cc

CHROME_BREAKPAD_PIPE_NAME

CHROME_BREAKPAD_EVENT_NAME

d:\buildagent\work\9d1bc32700498ce4\src\components\crash\app\breakpad_win.cc

NTDLL.DLL

kernel32.dll

d:\buildagent\work\9d1bc32700498ce4\src\sandbox\win\src\sandbox_policy_base.cc

CreateNamedPipeW

NtCreateKey

NtOpenKey

NtOpenKeyEx

AudioCaptureAllowedUrls

AutoSelectCertificateForUrls

ChromeFrameContentTypes

ChromeFrameRendererSettings

ChromeOsLockOnIdleSuspend

ChromeOsMultiProfileUserBehavior

ChromeOsReleaseChannel

ChromeOsReleaseChannelDelegated

CloudPrintProxyEnabled

CloudPrintSubmitEnabled

ContentPackManualBehaviorURLs

CookiesAllowedForUrls

CookiesBlockedForUrls

CookiesSessionOnlyForUrls

DefaultSearchProviderAlternateURLs

DefaultSearchProviderIconURL

DefaultSearchProviderImageURL

DefaultSearchProviderImageURLPostParams

DefaultSearchProviderInstantURL

DefaultSearchProviderInstantURLPostParams

DefaultSearchProviderKeyword

DefaultSearchProviderNewTabURL

DefaultSearchProviderSearchTermsReplacementKey

DefaultSearchProviderSearchURL

DefaultSearchProviderSearchURLPostParams

DefaultSearchProviderSuggestURL

DefaultSearchProviderSuggestURLPostParams

DeviceAllowRedeemChromeOsRegistrationOffers

DeviceLocalAccountAutoLoginBailoutEnabled

DeviceLocalAccountAutoLoginDelay

DeviceLocalAccountAutoLoginId

DeviceLoginScreenDefaultHighContrastEnabled

DeviceLoginScreenDefaultLargeCursorEnabled

DeviceLoginScreenDefaultScreenMagnifierType

DeviceLoginScreenDefaultSpokenFeedbackEnabled

DeviceLoginScreenDefaultVirtualKeyboardEnabled

DeviceLoginScreenPowerManagement

DeviceLoginScreenSaverId

DeviceLoginScreenSaverTimeout

DeviceMetricsReportingEnabled

DeviceStartUpUrls

DeviceUpdateHttpDownloadsEnabled

EnableAuthNegotiatePort

EnableDeprecatedWebPlatformFeatures

EnableOriginBoundCerts

EnableWebBasedSignin

EnterpriseWebStoreName

EnterpriseWebStoreURL

HideWebStoreIcon

HideWebStorePromo

ImagesAllowedForUrls

ImagesBlockedForUrls

ImportAutofillFormData

ImportBookmarks

ImportHistory

ImportHomepage

ImportSavedPasswords

ImportSearchEngine

JavaScriptAllowedForUrls

JavaScriptBlockedForUrls

KeyboardDefaultToFunctionKeys

MetricsReportingEnabled

NotificationsAllowedForUrls

NotificationsBlockedForUrls

PasswordManagerAllowShowPasswords

PasswordManagerEnabled

PluginsAllowedForUrls

PluginsBlockedForUrls

PopupsAllowedForUrls

PopupsBlockedForUrls

ProxyBypassList

ProxyPacUrl

RemoteAccessHostAllowClientPairing

RemoteAccessHostAllowGnubbyAuth

RemoteAccessHostAllowRelayedConnection

RemoteAccessHostDomain

RemoteAccessHostFirewallTraversal

RemoteAccessHostRequireCurtain

RemoteAccessHostRequireTwoFactor

RemoteAccessHostTalkGadgetPrefix

RemoteAccessHostUdpPortRange

RenderInChromeFrameList

ReportDeviceActivityTimes

ReportDeviceBootMode

ReportDeviceLocation

ReportDeviceNetworkInterfaces

ReportDeviceUsers

ReportDeviceVersionInfo

RestoreOnStartupURLs

ShowAppsShortcutInBookmarkBar

SuppressChromeFrameTurndownPrompt

TermsOfServiceURL

TouchVirtualKeyboardEnabled

URLBlacklist

URLWhitelist

VideoCaptureAllowedUrls

VirtualKeyboardEnabled

update_url

^update_url:

CHROME_VERSION

CHROME_SAFE_MODE

2676A9A2-D919-4FEE-9187-152100393AB2

ignore-urlfetcher-cert-requests

install-chrome-app

install-ephemeral-app-from-webstore

pack-extension-key

permission-request-api-url

promo-server-url

proxy-bypass-list

proxy-pac-url

remember-cert-error-decisions

spelling-service-feedback-url

try-chrome-again

variations-server-url

winhttp-proxy-resolver

ya-url-copy-safe-text

skip-first-import

plugins-metadata-server-url

windows8-search

allow-http-screen-capture

app-list-start-page-url

apps-checkout-url

apps-gallery-download-url

apps-gallery-url

apps-gallery-update-url

certificate-transparency-log

disable-extensions-http-throttling

disable-password-manager-reauthentication

disable-quic-port-selection

disable-save-password-bubble

disable-web-resources

enable-auth-negotiate-port

enable-npn-http

enable-quic-port-selection

enable-save-password-bubble

enable-sdch-over-https

enable-user-controlled-alternate-protocol-ports

enable-websocket-over-spdy

enable-website-settings-manager

explicitly-allowed-ports

extensions-not-webstore

help-url

40.0.2214.3645

CHROME_HEADLESS

CHROME_LOG_FILE

CHROME_METRO_CONNECTED

CHROMEOS_SESSION_LOG_DIR

CHROME_CRASHED

CHROME_RESTART

profile.ephemeral_mode

profile.icon_version

session.restore_on_startup

session.restore_on_startup_migrated

session.startup_urls_migration_time

session.restore_to_homepage_if_empty

profile.exited_cleanly

profile.exit_type

profile.managed.custodian_email

profile.managed.custodian_name

profile.managed.custodian_profile_image_url

profile.managed.custodian_profile_url

profile.managed.manual_hosts

profile.managed.manual_urls

profile.managed.second_custodian_email

profile.managed.second_custodian_name

profile.managed.second_custodian_profile_image_url

profile.managed.second_custodian_profile_url

profile.managed.shared_settings

session.startup_urls

session.urls_to_restore_on_startup

intl.app_locale

intl.charset_default

intl.accept_languages

intl.applied_brand_package_accept_languages

intl.static_encodings

webkit.webprefs.fonts.standard.Zyyy

webkit.webprefs.fonts.fixed.Zyyy

webkit.webprefs.fonts.serif.Zyyy

webkit.webprefs.fonts.sansserif.Zyyy

webkit.webprefs.fonts.cursive.Zyyy

webkit.webprefs.fonts.fantasy.Zyyy

webkit.webprefs.fonts.pictograph.Zyyy

webkit.webprefs.fonts.standard

webkit.webprefs.fonts.fixed

webkit.webprefs.fonts.serif

webkit.webprefs.fonts.sansserif

webkit.webprefs.fonts.cursive

webkit.webprefs.fonts.fantasy

webkit.webprefs.fonts.pictograph

webkit.webprefs.fonts.standard.Arab

webkit.webprefs.fonts.fixed.Arab

webkit.webprefs.fonts.serif.Arab

webkit.webprefs.fonts.sansserif.Arab

webkit.webprefs.fonts.standard.Cyrl

webkit.webprefs.fonts.fixed.Cyrl

webkit.webprefs.fonts.serif.Cyrl

webkit.webprefs.fonts.sansserif.Cyrl

webkit.webprefs.fonts.standard.Grek

webkit.webprefs.fonts.fixed.Grek

webkit.webprefs.fonts.serif.Grek

webkit.webprefs.fonts.sansserif.Grek

webkit.webprefs.fonts.standard.Jpan

webkit.webprefs.fonts.fixed.Jpan

webkit.webprefs.fonts.serif.Jpan

webkit.webprefs.fonts.sansserif.Jpan

webkit.webprefs.fonts.standard.Hang

webkit.webprefs.fonts.fixed.Hang

webkit.webprefs.fonts.serif.Hang

webkit.webprefs.fonts.sansserif.Hang

webkit.webprefs.fonts.cursive.Hang

webkit.webprefs.fonts.standard.Hans

webkit.webprefs.fonts.fixed.Hans

webkit.webprefs.fonts.serif.Hans

webkit.webprefs.fonts.sansserif.Hans

webkit.webprefs.fonts.standard.Hant

webkit.webprefs.fonts.fixed.Hant

webkit.webprefs.fonts.serif.Hant

webkit.webprefs.fonts.sansserif.Hant

webkit.webprefs.default_font_size

webkit.webprefs.default_fixed_font_size

webkit.webprefs.minimum_font_size

webkit.webprefs.minimum_logical_font_size

webkit.webprefs.javascript_enabled

webkit.webprefs.web_security_enabled

webkit.webprefs.javascript_can_open_windows_automatically

webkit.webprefs.loads_images_automatically

webkit.webprefs.plugins_enabled

webkit.webprefs.dom_paste_enabled

webkit.webprefs.shrinks_standalone_images_to_fit

webkit.webprefs.uses_universal_detector

webkit.webprefs.text_areas_are_resizable

webkit.webprefs.java_enabled

webkit.webprefs.tabs_to_links

webkit.webprefs.allow_displaying_insecure_content

webkit.webprefs.allow_running_insecure_content

safebrowsing.enabled

safebrowsing.extended_reporting_enabled

safebrowsing.proceed_anyway_disabled

safebrowsing.incident_report_sent

safebrowsing.incidents_sent

incognito.mode_availability

search.suggest_enabled

browser.confirm_to_quit

security.cookie_behavior

download.prompt_for_download

alternate_error_pages.enabled

dns_prefetching.startup_list

dns_prefetching.host_referral_list

spdy.disabled

net.http_server_properties

spdy.servers

spdy.alternate_protocol

protocol.disabled_schemes

instant_ui.zero_suggest_url_prefix

local_state.multiple_profile_prefs_version

dns_prefetching.enabled

net.network_prediction_options

hide_web_store_icon

browser.show_home_button

browser.show_ya_button

browser.show_tablo_on_click

browser.last_session_empty

browser.session_empty

browser.use_mouse_gestures

browser.enable_page_expiration

browser.do_not_count_page_expiration_infobar_closings

profile.recently_selected_encodings

browser.clear_data.browsing_history

browser.clear_data.download_history

browser.clear_data.cache

browser.clear_data.cookies

browser.clear_data.passwords

browser.clear_data.form_data

browser.clear_data.hosted_apps_data

browser.clear_data.content_licenses

browser.enable_spellchecking

browser.speechinput_censor_results

browser.speechinput_tray_notification_shown_contexts

browser.enabled_labs_experiments

ya.experiments_edited_by_user

ya.distrib_default_experiments

browser.enable_autospellcorrect

history.saving_disabled

ya.settings.text_wrap

history.deleting_enabled

settings.force_safesearch

settings.history_recorded

browser.clear_data.time_period

browser.last_clear_browsing_data_time

extensions.theme.pack

extensions.theme.id

extensions.theme.images

extensions.theme.colors

extensions.theme.tints

extensions.theme.properties

extensions.ui.developer_mode

extensions.commands

plugins.last_internal_directory

plugins.plugins_list

plugins.plugins_disabled

plugins.plugins_disabled_exceptions

plugins.plugins_enabled

plugins.migrated_to_pepper_flash

plugins.removed_old_component_pepper_flash_settings

plugins.show_details

plugins.allow_outdated

plugins.always_authorize

plugins.metadata

plugins.resource_cache_update

browser.check_default_browser

browser.default_browser_setting_enabled

browser.custom_chrome_frame

profile.content_settings.plugin_whitelist

profile.block_third_party_cookies

profile.clear_site_data_on_exit

partition.default_zoom_level

profile.default_zoom_level

partition.per_host_zoom_levels

profile.per_host_zoom_levels

autofill.data_model_default

autofill.pay_without_wallet

autofill.wallet_location_disclosure

autofill.save_data

autofill.wallet_shipping_same_as_billing

autofill.generated_card_bubble_times_shown

autofill.rac_dialog_defaults

breadcrumbs.enabled

push_to_call.enabled

push_to_call.wasenabled

ya.disk.want_install

context_translate.enabled

context_translate.translate_words

enable_deprecated_web_platform_features

import_last_source_browser

import_autofill_form_data

import_bookmarks

import_history

import_home_page

import_saved_passwords

import_cookies

import_last_session

import_extensions

import_speed_dial

import_other

ya.statistics.import_rollback

ya.import_new_source_type

ya.import_new_source_profile

import_search_engine

profile.avatar_index

profile.using_default_name

profile.name

profile.using_default_avatar

profile.using_gaia_avatar

profile.managed_user_id

profile.gaia_info_update_time

profile.gaia_info_picture_url

profile.avatar_bubble_tutorial_shown

printing.enabled

printing.print_preview_disabled

profile.managed.default_filtering_behavior

profile.managed_user_creation_allowed

profile.managed_users

profile.reset_prompt_memento

message_center.disabled_extension_ids

message_center.disabled_system_component_ids

message_center.welcome_notification_dismissed

message_center.welcome_notification_dismissed_local

message_center.welcome_notification_previously_popped_up

message_center.welcome_notification_expiration_timestamp

fullscreen.allowed

local_discovery.notifications_enabled

prefs.preference_reset_time

ya.prefetch.latest_update_list

ya.tablo_pins.instance_id

gcm.channel_enabled

gcm.push_messaging_registration_count

easy_unlock.allowed

easy_unlock.enabled

easy_unlock.pairing

easy_unlock.proximity_required

easy_unlock.show_tutorial

zerosuggest.cachedresults

signin.error_stats_update_time

ssl.rev_checking.enabled

ssl.rev_checking.required_for_local_anchors

ssl.version_min

ssl.version_max

ssl.version_fallback_min

ssl.cipher_suites.blacklist

ssl.ssl_record_splitting.disabled

ssl.ssl_blocking_bypassed

user_experience_metrics.reporting_enabled

profile.last_used

profile.last_active_profiles

profile.profiles_created

profile.info_cache

profile.created_by_version

profile.reset_prompt_mementos

user_experience_metrics.stability.page_load_count

user_experience_metrics.stability.renderer_crash_count

user_experience_metrics.stability.extension_renderer_crash_count

user_experience_metrics.stability.renderer_hang_count

user_experience_metrics.stability.child_process_crash_count

user_experience_metrics.stability.other_user_crash_count

user_experience_metrics.stability.kernel_crash_count

user_experience_metrics.stability.system_unclean_shutdowns

user_experience_metrics.stability.plugin_stats2

uninstall_metrics.page_load_count

uninstall_metrics.last_launch_time_sec

uninstall_metrics.last_observed_running_time_sec

browser.suppress_default_browser_prompt_for_version

browser.window_placement

browser.window_placement_popup

task_manager.window_placement

browser.app_window_placement

renderer.memory_cache.size

download.default_directory

download.default_directory_display_name

download.extensions_to_open

download.directory_upgrade

download.open_pdf_in_system_reader

savefile.default_directory

savefile.type

select_file_dialogs.allowed

filebrowser.tasks.default_by_mime_type

filebrowser.tasks.default_by_suffix

selectfile.last_directory

browser.hung_plugin_detect_freq

browser.plugin_message_response_timeout

spellcheck.dictionary

spellcheck.use_spelling_service

protocol_handler.excluded_schemes

safe_browsing.client_key

safe_browsing.wrapped_key

options_window.last_tab_index

certificate_manager_window.last_tab_index

browser.show_omnibox_share_buttons

browser.last_redirect_origin

shutdown.type

shutdown.num_processes

shutdown.num_processes_slow

restart.last.session.on.shutdown

was.restarted

relaunch.mode

extensions.disabled

plugins.disable_plugin_finder

ntp.app_page_names

ntp.collapsed_open_tabs

ntp.collapsed_foreign_sessions

ntp.collapsed_recently_closed_tabs

ntp.collapsed_snapshot_document

ntp.collapsed_sync_promo

ntp.date_resource_server

ntp.most_visited_blacklist

ntp.promo_desktop_session_found

ntp.promo_resource_cache_update

ntp.shown_bookmarks_folder

ntp.shown_page

ntp.tips_resource_server

ntp.webstore_enabled

devtools.adb_key

devtools.disabled

devtools.discover_usb_devices

devtools.edited_files

devtools.file_system_paths

devtools.open_docked

devtools.port_forwarding_enabled

devtools.port_forwarding_default_set

devtools.port_forwarding_config

google.services.password_hash

invalidation_service.use_gcm_channel

sync_promo.startup_count

sync_promo.user_skipped

sync_promo.show_on_first_run_allowed

sync_promo.show_ntp_bubble

browser.web_app.create_on_desktop

browser.web_app.create_in_apps_menu

browser.web_app.create_in_quick_launch_bar

geolocation.access_token

media.default_audio_capture_device

media.default_video_capture_Device

media.device_id_salt

remote_access.host_firewall_traversal

remote_access.host_require_two_factor

remote_access.host_domain

remote_access.host_talkgadget_prefix

remote_access.host_require_curtain

remote_access.host_allow_client_pairing

remote_access.host_allow_gnubby_auth

remote_access.host_allow_relayed_connection

remote_access.host_udp_port_range

printing.print_preview_sticky_settings

cloud_print.dialog_size.width

cloud_print.dialog_size.height

cloud_print.signin_dialog_size.width

cloud_print.signin_dialog_size.height

cloud_print.enabled

cloud_print.proxy_id

cloud_print.auth_token

cloud_print.xmpp_auth_token

cloud_print.email

cloud_print.print_system_settings

cloud_print.enable_job_poll

cloud_print.robot_refresh_token

cloud_print.robot_email

cloud_print.user_settings.connectNewPrinters

cloud_print.xmpp_ping_enabled

cloud_print.xmpp_ping_timeout_sec

cloud_print.user_settings.printers

cloud_print.submit_enabled

cloud_print.user_settings

net.max_connections_per_proxy

hardware.audio_capture_enabled

hardware.audio_capture_allowed_urls

hardware.video_capture_enabled

hardware.video_capture_allowed_urls

hotword.search_enabled_2

hotword.always_on_search_enabled

hotword.audio_logging_enabled

hotword.audio_history_enabled

hotword.previous_language

browser.clear_lso_data_enabled

browser.pepper_flash_settings_enabled

browser.disk_cache_dir

browser.disk_cache_size

browser.last_default_status

browser.media_cache_size

cros.system.releaseChannel

feedback.performance_tracing_enabled

background_contents.registered

browser.shown_autolaunch_infobar

auth.schemes

auth.disable_negotiate_cname_lookup

auth.enable_negotiate_port

auth.server_whitelist

auth.negotiate_delegate_whitelist

auth.gssapi_library_name

auth.allow_cross_origin_prompt

async_dns.enabled

custom_handlers.registered_protocol_handlers

custom_handlers.ignored_protocol_handlers

custom_handlers.policy.registered_protocol_handlers

custom_handlers.policy.ignored_protocol_handlers

custom_handlers.enabled

background_mode.enabled

hardware_acceleration_mode.enabled

policy.device_refresh_rate

message_center.showed_first_run_balloon

message_center.show_icon

message_center.was_forced_on_taskbar

browser.attempted_to_enable_autoupdate

media_galleries.gallery_id

media_galleries.remembered_galleries

media_galleries.last_scan_time

shelf_chrome_icon_index

gesture.max_separation_for_gesture_touches_in_pixels

gesture.semi_long_press_time_in_ms

gesture.tab_scrub_activation_delay_in_ms

gesture.fling_max_cancel_to_down_time_in_ms

gesture.fling_max_tap_gap_time_in_ms

overscroll.horizontal_threshold_complete

overscroll.vertical_threshold_complete

overscroll.minimum_threshold_start

overscroll.minimum_threshold_start_touchpad

overscroll.vertical_threshold_start

overscroll.horizontal_resist_threshold

overscroll.vertical_resist_threshold

ya.send_install

ya.last_welcome_page_version

ya.clids

ya.banerid

ya.update_failures

ya.update_last_failure

ya.welcome_page

ya.custom_cookies

ya.bar.ui

ya.bar.uuid

ya.bar.r1

ya.statistics.last_default_check_time

ya.statistics.enabled

ya.tab_finder_enabled_once

ya.crash_dumps_checkbox_was_set

ya.crash_dumps_checkbox_was_set_at_1_0_1084_5404

ya.disk.installer_etag

ya.vk.show_infobar

ya.vk.last_shown

ya.vk.clicks_left

ya.last_runned_version

ya.last_runned_partner_id

ya.education.enabled

ya.custo_education.enabled

ya.searchness.enabled

ya.all_sb_chunks_downloaded_time

ya.splitview.enabled

ya.splitview.visible

ya.sync.device.push_id

ya.sync.device.name

ya.block_flash

ya.extensions_to_replace

ya.mute_state

ya.background_animation.enabled

ya.background_animation.disable_on_low_battery

ya.notifications.extension_settings_migrated

ya.notifications.migrated_fb_token

ya.notifications.migrated_fb_token_expires_in

ya.notifications.migrated_vk_token

ya.notifications.migrated_vk_token_expires_in

ya.notifications.silent_mode_until

ya.notifications.silent_mode

ya.notifications.fb.enabled

ya.notifications.fb.show.comments

ya.notifications.fb.show.friend_requests

ya.notifications.fb.show.messages

ya.notifications.fb.view_content

ya.notifications.fb.num_invitations_shown

ya.notifications.fb.last_time_invitation_shown

ya.notifications.fb.share_accepted

ya.notifications.fb.last_share_propose_time

ya.notifications.vk.enabled

ya.notifications.vk.show.comments

ya.notifications.vk.show.friend_requests

ya.notifications.vk.show.messages

ya.notifications.vk.view_content

ya.notifications.vk.num_invitations_shown

ya.notifications.vk.last_time_invitation_shown

ya.notifications.vk.share_accepted

ya.notifications.vk.last_share_propose_time

ya.notifications.yamail.enabled

ya.notifications.yamail.view_content

show.comments

show.friend_requests

show.messages

omnibox-infobar-panel.enabled

omnibox-infobar-panel.disabled

searchness.disabled

ya.persist_state_updated

network_profile.warnings_left

network_profile.last_warning_time

ya.feedback.update_date

ya.smartback.dictionary_last_modified

torrents.open_mode

apps.app_launch_for_metro_restart

apps.app_launch_for_metro_restart_profile

apps.shortcuts_version

module_conflict.bubble_shown

settings.privacy.drm_salt

settings.privacy.drm_enabled

browser.allow_discard_tabs

browser.allow_discard_tabs_updated

profile.extensions.activity_log.num_consumers_active

proxy.quick_check_enabled

profile.browser_guest_enabled

profile.add_person_enabled

ya.show_newtab_search_arrow

ya.popup_block_enabled

ya.plugin_restricted_document_kinds

ya.custo_tab_activation_order_on_tab_close

ya.custo_ui_first_time_launch

easy_unlock.hardlock_state

password_bubble.timestamp

password_bubble.nopes

password_bubble.interactions

ya.tablo.snapshot_click_map

license_url

feedback.url

conf_policy_url

hXXp://legal.yandex.ru/browser_agreement/

hXXp://legal.yandex.ru/confidential/

SHELL32.dll

ole32.dll

OLEAUT32.dll

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

%s-%Iu

u\uX

Dictionary keys must be quoted.

