Trojan.Win32.SwrortProxy_b715786b3b

by malwarelabrobot on February 10th, 2018 in Malware Descriptions.

Trojan.Win32.Iconomon.FD, VirTool.Win32.DelfInject.FD, GenericEmailWorm.YR, TrojanSwrortProxy.YR (Lavasoft MAS)
Behaviour: Trojan, Worm, EmailWorm, VirTool


The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Requires JavaScript enabled!

Summary
Dynamic Analysis
Static Analysis
Network Activity
Map
Strings from Dumps
Removals

MD5: b715786b3b3e8e86ab2885effdc2a9c2
SHA1: c0b6e99dcbad64bead8e385931ed9d15664fd331
SHA256: e4d69f917c0ca84cb25a72e1241b1d39b0496da0431ed9fdf546f8045b81d000
SSDeep: 393216:DK7gY3FJXNQUGu1qsaemOFmxxnN3V1GylJtLJxT Bdg:wgyFNp/SemCmNXG2tTeg
Size: 16531128 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPXv0896v102v105v122Delphistub, UPolyXv05_v6
Company: no certificate found
Created at: 2016-05-13 11:03:35
Analyzed on: Windows7 SP1 32-bit


Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

Behaviour Description
EmailWorm Worm can send e-mails.


Process activity

The Trojan creates the following process(es):

iobituninstaller.tmp:3956
%original file name%.exe:1828
iobituninstaller.exe:2500
60e55700152b6a96e00148bb935f45e3136bd24c.del:3744

The Trojan injects its code into the following process(es):

Setup.exe:1068

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process Setup.exe:1068 makes changes in the file system.
The Trojan deletes the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Setup.madExcept (0 bytes)

The process iobituninstaller.tmp:3956 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-GHOVR.tmp\RdZone.dll (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-GHOVR.tmp\Setup.exe (33248 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-GHOVR.tmp\_isetup\_shfoldr.dll (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-GHOVR.tmp\IUInstaller\Setup.exe (33248 bytes)

The process %original file name%.exe:1828 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\ProgramData\COMODOCPSP\cwsguard\CwsGuard32.dll (10 bytes)
C:\ProgramData\COMODOCPSP\cwsguard\CwsGuard64.dll (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\TarDE50.tmp (2712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CabDE4F.tmp (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\wrapped.sandboxed\60e55700152b6a96e00148bb935f45e3136bd24c.del (84360 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D84E548583BE1EE7DB5A935821009D26_5B98B6CD6E69202676965CF5B0E2A7A7 (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D84E548583BE1EE7DB5A935821009D26_5B98B6CD6E69202676965CF5B0E2A7A7 (1 bytes)
C:\ProgramData\COMODOCPSP\cwsguard\GuardConfig.ini (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\wrapped.sandboxed\cis_temp_82c7a4.exe (1944 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EA618097E393409AFA316F0F87E2C202_71BF8055C056FCBA449EB93F604FD873 (1 bytes)
C:\ProgramData\COMODOCPSP\cwsguard\NewestGuardConfig.ini (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EA618097E393409AFA316F0F87E2C202_71BF8055C056FCBA449EB93F604FD873 (1496 bytes)

The Trojan deletes the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\TarDE50.tmp (0 bytes)
C:\ProgramData\COMODOCPSP\cwsguard\NewestGuardConfig.ini (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CabDE4F.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\wrapped.sandboxed\cis_temp_82c7a4.exe (0 bytes)

The process iobituninstaller.exe:2500 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-GVCM7.tmp\iobituninstaller.tmp (50 bytes)

The Trojan deletes the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-GVCM7.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-GVCM7.tmp\iobituninstaller.tmp (0 bytes)

The process 60e55700152b6a96e00148bb935f45e3136bd24c.del:3744 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\iobituninstaller.exe (5823 bytes)
C:\%original file name%.exe (2040823 bytes)

The Trojan deletes the following file(s):

C:\%original file name%.exe_82f7d8 (0 bytes)

Registry activity

The process iobituninstaller.tmp:3956 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process %original file name%.exe:1828 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Tracing\b715786b3b3e8e86ab2885effdc2a9c2_RASAPI32]
"MaxFileSize" = "1048576"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Microsoft\Tracing\b715786b3b3e8e86ab2885effdc2a9c2_RASMANCS]
"ConsoleTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Tracing\b715786b3b3e8e86ab2885effdc2a9c2_RASAPI32]
"FileDirectory" = "%windir%\tracing"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ose00000.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\wrapped.sandboxed\60e55700152b6a96e00148bb935f45e3136bd24c.del,"

[HKLM\SOFTWARE\Microsoft\Tracing\b715786b3b3e8e86ab2885effdc2a9c2_RASMANCS]
"EnableConsoleTracing" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\b715786b3b3e8e86ab2885effdc2a9c2_RASAPI32]
"EnableFileTracing" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\b715786b3b3e8e86ab2885effdc2a9c2_RASMANCS]
"MaxFileSize" = "1048576"
"FileDirectory" = "%windir%\tracing"

[HKLM\SOFTWARE\Microsoft\Tracing\b715786b3b3e8e86ab2885effdc2a9c2_RASAPI32]
"ConsoleTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Tracing\b715786b3b3e8e86ab2885effdc2a9c2_RASMANCS]
"EnableFileTracing" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 41 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Tracing\b715786b3b3e8e86ab2885effdc2a9c2_RASMANCS]
"FileTracingMask" = "4294901760"

[HKCU\Software\Classes\Local Settings\MuiCache\66\52C64B7E]
"LanguageList" = "en-US, en"

[HKLM\SOFTWARE\Microsoft\Tracing\b715786b3b3e8e86ab2885effdc2a9c2_RASAPI32]
"EnableConsoleTracing" = "0"
"FileTracingMask" = "4294901760"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"AutoConfigURL"

The process 60e55700152b6a96e00148bb935f45e3136bd24c.del:3744 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Tracing\60e55700152b6a96e00148bb935f45e3136bd24c_RASAPI32]
"EnableConsoleTracing" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Microsoft\Tracing\60e55700152b6a96e00148bb935f45e3136bd24c_RASAPI32]
"FileDirectory" = "%windir%\tracing"
"EnableFileTracing" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\60e55700152b6a96e00148bb935f45e3136bd24c_RASMANCS]
"ConsoleTracingMask" = "4294901760"
"FileDirectory" = "%windir%\tracing"

[HKLM\SOFTWARE\Microsoft\Tracing\60e55700152b6a96e00148bb935f45e3136bd24c_RASAPI32]
"FileTracingMask" = "4294901760"
"MaxFileSize" = "1048576"

[HKLM\SOFTWARE\Microsoft\Tracing\60e55700152b6a96e00148bb935f45e3136bd24c_RASMANCS]
"MaxFileSize" = "1048576"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 42 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\60e55700152b6a96e00148bb935f45e3136bd24c_RASMANCS]
"FileTracingMask" = "4294901760"
"EnableFileTracing" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\60e55700152b6a96e00148bb935f45e3136bd24c_RASAPI32]
"ConsoleTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Tracing\60e55700152b6a96e00148bb935f45e3136bd24c_RASMANCS]
"EnableConsoleTracing" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"AutoConfigURL"

Dropped PE files

MD5 File path
4b3cf9fdaa563a413f2bfbd22f25848f c:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-GHOVR.tmp\IUInstaller\Setup.exe
5e21f7b2d3915a7eae80037743b706f4 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-GHOVR.tmp\RdZone.dll
4b3cf9fdaa563a413f2bfbd22f25848f c:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-GHOVR.tmp\Setup.exe
92dc6ef532fbb4a5c3201469a5b5eb63 c:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-GHOVR.tmp\_isetup\_shfoldr.dll
01d19141fd51d1a49fd60724a5b57f3b c:\Users\"%CurrentUserName%"\AppData\Local\Temp\wrapped.sandboxed\60e55700152b6a96e00148bb935f45e3136bd24c.del
c8bbb86223586d5129de9b7468ca701a c:\iobituninstaller.exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: IObit
Product Name: IObit Uninstaller
Product Version: 7.1.0.19
Legal Copyright: Copyright(c) 2012-2017
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 7.1.0.19
File Description: IObit Uninstaller
Comments: This installation was built with Inno Setup.
Language: German (Germany)

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
UPX0 4096 1150976 0 0 d41d8cd98f00b204e9800998ecf8427e
UPX1 1155072 626688 626176 5.4792 6ca062015913ae7a19554d620b92a2f7
.rsrc 1781760 32768 32768 4.12027 d0678656c42dee4102919c658db4ff1f

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL IP
hxxp://download.comodo.com/cpsp/cwsguard/GuardConfig.ini 178.255.82.5
hxxp://download.comodo.com/cpsp/cwsguard/CwsGuard32.dll 178.255.82.5
hxxp://download.comodo.com/cpsp/cwsguard/CwsGuard64.dll 178.255.82.5
hxxp://e8218.dscb1.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQe6LNDJdqx+JOp7hVgTeaGFJ/CQgQUljtT8Hkzl699g+8uK8zKt4YecmYCEEVKbNLh5jyp1ULf2rUY/tk=
hxxp://e8218.dscb1.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRi82PVYYKWGJWdgVNyePy5kYTdqQQUX5r1blzMzHSa1N197z/b7EyALt0CEA7P9DjI/r81bgTYapgbGlA=
fls.security.comodo.com 199.66.201.16
ts-ocsp.ws.symantec.com 23.46.123.27
sv.symcd.com 23.46.123.27


IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRi82PVYYKWGJWdgVNyePy5kYTdqQQUX5r1blzMzHSa1N197z/b7EyALt0CEA7P9DjI/r81bgTYapgbGlA= HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: ts-ocsp.ws.symantec.com


HTTP/1.1 200 OK
Server: nginx/1.12.2
Content-Type: application/ocsp-response
Content-Length: 1469
content-transfer-encoding: binary
Cache-Control: max-age=511398, public, no-transform, must-revalidate
Last-Modified: Thu, 8 Feb 2018 10:45:38 GMT
Expires: Thu, 15 Feb 2018 10:45:38 GMT
Date: Fri, 09 Feb 2018 12:43:11 GMT
Connection: keep-alive
0..........0..... .....0......0...0..........1.Q....V.......)..2018020
8104538Z0s0q0I0... ........b.c.a......Srx........_..n\..t...}.?..L....
....8...5n..j...P....20180208104538Z....20180215104538Z0...*.H........
.....U.d.6......?tS.-..`.....y..1..D..f~*...$D.}.......2r.!._{.s.4./K.
4M.RX..V...H.. .....R.7.LyR.?d......Q..0c...b...1..7J.....5....R.`.!..
X).........-...Nq}...>.2..~.a.......D.`.^3..n%m....I.H....r.K..K*..
5..R-.....4=...12..>..">.*.P*..I.~.....g5....3......6Q....0...0.
..0..................N.GFs%.#0...*.H........0^1.0...U....US1.0...U....
Symantec Corporation100...U...'Symantec Time Stamping Services CA - G2
0...161213000000Z..211231235959Z0F1D0B..U...;Symantec Time Stamping Se
rvices CA - G2 SHA1 OCSP Responder0.."0...*.H.............0.........E.
<S..<&m*......U....T[.........U*~2...L....SOq...X.9....35..m..z.
.U{.j...i..H....n3.....ii..6*.....|S.f.n....k.....9..o.,_..._..<.1.
z.h.....I.../...sz.$.4..t..Y...9.N....RN..LL.C.G..)..Sl.@^...Y.c.o....
q.5...A/.J .m..a.^.t.5../......a.f.rp...J.B.P.s.............0..0...U..
.....0.0...U.%..0... .......0...U...........0... .....0......0"..U....
0...0.1.0...U....TGV-OFF-690...U..........1.Q....V.......)0...U.#..0..
._..n\..t...}.?..L...0...*.H.............(....J.........FR.}..7/ ..~..
.<.qR.b....7...A.t..z..e{.<q..O..Z.>'8.......0eQ.z.wS.m.....Q
.Yv..M..\..>b.r..k.F$..|.Z...!%...!S^XS....:....A.O1|.....R.i.|.dZ.
..}!#...=..0.V.....,....4...j.../..I.j..r....B......&".....X........=.
K.v...t...#.C..&@.....*tU......