Unsupported encoding. JSON must be UTF-8.

full-memory-crash-report

(0x%X)

Error (0x%X) while retrieving error. (0x%X)

(%d = %3.1f%%)

Histogram: %s recorded %d samples

(flags = 0x%x)

PlatformFile.UnknownErrors.Windows

user32.dll

0123456789

.syzygy

.thunks

Line: %i, column: %i, %s

D:\BuildAgent\work\9d1bc32700498ce4\src\out\Release\initialexe\browser.exe.pdb

browser.exe

ClearBreakpadPipeEnvironmentVariable

ClearCrashKeyValueImpl

SetCrashKeyValueImpl

SignalChromeElf

browser_elf.dll

WINMM.dll

VERSION.dll

SHLWAPI.dll

RegEnumKeyExW

RegQueryInfoKeyW

RegCreateKeyExW

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

GetAsyncKeyState

CloseWindowStation

CreateWindowStationW

SetProcessWindowStation

USER32.dll

GetProcessHeap

GetWindowsDirectoryW

CreateIoCompletionPort

GetProcessHandleCount

KERNEL32.dll

USERENV.dll

WTSAPI32.dll

GetCPInfo

SetNamedPipeHandleState

TransactNamedPipe

WaitNamedPipeW

zcÁ

.ccc]

.IDATx

.aU/@G

\]]]]_]^

.owO[

.RwuWee

o.yST

G.HIJ

]]][\^__^\]`

i.snh

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="Win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><dependency><dependentAssembly><assemblyIdentity type="win32" name="40.0.2214.3645" version="40.0.2214.3645" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>

0%1X2

0"0)040=0

9%:0:>:]:~:

5-5v5}5

4$4044484

1 1$1(1,10141

8,;0;4;8;<;

6(7,707\7

5$5(5,50545

2 2$2(2,2024282<2

1 1$1,1@1`1

7 7$7(7,707

registering_chrome

uninstalling_chrome_frame

eyndxstp.exe

{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}

app_host.exe

browser.dll

browser_child.dll

npbrowser_frame.dll

browser_frame_helper.dll

browser_frame_helper.exe

browser_launcher.exe

metro_driver.dll

new_browser.exe

old_browser.exe

delegate_execute.exe

nacl64.exe

setup.exe

InstallerSuccessLaunchCmdLine

YandexSSHTM

{45033924-ABD6-4063-AD60-71925CDE206E}

{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}

{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}

Browse the web

Software\Microsoft\Windows\CurrentVersion\Uninstall\Chromium

-chrome

-chromeframe

{8A69D345-D564-463C-AFF1-A69D9E530F96}

{430FD4D0-B729-4F61-AA34-91526481799D}

GoogleUpdateSetup.exe

CFEndTempOptOutCmd

CFOptInCmd

CFOptOutCmd

CFTempOptOutCmd

UninstallCmdLine

WebAccessible

3E40F524-16FA-440A-B919-B44AB355B174

service_update.exe

winrt_helper.dll

{5FAFC90A-D443-4E4F-B69B-DA1F8D553C6C}

d-d-%d

hXXp://browser.

%d.%d.%d

Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser

Google Chrome App Launcher

ChromeAppList

tSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher

{8BA986DA-5100-405E-AA35-86F34A02ACBF}

Google Chrome Frame

Google\Chrome Frame

Chrome in a Frame.

Uninstall Chrome Frame

Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame

\\.\pipe\GoogleCrashServices\

\\.\pipe\YandexCrashServices

error %u

ntdll.dll

chrome.exe

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_TEXT

HKEY_PERFORMANCE_NLSTEXT

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

pipe\

kernelbase.dll

eKey

gdi32.dll

xntdll.dll

wow_helper.exe"

shell32.dll

Reported Crashes.txt

testing_interface.dll

Origin Bound Certs

Certificate Revocation Lists

Custom Dictionary.txt

Login Data

Cached Theme.pak

Web Applications

pepflashplayer.dll

CHROME_METRO_NAV_SEARCH_REQUEST

CHROME_METRO_GET_CURRENT_TAB_INFO

CHROME_METRO_SETTINGS_COMMAND

gcswf32.dll

pdf.dll

yapdf.dll

yadocviewer.dll

npmedia_plugin.dll

pepper/libppeffects.dll

Crash Reports

crash_service.exe

script.log

resources.pak

${windows}

hunspecified-crash-key

%u.%s

reported

mscoree.dll

ADVAPI32.DLL

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

USER32.DLL

portuguese-brazilian

dbghelp.dll

rpcrt4.dll

crash_service.exe --max-reports=10

%s\%s.dmp

x-x-x-xx-xxxxxx

Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32

Software\Microsoft\Windows\CurrentVersion\Run

.Chrome_MessagePumpWindow_%p

Ndebug.log

.\debug.log

\StringFileInfo\xx\%ls

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Crash Reports\events\3932.crashed

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe

chrome_exe

40.0.2214.115

15.2.2214.3645

browser.exe_3396:

.text

`.rdata

@.data

.rsrc

@.reloc

HtdHtHHHt.HH

j.Yf;

_tcPVj@

.PjRW

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\chrome_exe_main_win.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\app\client_util.cc

No valid Chrome version found

Failed to load Chrome DLL from

ChromeMain

RelaunchChromeBrowserWithNewCommandLineIfNeeded

Could not find exported function

allow-insecure-websocket-from-https-origin

disable-webgl

disable-web-security

enable-experimental-web-platform-features

enable-tcp-fastopen

enable-viewport

enable-viewport-meta

enable-vtune-support

enable-webgl-draft-extensions

enable-webgl-image-chromium

enable-web-midi

enable-webkit-find-restart

ignore-certificate-errors

remote-debugging-port

renderer-cmd-prefix

testing-fixed-http-port

testing-fixed-https-port

trace-upload-url

utility-cmd-prefix

zygote-cmd-prefix

disable-webrtc-hw-decoding

disable-webrtc-encryption

disable-webrtc-hw-encoding

enable-webrtc-hw-vp8-encoding

enable-webrtc-hw-h264-encoding

disable-webaudio

opera

1.3.21.115

%s-x-x

Chrome

0.0.0.0-devel

%s-%x

url-chunk

font_key_name

subresource_url

CHROME_MAIN_TIME

%x-%x

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\google_update_settings.cc

auto-launch-chrome

chrome

chrome-sxs

new-setup-exe

register-dev-chrome

register-url-protocol

rename-browser-exe

update-setup-exe

toast-results-key

Cannot initialize AppCommands from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_commands.cc

Failed to open key "

Skipping over key "

make-browser-default-after-import

silent-first-import

ya_permanent_state.brand_id

ya_permanent_state.base_host

ya_permanent_state.partner_id

ya_permanent_state.uninstall_survey_url

yandex.ru

iexplore.exe

googlechromeapphost

googlechromeframe

Cannot initialize an AppCommand from an invalid key.

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\app_command.cc

d:\buildagent\work\9d1bc32700498ce4\src\chrome\installer\util\language_selector.cc

CHROME_BREAKPAD_PIPE_NAME

CHROME_BREAKPAD_EVENT_NAME

d:\buildagent\work\9d1bc32700498ce4\src\components\crash\app\breakpad_win.cc

NTDLL.DLL

kernel32.dll

d:\buildagent\work\9d1bc32700498ce4\src\sandbox\win\src\sandbox_policy_base.cc

CreateNamedPipeW

NtCreateKey

NtOpenKey

NtOpenKeyEx

AudioCaptureAllowedUrls

AutoSelectCertificateForUrls

ChromeFrameContentTypes

ChromeFrameRendererSettings

ChromeOsLockOnIdleSuspend

ChromeOsMultiProfileUserBehavior

ChromeOsReleaseChannel

ChromeOsReleaseChannelDelegated

CloudPrintProxyEnabled

CloudPrintSubmitEnabled

ContentPackManualBehaviorURLs

CookiesAllowedForUrls

CookiesBlockedForUrls

CookiesSessionOnlyForUrls

DefaultSearchProviderAlternateURLs

DefaultSearchProviderIconURL

DefaultSearchProviderImageURL

DefaultSearchProviderImageURLPostParams

DefaultSearchProviderInstantURL

DefaultSearchProviderInstantURLPostParams

DefaultSearchProviderKeyword

DefaultSearchProviderNewTabURL

DefaultSearchProviderSearchTermsReplacementKey

DefaultSearchProviderSearchURL

DefaultSearchProviderSearchURLPostParams

DefaultSearchProviderSuggestURL

DefaultSearchProviderSuggestURLPostParams

DeviceAllowRedeemChromeOsRegistrationOffers

DeviceLocalAccountAutoLoginBailoutEnabled

DeviceLocalAccountAutoLoginDelay

DeviceLocalAccountAutoLoginId

DeviceLoginScreenDefaultHighContrastEnabled

DeviceLoginScreenDefaultLargeCursorEnabled

DeviceLoginScreenDefaultScreenMagnifierType

DeviceLoginScreenDefaultSpokenFeedbackEnabled

DeviceLoginScreenDefaultVirtualKeyboardEnabled

DeviceLoginScreenPowerManagement

DeviceLoginScreenSaverId

DeviceLoginScreenSaverTimeout

DeviceMetricsReportingEnabled

DeviceStartUpUrls

DeviceUpdateHttpDownloadsEnabled

EnableAuthNegotiatePort

EnableDeprecatedWebPlatformFeatures

EnableOriginBoundCerts

EnableWebBasedSignin

EnterpriseWebStoreName

EnterpriseWebStoreURL

HideWebStoreIcon

HideWebStorePromo

ImagesAllowedForUrls

ImagesBlockedForUrls

ImportAutofillFormData

ImportBookmarks

ImportHistory

ImportHomepage

ImportSavedPasswords

ImportSearchEngine

JavaScriptAllowedForUrls

JavaScriptBlockedForUrls

KeyboardDefaultToFunctionKeys

MetricsReportingEnabled

NotificationsAllowedForUrls

NotificationsBlockedForUrls

PasswordManagerAllowShowPasswords

PasswordManagerEnabled

PluginsAllowedForUrls

PluginsBlockedForUrls

PopupsAllowedForUrls

PopupsBlockedForUrls

ProxyBypassList

ProxyPacUrl

RemoteAccessHostAllowClientPairing

RemoteAccessHostAllowGnubbyAuth

RemoteAccessHostAllowRelayedConnection

RemoteAccessHostDomain

RemoteAccessHostFirewallTraversal

RemoteAccessHostRequireCurtain

RemoteAccessHostRequireTwoFactor

RemoteAccessHostTalkGadgetPrefix

RemoteAccessHostUdpPortRange

RenderInChromeFrameList

ReportDeviceActivityTimes

ReportDeviceBootMode

ReportDeviceLocation

ReportDeviceNetworkInterfaces

ReportDeviceUsers

ReportDeviceVersionInfo

RestoreOnStartupURLs

ShowAppsShortcutInBookmarkBar

SuppressChromeFrameTurndownPrompt

TermsOfServiceURL

TouchVirtualKeyboardEnabled

URLBlacklist

URLWhitelist

VideoCaptureAllowedUrls

VirtualKeyboardEnabled

update_url

^update_url:

CHROME_VERSION

CHROME_SAFE_MODE

2676A9A2-D919-4FEE-9187-152100393AB2

ignore-urlfetcher-cert-requests

install-chrome-app

install-ephemeral-app-from-webstore

pack-extension-key

permission-request-api-url

promo-server-url

proxy-bypass-list

proxy-pac-url

remember-cert-error-decisions

spelling-service-feedback-url

try-chrome-again

variations-server-url

winhttp-proxy-resolver

ya-url-copy-safe-text

skip-first-import

plugins-metadata-server-url

windows8-search

allow-http-screen-capture

app-list-start-page-url

apps-checkout-url

apps-gallery-download-url

apps-gallery-url

apps-gallery-update-url

certificate-transparency-log

disable-extensions-http-throttling

disable-password-manager-reauthentication

disable-quic-port-selection

disable-save-password-bubble

disable-web-resources

enable-auth-negotiate-port

enable-npn-http

enable-quic-port-selection

enable-save-password-bubble

enable-sdch-over-https

enable-user-controlled-alternate-protocol-ports

enable-websocket-over-spdy

enable-website-settings-manager

explicitly-allowed-ports

extensions-not-webstore

help-url

40.0.2214.3645

CHROME_HEADLESS

CHROME_LOG_FILE

CHROME_METRO_CONNECTED

CHROMEOS_SESSION_LOG_DIR

CHROME_CRASHED

CHROME_RESTART

profile.ephemeral_mode

profile.icon_version

session.restore_on_startup

session.restore_on_startup_migrated

session.startup_urls_migration_time

session.restore_to_homepage_if_empty

profile.exited_cleanly

profile.exit_type

profile.managed.custodian_email

profile.managed.custodian_name

profile.managed.custodian_profile_image_url

profile.managed.custodian_profile_url

profile.managed.manual_hosts

profile.managed.manual_urls

profile.managed.second_custodian_email

profile.managed.second_custodian_name

profile.managed.second_custodian_profile_image_url

profile.managed.second_custodian_profile_url

profile.managed.shared_settings

session.startup_urls

session.urls_to_restore_on_startup

intl.app_locale

intl.charset_default

intl.accept_languages

intl.applied_brand_package_accept_languages

intl.static_encodings

webkit.webprefs.fonts.standard.Zyyy

webkit.webprefs.fonts.fixed.Zyyy

webkit.webprefs.fonts.serif.Zyyy

webkit.webprefs.fonts.sansserif.Zyyy

webkit.webprefs.fonts.cursive.Zyyy

webkit.webprefs.fonts.fantasy.Zyyy

webkit.webprefs.fonts.pictograph.Zyyy

webkit.webprefs.fonts.standard

webkit.webprefs.fonts.fixed

webkit.webprefs.fonts.serif

webkit.webprefs.fonts.sansserif

webkit.webprefs.fonts.cursive

webkit.webprefs.fonts.fantasy

webkit.webprefs.fonts.pictograph

webkit.webprefs.fonts.standard.Arab

webkit.webprefs.fonts.fixed.Arab

webkit.webprefs.fonts.serif.Arab

webkit.webprefs.fonts.sansserif.Arab

webkit.webprefs.fonts.standard.Cyrl

webkit.webprefs.fonts.fixed.Cyrl

webkit.webprefs.fonts.serif.Cyrl

webkit.webprefs.fonts.sansserif.Cyrl

webkit.webprefs.fonts.standard.Grek

webkit.webprefs.fonts.fixed.Grek

webkit.webprefs.fonts.serif.Grek

webkit.webprefs.fonts.sansserif.Grek

webkit.webprefs.fonts.standard.Jpan

webkit.webprefs.fonts.fixed.Jpan

webkit.webprefs.fonts.serif.Jpan

webkit.webprefs.fonts.sansserif.Jpan

webkit.webprefs.fonts.standard.Hang

webkit.webprefs.fonts.fixed.Hang

webkit.webprefs.fonts.serif.Hang

webkit.webprefs.fonts.sansserif.Hang

webkit.webprefs.fonts.cursive.Hang

webkit.webprefs.fonts.standard.Hans

webkit.webprefs.fonts.fixed.Hans

webkit.webprefs.fonts.serif.Hans

webkit.webprefs.fonts.sansserif.Hans

webkit.webprefs.fonts.standard.Hant

webkit.webprefs.fonts.fixed.Hant

webkit.webprefs.fonts.serif.Hant

webkit.webprefs.fonts.sansserif.Hant

webkit.webprefs.default_font_size

webkit.webprefs.default_fixed_font_size

webkit.webprefs.minimum_font_size

webkit.webprefs.minimum_logical_font_size

webkit.webprefs.javascript_enabled

webkit.webprefs.web_security_enabled

webkit.webprefs.javascript_can_open_windows_automatically

webkit.webprefs.loads_images_automatically

webkit.webprefs.plugins_enabled

webkit.webprefs.dom_paste_enabled

webkit.webprefs.shrinks_standalone_images_to_fit

webkit.webprefs.uses_universal_detector

webkit.webprefs.text_areas_are_resizable

webkit.webprefs.java_enabled

webkit.webprefs.tabs_to_links

webkit.webprefs.allow_displaying_insecure_content

webkit.webprefs.allow_running_insecure_content

safebrowsing.enabled

safebrowsing.extended_reporting_enabled

safebrowsing.proceed_anyway_disabled

safebrowsing.incident_report_sent

safebrowsing.incidents_sent

incognito.mode_availability

search.suggest_enabled

browser.confirm_to_quit

security.cookie_behavior

download.prompt_for_download

alternate_error_pages.enabled

dns_prefetching.startup_list

dns_prefetching.host_referral_list

spdy.disabled

net.http_server_properties

spdy.servers

spdy.alternate_protocol

protocol.disabled_schemes

instant_ui.zero_suggest_url_prefix

local_state.multiple_profile_prefs_version

dns_prefetching.enabled

net.network_prediction_options

hide_web_store_icon

browser.show_home_button

browser.show_ya_button

browser.show_tablo_on_click

browser.last_session_empty

browser.session_empty

browser.use_mouse_gestures

browser.enable_page_expiration

browser.do_not_count_page_expiration_infobar_closings

profile.recently_selected_encodings

browser.clear_data.browsing_history

browser.clear_data.download_history

browser.clear_data.cache

browser.clear_data.cookies

browser.clear_data.passwords

browser.clear_data.form_data

browser.clear_data.hosted_apps_data

browser.clear_data.content_licenses

browser.enable_spellchecking

browser.speechinput_censor_results

browser.speechinput_tray_notification_shown_contexts

browser.enabled_labs_experiments

ya.experiments_edited_by_user

ya.distrib_default_experiments

browser.enable_autospellcorrect

history.saving_disabled

ya.settings.text_wrap

history.deleting_enabled

settings.force_safesearch

settings.history_recorded

browser.clear_data.time_period

browser.last_clear_browsing_data_time

extensions.theme.pack

extensions.theme.id

extensions.theme.images

extensions.theme.colors

extensions.theme.tints

extensions.theme.properties

extensions.ui.developer_mode

extensions.commands

plugins.last_internal_directory

plugins.plugins_list

plugins.plugins_disabled

plugins.plugins_disabled_exceptions

plugins.plugins_enabled

plugins.migrated_to_pepper_flash

plugins.removed_old_component_pepper_flash_settings

plugins.show_details

plugins.allow_outdated

plugins.always_authorize

plugins.metadata

plugins.resource_cache_update

browser.check_default_browser

browser.default_browser_setting_enabled

browser.custom_chrome_frame

profile.content_settings.plugin_whitelist

profile.block_third_party_cookies

profile.clear_site_data_on_exit

partition.default_zoom_level

profile.default_zoom_level

partition.per_host_zoom_levels

profile.per_host_zoom_levels

autofill.data_model_default

autofill.pay_without_wallet

autofill.wallet_location_disclosure

autofill.save_data

autofill.wallet_shipping_same_as_billing

autofill.generated_card_bubble_times_shown

autofill.rac_dialog_defaults

breadcrumbs.enabled

push_to_call.enabled

push_to_call.wasenabled

ya.disk.want_install

context_translate.enabled

context_translate.translate_words

enable_deprecated_web_platform_features

import_last_source_browser

import_autofill_form_data

import_bookmarks

import_history

import_home_page

import_saved_passwords

import_cookies

import_last_session

import_extensions

import_speed_dial

import_other

ya.statistics.import_rollback

ya.import_new_source_type

ya.import_new_source_profile

import_search_engine

profile.avatar_index

profile.using_default_name

profile.name

profile.using_default_avatar

profile.using_gaia_avatar

profile.managed_user_id

profile.gaia_info_update_time

profile.gaia_info_picture_url

profile.avatar_bubble_tutorial_shown

printing.enabled

printing.print_preview_disabled

profile.managed.default_filtering_behavior

profile.managed_user_creation_allowed

profile.managed_users

profile.reset_prompt_memento

message_center.disabled_extension_ids

message_center.disabled_system_component_ids

message_center.welcome_notification_dismissed

message_center.welcome_notification_dismissed_local

message_center.welcome_notification_previously_popped_up

message_center.welcome_notification_expiration_timestamp

fullscreen.allowed

local_discovery.notifications_enabled

prefs.preference_reset_time

ya.prefetch.latest_update_list

ya.tablo_pins.instance_id

gcm.channel_enabled

gcm.push_messaging_registration_count

easy_unlock.allowed

easy_unlock.enabled

easy_unlock.pairing

easy_unlock.proximity_required

easy_unlock.show_tutorial

zerosuggest.cachedresults

signin.error_stats_update_time

ssl.rev_checking.enabled

ssl.rev_checking.required_for_local_anchors

ssl.version_min

ssl.version_max

ssl.version_fallback_min

ssl.cipher_suites.blacklist

ssl.ssl_record_splitting.disabled

ssl.ssl_blocking_bypassed

user_experience_metrics.reporting_enabled

profile.last_used

profile.last_active_profiles

profile.profiles_created

profile.info_cache

profile.created_by_version

profile.reset_prompt_mementos

user_experience_metrics.stability.page_load_count

user_experience_metrics.stability.renderer_crash_count

user_experience_metrics.stability.extension_renderer_crash_count

user_experience_metrics.stability.renderer_hang_count

user_experience_metrics.stability.child_process_crash_count

user_experience_metrics.stability.other_user_crash_count

user_experience_metrics.stability.kernel_crash_count

user_experience_metrics.stability.system_unclean_shutdowns

user_experience_metrics.stability.plugin_stats2

uninstall_metrics.page_load_count

uninstall_metrics.last_launch_time_sec

uninstall_metrics.last_observed_running_time_sec

browser.suppress_default_browser_prompt_for_version

browser.window_placement

browser.window_placement_popup

task_manager.window_placement

browser.app_window_placement

renderer.memory_cache.size

download.default_directory

download.default_directory_display_name

download.extensions_to_open

download.directory_upgrade

download.open_pdf_in_system_reader

savefile.default_directory

savefile.type

select_file_dialogs.allowed

filebrowser.tasks.default_by_mime_type

filebrowser.tasks.default_by_suffix

selectfile.last_directory

browser.hung_plugin_detect_freq

browser.plugin_message_response_timeout

spellcheck.dictionary

spellcheck.use_spelling_service

protocol_handler.excluded_schemes

safe_browsing.client_key

safe_browsing.wrapped_key

options_window.last_tab_index

certificate_manager_window.last_tab_index

browser.show_omnibox_share_buttons

browser.last_redirect_origin

shutdown.type

shutdown.num_processes

shutdown.num_processes_slow

restart.last.session.on.shutdown

was.restarted

relaunch.mode

extensions.disabled

plugins.disable_plugin_finder

ntp.app_page_names

ntp.collapsed_open_tabs

ntp.collapsed_foreign_sessions

ntp.collapsed_recently_closed_tabs

ntp.collapsed_snapshot_document

ntp.collapsed_sync_promo

ntp.date_resource_server

ntp.most_visited_blacklist

ntp.promo_desktop_session_found

ntp.promo_resource_cache_update

ntp.shown_bookmarks_folder

ntp.shown_page

ntp.tips_resource_server

ntp.webstore_enabled

devtools.adb_key

devtools.disabled

devtools.discover_usb_devices

devtools.edited_files

devtools.file_system_paths

devtools.open_docked

devtools.port_forwarding_enabled

devtools.port_forwarding_default_set

devtools.port_forwarding_config

google.services.password_hash

invalidation_service.use_gcm_channel

sync_promo.startup_count

sync_promo.user_skipped

sync_promo.show_on_first_run_allowed

sync_promo.show_ntp_bubble

browser.web_app.create_on_desktop

browser.web_app.create_in_apps_menu

browser.web_app.create_in_quick_launch_bar

geolocation.access_token

media.default_audio_capture_device

media.default_video_capture_Device

media.device_id_salt

remote_access.host_firewall_traversal

remote_access.host_require_two_factor

remote_access.host_domain

remote_access.host_talkgadget_prefix

remote_access.host_require_curtain

remote_access.host_allow_client_pairing

remote_access.host_allow_gnubby_auth

remote_access.host_allow_relayed_connection

remote_access.host_udp_port_range

printing.print_preview_sticky_settings

cloud_print.dialog_size.width

cloud_print.dialog_size.height

cloud_print.signin_dialog_size.width

cloud_print.signin_dialog_size.height

cloud_print.enabled

cloud_print.proxy_id

cloud_print.auth_token

cloud_print.xmpp_auth_token

cloud_print.email

cloud_print.print_system_settings

cloud_print.enable_job_poll

cloud_print.robot_refresh_token

cloud_print.robot_email

cloud_print.user_settings.connectNewPrinters

cloud_print.xmpp_ping_enabled

cloud_print.xmpp_ping_timeout_sec

cloud_print.user_settings.printers

cloud_print.submit_enabled

cloud_print.user_settings

net.max_connections_per_proxy

hardware.audio_capture_enabled

hardware.audio_capture_allowed_urls

hardware.video_capture_enabled

hardware.video_capture_allowed_urls

hotword.search_enabled_2

hotword.always_on_search_enabled

hotword.audio_logging_enabled

hotword.audio_history_enabled

hotword.previous_language

browser.clear_lso_data_enabled

browser.pepper_flash_settings_enabled

browser.disk_cache_dir

browser.disk_cache_size

browser.last_default_status

browser.media_cache_size

cros.system.releaseChannel

feedback.performance_tracing_enabled

background_contents.registered

browser.shown_autolaunch_infobar

auth.schemes

auth.disable_negotiate_cname_lookup

auth.enable_negotiate_port

auth.server_whitelist

auth.negotiate_delegate_whitelist

auth.gssapi_library_name

auth.allow_cross_origin_prompt

async_dns.enabled

custom_handlers.registered_protocol_handlers

custom_handlers.ignored_protocol_handlers

custom_handlers.policy.registered_protocol_handlers

custom_handlers.policy.ignored_protocol_handlers

custom_handlers.enabled

background_mode.enabled

hardware_acceleration_mode.enabled

policy.device_refresh_rate

message_center.showed_first_run_balloon

message_center.show_icon

message_center.was_forced_on_taskbar

browser.attempted_to_enable_autoupdate

media_galleries.gallery_id

media_galleries.remembered_galleries

media_galleries.last_scan_time

shelf_chrome_icon_index

gesture.max_separation_for_gesture_touches_in_pixels

gesture.semi_long_press_time_in_ms

gesture.tab_scrub_activation_delay_in_ms

gesture.fling_max_cancel_to_down_time_in_ms

gesture.fling_max_tap_gap_time_in_ms

overscroll.horizontal_threshold_complete

overscroll.vertical_threshold_complete

overscroll.minimum_threshold_start

overscroll.minimum_threshold_start_touchpad

overscroll.vertical_threshold_start

overscroll.horizontal_resist_threshold

overscroll.vertical_resist_threshold

ya.send_install

ya.last_welcome_page_version

ya.clids

ya.banerid

ya.update_failures

ya.update_last_failure

ya.welcome_page

ya.custom_cookies

ya.bar.ui

ya.bar.uuid

ya.bar.r1

ya.statistics.last_default_check_time

ya.statistics.enabled

ya.tab_finder_enabled_once

ya.crash_dumps_checkbox_was_set

ya.crash_dumps_checkbox_was_set_at_1_0_1084_5404

ya.disk.installer_etag

ya.vk.show_infobar

ya.vk.last_shown

ya.vk.clicks_left

ya.last_runned_version

ya.last_runned_partner_id

ya.education.enabled

ya.custo_education.enabled

ya.searchness.enabled

ya.all_sb_chunks_downloaded_time

ya.splitview.enabled

ya.splitview.visible

ya.sync.device.push_id

ya.sync.device.name

ya.block_flash

ya.extensions_to_replace

ya.mute_state

ya.background_animation.enabled

ya.background_animation.disable_on_low_battery

ya.notifications.extension_settings_migrated

ya.notifications.migrated_fb_token

ya.notifications.migrated_fb_token_expires_in

ya.notifications.migrated_vk_token

ya.notifications.migrated_vk_token_expires_in

ya.notifications.silent_mode_until

ya.notifications.silent_mode

ya.notifications.fb.enabled

ya.notifications.fb.show.comments

ya.notifications.fb.show.friend_requests

ya.notifications.fb.show.messages

ya.notifications.fb.view_content

ya.notifications.fb.num_invitations_shown

ya.notifications.fb.last_time_invitation_shown

ya.notifications.fb.share_accepted

ya.notifications.fb.last_share_propose_time

ya.notifications.vk.enabled

ya.notifications.vk.show.comments

ya.notifications.vk.show.friend_requests

ya.notifications.vk.show.messages

ya.notifications.vk.view_content

ya.notifications.vk.num_invitations_shown

ya.notifications.vk.last_time_invitation_shown

ya.notifications.vk.share_accepted

ya.notifications.vk.last_share_propose_time

ya.notifications.yamail.enabled

ya.notifications.yamail.view_content

show.comments

show.friend_requests

show.messages

omnibox-infobar-panel.enabled

omnibox-infobar-panel.disabled

searchness.disabled

ya.persist_state_updated

network_profile.warnings_left

network_profile.last_warning_time

ya.feedback.update_date

ya.smartback.dictionary_last_modified

torrents.open_mode

apps.app_launch_for_metro_restart

apps.app_launch_for_metro_restart_profile

apps.shortcuts_version

module_conflict.bubble_shown

settings.privacy.drm_salt

settings.privacy.drm_enabled

browser.allow_discard_tabs

browser.allow_discard_tabs_updated

profile.extensions.activity_log.num_consumers_active

proxy.quick_check_enabled

profile.browser_guest_enabled

profile.add_person_enabled

ya.show_newtab_search_arrow

ya.popup_block_enabled

ya.plugin_restricted_document_kinds

ya.custo_tab_activation_order_on_tab_close

ya.custo_ui_first_time_launch

easy_unlock.hardlock_state

password_bubble.timestamp

password_bubble.nopes

password_bubble.interactions

ya.tablo.snapshot_click_map

license_url

feedback.url

conf_policy_url

hXXp://legal.yandex.ru/browser_agreement/

hXXp://legal.yandex.ru/confidential/

SHELL32.dll

ole32.dll

OLEAUT32.dll

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

%s-%Iu

u\uX

Dictionary keys must be quoted.

Unsupported encoding. JSON must be UTF-8.

full-memory-crash-report

(0x%X)

Error (0x%X) while retrieving error. (0x%X)

(%d = %3.1f%%)

Histogram: %s recorded %d samples

(flags = 0x%x)

PlatformFile.UnknownErrors.Windows

user32.dll

0123456789

.syzygy

.thunks

Line: %i, column: %i, %s

D:\BuildAgent\work\9d1bc32700498ce4\src\out\Release\initialexe\browser.exe.pdb

browser.exe

ClearBreakpadPipeEnvironmentVariable

ClearCrashKeyValueImpl

SetCrashKeyValueImpl

SignalChromeElf

browser_elf.dll

WINMM.dll

VERSION.dll

SHLWAPI.dll

RegEnumKeyExW

RegQueryInfoKeyW

RegCreateKeyExW

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

GetAsyncKeyState

CloseWindowStation

CreateWindowStationW

SetProcessWindowStation

USER32.dll

GetProcessHeap

GetWindowsDirectoryW

CreateIoCompletionPort

GetProcessHandleCount

KERNEL32.dll

USERENV.dll

WTSAPI32.dll

GetCPInfo

SetNamedPipeHandleState

TransactNamedPipe

WaitNamedPipeW

zcÁ

.ccc]

.IDATx

.aU/@G

\]]]]_]^

.owO[

.RwuWee

o.yST

G.HIJ

]]][\^__^\]`

i.snh

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="Win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><dependency><dependentAssembly><assemblyIdentity type="win32" name="40.0.2214.3645" version="40.0.2214.3645" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>

0%1X2

0"0)040=0

9%:0:>:]:~:

5-5v5}5

4$4044484

1 1$1(1,10141

8,;0;4;8;<;

6(7,707\7

5$5(5,50545

2 2$2(2,2024282<2

1 1$1,1@1`1

7 7$7(7,707

registering_chrome

uninstalling_chrome_frame

eyndxstp.exe

{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}

app_host.exe

browser.dll

browser_child.dll

npbrowser_frame.dll

browser_frame_helper.dll

browser_frame_helper.exe

browser_launcher.exe

metro_driver.dll

new_browser.exe

old_browser.exe

delegate_execute.exe

nacl64.exe

setup.exe

InstallerSuccessLaunchCmdLine

YandexSSHTM

{45033924-ABD6-4063-AD60-71925CDE206E}

{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}

{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}

Browse the web

Software\Microsoft\Windows\CurrentVersion\Uninstall\Chromium

-chrome

-chromeframe

{8A69D345-D564-463C-AFF1-A69D9E530F96}

{430FD4D0-B729-4F61-AA34-91526481799D}

GoogleUpdateSetup.exe

CFEndTempOptOutCmd

CFOptInCmd

CFOptOutCmd

CFTempOptOutCmd

UninstallCmdLine

WebAccessible

3E40F524-16FA-440A-B919-B44AB355B174

service_update.exe

winrt_helper.dll

{5FAFC90A-D443-4E4F-B69B-DA1F8D553C6C}

d-d-%d

hXXp://browser.

%d.%d.%d

Software\Microsoft\Windows\CurrentVersion\Uninstall\YandexBrowser

Google Chrome App Launcher

ChromeAppList

tSoftware\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher

{8BA986DA-5100-405E-AA35-86F34A02ACBF}

Google Chrome Frame

Google\Chrome Frame

Chrome in a Frame.

Uninstall Chrome Frame

Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame

\\.\pipe\GoogleCrashServices\

\\.\pipe\YandexCrashServices

error %u

ntdll.dll

chrome.exe

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_TEXT

HKEY_PERFORMANCE_NLSTEXT

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

pipe\

kernelbase.dll

eKey

gdi32.dll

xntdll.dll

wow_helper.exe"

shell32.dll

Reported Crashes.txt

testing_interface.dll

Origin Bound Certs

Certificate Revocation Lists

Custom Dictionary.txt

Login Data

Cached Theme.pak

Web Applications

pepflashplayer.dll

CHROME_METRO_NAV_SEARCH_REQUEST

CHROME_METRO_GET_CURRENT_TAB_INFO

CHROME_METRO_SETTINGS_COMMAND

gcswf32.dll

pdf.dll

yapdf.dll

yadocviewer.dll

npmedia_plugin.dll

pepper/libppeffects.dll

Crash Reports

crash_service.exe

script.log

resources.pak

${windows}

hunspecified-crash-key

%u.%s

reported

mscoree.dll

ADVAPI32.DLL

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

USER32.DLL

portuguese-brazilian

dbghelp.dll

rpcrt4.dll

crash_service.exe --max-reports=10

%s\%s.dmp

x-x-x-xx-xxxxxx

Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32

Software\Microsoft\Windows\CurrentVersion\Run

.Chrome_MessagePumpWindow_%p

Ndebug.log

.\debug.log

\StringFileInfo\xx\%ls

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Crash Reports\events\3396.crashed

C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe

chrome_exe

40.0.2214.115

15.2.2214.3645

browser.exe_3396_rwx_2420A000_000F5000:

PSSSh

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):

BrowserManager.exe:3904
BrowserManager.exe:3680
BrowserManager.exe:3596
Yandex.exe:824
lite_installer.exe:3812
lite_installer.exe:3628
YandexPackSetup.exe:3676
YandexPackSetup.exe:3388
sender.exe:3680
ybEDA8.tmp:4048
BrowserManagerShow.exe:3760
downloader.exe:2592
rundll32.exe:3148
rundll32.exe:1204
rundll32.exe:4004
setup.exe:4060
UmmyVideoDownloader.tmp:1860
MsiExec.exe:2288
MsiExec.exe:3476
MsiExec.exe:3900
MsiExec.exe:3940
MsiExec.exe:3796
MsiExec.exe:3920
MsiExec.exe:1860
MsiExec.exe:3848
%original file name%.exe:2784
elements64.exe:908
elements64.exe:1776
elements64.exe:3728
RegProto.exe:1916
UmmyVideoDownloader.exe:1828
u2-ctrl.exe:3548
u2-ctrl.exe:3572
yupdate-exec.exe:2592
yupdate-exec.exe:3364
yupdate-exec.exe:3492
yupdate-exec.exe:3320
yupdate-exec.exe:2412
yupdate-exec.exe:3852
yupdate-exec.exe:3848
yupdate-ctrl.exe:4088
yupdate-ctrl.exe:3176
{51426ABB-6DCB-40D0-9EA1-211122CE9025}.exe:3908
clidmgr.exe:3680
browser.exe:2964
browser.exe:2876
browser.exe:3036
browser.exe:4020
browser.exe:3888
browser.exe:3124
browser.exe:3320
browser.exe:3152
browser.exe:3060
browser.exe:3876
browser.exe:3520
browser.exe:3480
browser.exe:3776
MSI299D.tmp:3636
MSI299D.tmp:536
Delete the original Trojan file.
Delete or disinfect the following files created/modified by the Trojan:

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3-new.log (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\fe48e668bc070b6eb695bcc951b8d603\browserconfig.properties (111 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js_20150420095237.backup (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\omni.ja_20150420095226.zip (44854 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\cookies.sqlite-wal (4026 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\hosts (198 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\AS1C1Y37.txt (692 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\key (577 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\scut (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\show-dlg.exe.bcp (2498 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\dlgs (448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\scut-last (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Preferences (1029 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Preferences (1029 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\fe48e668bc070b6eb695bcc951b8d603\region.properties (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\change.list (3866 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal (6361 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\params (17080 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Preferences (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\prfs (273 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\qs_bcp (1017 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\hp (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\features (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\backup00000.reg (4000 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Praetorian\ui (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\seeder.dll (884 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\yapin\Yandex.website (497 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\yapin\Yandex.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex.website (497 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{51426ABB-6DCB-40D0-9EA1-211122CE9025}.exe (28086 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\lite_installer.exe.log (709 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D84E548583BE1EE7DB5A935821009D26_5B98B6CD6E69202676965CF5B0E2A7A7 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\1033\thm.wxl (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BAEBE581FCB73249406FC21094EA252E_BC0CE803EF41A748738619ED7838EEFC (1520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerPackage (61727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ÃÅ“ÃÂµÃÂ½ÃÂµÃÂ´ÃÂ¶ÃÂµÃ‘â‚¬_ÃÂ±Ã‘â‚¬ÃÂ°Ã‘Æ’ÃÂ·ÃÂµÃ‘â‚¬ÃÂ¾ÃÂ²_20150420095211.log (21372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\state.rsm (1360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\1058\thm.wxl (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\wixstdba.dll (2725 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\1055\thm.wxl (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\logo.png (852 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\logoside.png (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\1049\thm.wxl (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\thm.xml (632 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.be\BrowserManagerInstaller.exe (66528 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\thm.wxl (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerInstaller.exe (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D84E548583BE1EE7DB5A935821009D26_5B98B6CD6E69202676965CF5B0E2A7A7 (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ÃÅ“ÃÂµÃÂ½ÃÂµÃÂ´ÃÂ¶ÃÂµÃ‘â‚¬_ÃÂ±Ã‘â‚¬ÃÂ°Ã‘Æ’ÃÂ·ÃÂµÃ‘â‚¬ÃÂ¾ÃÂ²_20150420095211_0_BrowserManagerPackage.log (153392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{12f34aee-538c-44d5-b33a-12213b7e0197}\.ba1\BootstrapperApplicationData.xml (259 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BAEBE581FCB73249406FC21094EA252E_BC0CE803EF41A748738619ED7838EEFC (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YandexElementsIE00000.log (238614 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{97DA2459-9AC9-49B0-BE2B-6F1E7E24D829}\YandexElementsIE.msi (41116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\statisticsex.log (1026 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_3FF60.tmp\setup.exe (17754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_3FF60.tmp\BRAND_INT (322 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_3FF60.tmp\BRAND_UA-RU (811 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_3FF60.tmp\BROWSER.PACKED.7Z (61755 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_3FF60.tmp\BRAND_YANDEX (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_3FF60.tmp\BRAND_KZ (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_3FF60.tmp\BRAND_TB (435 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_3FF60.tmp\SETUP.EX_ (396 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_3FF60.tmp\BRAND_BY (787 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YB_3FF60.tmp\BRAND_UA-UK (691 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManagerShow.exe:res (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3-ctrl.log (4215 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\downloader.log2592 (2374842 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_84DF081C52E32C6CC02A8FC17AEFEC2C (1536 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1212 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\seed.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\YandexPackSetup[1].exe (3072100 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\info[1].rss (827 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexPackSetup.exe (48009 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_84DF081C52E32C6CC02A8FC17AEFEC2C (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\stat.log3396 (580 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110\elements.exe (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\config[5] (607 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\config[6] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\ie\product.xml (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\product[2] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\fastdial\backgrounds\earth.jpg (550 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\product[3] (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\config[2] (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\product[4] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\statistics\statistics.xml (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\applications\vb.json (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\config[4] (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\migrate.ver (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\config[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\statistics[1] (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\cs\icons\yandex-65x26.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\kk\fastdial\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\en\icons\yandex-65x26.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\product[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\favorites[1] (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\ru\fastdial\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\be\fastdial\config.dtd (613 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\product[5] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\config[4] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\product[3] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\backgrounds[1] (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\fastdial\config.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\Install.log (52004 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\fastdial\backgrounds\wp_almost_white_small.jpeg (781 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\config[3] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\tr\fastdial\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\product[7] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\ru\fastdial\config.dtd (607 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\vb\fav\fav_full.xml (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\kk\fastdial\config.dtd (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\product[2] (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\cs\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\en\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\product[8] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\backgrounds[1] (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\product[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\config[2] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\fastdial\blacklist.xml (702 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\product[6] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\statistics[1] (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\clckr[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\domaingroups[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\search\dictionary.txt (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\product[8] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\product[3] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\config[6] (611 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\en\fastdial\config.dtd (456 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\clckr[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\product[6] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\uk\fastdial\config.dtd (611 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\domaingroups[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\product[5] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\product[4] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\cs\icons\yandex-130x52.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\about\product.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\cs\fastdial\config.dtd (607 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\en\icons\yandex-130x52.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\tr\fastdial\config.dtd (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\product[9] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\passport\passport.xml (192 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\fastdial\clckr.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\uk\fastdial\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\config[1] (456 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\kk\about\product.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\product[7] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\be\fastdial\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\fastdial\domaingroups.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\migrateFromBar (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\be\about\product.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\blocked_domains.json (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\config[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\config[7] (456 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\en\fastdial\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\tr\icons\yandex-65x26.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\tr\icons\yandex-130x52.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\fastdial\backgrounds.xml (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\vb\fav\fav_lite.xml (810 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\product[3] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\config[5] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\cs\fastdial\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\uk\about\product.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\product[2] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\config[3] (613 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\ru\about\product.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\VB\branding\{3FE44B1A-EA19-4992-84B7-84F1776F8D77}\locale\tr\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\lingvo[2] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\icons\campaign-running.png (688 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\tr\yndx_icon.png (836 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\icons\twitter-fresh.png (720 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\brand\tb\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\market[2] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\ui\header\images\menu-close.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\altsearch.dll (983 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\en\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ sn_n-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\ru\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\disc.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_ ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\altsearch[1] (526 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\icons\mc\badge\active_press.png (316 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\icons\Direct_locked_2_.png (748 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\market.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\images\mail_128.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\moikrug[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_-sn_n.png (880 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\ru\logobutton\logoconf.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\direct64.dll (1060 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\fg_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\ru\slice\js\dtconverter.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.Search.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\pagetranslator[1] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\locale\be\campaign.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\login.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\ovc_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\town\geobase.xml (747 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\icons\site.png (707 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\sb.dll (1925 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\ovc_gr.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\uk\slice\network-error.html (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_ sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\logobutton\logoconf.xml (324 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\cs\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\radio[1] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\icons\icon.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\about\logo-ie-large.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\yandex[2] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\say-alternate.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\ic.dtd (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\locale\kk\direct.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\icons\typesquatting\icon.png (372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\stardust.dll (458 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\_\8mHn_Rsr7nJcpTqMcpRQLGAlOAM.png (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\altsearch[1] (467 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\facebook_on.png (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\uk\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\fotki.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\nointernet\_music-nointernet.ie.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\friends.png (743 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\ui\menu\images\remove.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\photo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\brand\ua\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\search\dictionary.txt (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\locale\ru\facebook.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\noflash\_music-noflash.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\ovc_ sn.png (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\tr\logobutton\logoconf.dtd (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bl.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\logo\logo.png (409 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\slovari.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\rambler.png (655 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\accelerators[1] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\update.png (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\browseroffer64.dll (1651 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bl-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\locale\tr\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\fg_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\friends_lock.png (795 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\be\slice\js\dtconverter.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\tb\town\townlinks.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\icons\yavideo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/176/manifest.xml.zip (13122 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\textonly[1] (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\ic.dtd (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\icons\twitter-locked.png (739 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\mail[2] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_ ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\logobutton\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\mc[1] (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\index.html (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\tab-active.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\readability\hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\kk\mc.dtd (354 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\html\network-error-kk.html (543 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\locale\be\yavideo.dtd (938 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\fotki[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\tr\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\quote\quotelist.dtd (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\reply.png (255 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\locale\be\radio.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/286/manifest.xml.zip (5873 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\html\i\throbber.gif (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_ra_d.png (807 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\about\logo-ie-medium.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\fg_n.png (494 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\direct.dll (1295 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\webmaster.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\uk\mc.dtd (370 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\moikrug[1] (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\maps[2] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\links\links.dtd (268 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\accelerators[5] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.localization.js (572 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_ra_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\market[2] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\translator.dtd (249 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_sn_n.png (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\accelerators[3] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\locale\ru\webmaster.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\skc_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\mail[4] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\mail[1] (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\ovc_-ra.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\brand\tb\links\links.dtd (280 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_ ra_n.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\events.png (781 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\html\style-authpages.css (444 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\town\townlist.dtd (82 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\safebrowsing\safebrowsing.xml (251 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\webmaster.dll (551 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\maps.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\typesquatting.messages.xml (718 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\geolocation.xml (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\spam.png (798 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\uk\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\facebook[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\skc_n.png (720 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\skc_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\town\townlinks.dtd (126 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\money.dtd (530 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\brand\ua\sblinks.dtd (369 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\kk\yndx_icon.png (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\ic.dtd (567 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\logo.dtd (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\icons\browser.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\tr\icons\yandex.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\route-form\images\route-a.png (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\messages-bg-bottom.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\lenta.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\mailru.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\lingvo.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\lingvo[3] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\ic\2.png (215 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\esync64.dll (809 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\noflash\img\b-music-noflash.png (520 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\ua\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\ovc.png (397 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\fav-1.png (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\cs\yndx_icon.png (836 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\yavideo64.dll (1217 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_-sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\locale\uk\esync.dtd (451 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\en\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\common.dtd (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\fav.png (527 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\cs\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\brand\yandex\extra.dtd (413 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\ic.dtd (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\image-search.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\icons\rambler.png (428 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\locale\kk\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\noflash\_music-noflash.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\moikrug.dtd (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\slovari[2] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\music.dtd (328 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/283/manifest.xml.zip (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\music\play.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\textonly.xml (405 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\ui\now\images\b-wind_arrow.png (179 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\site.messages.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\translator.messages.xml (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\icons\mailru_orange.png (880 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\geobase.xsl (377 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\yandex-65x26.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\altsearch.messages.xml (236 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\logo.messages.xml (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\quote\quotelist.xml (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\locale\ru\esync.dtd (439 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\groups.png (708 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\typesquatting.xml (670 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\town\geobase.xml (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\route-form\images\form-close.png (273 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\applications\elements.json (168 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\fotki[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\google.png (856 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\textonly.dtd (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\buttons\images\button-plus.png (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\notesmark.png (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\uk\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_ sn_d.png (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\translator\extrainfo.dtd (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_ ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\common[1] (570 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\tr\smartbox.dtd (700 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\icons\ramblersend.png (366 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\notif.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\lingvo[1] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\logo.xml (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\quote.dtd (708 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\locale\be\direct.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\cs\services.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\geolocation.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\yandex[1] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\browserconf[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\locale\kk\esync.dtd (435 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\kk\branding\yandex\search.dtd (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\en\branding\yandex\search.dtd (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\icons\loggedout.png (748 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\en\slice\js\dtconverter.js (537 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_-sn_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\_\ZNKOGssGTwI6nNaZaFsAmYawp4M.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\.manifest.mf (132 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\quote.dtd (845 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\ESyncHelper.exe (2275 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/75/manifest.xml.zip (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music.xml (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\icons\twitter.png (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\gmail.dll (2001 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.Renderer.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\messages.xml (293 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\show_foto.png (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\ui\messages\images\mail-logo-uk.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\trash.png (213 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\ua\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\brand\tb\gmail.links.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\locale\en\facebook.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\slovari[1] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\icons\gmail32.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\market[1] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\locale\cs\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\quote\quotelist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\addresses.png (636 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\locale\uk\direct.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\ui\header\images\menu-open.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\messages_lock.png (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\quote\quotelist.dtd (84 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\yavideo[1] (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\shadow-pipka.png (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\icons\campaign-outofmoney.png (607 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\direct.xml (739 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\photos.png (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\esync.messages.xml (567 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\mailru[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\maps.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\favorities.png (412 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\locale\kk\odnoklassniki.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\gmail.settings.dtd (55 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\odnoklassniki.dll (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\ic.dtd (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\addressbox-search.png (592 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\be\services.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\accelerators[4] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\quote\stock_down.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\ovc_gr.png (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\nointernet\img\b-music-noinet.png (919 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\ua\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/182/manifest.xml.zip (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\market.xml (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\locale\uk\yavideo.dtd (936 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\browserconf[2] (382 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\kk\altsearch.dtd (182 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\autoinst[1] (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\login.xml (511 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_ sn_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\ovc_gr.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\site[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\kk\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\locale\ru\direct.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\market[1] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\mail\logo.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\ru\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\icons\off.png (454 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_ra_n.png (603 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\icons\on.png (408 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\about\vendorlogo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\applications.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\cs\branding\yandex\search.dtd (642 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\_\W5-XqgLHVy5pJiEpB8Add3J6zDk.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\be\browser\browserconf.dtd (381 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\status.png (473 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\common.dtd (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\market[2] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\logo.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\accelerators[2] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\ui\dayparts\images\opacity08.png (158 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\ovc_gr.png (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\slovari[1] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\yandex[2] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\friends_requests.png (887 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\icons\Direct_locked_2.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\locale\kk\campaign.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\extra.dtd (420 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\mail[2] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\locale\ru\metrika.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\locale\en\browseroffer.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\messageslocked.png (614 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_ sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\geolocation[1] (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\subscriptions.png (779 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\gmail[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\rambler.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\cs\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\odnoklassniki.messages.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\icons\metrika_16.png (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\facebook-service.png (367 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\traffic\red.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\html\i\gray-bird-of-sadness.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\kk\browser\browserconf.dtd (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\ovc_ ra.png (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\quote[1] (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\ru\altsearch.dtd (467 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\yavideo.xml (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\webmaster.xml (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\quote.dtd (674 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\readability\sprite-readability.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\yandex[1] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\mail\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\1-16.png (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\en\twitter.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\main_pin.png (795 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\style.css (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_-ra_n.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\videoslocked.png (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\logo.dtd (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\browseroffer.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\index.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\locale\be\odnoklassniki.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\browseroffer[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\gmail.settings[1] (55 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\main-logic.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\uk\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\translator.dtd (350 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\mail.dtd (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\shadow-5-corner.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.MainRenderer.js (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\be\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\money.dtd (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\gmail64.dll (943 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\ovc_ sn.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\icons\warning.png (514 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\pagetranslator.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\lingvo[3] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\userinfo.dtd (522 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\tr\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\be\typesquatting.dtd (683 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\html\nosignal.gif (1138 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\stardust64.dll (1964 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\twitter.dll (2393 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\locale\ru\yavideo.dtd (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\widget\slice-commands.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\product[2] (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\town\townlist.dtd (83 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\icons\mc\badge\active_hover.png (374 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\userinfo.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_-ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\widget\_debug.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\main-adapter.js (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\yavideo.dll (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\login[1] (511 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\music.dtd (371 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\profile.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\music.dtd (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\kk\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\mail\folder.png (441 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\birth.png (559 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\slovari[2] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\maps.xml (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\events.png (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\traffic\green.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\cut-url.png (367 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\search-icon.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\locale\en\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\ic.dtd (876 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\site.setting.xsl (355 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\quote\quote_down.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\userinfo\passport.dtd (189 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\tr\typesquatting.dtd (520 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_n.png (547 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\icons\mc\icon.png (628 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\quote.xml (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_-sn_d.png (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\cy.messages.xml (915 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\noflash\music-noflash.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\tr\slice\js\dtconverter.js (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\site.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\town.png (242 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\pagetranslator[1] (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\tb\quote\export.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\geolocation.dtd (72 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\login\auth.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\defaults.dtd (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\html\network-error-ru.html (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\cs\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\translator.dtd (336 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\video.png (543 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\translator.dtd (346 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\ovc_ra.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\uk\typesquatting.dtd (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_ ra_n.png (679 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\fg_d.png (665 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\mail.dtd (735 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\locale\cs\esync.dtd (438 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\market[2] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\locale\tr\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\moikrug\moikrug.png (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\opinions.png (639 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\4-16.png (721 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\accelerators[1] (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\money[1] (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\smartbox[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\profile.messages.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\translator.dtd (274 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_ ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\icons\gmail.png (507 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\quote.dtd (900 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\ovc_sn.png (590 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\dicts.png (562 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\be\yndx_icon.png (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\mailru.dll (1060 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\logo.dtd (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\music\pause.png (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\noteslocked.png (552 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\kk\logobutton\logoconf.dtd (71 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\icons\error.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\Install.log (356654 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\nointernet\_music-nointernet.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\mail.dtd (633 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\skc_n.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\widget\xjsont.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\esync.dll (1768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\wall.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\brand\ua\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_-sn_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\logo.dtd (140 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\ui.css (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\branding\ua\search.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\curtain.png (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\smartbox.messages.xml (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_-sn_d.png (860 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\ua\translator\extrainfo.dtd (104 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\groups.png (626 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\kk\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\share.png (753 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110\elements64.exe (10226 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_-ra_d.png (857 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\locale\be\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\tb\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\rt-by.png (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\nointernet\music-nointernet.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\ui\messages\images\delete.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\widget\http.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.BodyEscHandler.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\geolocation.dtd (129 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\locale\en\esync.dtd (335 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\geolocation\geolocation.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/76/manifest.xml.zip (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\tb\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\money[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\accelerators[2] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\tr\about\vendorlogo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\ovc_-ra.png (470 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\money.dtd (362 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\html\network-error-cs.html (474 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\skc_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\about\logo-ie-small.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\html\noconnection.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\cs\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\brand\ua\links\links.dtd (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\town\geobase.xml (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\money.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\pagetranslator\langs.xml (365 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\town\geobase.xml (1647 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\_\51qf_exXMsPx--9srpStfhZ9p3g.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\mail[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/91/manifest.xml.zip (3361 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\quote\quote_up.png (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\yavideo[1] (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\buttons\images\button-green.png (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\icons\gmailsend.png (877 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\weather\gray-16.png (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\en\smartbox.dtd (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.GetMore.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\buttons\images\button-yellow.png (358 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\town[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bl.png (927 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\lingvo[4] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_-sn_n.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\mail.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\icons\reload.png (578 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\messages.png (584 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\transform\messages.jsont (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\mc[1] (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\uk\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\locale\tr\yavideo.dtd (773 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\cs\smartbox.dtd (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\cs\slice\js\dtconverter.js (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/118/manifest.xml.zip (4545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\smartbox[1] (826 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\ru\smartbox.dtd (826 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\translator[1] (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\AutofillFileds.dat (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bl.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\ui.ie7.css (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\locale\en\vkontakte.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\vkontakte64.dll (2590 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\locale\be\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\ovc_ts_ra.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_ sn_n.png (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\pagetranslator.messages.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\no-more.png (491 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\selected-item.png (235 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\about\background-ie.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\slovari.xml (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\mc.xml (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\suggest-favorite.png (466 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\browser\browserconf.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\geolocation.dtd (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\tr\mc.dtd (289 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\facebook_lock.png (775 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_ts_ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\mail[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\route-form\images\route-b.png (494 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\readability\readability.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_-ra_d.png (823 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\maps[1] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\widget\twitter-api.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\icons\webmaster.png (756 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\cs\mc.dtd (299 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\slovari.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\icons\browser_red_16.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\ru\services.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\defaults[1] (1200 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\follow-button-following.png (747 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\_\w3fZdbIEslxR_9CQRR-ezRNUZ_Q.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_-ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\ui\messages\images\reply.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\en\browser\browserconf.dtd (339 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\route-form\images\form-close-hover.png (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\yandex.ico (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\ui.ie9.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\locale\kk\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\5-16.png (771 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\narod.png (739 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\fg_d.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\yandex[2] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\d-msg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\facebook.png (464 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\textonly.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\0-16.png (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\cy[1] (641 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\logo.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\_\X31pO5JJJKEifJ7sfvuf3mGeD_8.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\pipka.png (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\rambler64.dll (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\product.xml (475 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\pagetranslator\loader.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\icons\mc\badge\anim_0.png (254 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\quote\stock_up.png (587 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\locale\uk\vkontakte.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\uk\services.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\gmail[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\quote\quote.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\notifications_lock.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\slovari[1] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\locale\uk\mailru.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\html\network-error-uk.html (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar.yandex.ru/packages/yandexbar.zip (26831 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\twitter.messages.xml (742 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\cs\icons\yandex.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\icons\icon.png (856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\common[2] (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\direct.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\tb\quote.xml (887 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/284/manifest.xml.zip (18934 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\services[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\ru\yndx_icon.png (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\money.messages.xml (519 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\ovc_sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\be\logobutton\logoconf.dtd (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_ sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\brand\tb\stations.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\quote\quotelist.dtd (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\geolocation.dtd (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\en\slice\throbber.html (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\say-disabled.png (906 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\follow-button-over.png (819 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\site.intervals.xml (238 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\music.dtd (487 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\subscription[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\campaign[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\slovari[2] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_-ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\locale\uk\campaign.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\ru\branding\yandex\tutorial.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\statistics\statistics.xml (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\cs\slice\network-error.html (470 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\en\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\mailru64.dll (1609 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\ico-odnoklassniki-32.png (932 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\quote\currency_down.png (570 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\textonly.dtd (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\skc_d.png (896 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\fg_n.png (386 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\brand\ua\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\metrika.intervals.xml (259 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\moikrug.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\common.dtd (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\ovc_ra.png (360 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_-ra_n.png (562 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\buttons\images\button-minus.png (237 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\ic\4.png (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\messages.png (480 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\search.