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQe6LNDJdqx+JOp7hVgTeaGFJ/CQgQUljtT8Hkzl699g+8uK8zKt4YecmYCEEVKbNLh5jyp1ULf2rUY/tk= HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: sv.symcd.com


HTTP/1.1 200 OK
Server: nginx/1.12.2
Content-Type: application/ocsp-response
Content-Length: 1610
content-transfer-encoding: binary
Cache-Control: max-age=501189, public, no-transform, must-revalidate
Last-Modified: Thu, 8 Feb 2018 07:55:48 GMT
Expires: Thu, 15 Feb 2018 07:55:48 GMT
Date: Fri, 09 Feb 2018 12:43:05 GMT
Connection: keep-alive
0..F......?0..;.. .....0.....,0..(0.......4..fM..8.............2018020
8075548Z0s0q0I0... ...........C%.......`M.....B...;S.y3..}... .....rf.
.EJl...<..B..........20180208075548Z....20180215075548Z0...*.H.....
..........`...._.T.....g:....u!....};(.....r..%...9..~?..U.\..GC..HM..
o........t.#n......._g..;...../B.h).!wi..|.... < k.?...E:...z.<.
7..).u.G....a...v......6.q..U.J....c......5...lXR,..<l..W.uE.l..(..
......of..<t\../.^.].5M...|.l.....3n%}..d$F.u......n.M...w.|../...o
0..k0..g0..O.......)..&.%.....h.r..0...*.H........0.1.0...U....US1.0..
.U....Symantec Corporation1.0...U....Symantec Trust Network100...U...'
Symantec Class 3 SHA256 Code Signing CA0...180204000000Z..180505235959
Z0A1?0=..U...6Symantec Class 3 SHA256 Code Signing CA OCSP Responder0.
."0...*.H.............0.........ip.....T[..z....[.........i5[....4[.aD
......;)...h.,I.....j.t...2./.6ui..#....v.'...).ZP.'~..i-*z..Z.....K..
.?a....m....~..:...!u..>..(.?...M.d.-......b.jm.{..y....^;..l%@....
.....=...b..~n..^.s....n.....-..U.....M?..2....L.4.C5.?d..F...$7h...\.
....kt...}.........0...0... .....0......0!..U....0...0.1.0...U....TGV-
F-5390...U.#..0....;S.y3..}... .....rf0...U.......4..fM..8...........0
...U.......0.0n..U. .g0e0c..`.H...E....0T0&.. .........hXXp://VVV.syma
uth.com/cps0*.. .......0... hXXp://VVV.symauth.com/rpa0...U.%..0... .
......0...U...........0...*.H.............|[N:.iN.r...rr.%...1.:.~`...
..Dr........<...:......E.G=>..k..".'..6z.p....F..e..l L..$...n..
.j3.=.....O....4.../...s~....:...G...zo...R.7...Z.).;. ....f.&....

<<< skipped >>>

GET /cpsp/cwsguard/GuardConfig.ini HTTP/1.1
User-Agent: lpszAgent
Host: download.comodo.com
Cache-Control: no-cache


HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 09 Feb 2018 12:42:55 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Keep-Alive: timeout=1
<html>..<head><title>404 Not Found</title><
/head>..<body bgcolor="white">..<center><h1>404 N
ot Found</h1></center>..<hr><center>nginx</
center>..</body>..</html>..
....



GET /cpsp/cwsguard/CwsGuard32.dll HTTP/1.1

User-Agent: lpszAgent
Host: download.comodo.com
Cache-Control: no-cache


HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 09 Feb 2018 12:42:55 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Keep-Alive: timeout=1
<html>..<head><title>404 Not Found</title><
/head>..<body bgcolor="white">..<center><h1>404 N
ot Found</h1></center>..<hr><center>nginx</
center>..</body>..</html>..
....



GET /cpsp/cwsguard/CwsGuard64.dll HTTP/1.1

User-Agent: lpszAgent
Host: download.comodo.com
Cache-Control: no-cache


HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 09 Feb 2018 12:42:55 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Keep-Alive: timeout=1
<html>..<head><title>404 Not Found</title><
/head>..<body bgcolor="white">..<center><h1>404 N
ot Found</h1></center>..<hr><center>nginx</
center>..</body>..</html>..HTTP/1.1 404 Not Found..Serv
er: nginx..Date: Fri, 09 Feb 2018 12:42:55 GMT..Content-Type: text/htm
l..Content-Length: 162..Connection: keep-alive..Keep-Alive: timeout=1.
.<html>..<head><title>404 Not Found</title><
;/head>..<body bgcolor="white">..<center><h1>404
Not Found</h1></center>..<hr><center>nginx<
/center>..</body>..</html>....


The Trojan connects to the servers at the folowing location(s):

Setup.exe_1068:

.text
`.itext
`.data
.idata
.edata
@.tls
.rdata
@.reloc
B.rsrc
Windows
;!199{199
;0!8&2{199
"<;=!!%{199
Windows 95
Windows 95 OSR-2
Windows 98
Windows 98 SE
Windows ME
Windows 9x New
Windows NT 3
Windows NT 4
Windows 2000
Windows XP
Windows 2003
Windows Vista
Windows 2008
Windows 7
Windows 2008 R2
Windows 8
Windows 2012
Windows 8.1
Windows 2012 R2
Windows 10
Windows NT New
user.exe
TMsgHandlers
madToolsMsgHandlerWindow
>0';0974&0{199
cmovÌ
setÌ
pop %seg
push %seg
VVV.madshi.net
dbghelp.dll
4.0.14
advapi32.dll
The import table is invalid.
UhÌ
WindowsLogo
ReportLeaks
UploadViaHttp
HttpServer
HttpSsl
HttpPort
HttpAccount
HttpPassword
BugTrPassword
MailAsSmtpServer
MailAsSmtpClient
SmtpServer
SmtpSsl
SmtpTls
SmtpPort
SmtpAccount
SmtpPassword
bugreport.mbr
screenshot.png
ExceptMsg
FrozenMsg
BitFaultMsg
send bug report
save bug report
print bug report
show bug report
%appname%, %exceptMsg%
bug report
please find the bug report attached
Sending bug report...
PrepAttMsg
MxLookMsg
ConnMsg
SendMailMsg
FieldMsg
SendAttMsg
SendFinalMsg
SendFailMsg
Sorry, sending the bug report didn't work.
TDABugReportCallback
TDABugReportCallbackOO
VVV.google.com
SMTP:
A.ROOT-SERVERS.NET
K.ROOT-SERVERS.NET
VVV.madshi.net_multipart_boundary
TSmtpU
LOGIN
AUTH LOGIN
TWinHttp
/api.xml
<url>
password
?cmd=
/xmlrpc.cgi
Bugzilla.version
Product.get_enterable_products
Product.get
Bug.fields
Bugzilla_login
Bugzilla_password
Bug.create
Bug.add_attachment
/api/soap/mantisconnect.php
<?xml version="1.0" encoding="UTF-8"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="hXXp://schemas.xmlsoap.org/soap/envelope/"><SOAP-ENV:Body><ns1:
</username><password xsi:type="xsd:string">
</password>
*.txt
TSendBugReportExRec
kernel32.dll
user32.dll
coreide120.bpl
FaultRep.dll
internal error. please notify bug@madshi.net
HardWareKey
ENoMonitorSupportException
.uvCOu
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
EVariantBadIndexError
ssShift
htKeyword
EInvalidOperation
EInvalidGraphicOperation
PasswordChar
OnKeyDown
OnKeyPress
OnKeyUp
ssHorizontal
TCustomButton.TButtonStyle
Uh%UK
Proportional
AutoHotkeys
AutoHotkeys$!L
TKeyEvent
TKeyPressEvent
HelpKeyword
ssHotTrack
TWindowState
poProportional
TWMKey
KeyPreview\
WindowState #L
tagMSG
Uh.tP
TMonochromeLookup
comctl32.dll
OnActionExecute,/N
TEnumerator<System.TGUID>
TEnumerator<System.Cardinal>
TEnumerator<System.Single>
TGPArray<TGPRectF>.TEnumerator
TGPArray<TGPRect>.TEnumerator
:TGPArray<System.TGUID>.:1
TGPArray<System.TGUID>
"TGPArray<System.TGUID>.TEnumerator
:TGPArray<System.Cardinal>.:1
TGPArray<System.Cardinal>
%TGPArray<System.Cardinal>.TEnumerator
%TGPArray<IGPPropertyItem>.TEnumerator
:TGPArray<System.Single>.:1
TGPArray<System.Single>
#TGPArray<System.Single>.TEnumerator
TGPArray<IGPRegion>.TEnumeratorGdipAlloc
GdiplusShutdown
GdipSetPenLineJoin
GdipGetPenLineJoin
GdipSetCustomLineCapStrokeJoin
GdipGetCustomLineCapStrokeJoin
GdipSetImageAttributesColorKeys
GdipSetStringFormatHotkeyPrefix
GdipGetStringFormatHotkeyPrefix
EIdCanNotBindPortInRange
EIdInvalidPortRange
TIdSocketListWindows
TIdStackWindowsU
Uh.sW
EIdIPVersionUnsupported
ftpTransfer
ftpReady
ftpAborted
ClientPortMin
ClientPortMax
Port
EIdPortRequired
EIdTCPConnectionError
EIdObjectTypeNotSupported
Portl
"EIdTransparentProxyUDPNotSupported
TIdTCPClientCustom
IdTCPClient
TIdTCPClient
TIdTCPClientl
BoundPortl
%EIdSocksUDPNotSupportedBySOCKSVersion
saUsernamePassword
Password
PortL
BoundPort
DefaultPortL
TIdTCPConnection
TIdTCPConnectiontWX
IdTCPConnection
IdHTTPHeaderInfo
ProxyPasswordl
ProxyPort
sslvrfFailIfNoPeerCert
TPasswordEvent
Certificate
RootCertFile
CertFile
KeyFile
OnGetPassword`
EIdOSSLLoadingRootCertError`
EIdOSSLLoadingCertError
EIdOSSLLoadingKeyError
TIdHTTPOption
IdHTTP
TIdHTTPOptions
TIdHTTPProtocolVersion
IdHTTP0
TIdHTTPOnRedirectEvent
TIdHTTPOnHeadersAvailable
TIdHTTPResponse
TIdHTTPResponseh
TIdHTTPRequest
TIdHTTPRequest,
TIdHTTPProtocol`
TIdCustomHTTP
TIdCustomHTTP`
TIdHTTPd
TIdHTTP
HTTPOptions
EIdHTTPProtocolException
-2147483648
TNTLM_Msg2_Info
EHttpContentCodingExceptiont
THttpContentCoding
THttpCCodIdentity
THttpCCodStar
THttpContCodItem
THttpContCodHandler
TIcsMsgMap
wsoTcpNoDelay
LocalPort
SocksPort
SocksPassword
255.255.255.255
0.0.0.1
EHttpException
THttpRequest
httpABORT
httpGET
httpPOST
httpPUT
httpHEAD
httpCLOSE
OverbyteIcsHttpProt
THttpAuthType
httpAuthNone
httpAuthBasic
httpAuthNtlm
httpAuthDigest
THttpBeforeAuthEvent
THttpRequestDone
THttpCliOption
httpoNoBasicAuth
httpoNoNTLMAuth
httpoBandwidthControl
httpoEnableContentCoding
httpoUseQuality
httpoNoDigestAuth
THttpCliOptions
THttpCli
OverbyteIcsHttpProtD
ProxyPassword
6666666666666666
1.2.3
deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly
inflate 1.2.3 Copyright 1995-2005 Mark Adler
<4,$?7/'
(3-!0,1'8"5.*2$
?456789:;<=
!"#$%&'()* ,-./0123
)4."1-2(
*5/#2.3)
",71@5  &
3'627-"(
1 '-7#&0
1&,#84 .'*
- 8!3(.%
7&-3!),6%
#5*0' 8$2 .
8'.4"*-7& 0#
("2%!&8-3*#
/5,%!)703
(03!,&6)%* 17.'# 
$/6 *25#.(8 ',"3
&18",47%0*
'2, / 0&7!4-)1#8
.AUi|
LRap
!$'*-147
"$') -02469;=?
"$&( -/1468:
!$&(*-/135
!#&(*,.1
!"#%&'(* ,-/01345689:;=>?@
!"#$&'(* ,-.01245678:;<>?
!"#$&'() ,-.012346789;<=
"#$%'()*,-./12345789:<
!#$%&()* -./02345689:
!#$%&')* ,./01245679
!"$%&'(* ,-/0123567
!"#%&'(* ,-.012346
!"#$&'() ,-./1234
!"#$%'()*,-./023
!"#$%'()* ,./01
"#$%&()* ,-/0
!#$%&')* ,-.
!"$%&'(* ,-
!"#%&'()*,
!"#$&'()*
!"#$%'()
@43434343
DBv}.Bv
CEw.AEw
oleaut32.dll
RegOpenKeyExW
RegCloseKey
GetKeyboardType
UnhookWindowsHookEx
SetWindowsHookExW
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MapVirtualKeyW
LoadKeyboardLayoutW
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
EnumWindows
EnumThreadWindows
EnumChildWindows
ActivateKeyboardLayout
msimg32.dll
gdi32.dll
SetViewportOrgEx
GetViewportOrgEx
version.dll
GetWindowsDirectoryA
GetWindowsDirectoryW
GetCPInfo
CreatePipe
RegQueryInfoKeyA
RegOpenKeyExA
RegFlushKey
RegEnumKeyA
RegCreateKeyExA
RegCreateKeyExW
wsock32.dll
shell32.dll
ShellExecuteExA
ShellExecuteExW
ShellExecuteA
ShellExecuteW
ole32.dll
comdlg32.dll
winspool.drv
winmm.dll
Kernel32.dll
wtsapi32.dll
Setup.exe
:":*:2:::\:|:
2%4x455>6C6p6
<!<,<;<@<
45j5z5
6)6/676<6<8
1#1'1 1/131
6m6
9 9$9(9,909
$090@0|0
: :$:(:,:0:
<&<.<?<]<
>#>'> >/>3>
=&>0>:>?>
9 9$9(9,9094989<9
4 4$4(4,4044484<4@4
4-4D4f4}4
? ?$?(?,?:?\?|?
5 5$5(5,5054585<5@5
0 0,0:0{0
8 8$8(8,8084888<8@8\8|8
1 1$1(1,10141`1
=!=*=3=<=
3 3$3(3,3034383
:5:=:]:|:
;!;@;_;~;
?#?@?]?|?
<$< <5<:<
> >0>\>`>
3 3$3(3,3034383<3`3
0f0z0
9%9-959=9
4-454X4}4
;!;%;);-;
?!?0?:???
11D1U1Z1n1
8 8$8(8,8084888<8
(0,0004080
VVV.madshi.netq
7jO`%d
RX.yN
.sIIB
h|m.us
hp~%x
:%-%fi
CrtJ
q#u-0}
H%s6:
%u8X,
333333333333333333
33333833
3333339
3333333333333338
:*"*"$3338
3333333
33333333
33333333333
3333333333338
33338?383
333333333333
:*3:"$3338
333333333333333
H%%xa11
KWindows
UrlMon
0OverbyteIcsHttpProt
&OverbyteIcsUrl
OverbyteIcsHttpContCod
'OverbyteIcsNtlmMsgs
IdStackWindows
 IdTCPServer
IdCustomTCPServer
0IdHTTPHeaderInfo
Generics.Collections
CGenerics.Defaults
Font.Charset
Font.Color
Font.Height
Font.Name
Font.Style
GlassFrame.Enabled
GlassFrame.Left
GlassFrame.Top
GlassFrame.Right
GlassFrame.Bottom
ImageNormal.Data
iTXtXML:com.adobe.xmp
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:897D47E3259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:897D47E2259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>k{o}
ImageDown.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:96A4EF7C259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:95D6C711259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
ImageOver.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:9092961D259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:9092961C259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
ImageOption.Left
ImageOption.Top
ImageOption.Right
ImageOption.Bottom
SubCaptionFont.Charset
SubCaptionFont.Color
SubCaptionFont.Height
SubCaptionFont.Name
SubCaptionFont.Style
SubCaptionDataFont.Charset
SubCaptionDataFont.Color
SubCaptionDataFont.Height
SubCaptionDataFont.Name
SubCaptionDataFont.Style
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:88288854259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:88288853259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:943B879C259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:943B879B259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:8F2237D7259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:8F2237D6259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>)
ImageDisabled.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:9DEE94EE259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:9D32BC47259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>o`r
Picture.Data
viTXtXML:com.adobe.xmp
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d" xmpMM:DocumentID="xmp.did:8AF2BD946B6411E790EEEA7D47CF1AB2" xmpMM:InstanceID="xmp.iid:8AF2BD936B6411E790EEEA7D47CF1AB2" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:eb6b41fa-f7f8-074e-bcce-fe25c4819dfa" stRef:documentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>P
Constraints.MaxWidth
Constraints.MinWidth
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d" xmpMM:DocumentID="xmp.did:8E4CA37F6B6411E790EEEA7D47CF1AB2" xmpMM:InstanceID="xmp.iid:8E4CA37E6B6411E790EEEA7D47CF1AB2" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:eb6b41fa-f7f8-074e-bcce-fe25c4819dfa" stRef:documentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d" xmpMM:DocumentID="xmp.did:8F1F11C16B6411E790EEEA7D47CF1AB2" xmpMM:InstanceID="xmp.iid:8E4CA3866B6411E790EEEA7D47CF1AB2" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:eb6b41fa-f7f8-074e-bcce-fe25c4819dfa" stRef:documentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>#
LN.nO
LN.nEc
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d" xmpMM:DocumentID="xmp.did:8E4CA3836B6411E790EEEA7D47CF1AB2" xmpMM:InstanceID="xmp.iid:8E4CA3826B6411E790EEEA7D47CF1AB2" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:eb6b41fa-f7f8-074e-bcce-fe25c4819dfa" stRef:documentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>^w0W
KEEE%S
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d" xmpMM:DocumentID="xmp.did:8F1F11C56B6411E790EEEA7D47CF1AB2" xmpMM:InstanceID="xmp.iid:8F1F11C46B6411E790EEEA7D47CF1AB2" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:eb6b41fa-f7f8-074e-bcce-fe25c4819dfa" stRef:documentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>1
_8-55}
Constraints.MaxHeight
Constraints.MinHeight
Lines.Strings
FontHover.Color
ImgBackground.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d" xmpMM:DocumentID="xmp.did:951EF4556B6411E790EEEA7D47CF1AB2" xmpMM:InstanceID="xmp.iid:951EF4546B6411E790EEEA7D47CF1AB2" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:eb6b41fa-f7f8-074e-bcce-fe25c4819dfa" stRef:documentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
ImgBar.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d" xmpMM:DocumentID="xmp.did:951EF4516B6411E790EEEA7D47CF1AB2" xmpMM:InstanceID="xmp.iid:951EF4506B6411E790EEEA7D47CF1AB2" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:eb6b41fa-f7f8-074e-bcce-fe25c4819dfa" stRef:documentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d" xmpMM:DocumentID="xmp.did:93ADABAC6B6411E790EEEA7D47CF1AB2" xmpMM:InstanceID="xmp.iid:93ADABAB6B6411E790EEEA7D47CF1AB2" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:eb6b41fa-f7f8-074e-bcce-fe25c4819dfa" stRef:documentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>o
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d" xmpMM:DocumentID="xmp.did:93ADABB06B6411E790EEEA7D47CF1AB2" xmpMM:InstanceID="xmp.iid:93ADABAF6B6411E790EEEA7D47CF1AB2" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:eb6b41fa-f7f8-074e-bcce-fe25c4819dfa" stRef:documentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>9Cq
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d" xmpMM:DocumentID="xmp.did:A42B2787775011E7A0E2E80C9DD6E7A8" xmpMM:InstanceID="xmp.iid:A42B2786775011E7A0E2E80C9DD6E7A8" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:65969413-198a-a04a-a3c0-141101bb536f" stRef:documentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>-
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d" xmpMM:DocumentID="xmp.did:8AF2BD906B6411E790EEEA7D47CF1AB2" xmpMM:InstanceID="xmp.iid:8AF2BD8F6B6411E790EEEA7D47CF1AB2" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:eb6b41fa-f7f8-074e-bcce-fe25c4819dfa" stRef:documentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
4Still writing down your passwords? <a\>Not safe!</a>
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:f9bbd417-8833-684b-ab32-b6cae740bc11" xmpMM:DocumentID="xmp.did:279AE096684211E7AFF9E1610D20AADA" xmpMM:InstanceID="xmp.iid:279AE095684211E7AFF9E1610D20AADA" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0de57547-5d9a-be40-896c-b6f09310e771" stRef:documentID="adobe:docid:photoshop:98760514-65fc-11e7-b84d-85577357eb5e"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
XDashlane's secure password manager is trusted by <a>over 7 million people</a> worldwide.
CheckBoxNormalImage.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:CB77BE27259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:CB77BE26259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>V