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\nointernet\_music-nointernet.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\be\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\be\branding\yandex\search.dtd (669 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\widget\platform.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\throbber-small.gif (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\icons\campaign-off.png (675 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\gmail.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\photosmark.png (560 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\vkontakte[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\lenta[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\ua\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/140/manifest.xml.zip (3361 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\gray-bird-of-sadness.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\9-16.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_ ra_n.png (986 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\quote.dtd (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_ sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\lingvo[4] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\tb\userinfo\passport.dtd (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\ovc_-ra.png (542 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.Throbber.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\readability\readability.js (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_-sn_d.png (852 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\uk\slice\throbber.html (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\skc_d.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_-sn_n.png (639 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town.messages.xml (865 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\main.png (732 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\locale\kk\radio.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\locale\uk\radio.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_ ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\fav-0.png (248 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\ovc_ sn.png (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\noflash\img\b-music-logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\en\icons\yandex.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\maps[2] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\about\product.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\userinfo.dtd (533 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\market.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\market[1] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\skc_d.png (802 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\ic\0.png (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\cs\slice\throbber.html (352 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\be\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\icons\gmaillock.png (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\userinfo.xml (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.depends.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\slovari[2] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\be\altsearch.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\questions.png (747 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\throbber.gif (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\audio.png (510 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\.manifest[1] (132 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\odnoklassniki[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_ra_n.png (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\fg_d.png (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\subscription\add.png (779 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\facebook.messages.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\transform\overlay.jsont (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\locale\en\direct.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\cs\about\vendorlogo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\ic\6.png (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_-ra_d.png (798 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\friendslocked.png (724 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\twitlink.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\en\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\esync[1] (439 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\mailru.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\about\logo-ie-tiny.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\moikrug.dtd (810 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\metrika.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\tr\altsearch.dtd (142 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\ovc.png (298 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\locale\cs\facebook.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\lenta.messages.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\textonly.dtd (180 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\quote.dtd (859 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_n.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\search-icon-big.png (442 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\kk\slice\js\dtconverter.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\ovc_-sn.png (709 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\news_feed.png (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\textonly.dtd (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\logo[1] (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\webmaster[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.Message.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\uk\browser\browserconf.dtd (387 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\money.png (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\mail\mail.png (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_-sn_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\html\throbber.html (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\yandex[1] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\profilemark.png (631 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\fotki\fotki.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\brand\ua\town\townlinks.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\ic[1] (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\suggest-help.png (238 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\locale\kk\yavideo.dtd (929 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.xml.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\ui\header\images\mail-create.png (326 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\main-ui.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\quote\quotelist.xsl (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\fotki.dtd (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\cs\logobutton\logoconf.dtd (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\locale\en\mailru.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\maps[2] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\tr\services.dtd (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\uk\yndx_icon.png (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\locale\uk\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\kk\slice\throbber.html (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\be\smartbox.dtd (836 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\locale\en\radio.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\yandex.png (577 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\stations.json (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\metrika[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\locale\ru\browseroffer.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\quote\gold_down.png (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\buttons\images\button-ball-dis.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\money.dtd (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\userinfo.dtd (507 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\ovc_sn.png (691 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\locale\ru\vkontakte.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\quote\quotelist.dtd (87 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\common.dtd (188 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\direct[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\direct.png (567 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ sn_d-inverted.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\accelerators[3] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_-ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\yandex.ico (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\cards.png (782 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\textonly.dtd (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\moikrug.dtd (818 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\6-16.png (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\html\noflash.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_sn_d.png (889 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\textonly.dtd (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\tr\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\pagetranslator\pagetranslator.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_ ra_d.png (907 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\groupsmark.png (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\money.dtd (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\town\townlist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\smartbox.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\money\money.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\textonly.messages.xml (277 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\photo.png (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\ovc_ sn.png (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\twitter[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_ts_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\fg_d-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\say-default.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\esync[1] (476 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\photoslocked.png (615 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\streamplayer.exe (315 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\locale\kk\mailru.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\ui\messages\images\read.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\advertising.png (799 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\icons\direct.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\lingvo.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\music[1] (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\gmail.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\2-16.png (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\defaults[1] (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\ru\browser\browserconf.dtd (382 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_-ra_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\uk\smartbox.dtd (858 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\webmaster[1] (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\ovc_-ra.png (635 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_d.png (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\kk\smartbox.dtd (812 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\ru\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\mail.dtd (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\accelerators[2] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\slovari[1] (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\en\about\vendorlogo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\ovc_ts_ra.png (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\logo.dtd (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\vkontakte.dll (2080 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\cs\logobutton\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\en\altsearch.dtd (117 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\ru\slice\network-error.html (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\videos.png (836 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\schedule.png (774 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_-ra_n.png (846 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/143/manifest.xml.zip (7345 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\town\geobase.xml (1451 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\logo[1] (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\en\logobutton\logoconf.dtd (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\ui\messages\images\mail-logo-en.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\maps[1] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\accelerators\mail.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\friends.png (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\ovc_ts_ra.png (714 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\cs\typesquatting.dtd (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\brand\tb\gmail.settings.dtd (54 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\json.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\locale\cs\radio.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\locale\ru\odnoklassniki.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\iehistory.db-journal (14816 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\style.css (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_ra_d.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\radio.xml (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\quote.messages.xml (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\readability\applied.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\sb64.dll (253 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\twitter.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\main-adapter.js (1960 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\icons\virused.png (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\quote.dtd (666 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\facebook.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\twitter64.dll (1727 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\ovc_ ra.png (369 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_sn_n.png (662 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\webmaster.intervals.xml (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\ovc_-sn.png (395 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\calendar.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\metrika.xml (901 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\skc_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\profile[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\town[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\ru\slice\throbber.html (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\mail.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\readability\ready.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\avatar-48.png (559 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\ovc_ sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\moikrug.dtd (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bl.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.TabController.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\ovc_ra.png (532 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\tr\branding\yandex\search.dtd (629 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\quote\gold_up.png (658 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\fg_n.png (681 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_sn_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\locale\cs\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\ovc.png (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\ovc_sn.png (796 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\userinfo.dtd (581 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\product[1] (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\uk\slice\js\dtconverter.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\textonly[1] (405 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\ic\1.png (176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\accelerators[2] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\avatar-overlay.png (109 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\ru\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.DiffTimer.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\uk\altsearch.dtd (199 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\branding\tb\search.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\ru\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_-ra_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\uk\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\widget\utils.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_-ra_n.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\kk\slice\network-error.html (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_sn_d-inverted.svg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\branding\yandex\search.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_-ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\ovc_ts_ra.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\subscription\subscription.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\videosmark.png (865 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\accelerators[1] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\ui.js (1099 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\metrics.png (541 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\friend.png (668 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\rambler.dll (1687 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/82/manifest.xml.zip (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\sblinks[1] (596 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\town\townlist.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\campaign[1] (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\translator.dtd (260 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_ sn_n.png (671 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\pagetranslator.xml (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\altsearch.xml (526 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\say-active.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\geolocation[1] (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\fotki.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\rambler[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\main-ui.js (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\suggest-tab.png (229 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\ovc_ra.png (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\tr\logobutton\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\icons\site_noauth.png (826 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\yandex[1] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\ObjectParser.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\ovc.png (473 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\messagesmark.png (597 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\ru\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\messages-bg-top.png (794 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\userinfo[1] (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\kk\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\locale\ru\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\campaign.xml (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\suggest-ico-x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\cs\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\moikrug.messages.xml (946 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\ic\5.png (213 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\brand\yandex\sblinks.dtd (596 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\be\engines.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\userinfo.dtd (573 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\common[1] (570 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\birdie.png (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\sblinks.dtd (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\tb\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music.messages.xml (510 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_sn_n.png (659 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\ui\messages\images\spam.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\icons\mc\badge\hover.png (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\radio.dll (1727 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\en\slice\network-error.html (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_n.png (569 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\quote\export.dtd (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\yandex.xml (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\ovc_sn.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\en\logobutton\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\fg_d.png (983 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\locale\uk\facebook.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_ sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\main-logic.js (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\translator.dtd (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_-sn-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\defaults[2] (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_-ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\market[1] (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\en\mc.dtd (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\main-logic.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\main-adapter.js (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_gr.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\skc_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\ovc_ts_ra.png (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\mail.dtd (715 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\tr\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\music[1] (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\quote[1] (900 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\be\about\product.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\en\typesquatting.dtd (510 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.Translate.js (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\maps[1] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\ic.dtd (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\login.dtd (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_d.png (786 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_sn_d.svg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\locale\uk\rambler.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\moikrug.dtd (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\ovc_-sn.png (534 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\kk\typesquatting.dtd (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\radio[1] (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\kk\services.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\browseroffer[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\maps[3] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\tr\slice\network-error.html (466 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\del.png (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_sn_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\buttons\images\button-ball-all.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\ovc_-sn.png (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\money.dtd (580 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\ru\typesquatting.dtd (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\locale\kk\facebook.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\icons\site_settings.png (707 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\pagetranslator\injector.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\mail.dtd (482 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\brand\uk\gmail.links.dtd (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\buttons\images\button-route.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\ovc_gr.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\follow-button.png (813 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\8-16.png (696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\odnoklassniki[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\icons\campaign_locked2.png (831 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\locale\be\mailru.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\quote\currency_up.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\en\services.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\translator[1] (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\odnoklassniki.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\1.png (137 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\town\townlist.dtd (88 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\skc_d-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\mail\mail-menu.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\traffic\yellow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\facebook64.dll (2354 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\lingvo[2] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\locale\en\campaign.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\readability\readability-print.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\typesquatting[1] (670 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\geobase.xml (2159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\mail[5] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\tab-active-pipka.png (120 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/172/manifest.xml.zip (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/97/manifest.xml.zip (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\kk\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\lingvo.xml (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\ui\messages\images\mail-logo-ru.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\music\music.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\newsfeed.png (364 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\icons\mailrureload3.png (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\tr\slice\throbber.html (355 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\rambler[1] (899 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\ic\3.png (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\be\twitter.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\uk\logobutton\logoconf.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\mc.messages.xml (681 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\quote\quotelist.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\cy.xml (641 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\uk\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\fg_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\skc_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\locale\ru\site.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\main-ui.js (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\browseroffer.dll (2630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\mail[3] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\html\network-error-be.html (530 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\yavideo.messages.xml (867 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\site[1] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\tr\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\common-ui\b-spinner\images\45.gif (1372 bytes)
%Program Files% (x86)\Yandex\Common\elements64.exe (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\shadow-5-round.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\icons\mailru.png (858 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\presets\http://bar.yandex.ru/packages/yandexbar.xml (126 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/17/manifest.xml.zip (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\nointernet\img\b-music-logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_ sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\guest.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_ra_n.png (676 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\money.dtd (340 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\icons\loggedin.png (592 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\webmaster64.dll (2472 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\locale\be\vkontakte.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\cs\browser\browserconf.dtd (369 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\ua\town\townlinks.dtd (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\yandex[2] (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\matches.png (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\auth_overlay.png (216 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\be\mc.dtd (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\style.css (980 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\style.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\skc_n.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\mail[3] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\kk\ie\accelerators\accelerators.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\html\network-error-tr.html (467 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\icons\reload.png (407 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\mailru[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\browseroffer.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\wiki.png (534 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\style-authpages.css (499 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\7-16.png (645 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\bkn_ ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\ovc_ ra.png (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\accelerators[3] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\10-16.png (706 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\icons\icon.png (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\icons\ramblerlock.png (552 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_sn_d.png (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_ sn_d.png (850 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\locale\tr\browser\browserconf.dtd (343 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\ie\accelerators\mail.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\locale\tr\esync.dtd (325 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\profile.png (448 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\translator.xml (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\ru\mc.dtd (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.anim.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_ ra_d.png (777 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\translator\translator.png (636 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\icons\yavideo_on.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\brand\ua\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\locale\cs\altsearch.dtd (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\friendsmark.png (678 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\parts\bkn_n.png (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{47E3747C-5454-4689-B8F1-D24E26938CE7}\brand\tb\sblinks.dtd (377 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\geolocation.dtd (75 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\note.png (339 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\notifications_new.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\retweet.png (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\offline-19.png (705 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\typesquatting[1] (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{B6A5DA26-DF10-4B16-B5B0-E0C7B6F2679E}\altsearch64.dll (2042 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\login[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\mail\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\notes.png (415 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\mail[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\smartbox.png (643 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\ovc_gr-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\http://bar-widgets.yandex.ru/packages/approved/115/manifest.xml.zip (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\tr\gmail.links.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{0DFBF21A-D4A8-4A12-B30F-D06AC998588F}\rambler.xml (899 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\fg_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\facebook[1] (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.Overlay.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\locale\ru\mailru.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\userinfo.dtd (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\locale\tr\facebook.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\town\townlinks.dtd (133 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\profilelocked.png (674 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\music\html\noflash\_music-noflash.ie.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\twitter[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\gray-16.png (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{6EB7B025-E637-4A7F-8917-5BDCC686A4FE}\locale\en\yndx_icon.png (836 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\town\traffic\3-16.png (773 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\route-form\images\button-route.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\ru\common.dtd (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\locale\be\facebook.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\smartbox.dll (1171 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\login.dtd (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\yandex-130x52.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\toolbar\autoinst.xml (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\mail.dtd (541 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\lingvo[1] (758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\uk\branding\yandex\search.dtd (683 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\tb\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\suggest-settings.png (334 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\messages_2.png (414 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\login.dtd (787 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\counters.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\accelerators[1] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\esync.xml (476 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\birth_pin.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\main_lock.png (792 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\mail\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\defaults[1] (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\passport\passport.xml (181 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\brand\ua\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\be\slice\network-error.html (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\icon16.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\kk\music.dtd (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\campaign.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\icons\msg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\follow-button-unfollow.png (762 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\icons\chelper\chelper.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\application.html (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\ovc_ ra.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\js\y.ui.MessageComposer.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\brand\tb\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\smartbox64.dll (326 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\locale\en\odnoklassniki.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\say-active-disabled.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\statistics[1] (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\locale\uk\odnoklassniki.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\accelerators[3] (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\locale\en\yavideo.dtd (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\geolocation.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{ED5EAD1E-014D-4BDE-82FF-B6B961C321AF}\odnoklassniki64.dll (1610 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\bkn_d.png (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{37E769DC-5E04-441C-A596-F87B052A6562}\icons\yavideo_off.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\product[1] (1428 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\locale\ru\campaign.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\icons\error.png (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\addressbox-navigate.png (737 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\quote\quotelist.dtd (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\cs\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\bg75.png (109 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\userinfo.dtd (573 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\be\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\icons\mailrunewmsg_orange.png (905 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\accelerators[4] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\html\network-error-en.html (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\locale\be\slice\throbber.html (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EEE7FE6F-9A9D-4603-88B3-BB0FC687CE79}\icons\direct_.png (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\locale\be\esync.dtd (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\fav-yandex.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\mail\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\notifications.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\now\bkn_ sn_n.png (694 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{BD10F964-2A24-4382-9406-E468DC61A13C}\slice\i\search-inactive.png (614 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png16\skc_d.png (634 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F4BF62BF-873E-4078-ADF7-D8D75A3AEF10}\locale\en\gmail.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\locale\ru\branding\yandex\search.dtd (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\locale\tr\radio.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\_\4E65815M2vf3ujtn2jbo66SmbWo.gif (872 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\radio64.dll (2041 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\radio.messages.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{40B13847-7A53-4587-B0AE-33C280075C75}\icons\suggest-button.9.png (301 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg19\ovc_ ra.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{EAD98003-6829-49D7-B0D4-7F65FB7601CD}\locale\ru\radio.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\locale\kk\vkontakte.dtd (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{AB73B80C-C6A0-41C9-ACB3-29E99AD110C5}\icons\mailrunewmsg.png (827 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\games.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\town.dtd (911 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\metrika[1] (901 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\traffic\ui\buttons\images\button-red.png (348 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\png19\bkn_ ra_d.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\direct[1] (739 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{758F659D-B82D-4E25-A518-7C881253AC6C}\icons\metrika_16_key.png (698 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{A3285E43-9144-4C8C-8FBA-A099261EF797}\syncpage\sync\ui.ie8.css (1294 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{26F8D5CD-9E71-48E1-A4A9-D30E540B38E9}\facebook.dll (1805 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\tr\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\town\weather\images\svg16\bkn_ ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{F034B6C1-6921-48AE-AB0E-E01D5F628604}\icons\groupslocked.png (707 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\maps[1] (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\packages\{D4E11675-39E4-4763-9B05-99FEABCC70D2}\locale\en\pagetranslator.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Toolbar\branding\{A6842EF7-6FCB-465E-BCCE-C4C26F00D999}\icons\weather.png (633 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\replace (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\20.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\19.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\zh-TW.pak (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\pt-PT.pak (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\7.jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\d3dcompiler_46.dll (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\pins\browser (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\15.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\31.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\browser.exe (15068 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\11.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\extensions\yahelper.crx (1667 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\11.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\gopnelejddjjkamjfblkcijjikkinnec\brand_settings.json (156 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\9.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\7.jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\morphology\stop-words-ru-RU.list (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\es.pak (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\brand_skins.json (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\19.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\brand-package.cab (10815 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\15.jpg (789 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\5.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\Desktop\Yandex.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\8.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\nacl_irt_x86_32.nexe (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\icudtl.dat (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\translator (992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\resources.pak (14999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\cs.pak (274 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\6.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\34.jpg (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\16.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\translator (992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\30.jpg (1011 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\browser_child.dll (36738 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\gopnelejddjjkamjfblkcijjikkinnec\brand_settings.json (156 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\p2c-phone-schemes (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\18.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\master_preferences (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\40.0.2214.3645.manifest (229 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\libegl.dll (211 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\browser_200_percent.pak (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\20.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\2.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\plugins\npmedia_plugin.dll (907 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\5.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win1.jpg (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Extensions\yandex_mail.crx (98 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\smartback (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win2.jpg (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\crash_service.exe (454 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\17.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\morphology\dictionary-ru-RU.mrf.sig (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\master_preferences (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\13.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\safebrowsing\download.png (437 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\browser.7z (323778 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\wow_helper.exe (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\tr.pak (266 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\p2c-phone-schemes (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\pins\browser\16_32.ru.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\partner-package.cab (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\fr.pak (296 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\morphology\dictionary-ru-RU.mrf (17626 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\18.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\browser_elf.dll (133 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\morphology\stop-words-ru-RU.list (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\33.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\extensions\antishock-prod.crx (13773 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\partner_config (122 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Installer\setup.exe (7345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\minwhite (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\show-dlg.exe (389 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win3.jpg (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\bgeakjmfknncppbmgkkfbglnodccdecp\brand_settings.json (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\pins\browser\yandex.website (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\pins\browser\Yandex.exe (103 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\10.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\33.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\10.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\uk.pak (418 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\minwhite (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\yapr.dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\morphology\dictionary-ru-RU.mrf.sig (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\yapdf.dll (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\en-US.pak (229 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\kk.pak (319 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\brand_config (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\14.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\Test\test-com (608 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\chua_list (896 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\brand_skins.json (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\3.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\3.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\plugins\plugin.vch (372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win2.jpg (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\pins\browser\16_32.en.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\elokbjeafkcggjfjkakpchmcmhkhaofn\brand_settings.json (289 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\browser_100_percent.pak (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\31.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\pins\fb\fb.ico (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\ja.pak (340 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\yupdate-exec.exe (492 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\zh-CN.pak (220 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Extensions\yahelper.crx (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Extensions\external_extensions.json (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\browser.dll (28403 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\9.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\registry (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\extensions\ihhcdinmaceokcdmbddlclfejhadgpgg.json (70 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\Test\test-com (608 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\yandex_browser_installer.log (410724 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\4.jpg (198 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\smartback (475 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\brand_settings.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\replace (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\14.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\clidmgr.exe (151 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\yawp.dll (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\fcgfaidpicddcilhjhafmmcgfodijhjd\brand_settings.json (226 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\nacl_irt_x86_64.nexe (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\xinput1_3.dll (81 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\pins\fb\FBPinLauncher.exe (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win1.jpg (799 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Extensions\plmneencfmbjfgbkfiinjelmngigejjh.json (76 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\32.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\rewrite_list (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\elokbjeafkcggjfjkakpchmcmhkhaofn\brand_settings.json (289 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\winrt_helper.dll (209 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\13.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\fcgfaidpicddcilhjhafmmcgfodijhjd\brand_settings.json (226 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\bgeakjmfknncppbmgkkfbglnodccdecp\brand_settings.json (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\pt-BR.pak (264 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\browser.exe (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\libexif.dll (310 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\6.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\suspend_api_check.exe (244 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\16.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\de.pak (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Yandex\Yandex.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\8.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\libglesv2.dll (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\ru.pak (417 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\17.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe (828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\12.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\check_whitelist (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\brand_settings.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\plugins\npswf32_16_0_0_305.dll (793 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\4.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\service_update.exe (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\nacl64.exe (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\2.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\clids-yabrowser.xml (267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\partner_config (122 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\win3.jpg (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\30.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\32.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\registry (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Yandex.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex (2).lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\extensions\plmneencfmbjfgbkfiinjelmngigejjh.json (76 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\safebrowsing\download.png (437 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\dllyupdate.dll (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\rewrite_list (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Extensions\antishock-prod.crx (5873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\12.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\ffmpegsumo.dll (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\Extensions\ihhcdinmaceokcdmbddlclfejhadgpgg.json (70 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\extension\emghafiiokbjdgphaofindndbcicinae\skins\preview\34.jpg (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\brand_config (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\40.0.2214.3645\resources\configs\check_whitelist (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Temp\source4060_19384\Browser-bin\40.0.2214.3645\Locales\it.pak (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\resources\configs\chua_list (896 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UmmyVideoDownloader\UmmyVideoDownloader.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\ya_distr_en.bmp (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\lang\is-37ID9.tmp (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\downloader.exe (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Tar6A47.tmp (2712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\lang\is-82QA9.tmp (642 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UmmyVideoDownloader\ÃÂ£ÃÂ´ÃÂ°ÃÂ»ÃÂ¸Ã‘â€šÃ‘Å’ UmmyVideoDownloader.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\lang\is-MKJUN.tmp (648 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 (656 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\yandex_browser_setup_tr.bmp (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\yandex_browser_setup.bmp (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\lang\is-B82HR.tmp (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\lang\is-I48RH.tmp (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\lang\is-CORPS.tmp (590 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\UmmyVideoDownloader.exe (1358 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\is-55F5G.tmp (33802 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\yandex_browser_setup_small.bmp (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\yandex_browser_banner_en.bmp (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\_isetup\_setup64.tmp (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\lang\is-D653H.tmp (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\SendHTTP.dll (849 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\RegProto.exe (98 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\helper.dll (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\lang\is-13215.tmp (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\lang\is-TTPL7.tmp (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\is-JA2MN.tmp (56865 bytes)
C:\Users\Public\Desktop\UmmyVideoDownloader.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\is-6VC1V.tmp (223127 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\lang\is-BC1UK.tmp (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\is-QU94F.tmp (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\1.3.0.3\lang\is-LA56L.tmp (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\yandex_browser_setup_tr_small.bmp (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Cab6A46.tmp (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\unins000.dat (19997 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\unins000.exe (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\UmmyVideoDownloader\is-JHA49.tmp (60 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\_isetup\_shfoldr.dll (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\ya_distr_ru.bmp (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\WizModernImage-IS.bmp (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-1OF2T.tmp\yandex_browser_banner_ru.bmp (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_opera.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-button_theme_grey-no-transparent-l.ie.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_qs.html (3 bytes)
C:\Windows\Installer\MSI59E7.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-input.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_google-chrome.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-popupa_theme_ffffff.png (782 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hosts.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-restart-info.png (434 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_yandex-chrome.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-checkbox_theme_grey-l.png (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_type_hint.png (244 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-button_theme_grey-l.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-informer-close.png (527 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-yandex-browser__icon.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_common.ie6.css (7288 bytes)
C:\Windows\Installer\MSI6D11.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_common.ie8.css (6984 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\ff.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\uk_dlg_install_error.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\u2-ctrl.exe (495 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-yandex-browser__icon.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\tr_dlg_before_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\locale.xml (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_opt.html (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\jquery.min.js (7192 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vendor00000.xml (209 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_opera-new.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-alert.png (152 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-switch_theme_toggle-s-grey.ie9.png (127 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\common.js (2 bytes)
C:\Windows\Installer\MSI6CC2.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_yandex-internet.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\ch.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_common.ie9.css (5952 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_common.ie8.css (6776 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\tr_dlg_install_error.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\ie.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\upd.zip (189 bytes)
C:\Windows\Installer\MSI60CA.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-yandex-logo_lang_en.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\_common.js (14864 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp_qs2_guard.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\br_opt.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\uk_sizes.xml (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-alert.png (152 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\bad_ie.xml (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hosts.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-switch_theme_toggle-m-grey.ie9.png (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\tr_sizes.xml (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp2_guard.html (3 bytes)
C:\Windows\Installer\MSI6E1D.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-select-grey-fade.ie.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\show.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-popupa__close.png (376 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hosts.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\rc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-popupa__close.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp_qs2_guard.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\dlg_before_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_opt.html (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-checkbox_theme_grey-tick.gif (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_opt.html (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\scut.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-tool-name.png (501 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp_qs_guard.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_yandex-browser.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_browser_opera.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-yandex-logo_lang_ru.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\version.rss (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\qs2.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\La6qi18Z8LwgnZdsAr1qy1GwCwo.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-checkbox_theme_grey-tick.gif (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_browser_fx.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-yandex-logo_lang_en.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp_qs2.html (3 bytes)
C:\Windows\Installer\MSI4CEB.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-tool-name.png (501 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_qs.html (3 bytes)
C:\Windows\Installer\MSI688C.tmp (167 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\hp_qs2.js (821 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_yandex.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_comodo-dragon.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_internet-mailru.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\opt.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\sf.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hosts.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_type_hint.ie6.png (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\mc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_common.css (4592 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\oc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_ie.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\about.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\tr_dlg_after_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_browser_yandex.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-alert__icon.png (452 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-button_theme_grey-no-transparent-l.ie.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-button_theme_grey-l.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_common.ie7.css (6776 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\dc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp_guard.html (3 bytes)
C:\Windows\Installer\MSI429C.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-popupa_theme_ffffff.png (782 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-restart-info.png (434 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\dlg_install_error.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\logo.png (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\sizes.xml (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\yupdate-exec.exe (495 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-select-grey-fade.ie.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-yandex-browser__cancel.png (376 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\popup.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-input.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\dlg_after_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-switch_theme_toggle-m-grey.ie9.png (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\uk_dlg_after_install.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hp2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-yandex-browser__cancel.png (376 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\uk_dlg_before_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\clids-bm.xml (236 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\_common.js (15336 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\dlg_after_install.html (2 bytes)
C:\Windows\Installer\MSI4BA2.tmp (151 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_chromium.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_fx.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_opt.html (776 bytes)
C:\Windows\Installer\MSI6159.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_common.css (5856 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_opt.html (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\hp2.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_common.ie9.css (4592 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_opt.html (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_rambler-nichrome.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\cpy.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlgs.zip (459 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\logo_big.png (848 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\logo_big.png (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\gc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hosts.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-informer-close.png (527 bytes)
C:\Windows\Installer\MSI6B79.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\tr_dlg_after_install.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-form-select-grey-selected.ie.png (465 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-checkbox_theme_grey-l.png (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_hp_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_scut.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-form-select-grey-selected.ie.png (465 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_browser_safari.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_type_hint.ie6.png (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_scut2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\kk_dlg_hp_qs.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\ico_def.ico (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_br_opt.html (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_dflt.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_sizes.xml (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\uk_dlg_after_download.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\op.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\b-icon_browser_ie.png (2 bytes)
C:\Windows\Installer\MSI7436.tmp (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_qs2.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\tr_dlg_hp_qs_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\dlg_hp.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_files\jquery.min.js (7192 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_common.ie7.css (6984 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-alert__icon.png (452 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\yc.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\upd\_common.ie6.css (6888 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\hp_qs.js (820 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-icon_type_hint.png (244 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\en_dlg_hp_qs2_guard.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\b-yandex-logo_lang_ru.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\_files\La6qi18Z8LwgnZdsAr1qy1GwCwo.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\be_dlg_about.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\m3\work\uk_dlg_hosts.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Bookmarks_20150420095142.backup (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\WinReg.jsm (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\installer.js (3808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\manifest.mf (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\AddonManager.jsm (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\promise.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_13.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\netutils.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\config.js (887 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Top Sites (1932 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\vendorCookie.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\presets\http://bar.yandex.ru/presets/ua.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\nsIYaSearch.xpt (120 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-auth\pwdmng.jsm (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal (37022 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\backup.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\fileutils.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\brand_prov.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonStatus.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\integration.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\misc.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\esync.zip (160193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\compapi.js (3560 bytes)
C:\Windows\Installer\MSI268E.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\workers\barnavig.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\screenshotsGrabber.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\colors.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-7_8_0.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\WindowListener.jsm (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\branding.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-advertisement.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\History (4588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\zigbert.rsa (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\ui (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\dayuse.js (2600 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\install.js (127 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\internalStructure.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\strutils.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\statistics.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\frontendHelper.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\mail.yandex.com_20150420095144.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\urlRewrite.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\workers\barnavig.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Web Data (24431 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\barplugin.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Local Storage\chrome-extension_pchfckkccldkbclgdepkaonamkignanh_0.localstorage (1187 bytes)
C:\Windows\Installer\MSI215D.tmp (221 bytes)
C:\Windows\Installer\MSI290F.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\install.rdf (392 bytes)
C:\Windows\Installer\MSIB81E.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\strutils.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Bookmarks (2 bytes)
C:\Windows\Installer\MSI17EA.tmp (221 bytes)
C:\Windows\Installer\MSIBC07.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\backgroundImages.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native_comps.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\chromeappsstore.sqlite (59 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\autoinst.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\database.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\direct.zip (21288 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\auth.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Web Data-journal (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\altsearch.zip (41656 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\fastdial.js (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\barnavig.js (4592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Log4Moz.jsm (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\syncPinned.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\ycookie.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\radio.zip (42472 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\AddonManager.jsm (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\cachedres.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\strbundle.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_3.js (1 bytes)
C:\Windows\Installer\MSID2B8.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\patterns.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\vendor\vendor.xml (1176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Local State (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\dayuse.js (2600 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonmgr.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\async.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\places.sqlite (9176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Favicons-journal (32780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\database.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\zigbert.rsa (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\searchSuggest.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\async.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\DataURI.jsm (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\databaseMigration.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_16.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\presets\http://bar.yandex.ru/presets/default-partner.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-auth\auth-manager.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\package-12111827.zip (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\safebrowsing.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_14.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\region.properties (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\nsSearchSuggestions.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\integration.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\manifest.mf (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Top Sites-journal (5062 bytes)
C:\Windows\Installer\MSIB608.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\Favorites\Links\Yandex.url (292 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\SimpleHTMLParser.jsm (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\compsusage.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_3_0.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\vendor\vendor.xml (1102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\default.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Web Data (609 bytes)
C:\Windows\Installer\MSIF1A2.tmp (221 bytes)
C:\Windows\Installer\MSI2A1C.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\searchplugins\yandex.com-095142.xml (9 bytes)
C:\Windows\Installer\MSIB7BF.tmp (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\sysutils.js (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\nsYaSearch.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\dataprovider.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Stemmer.jsm (18672 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonfs.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\blacklist.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonmgr.js (4 bytes)
C:\Windows\Installer\MSID259.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\chrome.manifest (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\legacy.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\xmlutils.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\statistics\downloads.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\preferences\yasearch.js (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\package.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Foundation.jsm (938 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\package.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\History (12611 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\presets\http://bar.yandex.ru/presets/tb.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\mailruStat.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\dynamic-preferences\brand\ua\safebrowsing.js (915 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\clids.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\patterns.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_12.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_NwZTjP6Fe2O47lZ (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\ecustom.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\SimpleProtocol.jsm (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\safeBrowsing.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Preferences_20150420095142.backup (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\unit.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\gmail.zip (28224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\WindowListener.jsm (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\contentEnvironment.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\presets\http://bar.yandex.ru/presets/default.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\zigbert.sf (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\defender.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pchfckkccldkbclgdepkaonamkignanh_0.localstorage-journal (14083 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\aboutSupport.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\favorites.db (523 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\strbundle.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\clids-barie.xml (679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\odnoklassniki.zip (35448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\ncparser.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\browserTheme.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\clids-yabrowser.xml (369 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Favicons (5137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\authAdapter.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\preset.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js_20150420095142.backup (4 bytes)
C:\Windows\Installer\MSIBBC8.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\npwidget.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_7_0.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\core.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\barnavig.js (4592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\misc.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\incoming.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\browserUsage.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\alarms.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\twitter.zip (38624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\overlay_prov.js (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\ycookie.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal (5380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\task.js (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\WinReg.jsm (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\notifications.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\META-INF\zigbert.sf (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\thumbsSuggest.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\fileutils.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Bookmarks (793 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected] (1 bytes)
C:\Windows\Installer\MSIB6B5.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\netutils.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Stemmer.jsm (18672 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\chrome\yasearch.jar (363925 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-7_6_0.js (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\stdout.log (40 bytes)
C:\Users\"%CurrentUserName%"\Favorites\Links\Mail.url (294 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\advertisement.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\favorites.db-journal (5062 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\pacman.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Mozilla\Firefox\Profiles\zwvbr04l.default\thumbnails\b0019c9b7dbb933ace6f72683a9503f4.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (7943 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\browseroffer.zip (52224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Favicons (4725 bytes)
C:\Windows\Installer\MSID247.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Preferences.jsm (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\screenshots.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\core.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-7_8_1.js (609 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-6_4_0.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Log4Moz.jsm (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\layout.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\slices.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\update.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\promise.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\protocolSupport.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\browserconfig.properties (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_oovdjHdrr1e7qjB (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\DataURI.jsm (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\install.rdf (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\vkontakte.zip (36616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\aboutSupport.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\distribution.js (266 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Favicons-journal (32780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\xb.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\statistics.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\ecustom.js (196 bytes)
C:\Windows\Installer\MSID403.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150420095144.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\mailru.zip (24984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\sender.exe (308 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonStatus.js (776 bytes)
C:\Windows\Installer\MSID2D8.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-auth\utils.jsm (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\favicons.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\components\xbProtocol.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Preferences_20150420095142.backup (67 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_6_0.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\branding.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\syncTopHistory.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\app.js (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences_20150420095141.backup (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_5_0.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Foundation.jsm (903 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\rambler.zip (21288 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Preferences_20150420095142.backup (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\config.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_0.js (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\Yandex.website (497 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\places.sqlite-wal (19187 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\chromeappsstore.sqlite-journal (3302 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\chrome.manifest (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\addonfs.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\usageHistory.js (196 bytes)
C:\Windows\Installer\MSI299E.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\sysutils.js (1256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\searchExample.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\bookmarks.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150420095143.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\History-journal (18998 bytes)
C:\Windows\Installer\MSIBCE2.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Local Storage\chrome-extension_pchfckkccldkbclgdepkaonamkignanh_0.localstorage-journal (14083 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\thumbs.js (4056 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\cloudsource.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\passport.js (3 bytes)
C:\Windows\Installer\MSI14ED.tmp (221 bytes)
C:\Windows\Installer\MSID2A8.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\metrika.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\yavideo.zip (41488 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\brandsvc.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\History-journal (14544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\manifest.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\omni.ja_20150420095140.zip (44854 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\#Bar4IE.cab (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\bar.js (3560 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\clids-vbie.xml (679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\bookmarksStat.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Favicons-journal (32780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\native\sliceapi.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-5_2_0.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-utils.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\smartbox.zip (109915 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\dynamic-preferences\safebrowsing.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\clids.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150420095142.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Bookmarks_20150420095142.backup (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\facebook.zip (28496 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\chrome\yandex-vb.jar (64481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\platform\preset-with-manifest.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Web Data-journal (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\sync.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (326 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-7_0_0.js (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Bookmarks (793 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\installer.js (3808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\task.js (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\webmaster.zip (31120 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\xmlutils.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Web Data-journal (7534 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\First Run (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\foundation\dlqueue.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-2_9.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\favorites.db (523 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\SimpleProtocol.jsm (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_0_0.js (943 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\install.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\widgetlib.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\favorites.db-journal (5062 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_f1QFIq4EN99B7ij (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0cbf207c7a591b6122520c624817ac10\sb.zip (60968 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\anonymousStatistic.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\common-auth\authdefs.jsm (242 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\cbapp\parts\migration\l-8_1_0.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\Preferences.jsm (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\defaults\preferences\yandex-vb.js (778 bytes)
C:\Windows\Installer\MSID248.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (60229 bytes)
C:\Windows\Installer\MSIB937.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\staged\[email protected]\modules\SimpleHTMLParser.jsm (196 bytes)
%Program Files% (x86)\Yandex\FastDial\fastdial.dll (146 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Yandex\VB\Install.log (3990 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Yandex\Toolbar\Install.log (9208 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[4] (1 bytes)
%Program Files% (x86)\Yandex\Elements\barshims.dll (106 bytes)
%Program Files% (x86)\Yandex\Elements\bartab.dll (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[3] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[2] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[1] (475 bytes)
%Program Files% (x86)\Yandex\FastDial\fastdial64.dll (146 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Yandex\VB\Install.log (3990 bytes)
C:\Windows\Installer\MSI2353.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1441 (PARTNER)\[email protected] (1522 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[7] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[6] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[8] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\product[5] (475 bytes)
%Program Files% (x86)\Yandex\Elements\bartab64.dll (1018 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Yandex\Toolbar\Install.log (8186 bytes)
%Program Files% (x86)\Yandex\Elements\barshims64.dll (126 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4 (1480 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5080DC7A65DB6A5960ECD874088F3328_BC00434159DAE8351451CCE9C748F5D7 (1504 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\UmmyVideoDownloader.exe (55388 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D2B5168CDD0EBF4C0C8EA1C3A1FAE07F_7C71B7FDE72B29E5A0333876A274976E (1536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\UmmyVideoDownloader_setup[1].exe (1290996 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4 (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D2B5168CDD0EBF4C0C8EA1C3A1FAE07F_7C71B7FDE72B29E5A0333876A274976E (472 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5080DC7A65DB6A5960ECD874088F3328_BC00434159DAE8351451CCE9C748F5D7 (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\money\money.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\0.png (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\pagetranslator.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\userinfo\passport.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\mail (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\currency_up.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\FwRhzXrrYgJtsGITD_YiU0Dtuk0.png (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\data.zip.patch (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\ovc_gr.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\logo.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\readability\readability-print.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\textonly.dtd (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialshims.dll.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\ovc_-sn.png (395 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_ts_ra.png (714 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\pCHi2EbFGprgWW3mMpMtDX54NQM.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\main-ui.js (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\moikrug.dtd (810 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_-sn_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\route-form\images\form-close.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\buttons\images\button-minus.png (237 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\skc_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_-ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\RlCxSpz6nMOlD7d9slWYf-6j8Jw.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\quote.dtd (674 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\bbQ1jlb4T8Jy-s_k1Nz6W3nWt7g.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\town\townlist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-ball-dis.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\moikrug.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\quote.messages.xml (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\money.messages.xml (519 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\iFjn01ugU1GyG0iHwFsofKRnDeM.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-ui\b-spinner\images\b-spinner.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_ ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\quote\quotelist.dtd (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\town.dtd (911 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-ui\b-spinner\images\28.gif (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\ovc_ts_ra.png (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\style.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\epVOh1xBimDwi8BSMFWMEy7gE6E.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialframe64.dll.patch (1728 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\town\townlist.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\B_GHi1n15TIonEBlfjSOiyj2Km4.svg (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_-ra.png (470 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\money.dtd (362 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\quote\quotelist.dtd.patch (34 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-libs\polyfills.js.patch (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\header\images\mail-create.png (326 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\lenta.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\oL9859A-5vIMHo11ArMir5KkeLc.png (316 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_-sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\ovc_sn.png (590 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\rZ9cub6wgvpWuc-F5gKU_pYGEfg.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\ic\2.png (215 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_ sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_-sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_ ra.png (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\pagetranslator (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\PudDxssXdb8JdlcekuwRV8FSHVM.png (465 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_common.css.patch (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\8-16.png (696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_ ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\quote.dtd (666 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\geobase.xsl (377 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_common.ie7.css.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bl.png (927 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\common.dtd (188 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\header\images\mail-refresh.png (944 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\userinfo.dtd (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\money.dtd (362 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\money.dtd (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\noflash\_music-noflash.ie.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\tb\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_sn_n.png (659 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\index.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\RVzdJ9OJh0AWiuUZ2gi5Dwus4aw.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-ui\b-spinner\images\45.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\cy.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\skc_n.png (720 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\8Tybci2Ic-b9EusnAqnwjdWOCYU.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\ic.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\mOgNznzQgwqm21KZjo3hk5YUGWU.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\main-adapter.js (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\J7daNOyAa24zy3Ir-wWKTeQNeuo.png (576 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\quote\export.dtd (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\style.css (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_ sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_ ra.png (369 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\YCbcsQcGggriiKTU5E8gjUWGekA.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_-ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\town.png (242 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\mail\maillinks.dtd.patch (34 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_ts_ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\moikrug.messages.xml (946 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\cy.messages.xml (915 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\mail\mail-menu.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\route-form\images\route-b.png (494 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\messages.xml (293 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\route-form\images\form-close-hover.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\images\mail_128.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barframe.dll.patch (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_ra_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-libs\polyfills.js.patch (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\HuoOcff43SvB1OVXDmTAAXmFs0g.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\read.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\QZwxmXJnFKgedMKrAEej8n07z5k.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_ sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\translator\translator.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\mOgNznzQgwqm21KZjo3hk5YUGWU.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\music\pause.png (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\messages\images\mail-logo-uk.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\town\geobase.xml (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\route-form\images\route-a.png (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_-ra-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\N8KgL5vlefdSVZld4rrAZOv6td0.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_-ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\quote.dtd (845 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\quote.dtd (666 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\pCHi2EbFGprgWW3mMpMtDX54NQM.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\N8KgL5vlefdSVZld4rrAZOv6td0.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\town (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\RMgCqWYYpM8hT-lQBStHX86s-sQ.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_-ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\geolocation.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\images\mail_128.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\ggWlFuB9d-Zuqq9zOjCpTGRJxCM.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\skc_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\Z89ijsO17istBi7uzfluWEm_lBs.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\favicon.png (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\quote.xml (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\skc_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\textonly.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\mail.dtd (541 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bl.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\town\townlist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\quote\quotelist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\hmwMDVFmRjsNKU_RJNONzYBQsUQ.png (216 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\logo.dtd (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\v6iQMoknRy8vcEf3ugJmQ-5wUIQ.png (192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\favicon.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\quote\quotelist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\n1rMK7Xj0goEMV7ryTTbeIMFKJo.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_sn_n.png (662 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\J_kxuf5tD5_oT3zFsj_RdNpltno.svg (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\ic.dtd (876 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-libs\sizzle.js.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\translator.dtd (274 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\ovc_ sn.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\noflash\img\b-music-noflash.png (520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\moikrug.dtd (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\ovc_ts_ra.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-sn_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\header\images\menu-close.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\mail\mail-menu.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\branding.zip (786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\userinfo\userinfolinks.dtd (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_ts_ra.png (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\main-ui.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\skc_n.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\WHjFOxvA2An3CNqNgdI31oAB0sk.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\ua\town\townlinks.dtd (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialframe.dll.patch (511 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-route.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\town\geobase.xml (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_-sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash\_music-noflash.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\quote\quotelist.xml (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\noflash\_music-noflash.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\SgutBd0LU4K_hlDET4mn_5dBTcw.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\u6UuL0myn5QAc_jBy_VOr6h-fe4.svg (529 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\quote\quotelist.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\quote.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\ic.dtd (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\brand\ua (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\3-16.png (773 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\moikrug.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_ ra_d.png (907 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\PudDxssXdb8JdlcekuwRV8FSHVM.png (465 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\mail\folder.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\quote_down.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\mail-logo-ru.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\QZwxmXJnFKgedMKrAEej8n07z5k.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\textonly.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\town\townlist.dtd (88 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\geolocation.xml (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\30UGBquvFO2YEoZdzUGiTFKarLU.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\logo.dtd (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Common\elements.exe.patch (1764 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_-ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\WHjFOxvA2An3CNqNgdI31oAB0sk.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\pagetranslator.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\skc_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\brand\ua\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\rQyMR-dTD-QwlKU1_uHVI_6jnXw.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\main-adapter.js (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ts_ra-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_ sn.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\ovc_ts_ra.png (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\FEj0besueLlZr3fanjXLNpNvecA.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\7akVtjosFy0SIZK5kndXmRwXc6k.png (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\SgutBd0LU4K_hlDET4mn_5dBTcw.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\GYMNZu4TKhloYL739B8cACsR7AQ.svg (986 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\logo\logo.png (409 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\mail\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash\music-noflash.html.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\ovc_gr.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\2-16.png (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\8-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\OJF8v3B9B1iuTlzjl4Upnf3NpuQ.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\jquery.js (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\quote\quotelist.dtd (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\style.css.patch (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_-ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\fg_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\9-16.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\FwRhzXrrYgJtsGITD_YiU0Dtuk0.png.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\ovc_gr.png (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\index.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\nointernet\img\b-music-noinet.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\2-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\quote\stock_down.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\textonly.messages.xml (277 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\logo.xml (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\town\townlist.dtd (82 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\ic.dtd (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\ui\dayparts\images\opacity08.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\tfgMYzMit9gnbrINme1tVATR_Hw.png (158 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bl.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\logo.dtd (140 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\logo\logo.png (409 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\pagetranslator.xml (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\ovc_-ra.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\fn7tv3d9HtkFU7iJjQKO1ayPMJo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\brand\ua\userinfo\userinfolinks.dtd (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\B2U5JTSkrM1iy2QyFZIn43s5WIw.svg.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_-sn_n.png (880 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_ sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash\_music-noflash.ie.css.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\LYWMGttYOnp54g3peDbHFvecIZg.svg (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\ovc_-ra.png (542 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\mail.dtd (735 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_-sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\geolocation.dtd (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_gr.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\gDhz2dKv8qVaZ-NZ4RtfpEiqP2w.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music.xml (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\skc_n.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\logo.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\favicon.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\1.png (176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\blank.gif (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_-ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\readability\ready.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_ ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\logo.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\ovc_ra.png (360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\index.html.patch (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\login.xml (511 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\ovc.png (298 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\textonly.