CheckBoxCheckedImage.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:CB77BE23259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:CB77BE22259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d" xmpMM:DocumentID="xmp.did:8D0B45316B6411E790EEEA7D47CF1AB2" xmpMM:InstanceID="xmp.iid:8D0B45306B6411E790EEEA7D47CF1AB2" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:eb6b41fa-f7f8-074e-bcce-fe25c4819dfa" stRef:documentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
.TWUaKv6
?Try Dashlane for <a>FREE</a> and never forget another password!
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d" xmpMM:DocumentID="xmp.did:8BC070D46B6411E790EEEA7D47CF1AB2" xmpMM:InstanceID="xmp.iid:8BC070D36B6411E790EEEA7D47CF1AB2" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:eb6b41fa-f7f8-074e-bcce-fe25c4819dfa" stRef:documentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>5
ImageOption.StretchMode
0Please read the following important information:
ol</a>, <a>Nederlands</a>, <a>Portugu
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d" xmpMM:DocumentID="xmp.did:8BC070D86B6411E790EEEA7D47CF1AB2" xmpMM:InstanceID="xmp.iid:8BC070D76B6411E790EEEA7D47CF1AB2" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:eb6b41fa-f7f8-074e-bcce-fe25c4819dfa" stRef:documentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>n
a validly licensed copy of the operating system for which the product was designed, for your personal use or for the internal business use of your company. You
Product or attempt to do so. Any supplemental code that IObit may provide you in connection with any support services agreed upon between the parties shall
Section 3. Limited Warranty. IObit warrants and represents to you that the Product will substantially conform to and operate in accordance with its
). This Limited Warranty applies only if the nonconformance is reported to IObit during the Warranty Period and if IObit is able to confirm the substantial
PERFORMANCE AND THE IDENTIFICATION OF DEFECTS. You are advised to safeguard important data, to use caution and not to rely in any way on the correct
Section 7. Export Control. The United States controls the export of products and information. You agree to comply with such restrictions and not to export or
re-export the Product to countries or persons prohibited under the export control laws. By downloading the Product, you are agreeing that you are not in a
country where such export is prohibited or are a person or entity to which such export is prohibited. You are responsible for compliance with the laws of your
Llocal jurisdiction regarding the import, export or re-export of the Product.
s online support center (available at
hXXp://VVV.iobit.com/en/onlinefeedback.php) or by calling our customer service department at the toll-free number IObit has provided you. In the event that
asserted, in order to provide an opportunity to resolve the claim informally or through mediation. Go to hXXp://VVV.iobit.com/en/sampleclaim.php for a sample
previously provided to us, if any, and the license code IObit provided to you, if any. The notice must be sent to customercare@iobit.com. If the claim proceeds
notice, you or IObit may submit the claim to JAMS (1-800-352-5267, jamsadr.com), the American Arbitration Association (
) (1-800-778-7879, adr.org), or
Either you or IObit may delay enforcing or not exercise rights under this Arbitration provision, including the right to arbitrate a claim, without waiving the right to
!exercise or enforce those rights.
arbitrated on a class action basis or on bases involving claims brought in a purported representative capacity on behalf of the general public, other licensees or
The arbitrator's authority is limited to claims between you and IObit alone. Claims may not be joined or consolidated unless you and IObit agree in writing. An
Notwithstanding any other provision and without waiving the right to appeal such decision, if any portion of these limitations on Arbitration is deemed invalid or
You may reject this Arbitration provision by sending a rejection notice to IObit at: customercare@iobit.com. Your rejection notice must be sent within 30 days
This Claims Resolution provision will survive termination of this Agreement or your license to use the Product. If any portion of this Claims Resolution provision,
except as otherwise provided in the Limitations on Arbitration provisions above, is deemed invalid or unenforceable, it will not invalidate the remaining portions
Background.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d" xmpMM:DocumentID="xmp.did:8D0B452D6B6411E790EEEA7D47CF1AB2" xmpMM:InstanceID="xmp.iid:8D0B452C6B6411E790EEEA7D47CF1AB2" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:eb6b41fa-f7f8-074e-bcce-fe25c4819dfa" stRef:documentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
VScrollBar.Left
VScrollBar.Top
VScrollBar.Width
VScrollBar.Height
!VScrollBar.AllSkinImage.AutoArrow
VScrollBar.AllSkinImage.AutoHide
$VScrollBar.AllSkinImage.BtnLeft.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:E229AFF28D3C11E6913D9925CB7D5252" xmpMM:InstanceID="xmp.iid:E229AFF18D3C11E6913D9925CB7D5252" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6e8ab110-c728-5e4e-b217-426629398fc5" stRef:documentID="adobe:docid:photoshop:3ffa737d-8481-11e6-ab27-bd2c3e838873"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
'VScrollBar.AllSkinImage.BtnLeftHot.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:E229AFF68D3C11E6913D9925CB7D5252" xmpMM:InstanceID="xmp.iid:E229AFF58D3C11E6913D9925CB7D5252" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6e8ab110-c728-5e4e-b217-426629398fc5" stRef:documentID="adobe:docid:photoshop:3ffa737d-8481-11e6-ab27-bd2c3e838873"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>13
%VScrollBar.AllSkinImage.BtnRight.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:E2F6C6F88D3C11E6913D9925CB7D5252" xmpMM:InstanceID="xmp.iid:E2F6C6F78D3C11E6913D9925CB7D5252" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6e8ab110-c728-5e4e-b217-426629398fc5" stRef:documentID="adobe:docid:photoshop:3ffa737d-8481-11e6-ab27-bd2c3e838873"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
(VScrollBar.AllSkinImage.BtnRightHot.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:E2F6C6FC8D3C11E6913D9925CB7D5252" xmpMM:InstanceID="xmp.iid:E2F6C6FB8D3C11E6913D9925CB7D5252" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6e8ab110-c728-5e4e-b217-426629398fc5" stRef:documentID="adobe:docid:photoshop:3ffa737d-8481-11e6-ab27-bd2c3e838873"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
%VScrollBar.AllSkinImage.ScrollBg.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:EA1A887E86E511E6B17AE0289C35ED36" xmpMM:InstanceID="xmp.iid:E983EBA386E511E6B17AE0289C35ED36" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0882f286-d57e-7940-8902-83d4a5ffc826" stRef:documentID="adobe:docid:photoshop:3ffa737d-8481-11e6-ab27-bd2c3e838873"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>!
(VScrollBar.AllSkinImage.TrackCenter.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:EBDA677E86E511E6B17AE0289C35ED36" xmpMM:InstanceID="xmp.iid:EBDA677D86E511E6B17AE0289C35ED36" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0882f286-d57e-7940-8902-83d4a5ffc826" stRef:documentID="adobe:docid:photoshop:3ffa737d-8481-11e6-ab27-bd2c3e838873"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
 VScrollBar.AllSkinImage.TrackCenterHot.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:ECBBF13186E511E6B17AE0289C35ED36" xmpMM:InstanceID="xmp.iid:ECBBF13086E511E6B17AE0289C35ED36" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0882f286-d57e-7940-8902-83d4a5ffc826" stRef:documentID="adobe:docid:photoshop:3ffa737d-8481-11e6-ab27-bd2c3e838873"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>d
)VScrollBar.AllSkinImage.Track_Option.Left
*VScrollBar.AllSkinImage.Track_Option.Right
VScrollBar.AutoArrow
VScrollBar.AutoHide
VScrollBar.Max
VScrollBar.PageSize
VScrollBar.LargeChange
VScrollBar.Color
VScrollBar.Caption
VScrollBar.Visible
VScrollBar.ParentColor
HScrollBar.Left
HScrollBar.Top
HScrollBar.Width
HScrollBar.Height
HScrollBar.Kind
sbHorizontal!HScrollBar.AllSkinImage.AutoArrow
"HScrollBar.AllSkinImage.AllowArrow
HScrollBar.AllSkinImage.AutoSize
HScrollBar.AllSkinImage.AutoHide
(HScrollBar.AllSkinImage.TrackCenter.Data
 HScrollBar.AllSkinImage.TrackCenterHot.Data
)HScrollBar.AllSkinImage.Track_Option.Left
*HScrollBar.AllSkinImage.Track_Option.Right
HScrollBar.AutoArrow
HScrollBar.AllowArrow
HScrollBar.AutoSize
HScrollBar.AutoHide
HScrollBar.Max
HScrollBar.PageSize
HScrollBar.LargeChange
HScrollBar.SmallChange
HScrollBar.Color
HScrollBar.Caption
HScrollBar.Visible
HScrollBar.ParentColor
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:A4805962259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:A4805961259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>ms
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:EE11E93D86E511E6B17AE0289C35ED36" xmpMM:InstanceID="xmp.iid:EE11E93C86E511E6B17AE0289C35ED36" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0882f286-d57e-7940-8902-83d4a5ffc826" stRef:documentID="adobe:docid:photoshop:3ffa737d-8481-11e6-ab27-bd2c3e838873"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:EEDE3CF086E511E6B17AE0289C35ED36" xmpMM:InstanceID="xmp.iid:EEDE3CEF86E511E6B17AE0289C35ED36" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0882f286-d57e-7940-8902-83d4a5ffc826" stRef:documentID="adobe:docid:photoshop:3ffa737d-8481-11e6-ab27-bd2c3e838873"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:ABECC996259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:ABECC995259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:B241AB35259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:B241AB34259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:AE9473ED259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:AE9473EC259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Ej_
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:ebad007e-ba93-cc44-a7fc-ee045be71f51" xmpMM:DocumentID="xmp.did:BA93F274A1BD11E784CD9418B7EDD0AB" xmpMM:InstanceID="xmp.iid:BA93F273A1BD11E784CD9418B7EDD0AB" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:00312640-7e0a-d847-92b5-ace4c340eb70" stRef:documentID="adobe:docid:photoshop:24c6d5b1-66e2-11e7-95c1-90532fd34a58"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>uCl]
.Kp(J
a1b
E.SKe
$m.tV4M< ]
A.nBDL
y9.Ia<
wH.Jx
.pheX
.tt8X_
x.Iwc
.cSQq5
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:ebad007e-ba93-cc44-a7fc-ee045be71f51" xmpMM:DocumentID="xmp.did:E7EECEFCAF1011E7B98FC9A0DB8BED22" xmpMM:InstanceID="xmp.iid:E7EECEFBAF1011E7B98FC9A0DB8BED22" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ebd56d96-6d47-0a4b-b531-fbcb3baea5fb" stRef:documentID="adobe:docid:photoshop:24c6d5b1-66e2-11e7-95c1-90532fd34a58"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
y<Bk%D
z>Z%f
.SR{e
ptq.rb
8W/>
.Fvp >
K%SuM
P.MP^
y>.Ia<
H.GIf
.Qin$
.FtJG
MsGOb
{7m%c
!9%S1}R!
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:ebad007e-ba93-cc44-a7fc-ee045be71f51" xmpMM:DocumentID="xmp.did:98CB723BAF1511E7BAF5F9812A1C6E00" xmpMM:InstanceID="xmp.iid:98CB723AAF1511E7BAF5F9812A1C6E00" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ebd56d96-6d47-0a4b-b531-fbcb3baea5fb" stRef:documentID="adobe:docid:photoshop:24c6d5b1-66e2-11e7-95c1-90532fd34a58"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>KT
CùU'
.uQDYF
7|~l.tz
jG%u7c
ID[%cP6
0D*%Ci
hQQ-4i%D
.dP{/-`
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:ebad007e-ba93-cc44-a7fc-ee045be71f51" xmpMM:DocumentID="xmp.did:8217B7B6AF1011E7BB9BD8A2CD6340DB" xmpMM:InstanceID="xmp.iid:8217B7B5AF1011E7BB9BD8A2CD6340DB" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ebd56d96-6d47-0a4b-b531-fbcb3baea5fb" stRef:documentID="adobe:docid:photoshop:24c6d5b1-66e2-11e7-95c1-90532fd34a58"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Z
P^].loZ
 8b%sc
6B%Sne
&?K%s
e-}.ZQ
.Mhz*H8
.Dj5{p
o.uz#
m*o_V
].bCd
&Tb.eR
(2.Yy
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:ebad007e-ba93-cc44-a7fc-ee045be71f51" xmpMM:DocumentID="xmp.did:D11639FAAF1011E795EBC8B8E908BFCA" xmpMM:InstanceID="xmp.iid:D11639F9AF1011E795EBC8B8E908BFCA" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ebd56d96-6d47-0a4b-b531-fbcb3baea5fb" stRef:documentID="adobe:docid:photoshop:24c6d5b1-66e2-11e7-95c1-90532fd34a58"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>jL
DlL%Ft
0%S:/
:u4.zs3
4#a4%Ucmf
y.ck8R
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:ebad007e-ba93-cc44-a7fc-ee045be71f51" xmpMM:DocumentID="xmp.did:F57718F7AE4F11E7B283A6B7E39EA1CC" xmpMM:InstanceID="xmp.iid:F57718F6AE4F11E7B283A6B7E39EA1CC" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:d8c92550-c631-fc47-a46c-e7a26dd704a7" stRef:documentID="adobe:docid:photoshop:24c6d5b1-66e2-11e7-95c1-90532fd34a58"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
`#.LL
.kN 7
*.uB$
.ZUS[
.jhjd
X.dcgg
&iTXtXML:com.adobe.xmp
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:B1A9A946870911E780D2FFE98C613462" xmpMM:DocumentID="xmp.did:B1A9A947870911E780D2FFE98C613462"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B1A9A944870911E780D2FFE98C613462" stRef:documentID="xmp.did:B1A9A945870911E780D2FFE98C613462"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:ebad007e-ba93-cc44-a7fc-ee045be71f51" xmpMM:DocumentID="xmp.did:F57718FBAE4F11E7B283A6B7E39EA1CC" xmpMM:InstanceID="xmp.iid:F57718FAAE4F11E7B283A6B7E39EA1CC" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:d8c92550-c631-fc47-a46c-e7a26dd704a7" stRef:documentID="adobe:docid:photoshop:24c6d5b1-66e2-11e7-95c1-90532fd34a58"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
Install Web Companion to improve my Internet Protection and Set Bing
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:ea1aa62a-9258-5c4d-8457-1d1830876b0b" xmpMM:DocumentID="xmp.did:0DD9694FC5B011E69A3AFFE49DCE8054" xmpMM:InstanceID="xmp.iid:0DD9694EC5B011E69A3AFFE49DCE8054" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:61916a75-f956-1148-9f5f-2822aaa1ecf0" stRef:documentID="xmp.did:ea1aa62a-9258-5c4d-8457-1d1830876b0b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>[Q
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:23A44820378E11E69113CDD1E2D94043" xmpMM:InstanceID="xmp.iid:23A4481F378E11E69113CDD1E2D94043" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b30e8b45-f153-1948-8e50-d5712319b2bb" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
Windows Tweak eBook
3The must-have guide for windows 10, 8, 7, Vista, XP
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d" xmpMM:DocumentID="xmp.did:9270BA326B6411E790EEEA7D47CF1AB2" xmpMM:InstanceID="xmp.iid:9270BA316B6411E790EEEA7D47CF1AB2" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:eb6b41fa-f7f8-074e-bcce-fe25c4819dfa" stRef:documentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
Items.Strings
Portugu
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:B4A1169471CB11E7ACFDF43DED140FB6" xmpMM:DocumentID="xmp.did:B4A1169571CB11E7ACFDF43DED140FB6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B4A1169271CB11E7ACFDF43DED140FB6" stRef:documentID="xmp.did:B4A1169371CB11E7ACFDF43DED140FB6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
BackgroundClick.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:D1E9DADA71CB11E790259A8C9251FF2E" xmpMM:DocumentID="xmp.did:D1E9DADB71CB11E790259A8C9251FF2E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D1E9DAD871CB11E790259A8C9251FF2E" stRef:documentID="xmp.did:D1E9DAD971CB11E790259A8C9251FF2E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>m
BackgroundHot.Data
BackgroundOption.Left
BackgroundOption.Right
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:A4805966259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:A4805965259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:A55CB2DC259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:A55CB2DB259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:A71A47E5259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:A71A47E4259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
(VScrollBar.AllSkinImage.Track_Option.Top
 VScrollBar.AllSkinImage.Track_Option.Bottom
VScrollBar.Align
VScrollBar.ExplicitLeft
ShadowFrame.Enabled
ShadowFrame.Left
ShadowFrame.Right
ShadowFrame.Top
ShadowFrame.Bottom
PicTop.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:8B327857259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:8B327856259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
PicTopLeft.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:897D47E7259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:897D47E6259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
PicTopRight.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:8B32785B259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:8B32785A259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
PicLeft.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:9157E4D5259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:9157E4D4259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>*u
PicRight.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:8C6AD5DE259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:8C6AD5DD259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>q
PicBottom.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:B42CE090259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:B42CE08F259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
PicBottomLeft.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:B350FC4F259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:B350FC4E259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>b'
PicBottomRight.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8c911c46-241f-d44e-973a-f05a28e9f8a3" xmpMM:DocumentID="xmp.did:B42CE094259811E7BD14C0B58456A6A4" xmpMM:InstanceID="xmp.iid:B42CE093259811E7BD14C0B58456A6A4" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84639324-4852-9343-a81c-f2f6b6eaa219" stRef:documentID="adobe:docid:photoshop:e0c40997-1681-11e6-a10a-cf6b968ecd68"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
Image.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d" xmpMM:DocumentID="xmp.did:9270BA366B6411E790EEEA7D47CF1AB2" xmpMM:InstanceID="xmp.iid:9270BA356B6411E790EEEA7D47CF1AB2" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:eb6b41fa-f7f8-074e-bcce-fe25c4819dfa" stRef:documentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d" xmpMM:DocumentID="xmp.did:335AE7A5861A11E79E9DCD5806A2407D" xmpMM:InstanceID="xmp.iid:335AE7A4861A11E79E9DCD5806A2407D" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:10e51268-891b-3d4d-8e1a-30defd3b66a5" stRef:documentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d" xmpMM:DocumentID="xmp.did:335AE7A9861A11E79E9DCD5806A2407D" xmpMM:InstanceID="xmp.iid:335AE7A8861A11E79E9DCD5806A2407D" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:10e51268-891b-3d4d-8e1a-30defd3b66a5" stRef:documentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>\\&
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d" xmpMM:DocumentID="xmp.did:340310F9861A11E79E9DCD5806A2407D" xmpMM:InstanceID="xmp.iid:340310F8861A11E79E9DCD5806A2407D" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:10e51268-891b-3d4d-8e1a-30defd3b66a5" stRef:documentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>7
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d" xmpMM:DocumentID="xmp.did:340310FD861A11E79E9DCD5806A2407D" xmpMM:InstanceID="xmp.iid:340310FC861A11E79E9DCD5806A2407D" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:10e51268-891b-3d4d-8e1a-30defd3b66a5" stRef:documentID="xmp.did:34363c80-3870-1d45-833a-39df2339997d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
B.kT~
z6%Un
,Easily and quickly update important programs
bugreport.txt
madExcept.HandleContactForm
madExcept.HandleScreenshotForm
attach a screenshot to the bug report
<!--This Id value indicates the application supports Windows Vista