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\4-16.png (721 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\music\music.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\userinfo\userinfolinks.dtd (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\ovc_ra.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\basepackage.zip.patch (1295 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\newtab.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\YCbcsQcGggriiKTU5E8gjUWGekA.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\h1oQ0mYlczivIuzRfLNbU7TkmWM.png (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\town\geobase.xml (747 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\gold_down.png (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\bartab64.dll.patch (449 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\psDFj5dDAgXPPU-mVe-RPid0mc0.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\readability\applied.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-libs\require.min.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\logo.dtd (140 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\ovc_sn.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\newtab.html (101 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\WPY8f52_KOx1hza1XbGCi6umItk.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\translator.dtd (260 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\style.css.patch (106 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\mail\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\j6jpzsnwlO6IPc-YfB0sgdOJ3sE.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\YDmSge45ykmToGfqY4MTD1rQ3bw.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\ovc_sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_n.png (569 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\skc_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\fg_d.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\ovc_ ra.png (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\fg_d.png (983 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\vLV2RFKX8s67kUoFpg2qwLkBEIk.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\fg_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\currency_down.png (570 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\userinfo.dtd (573 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_-sn_d.png (852 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\delete.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\geolocation.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\textonly.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\tb\town\townlinks.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\translator\extrainfo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ ra_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_-ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_ra_n.png (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_ sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\M0l9QwOFqrxbai_uKwym7mnjg7s.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\nointernet\_music-nointernet.ie.css.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\B2U5JTSkrM1iy2QyFZIn43s5WIw.svg (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_ts_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\.manifest.mf.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\fg_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\pagetranslator.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\town\townlist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\fg_d.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\quote.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\common.dtd (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\RVzdJ9OJh0AWiuUZ2gi5Dwus4aw.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_ ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\fotki.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\skc_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_-sn_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\geolocation.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\common.dtd (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_ sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-red.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\bbQ1jlb4T8Jy-s_k1Nz6W3nWt7g.png (839 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\skc_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_-ra.png (635 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\quote\quotelist.dtd (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\stardust64.dll (1858 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\ovc.png (473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_-sn_n.png (639 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\skc_n.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\userinfo.dtd (522 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_-sn-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\gray-16.png (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_sn_d-inverted.svg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\ui\now\images\b-wind_arrow.png (179 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\ua\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\currency_up.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\fotki.dtd (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\skc_d.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\main-logic.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_-sn.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\brand\ua\town\townlinks.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\fotki\fotki.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barshims64.dll (1138 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\ic\1.png (176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\translator\extrainfo.dtd (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\tb\quote\export.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\main-adapter.js.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\readability\hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\iG8q08OxQz2nkkl6BRGGlXFWtjU.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\translator.dtd (336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\readability\readability.js.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\textonly.dtd (180 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_gr-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-libs\require.min.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\money.dtd (530 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\weather\gray-16.png (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\sovetnik.zip (2513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-ui\b-spinner\images\28.gif (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\moikrug.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_-ra_d.png (823 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bl.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\common.dtd (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\OEjMVquR-FlJrxPp3R2w3SiSo3I.png (272 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\ovc_-sn.png (534 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\mail-logo-ru.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\login.dtd (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\elements-ru[1].xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_ sn_n.png (694 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\town\townlinks.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\brand\ua\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\geobase.xsl (377 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\geolocation.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\nointernet\img\b-music-logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\LYWMGttYOnp54g3peDbHFvecIZg.svg (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\music.dtd (328 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\favicon.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\cXyECx_vgE9llIxJCsRweD2uMuc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\fg_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\userinfo.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\pDyNDX-HZwcZsvKc7CchzqPMfjU.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\HAaHli8IySZ-JG5GCu6d1e_EhHY.png (180 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\mail\logo.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bl.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\FIg7sp49R7Bbg3paJlGfzrP03rE.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\fotki.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\quote.dtd (674 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\lenta.messages.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_ts_ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\brand\ua\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\t1Xoc_X9L745EI77VThFTlLoR9I.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\userinfo.dtd (573 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_ sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_-ra_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\ovc_ sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_ ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_ ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\M0l9QwOFqrxbai_uKwym7mnjg7s.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\textonly.xml.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\8rm3VzQm1-ENXVTt0z7lr0UyMfI.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_-sn_d.png (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\3-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\n1rMK7Xj0goEMV7ryTTbeIMFKJo.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\music.dtd (328 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\translator.dtd (346 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_ sn_n.png (671 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\readability\ready.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\noflash\music-noflash.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\quote\gold_down.png (667 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\ic\5.png (213 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\quote\quotelist.xsl (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\Cs5BseJ6glqWdmXvSRCGh7Wzjo.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\Ueu6ImmUtuXnUg1yF2XdPlHBjl4.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\noflash\_music-noflash.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\geolocation\geolocation.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\geolocation.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_common.ie9.css.patch (67 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\IeJDy6oBct5hJLx8v2axIJnqgJg.png (388 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\offline-19.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\geolocation\geolocation.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_-ra_n.png (846 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\money.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\brand\ua\translator\extrainfo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_ ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\f7-fSnZIoEUNKpSJWJW98kU5x9U.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\vLV2RFKX8s67kUoFpg2qwLkBEIk.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\fg_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\A_A_8kwnWdRuEKSsINIh1KKRTPU.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\quote.dtd (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\require-config.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\8Tybci2Ic-b9EusnAqnwjdWOCYU.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\skc_d-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\auth_overlay.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\5_YBT2TOn0eJAO4VlPA2e644YEY.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\fg_d.png (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\stock_up.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\readability\ready.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\ovc_ ra.png (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\LnyndjXnnnf0-TBiILsn2xomtFE.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\route-form\images\button-route.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\temporary-files\{5A8164B5-776E-4BC7-B99F-9336B8EBEF70} (76377 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\translator\extrainfo.dtd (108 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\music.dtd (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\ovc.png (397 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\_1tfIBlbbO-sFZX3BSjgbsFLIaE.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\XMoIiA5FZyikn3LZNNAeV9CQDxk.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\pagetranslator\injector.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\iG8q08OxQz2nkkl6BRGGlXFWtjU.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\quote\quotelist.xsl.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_ra_d.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_-sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\textonly.dtd (180 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\messages\images\read.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\login.xml (511 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\fg_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\0-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\nointernet\_music-nointernet.css.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-libs\require.min.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-ui\b-spinner\images\20.gif.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_n.png (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\geolocation.dtd (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\IeJDy6oBct5hJLx8v2axIJnqgJg.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\5-16.png (771 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\brand\ua\town\townlinks.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\YDmSge45ykmToGfqY4MTD1rQ3bw.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\KPnz247WBDVCwXmztn7XWxi1dqI.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-ui\b-spinner\images\20-dark.gif.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bl-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_sn.png (691 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc.png (298 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\translator\extrainfo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\geolocation.dtd (72 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\money.messages.xml (519 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash\img\b-music-logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\zO38-_sA_u6ACecTf3a7S276UCQ.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bl.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_ts_ra.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_ ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ ra_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\subscription\add.png (779 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\O1O9BufqLBgcOuBVjcTEsQxoej0.png (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\bGTLQ3lgAfg8aeK6thx3QUyAaP4.png (972 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\pX_YaGn4Yr_lAhpb7JdMwBPIaAY.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\u6UuL0myn5QAc_jBy_VOr6h-fe4.svg (529 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\fg_d.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\logo.messages.xml (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_-ra_n.png (562 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\music\music.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\town.dtd (911 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\nointernet\_music-nointernet.ie.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\IeJDy6oBct5hJLx8v2axIJnqgJg.png (388 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\readability\hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\rQyMR-dTD-QwlKU1_uHVI_6jnXw.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ sn_d-inverted.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\logo.dtd (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\style.css.patch (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\quote.dtd (859 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\6FdgwygQ_TzvldBXoorX_18X3OI.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\LnyndjXnnnf0-TBiILsn2xomtFE.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\ic.dtd (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\quote\gold_up.png (658 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\8mM517Xu-xUh_e_5YdDztnBFfxY.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_ ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\textonly.dtd (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\jgFkBCE-RZAAZ9yPtanIQikHjO0.svg (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\quote\stock_up.png (587 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_ sn_d.png (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdial.zip (983 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash\_music-noflash.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_gr.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\jquery.js.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\money\money.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-libs\sizzle.js.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\mail.dtd (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_ ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\buttons\images\button-yellow.png (358 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\30UGBquvFO2YEoZdzUGiTFKarLU.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_sn_n.png (662 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_-ra_d.png (798 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash\img\b-music-noflash.png (520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\ua\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_common.css (902 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\header\images\mail-create.png (326 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\translator.dtd (350 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\J_kxuf5tD5_oT3zFsj_RdNpltno.svg (149 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\brand\ua\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\8DjdBETc_zk-FtrdVtsq91CY0kU.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_ sn_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-minus.png (237 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bl.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\HtlgdvpTqGiTOfnycOmfS0aD8So.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\music\pause.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_-sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\town.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\ic.dtd (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\logo.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_ ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\translator.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\ua\town\townlinks.dtd (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\OJF8v3B9B1iuTlzjl4Upnf3NpuQ.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_-sn_n.png (639 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\mail\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_-ra.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\skc_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\login\auth.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_d.png (786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\geolocation.dtd (72 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\10-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\4.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\main-logic.js (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\userinfo.dtd (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\pagetranslator\injector.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\main-adapter.js.patch (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-plus.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\YCbcsQcGggriiKTU5E8gjUWGekA.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\skc_d.png (634 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdial64.dll.patch (1923 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_ ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\route-form\images\route-a.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\skc_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_common.ie9.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_sn_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\epVOh1xBimDwi8BSMFWMEy7gE6E.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\fg_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\town\townlinks.dtd (133 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_ sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\FzWyVFQkBJObPTziVE3nwUX-sFE.svg (148 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\town\geobase.xml (1647 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\moikrug\moikrug.png (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\mail\logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_-sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\XMoIiA5FZyikn3LZNNAeV9CQDxk.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_-ra_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\5BIrw26AROzc9J3IurJFbak0Jro.gif.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ sn_n-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\quote\quotelist.xml (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\psDFj5dDAgXPPU-mVe-RPid0mc0.png (715 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barframe64.dll (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\geolocation.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\logo.xml (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\ua\mail\maillinks.dtd.patch (34 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\MaIoSE198uzo6p3SmzgF9C5DwGQ.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\town\townlist.dtd (83 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_-sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ ra_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\main-adapter.js.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\translator.messages.xml.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\quote\currency_up.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\geolocation.dtd (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\defaults.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\music.dtd (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\9-16.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\newtab.html.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\skc_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\main-logic.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-libs\sizzle.js.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\main-adapter.js (1960 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\fake.xml (608 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_-sn_n.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\cXyECx_vgE9llIxJCsRweD2uMuc.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\textonly.dtd (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\cy.xml (641 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\userinfo.dtd.patch (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-green.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\ic.dtd (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\town\geobase.xml (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\fotki.dtd (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\quote\quotelist.dtd (87 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\mail\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\header\images\mail-create.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\YDmSge45ykmToGfqY4MTD1rQ3bw.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\messages\images\delete.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\dN3Z8lWVPQSY91sGfjNPrnMqwaE.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\mail.dtd (633 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\LYWMGttYOnp54g3peDbHFvecIZg.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\gray-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\common-ui\b-spinner\images\b-spinner.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\gold_down.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-sn_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\favicon.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-yellow.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_-sn_d.png (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\3.png (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_ra.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\translator.xml (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\textonly.dtd (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-ball-dis.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\fg_n.png (681 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ ra-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\messages\images\spam.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\5BIrw26AROzc9J3IurJFbak0Jro.gif (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\common-libs\require.min.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bl.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\QZwxmXJnFKgedMKrAEej8n07z5k.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\3.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\OEjMVquR-FlJrxPp3R2w3SiSo3I.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\mail\mail.png (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\Vyyv32J6Ora9svqZCYF-XSVU4Zc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\ovc_gr.png (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\fg_d.png (665 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\tb\quote.xml (887 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ts_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\logo.dtd (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\mail.dtd (633 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\geolocation.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\nointernet\music-nointernet.html.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\readability\sprite-readability.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_-ra_d.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\quote\quote_down.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ra_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\ui.js.patch (1176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\music.dtd (371 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\common-libs\polyfills.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\readability\readability.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\menu\images\remove.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\messages\images\mail-logo-en.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_-ra_d.png (823 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\HHaZUbXWoxJcOwRCNSx4RcMW1wM.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_ts_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\chelper\chelper.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_sn_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\HHaZUbXWoxJcOwRCNSx4RcMW1wM.svg.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\QzU0ufhPTrD0S8e0bpVNvGRkS7s.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\skc_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\mail.dtd (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\fotki\fotki.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bl.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\main-ui.js (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\yadisk.zip (900 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\quote.dtd (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\mail.dtd (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\skc_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_-ra_d.png (857 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\D_bdPNqv6HJlssMZjqrlv7FqetY.png (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-libs\polyfills.js.patch (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_sn_n.png (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\common.dtd (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\mail\mail.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\music\music.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\skc_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\geolocation.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\town\townlist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\quote\export.dtd (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\ic.dtd (876 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\.update.xml (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_ sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\town\townlist.dtd (88 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\translator.dtd (249 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\index.html (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\login.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\smJm5iFAtam9l7LrZUH-DhaLQH0.png (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music.messages.xml (510 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\La6qi18Z8LwgnZdsAr1qy1GwCwo.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_gr.png (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_ra_n.png (603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\n1rMK7Xj0goEMV7ryTTbeIMFKJo.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\B_GHi1n15TIonEBlfjSOiyj2Km4.svg (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\buttons\images\button-ball-dis.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\ggWlFuB9d-Zuqq9zOjCpTGRJxCM.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_ sn.png (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\ic\3.png (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_-sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_-sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\quote\export.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\mail.dtd (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\1-16.png (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\rZ9cub6wgvpWuc-F5gKU_pYGEfg.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\moikrug.dtd (818 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_ ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\nointernet\_music-nointernet.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\Ueu6ImmUtuXnUg1yF2XdPlHBjl4.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_gr.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\fg_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_d.png (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\8DjdBETc_zk-FtrdVtsq91CY0kU.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\spam.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\moikrug\moikrug.png (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\mail\folder.png (441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_-ra_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\mOgNznzQgwqm21KZjo3hk5YUGWU.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\ovc_ sn.png (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_-ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_ sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\messages\images\mail-logo-ru.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\B_GHi1n15TIonEBlfjSOiyj2Km4.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\RlCxSpz6nMOlD7d9slWYf-6j8Jw.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_-ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\route-form\images\route-b.png (494 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\ovc_ ra.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\5.png (213 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\2-16.png (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_sn_d.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\moikrug.dtd (874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\favicon.ico.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\7akVtjosFy0SIZK5kndXmRwXc6k.png.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\fg_n.png (386 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\music.dtd (487 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\common.dtd (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_-sn_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\route-form\images\form-close-hover.png (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_d.png (786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\f7-fSnZIoEUNKpSJWJW98kU5x9U.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\OJF8v3B9B1iuTlzjl4Upnf3NpuQ.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\quote\quotelist.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\reply.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\nointernet\img\b-music-logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_ sn_n.png (671 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_sn_d.png (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\logo.dtd (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\geobase.xsl.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\fg_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\ovc_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\geolocation.dtd (75 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_-sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\userinfo\passport.dtd.patch (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\login.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\messages\images\reply.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\userinfo.messages.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\A_A_8kwnWdRuEKSsINIh1KKRTPU.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\fg_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\money.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\fg_d.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bl-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\route-form\images\form-close.png (273 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\ic.dtd (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_sn_n.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\userinfo\passport.dtd.patch (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\U0h5laCla0RWhXA2HIlO7izWrgg.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\ggWlFuB9d-Zuqq9zOjCpTGRJxCM.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\money.dtd (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\fg_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\header\images\menu-close.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\route-form\images\button-route.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-ra_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\ovc_ sn.png (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\h1oQ0mYlczivIuzRfLNbU7TkmWM.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\ovc_-ra.png (470 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\quote\quotelist.dtd (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_-sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\buttons\images\button-ball-all.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\ui\dayparts\images\opacity08.png (158 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\common-libs\sizzle.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ sn_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\pagetranslator.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\ovc_ts_ra.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\common-ui\b-spinner\images\20-dark.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\fg_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_-sn_d.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_-ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\tb\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\header\images\menu-open.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\logo.dtd (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\chelper\chelper.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\quote.xml (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_n.png (569 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_ sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\ua\userinfo\userinfolinks.dtd (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_d.png (752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_sn_d-inverted.svg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\main-ui.js (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_sn_d.png (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\ua\translator\extrainfo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\mail-logo-uk.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_ ra_n.png (986 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\offline-19.png (705 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\logo.messages.xml (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\bartab.dll.patch (551 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\geolocation.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_gr.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash\img\b-music-noflash.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\OYPSMBgQcfcSMrYzBPOaVjHEDcE.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\q3xr3wR_Yg_zr9sfIINzZLCTdwE.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\ovc_ra.png (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_-ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\mLXSAWhA--vCjoHGBhYVNaCqDLg.svg (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\FzWyVFQkBJObPTziVE3nwUX-sFE.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\quote_up.png (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\0.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\quote\quote.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\gold_up.png (658 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bl.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\jquery.js (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_ sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_common.ie7.css (980 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\gold_up.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\pagetranslator\pagetranslator.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\fg_d.png (665 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_ sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\music\play.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\messages.xml (293 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\userinfo.dtd (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\readability\sprite-readability.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\nointernet\_music-nointernet.css (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\stock_down.png (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\attach-ico.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_ ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\geolocation.xml (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\3y0kod-qSv8niHqiuf1Y0IxgVlU.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\readability\readability.js (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\ic\0.png (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\stardust.dll (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\login.dtd (787 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\2.png (215 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_ sn_d.png (850 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\userinfo.dtd.patch (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\J7daNOyAa24zy3Ir-wWKTeQNeuo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\7-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-ui\b-spinner\images\b-spinner.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\fg_n.png (681 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\epVOh1xBimDwi8BSMFWMEy7gE6E.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\bGTLQ3lgAfg8aeK6thx3QUyAaP4.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\HtlgdvpTqGiTOfnycOmfS0aD8So.png (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\PudDxssXdb8JdlcekuwRV8FSHVM.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_-sn-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-ui\b-spinner\images\20.gif.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\userinfo\userinfolinks.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_ ra_d.png (907 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\HuoOcff43SvB1OVXDmTAAXmFs0g.png (782 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\music.dtd (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_-ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\skc_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\skc_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\Cs5BseJ6glqWdmXvSRCGh7Wzjo.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\translator.messages.xml (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\6FdgwygQ_TzvldBXoorX_18X3OI.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\quote\quote_up.png (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-ui\b-spinner\images\45.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\FIg7sp49R7Bbg3paJlGfzrP03rE.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_sn-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\fg_d-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\login\auth.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\6qtB0Q9FVAmOWwOK3V5JVI5ojcI.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\mail.dtd (482 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\6.png (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\hCvqPleRwNIKexdlpUBO-I_8Toc.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\fg_n.png (386 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\cy.messages.xml (915 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\ui\now\images\b-wind_arrow.png (179 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\fg_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\skc_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\translator.dtd (260 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\readability\sprite-readability.png.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\town.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash\_music-noflash.css.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-ui\b-spinner\images\45.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\temporary-files\{A774563B-DE0F-4DB6-B20A-CAA304A701DA} (26786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\moikrug.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\Common\elements64.exe.patch (1843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\stardust.dll (458 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\music.dtd (371 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\1-16.png (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\gDhz2dKv8qVaZ-NZ4RtfpEiqP2w.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_-ra_n.png (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barframe64.dll.patch (1412 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_ ra_n.png (679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\main-logic.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\gray-16.png (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\skc_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\town\townlist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\readability\hover.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\Z89ijsO17istBi7uzfluWEm_lBs.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\D_bdPNqv6HJlssMZjqrlv7FqetY.png (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\hCvqPleRwNIKexdlpUBO-I_8Toc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_-sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town.messages.xml (865 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\OYPSMBgQcfcSMrYzBPOaVjHEDcE.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_ sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\RMgCqWYYpM8hT-lQBStHX86s-sQ.png (929 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\KPnz247WBDVCwXmztn7XWxi1dqI.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\logo\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\readability\applied.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ts_ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\common.dtd (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\oL9859A-5vIMHo11ArMir5KkeLc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_ ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\ua\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\quote.xml (887 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ra_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\pagetranslator.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_-ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\30UGBquvFO2YEoZdzUGiTFKarLU.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\favorites.xml (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\mLXSAWhA--vCjoHGBhYVNaCqDLg.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_ts_ra.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\mail-logo-en.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\yWSEQKZzite-8MoQ6YKWdObUP4E.png (151 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ sn-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\readability\readability-print.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ sn_n-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\userinfo.dtd (581 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_n.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\jgFkBCE-RZAAZ9yPtanIQikHjO0.svg.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\FOLu1ETT62D1LNcU-3sIz9N1IeQ.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\logo.dtd (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\stardust.dll.patch (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\ua\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\ovc_-sn.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\D_bdPNqv6HJlssMZjqrlv7FqetY.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\moikrug\moikrug.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\lALn2ERV0sQzCaiJB-rdgHrL2JI.png (643 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_-ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\J_kxuf5tD5_oT3zFsj_RdNpltno.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\money.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\brand\ua\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdial.dll.patch (2196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_ ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\translator.dtd (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\q3xr3wR_Yg_zr9sfIINzZLCTdwE.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\geobase.xml (2159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\Common\elements.exe.patch (1764 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\money.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_ sn_d.png (850 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\town.png (242 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\mkfxKG5Ahs_33yt9pgsBXKbtnUo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\quote.xml.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\mv7_d3S--K8m-52iWzjEsPZHaA4.svg (986 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\town\townlist.dtd (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_ sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\ovc_-sn.png (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_-ra_n.png (562 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music.messages.xml (510 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\sSvtvw1vSraqkkgdSjmCcyf7Nwo.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\mail-logo-en.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\userinfo\userinfolinks.dtd (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\qPLYva7Gqc4z8eRTw-G50C80M5w.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\main-logic.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\translator.dtd (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\skc_d-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\skc_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ra-inverted.svg.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\hCvqPleRwNIKexdlpUBO-I_8Toc.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\ui.js (472 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\login.dtd (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\pX_YaGn4Yr_lAhpb7JdMwBPIaAY.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\buttons\images\button-green.png (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\pagetranslator\langs.xml (365 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_sn_d.png (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_-sn_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\ovc_ sn.png (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\logo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\textonly.xml (405 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\readability\readability.css.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\.manifest.mf (132 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\brand\ua\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\userinfo\userinfolinks.dtd (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\quote\quotelist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\favorites.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\subscription\subscription.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\pagetranslator\pagetranslator.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\fotki.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_ sn_n.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\u6UuL0myn5QAc_jBy_VOr6h-fe4.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\dN3Z8lWVPQSY91sGfjNPrnMqwaE.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_sn_n.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\userinfo.dtd (507 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\bGTLQ3lgAfg8aeK6thx3QUyAaP4.png (972 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\userinfo\userinfolinks.dtd (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\ovc_ ra.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\A_A_8kwnWdRuEKSsINIh1KKRTPU.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\Vyyv32J6Ora9svqZCYF-XSVU4Zc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_ ra-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\login.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\WhpZGK4ilmcwDg2k1xoCV1INn1M.png (173 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\town\townlinks.dtd (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\bkn_sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\5-16.png (771 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\fotki.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-ball-all.png (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_ sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bl.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\skc_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\skc_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_gr.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_ ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_-ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_-ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_gr.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_n.png (547 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ sn_d-inverted.svg (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\ovc.png (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\4-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\quote.dtd (845 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\geolocation.dtd (129 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\FzWyVFQkBJObPTziVE3nwUX-sFE.svg (148 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\6-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\La6qi18Z8LwgnZdsAr1qy1GwCwo.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\buttons\images\button-red.png (348 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-ball-all.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_ ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_-ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music.xml (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_ sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\money.dtd (580 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\J7daNOyAa24zy3Ir-wWKTeQNeuo.png (576 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\main-logic.js.patch (1176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_ sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\ovc_-ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ sn_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\fotki.dtd (740 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_ts_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\skc_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\ovc_ ra.png (369 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_ts_ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\stardust64.dll.patch (903 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_ra_n.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\buttons\images\button-minus.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\pagetranslator\loader.js (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\style.css (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\3mHjWkgL_5EBDiCqQNBYtJ0gdTk.png (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_-ra_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\quote_up.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\barshims.dll (1961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\8mM517Xu-xUh_e_5YdDztnBFfxY.png (982 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-ui\b-spinner\images\b-spinner.gif.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\mail\logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\ovc_sn.png (796 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\translator\translator.png (636 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\tb\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\blank.gif (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\userinfo.xml (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\quote.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\moikrug.messages.xml (946 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\ovc_sn.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\translator\extrainfo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\ua\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\fg_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\readability\readability-print.css.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_ra_n.png (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\logo.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\pagetranslator\loader.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_ sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\userinfo\userinfolinks.dtd (185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\town\townlinks.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\mLXSAWhA--vCjoHGBhYVNaCqDLg.svg (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_ ra_d.png (777 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\newtab.html.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_-sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_sn.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_gr-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\OYPSMBgQcfcSMrYzBPOaVjHEDcE.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\music.dtd (481 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-ui\b-spinner\images\20-dark.gif.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ ra_n-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\.update.xml (766 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\ovc_ ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\subscription.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\weather\gray-16.png (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\6-16.png (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\ovc_ts_ra.png (714 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\6FdgwygQ_TzvldBXoorX_18X3OI.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\buttons\images\button-plus.png (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\smJm5iFAtam9l7LrZUH-DhaLQH0.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\userinfo.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\cy.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\main-ui.js.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\login.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\quote\quotelist.dtd (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\sSvtvw1vSraqkkgdSjmCcyf7Nwo.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\userinfo.dtd (533 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\0-16.png (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\textonly.dtd (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\8rm3VzQm1-ENXVTt0z7lr0UyMfI.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\icons\logindialog\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\pDyNDX-HZwcZsvKc7CchzqPMfjU.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\7-16.png (645 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\common-ui\b-spinner\images\28.gif (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\ic\4.png (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\icons\logindialog\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_ ra_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\moikrug.dtd (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\moikrug.dtd (810 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\town.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\U0h5laCla0RWhXA2HIlO7izWrgg.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_gr.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\fotki.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\MaIoSE198uzo6p3SmzgF9C5DwGQ.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\elements-ru.8.9.1.5100.x64.delta.8.7.0.3110[1].zip (40293 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\fg_d.png (983 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\ua\translator\extrainfo.dtd (104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\quote_down.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\ui\route-form\images\route-b.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\fotki.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\music\play.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\RzYvI7d3s99rTwAZUd4u2BoyF-8.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\music\html\noflash\img\b-music-logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\2.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\mjAIUH_QW6TPQtFga9ZLNIEY0lg.svg (719 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\main-ui.js (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\money.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_ra_d.png (807 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\fg_n.png (494 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\10-16.png (706 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\common-ui\b-spinner\images\20.gif (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\ui\now\images\b-wind_arrow.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_gr-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\userinfo\passport.dtd (189 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\town\geobase.xml (1647 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\skc_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\skc_n.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\logo.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\readability\readability.css (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_sn_d.svg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\pagetranslator.dtd (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\lALn2ERV0sQzCaiJB-rdgHrL2JI.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_ sn_n.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_ ra_n.png (604 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\qC_PdL0Ak0WR8_18wFtdA2FwOf4.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\fotki.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\common.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\music.dtd (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\town\townlinks.dtd (126 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\mail\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_ sn_n.png (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\music\pause.png (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\iG8q08OxQz2nkkl6BRGGlXFWtjU.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_ sn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\textonly.dtd (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\userinfo\userinfolinks.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\quote\currency_down.png (570 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\skc_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\rEDlHGGyFWrULyWdRTFs5UTS1PA.png (976 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_ sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\fg_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\6qtB0Q9FVAmOWwOK3V5JVI5ojcI.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town.messages.xml (865 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\bkn_-sn_d.png (860 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\nointernet\music-nointernet.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\1-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_d.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\mail.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\moikrug.dtd (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png16\fg_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg19\bkn_ ra_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\defaults.dtd (400 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_gr.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_ra_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\skc_d.png (896 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\ic\6.png (184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\ic.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\header\images\menu-open.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\quote\quotelist.dtd (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\quote\quotelist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\logo.dtd (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png16\skc_d.png (634 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\pagetranslator.messages.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\ovc_ra.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\money.dtd (340 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\pagetranslator\langs.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_-sn_n.png (880 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\SdPm0jvigN6hcrCoZYxpZ0cZ9JY.png (218 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\9-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\pagetranslator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\quote\quotelist.dtd (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\textonly.dtd (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\jgFkBCE-RZAAZ9yPtanIQikHjO0.svg (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\rQyMR-dTD-QwlKU1_uHVI_6jnXw.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\FOLu1ETT62D1LNcU-3sIz9N1IeQ.png (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\town.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\ovc_-sn.png (709 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\d38awltCX2VgnCb75FuAk7ypnNk.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\_1tfIBlbbO-sFZX3BSjgbsFLIaE.png (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\favicon.png (624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\town\townlinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_ sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\2DXe1pPd42HjUa8oyCJHpO9dZ64.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\translator.dtd (274 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\quote.dtd (708 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\auth_overlay.png (216 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_gr.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_ ra.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\vb-ru[1].xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\geolocation.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\style.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\subscription\subscriptionlinks.dtd (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\userinfo\userinfolinks.dtd (177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_-ra_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\ui\buttons\images\button-route.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialshims64.dll (1098 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\town\townlist.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\ua\town\townlinks.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\ovc_ ra.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_sn_d.png (889 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\index.html.patch (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_sn_d-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\bkn_ ra_d.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\ovc_ra.svg.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\en\geolocation.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\weather\gray-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\login.dtd (787 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\town\geobase.xml (1451 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\stardust64.dll (1964 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\vb\2.18.0.5151\FastDial\fastdialshims64.dll.patch (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\png19\bkn_-ra_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\tdmsMBtcvKXyb9p8ym5lfO3DXkQ.png (199 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_-ra.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\geobase.xml (2159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\main-ui.js.patch (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\login\auth.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\tb\userinfo\passport.dtd (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_n.png (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_-sn_d.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\pagetranslator.dtd (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\require-config.js (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\sSvtvw1vSraqkkgdSjmCcyf7Nwo.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\bkn_ ra_d-inverted.svg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\7akVtjosFy0SIZK5kndXmRwXc6k.png (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_-sn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\tb\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\geobase.xml.patch (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\logindialog\logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\subscription.dtd (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\money\money.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\fotki.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\ovc_sn.png (691 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\logindialog\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\uk\quote\quotelist.dtd (84 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\1.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\main-ui.js (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\stock_down.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\quote\quotelist.dtd (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\fg_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\brand\tb\mail\maillinks.dtd (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\style.css (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\6.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_ sn.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg16\bkn_sn_n-inverted.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\require-config.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\ovc_-ra.png (635 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\ovc_ra.png (532 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\town\townlist.dtd (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\be\textonly.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\logo.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\header\images\menu-open.png.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\music.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Elements\default.xml (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\ovc_sn-inverted.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\mail\maillinks.dtd (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\main-logic.js.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\mail\ui\messages\images\reply.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_-ra_n.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\b-icon-empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\town\townlinks.dtd (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\tr\logo.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Elements\updater\updates\elements\8.9.1.5100\Common\elements64.exe.patch (1843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\tUcYJofZiuqIDLQCePK0a5EQQbM.png (152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\WPY8f52_KOx1hza1XbGCi6umItk.png (376 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\common-ui\b-spinner\images\20-dark.gif.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\png19\skc_d.png (802 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\town\traffic\5-16.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\ru\quote.dtd (900 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\nointernet\img\b-music-noinet.png (919 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\textonly.dtd (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\index.html (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\dN3Z8lWVPQSY91sGfjNPrnMqwaE.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\XMoIiA5FZyikn3LZNNAeV9CQDxk.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\mail.dtd (715 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\mail.dtd (541 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\kk\fotki\fotkilinks.dtd (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\quote.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\svg16\fg_n-inverted.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\ovc_gr.png (861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\logo.messages.xml.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\traffic\common-ui\b-spinner\images\45.gif (1372 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\ic.dtd (567 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\nointernet\_music-nointernet.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\uk\moikrug.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\bkn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\main-adapter.js (157 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\traffic\require-config.js.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\tb\userinfo\userinfolinks.dtd.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\mail\ui\menu\images\remove.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\common-ui\b-spinner\images\20.gif.patch (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\8Tybci2Ic-b9EusnAqnwjdWOCYU.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\en\moikrug.dtd (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\parts\bkn_-sn_d.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bkn_ sn_d.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\svg19\bkn_-sn_n.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\icons\town\traffic\4-16.png (721 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\login.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\town\weather\images\now\bkn_ra_n.png (676 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\mail\maillinks.dtd.patch (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\brand\ua\userinfo\userinfolinks.dtd.patch (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\vb-ru.2.18.0.5151.x64.delta.2.16.0.3147[1].zip (12433 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\parts\bl.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\lALn2ERV0sQzCaiJB-rdgHrL2JI.png (643 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\ic\5.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\KPnz247WBDVCwXmztn7XWxi1dqI.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\kk\logo.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\cs\money.dtd (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\new\layout\_\Vyyv32J6Ora9svqZCYF-XSVU4Zc.svg.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\ru\translator.dtd.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\login.messages.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\images\now\skc_n.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\icons\quote\currency_down.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\RlCxSpz6nMOlD7d9slWYf-6j8Jw.svg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\be\common.dtd (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\music\html\noflash\img\b-music-logo.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\town\weather\index.html.patch (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\old\locale\tr\brand\ua\subscription\subscriptionlinks.dtd (147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25473\old\layout\_\5_YBT2TOn0eJAO4VlPA2e644YEY.svg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir3728_25453\new\locale\cs\icons\logindialog\logo.png.patch (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-821KI.tmp\UmmyVideoDownloader.tmp (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\u2-ctrl.log (1529 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Updater2\res (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\bm\in_work_0.xml (795 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\bm\statistics.xml (6665 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\bm\appinfo.xml (11758 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yupdate-exec-yabrowser.log (2925 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yabrowser\appinfo.xml (3492 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yupdate-exec.log (11979 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yabrowser\statistics.xml (278 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yupdate-exec-statistic.log (1055 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\u2-exec.log (1792 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\u2-exec-bm.log (4252 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\u2-exec-statistic.log (1349 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\praetorian\appinfo.xml (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\barie\statistics.xml (1095 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yupdate-ctrl.log (70012 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\barie\appinfo.xml (1997 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\vbie\statistics.xml (310 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\vbie\appinfo.xml (1622 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\clids.xml (267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BrandFile (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\install[1].txt (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ybEDA8.tmp (87080 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BE432C2EE45E016635C9B13C029DA7E7 (391 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BE432C2EE45E016635C9B13C029DA7E7 (744 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\PartnerFile (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\lite_installer.log (24238 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\debug.log (121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\JY3GLGFX\yastatic.net\yb.sxx (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#yastatic.net\settings.sxx (199 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx (10576 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\FAP8EC7.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\PageOverlay\page_overlay.css (954 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\ListEditor\list_editor.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\ja\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\pages\promo.js (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\cs\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\OptionsPage\options_page.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\PromoPage\promo_page.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\pages\options.html (459 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\pt\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\PageOverlay\page_overlay.xml (273 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\zh_TW\messages.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\tr\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\zh_CN\messages.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\pages\log.html (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\manifest.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\fr\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\OptionsPage\img\logo-128.png (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-64.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\de\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\common\defaults.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-16.png (292 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\ru\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\background.html (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\PromoPage\img\notebook.png (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\LogPage\log_page.css (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\uk\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\assessorContent.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\yapdf.dll (2134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\content.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\third_party\requirejs\require.js (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\es\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\it\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\assessorContent.css (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\icons\complain-ad-16.png (214 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-48.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\ListEditor\img\remove.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\PromoPage\img\smile.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\background.js (17904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\DECODED_IMAGES (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\PromoPage\img\red_cross.png (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\DECODED_MESSAGE_CATALOGS (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\.DS_Store (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\third_party\requirejs\.bower.json (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\PromoPage\img\layout.png (20800 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\PromoPage\img\trash.png (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\pages\options.js (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\PromoPage\promo_page.css (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\pages\promo.html (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\ListEditor\list_editor.xml (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\antishock\ui\OptionsPage\options_page.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\main\platform\chrome\pages\log.js (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\pt_BR\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\CRX_INSTALL\_locales\en\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\messages\tabsListener.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\restart_worker.js (809 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\base\define.js (318 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\get_homepage_url.js (654 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\messages\RequestMessage.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\messages\workersListener.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\update_workers.js (669 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\get_idle.js (638 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\get_cookie.js (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\messages\ResponseMessage.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\browser.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\third_party\lodash.min.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\messages\Message.js (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\utils\network.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\force_update_workers.js (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\workers\storage.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\workers\config.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\main.js (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\_locales\ru\messages.json (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\utils\logger.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\utils\filesystem.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\messages\Notification.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\add_cache_entry.js (719 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\messages\messagesHub.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\messages\baseListener.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\get_config_data.js (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\messages\MessageSource.js (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\workers\supervisor.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\watch_cookies.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\DECODED_MESSAGE_CATALOGS (348 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\remove_cache_entry.js (713 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\DECODED_IMAGES (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\watch_idle.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\handlers\get_cookies.js (716 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\workers\storageUpdater.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\workers\workersConfigData.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\utils\url.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\manifest.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\CRX_INSTALL\scripts\app\yandex.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\main.js (305 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\messages\RequestMessage.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\utils\filesystem.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\watch_cookies.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\get_cookies.js (716 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\yandex.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\DECODED_IMAGES (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\third_party\lodash.min.js (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\utils\logger.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\_locales\ru\messages.json (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\messages\Message.js (958 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\get_idle.js (638 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\remove_cache_entry.js (713 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\update_workers.js (669 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\get_homepage_url.js (654 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\add_cache_entry.js (719 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\browser.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\get_cookie.js (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\manifest.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\watch_idle.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\workers\config.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\force_update_workers.js (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\restart_worker.js (809 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\utils\network.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\utils\url.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\messages\tabsListener.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\messages\Notification.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\messages\messagesHub.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\messages\workersListener.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\workers\supervisor.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\base\define.js (318 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\DECODED_MESSAGE_CATALOGS (348 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\messages\MessageSource.js (754 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\workers\workersConfigData.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\messages\ResponseMessage.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\workers\storage.js (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\messages\baseListener.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\CRX_INSTALL\scripts\app\handlers\get_config_data.js (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\data_0 (1373380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\data_1 (291184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\data_2 (118424 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\data_3 (31864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Visited Links (3658 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\68F9.tmp (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\suspend_api_check.exe (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\000003.log (94 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\7784.tmp (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\plmneencfmbjfgbkfiinjelmngigejjh\0.8.9_0\main\platform\chrome\icons (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Cookies (383 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\browser_elf.dll (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\ja\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000017 (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000016 (698 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000015 (731 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000014 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000013 (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000012 (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000011 (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000010 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000019 (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000018 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_ak2aFoetrl4WNbB (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\de\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\2629.tmp (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\C520.tmp (99177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_wATuj3LoNfyH8sf (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\000005.bak (433 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cookies (5867 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Shortcuts (304 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\72D9.tmp (103 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Data-journal (6950 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Storage\https_www.youtube.com_0.localstorage-journal (127505 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\000009.log (97948 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Current Tabs (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\5FCF.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\E8A9.tmp (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\F077.tmp (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Download_new (123036 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000011 (37 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000010 (36 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\QuotaManager-journal (55156 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Storage\chrome-extension_emghafiiokbjdgphaofindndbcicinae_0.localstorage-journal (39385 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_6413\C4A2.tmp (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\000003.log (40275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_M7JGlHfF4135Jtq (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-16.png (375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\First Run (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\566B.tmp (375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_f7xOYKafERxHIjt (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\tr\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2FHWDSRNYOR38QYCY71R.temp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_0aiDI27pak5dwBY (748 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\62BB.tmp (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\ihhcdinmaceokcdmbddlclfejhadgpgg\0.2.1_0 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\.usage (1616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000004 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000005 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000006 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000007 (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000000 (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000001 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000002 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000008 (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000009 (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\54D4.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cookies-journal (42879 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\F2B9.tmp (961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\55C0.tmp (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\plugins\npswf32_16_0_0_305.dll (5532 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\C51F.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CCCF.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Top Sites (1952 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\plmneencfmbjfgbkfiinjelmngigejjh\0.8.9_0\main\platform\chrome\pages (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_ezjsJioQcccqHmD (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\LOG (1393 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\browser.dll (5823 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Login Data (734 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Resources\extension\bgeakjmfknncppbmgkkfbglnodccdecp\settings.json (1706 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\74ED.tmp (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\GPUCache\index (368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\998E.tmp (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\databases\Databases.db (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Cookies-journal (2799 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Fraud_new (13076 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\C520.tmp (5873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\zh_TW\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\000003.log (621 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Origin Bound Certs-journal (6223 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\en\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\lhbpmoijjppjnkgelgdemkidbedaijhp\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\7AB1.tmp (152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\History (21458 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\plmneencfmbjfgbkfiinjelmngigejjh\0.8.9_0\main\antishock\ui (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\64D0.tmp (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\C02.tmp (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_TNgfdrgEsELUPOU (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\lhbpmoijjppjnkgelgdemkidbedaijhp\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_KLIpXBJchVcI3y3 (140 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Bloom Prefix Set (1428 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\pt_BR\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Tablo Cache\index (368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_ahReT3hkOhXrgZK (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Favicons-journal (30290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\261F.tmp (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Storage\https_browser.yandex.ua_0.localstorage (231 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\4E62.tmp (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\DB12.tmp (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network Action Predictor (3946 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Tablo Cache\data_0 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Tablo Cache\data_1 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Tablo Cache\data_2 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Tablo Cache\data_3 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Storage\http_videodownloader.ummy.net_0.localstorage-journal (576 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\es\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_b18wjkW5xm5P8LY (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\MANIFEST-000008 (127 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\MANIFEST-000001 (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-64.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\MANIFEST-000002 (195 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\lhbpmoijjppjnkgelgdemkidbedaijhp\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_BDXPBDT62oDL1iZ (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\000003.log (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension State\000003.log (1973 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\7B4E.tmp (80 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_00MBW8u8OZYbd2Z (524 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\databases\Databases.db-journal (576 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\C4A2.tmp (5621 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\6DB4.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\ihhcdinmaceokcdmbddlclfejhadgpgg\0.2.1_0\scripts\app\handlers (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\A364.tmp (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Login Data-journal (576 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\000001.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\History-journal (31513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\pt\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\000003.log (497 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_30570\Yahelper.crx (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\000003.log (3927 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_15709\antishock-prod.crx (5873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_f1maYfDskYNHocA (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Images_new (204 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_12AI5HqPPmamRQc (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\plmneencfmbjfgbkfiinjelmngigejjh\0.8.9_0\_locales (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000003 (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\000003.log (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\9830.tmp (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\BE7C.tmp (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\E1A0.tmp (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\00\00000004 (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\00\00000003 (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Resources\extension\emghafiiokbjdgphaofindndbcicinae\skins.json (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\Origins\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\History Provider Cache (486 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Storage\https_browser.yandex.ua_0.localstorage-journal (9647 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\.usage (5304 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\A51A.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Yandex\Updater\yabrowser\in_work_0.xml (504 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\GPUCache\data_3 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\GPUCache\data_2 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\GPUCache\data_1 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\GPUCache\data_0 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\lhbpmoijjppjnkgelgdemkidbedaijhp\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\lhbpmoijjppjnkgelgdemkidbedaijhp\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Shortcuts-journal (576 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae_temp\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\D446.tmp (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\cs\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\000003.log (907 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\plmneencfmbjfgbkfiinjelmngigejjh\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\zh_CN\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Extension Blacklist_new (11876 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_I2IwAMRKwVNNGLk (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\first_run_imported_tabs (101 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network Action Predictor-journal (12878 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\ihhcdinmaceokcdmbddlclfejhadgpgg\0.2.1_0\scripts\app\messages (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_weHG9Zx5g1E1Gjf (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\000003.log (15178 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\000003.log (3106 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\index (368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000028 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000029 (1336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000026 (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000027 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000024 (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000025 (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000022 (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000023 (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000020 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\00\00000021 (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\1722.tmp (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Bloom_new (140572 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\it\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_HbEoH7FnKPF9Qp4 (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\uk\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\A02E.tmp (961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\1D9F.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\000\p\Paths\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\Paths\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\README (166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\000003.log (107159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\manifest.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000009 (68 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\MANIFEST-000002 (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\MANIFEST-000001 (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\000005.ldb (606 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Top Sites-journal (6616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\5886.tmp (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\ru\messages.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-128.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\2B3F.tmp (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Current Session (15289 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\gopnelejddjjkamjfblkcijjikkinnec\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\AA10.tmp (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_00000b (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_00000c (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_00000a (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_00000f (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_00000d (333 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_00000e (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\D964.tmp (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\001\p\Paths\000003.log (38890 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\icons\antishock-icon-48.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\IndexedDB\chrome-extension_plmneencfmbjfgbkfiinjelmngigejjh_0.indexeddb.leveldb\000008.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\E5B4.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\AFE9.tmp (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_Lx5UT3LcGI7zd89 (465 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\A676.tmp (88 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\File System\002\p\.usage (24 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Safe Browsing Yandex Download_new (204 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\fcgfaidpicddcilhjhafmmcgfodijhjd\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Permanent State (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Resources\extension\emghafiiokbjdgphaofindndbcicinae\settings.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000008 (94 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Session Storage\000002.dbtmp (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\54B4.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000002 (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000003 (72 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000001 (32 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000006 (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000007 (98 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000004 (32 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\f_000005 (60 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\bgeakjmfknncppbmgkkfbglnodccdecp\000003.log (21330 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\User Data\Default\Local Extension Settings\emghafiiokbjdgphaofindndbcicinae\LOG (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_OjQByvBonjf3tS0 (12810 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\fr\messages.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\YandexBrowser\Application\40.0.2214.3645\browser_child.dll (4465 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\pages\log.js (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\PromoPage\promo_page.css (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\PromoPage\img\smile.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\background.js (18240 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\assessorContent.css (712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\.DS_Store (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\ListEditor\list_editor.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\OptionsPage\options_page.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\DECODED_IMAGES (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\third_party\requirejs\.bower.json (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\PageOverlay\page_overlay.css (954 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\third_party\requirejs\require.js (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\PromoPage\img\layout.png (20800 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\pages\promo.js (6984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\third_party\.DS_Store (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\pages\log.html (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\DECODED_MESSAGE_CATALOGS (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\_locales\.DS_Store (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\icons\complain-ad-16.png (214 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\pages\options.js (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\background.html (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\PromoPage\img\trash.png (12984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\OptionsPage\img\logo-128.png (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\LogPage\log_page.css (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\PromoPage\promo_page.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\PromoPage\img\notebook.png (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\assessorContent.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\PageOverlay\page_overlay.xml (273 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\pages\promo.html (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\.DS_Store (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\ListEditor\img\remove.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\common\defaults.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\OptionsPage\options_page.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\PromoPage\img\red_cross.png (776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\antishock\ui\ListEditor\list_editor.xml (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\pages\options.html (459 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir_3792_18576\CRX_INSTALL\main\platform\chrome\content.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\stat.3636.log (561 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\downloader.536.log (198176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\info[1].rss (827 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\YandexPackSetup[1].exe (274647 bytes)
Delete the following value(s) in the autorun key (How to Work with System Registry):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"Browser Manager" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\BrowserManager\BrowserManager.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"{12f34aee-538c-44d5-b33a-12213b7e0197}" = "C:\Users\"%CurrentUserName%"\AppData\Local\Package Cache\{12f34aee-538c-44d5-b33a-12213b7e0197}\BrowserManagerInstaller.exe /quiet /burn.log.append C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ÃÅ“ÃÂµÃÂ½ÃÂµÃÂ´ÃÂ¶ÃÂµÃ‘â‚¬_ÃÂ±Ã‘â‚¬ÃÂ°Ã‘Æ’ÃÂ·ÃÂµÃ‘â‚¬ÃÂ¾ÃÂ²_20150420095211.log /burn.runonce"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"YandexElements" = "C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\Elements\elements.exe\8.7.0.3110\elements64.exe /auto"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"YandexElements" = "%Program Files% (x86)\Yandex\Common\elements.exe /auto"
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Permalink

Back to the blog

e-mail

Google+

Twitter

Facebook

Trojan.Win32.SwrortProxy_0860194820

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet

Trojan.Win32.SwrortProxy_0860194820

E-mail

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet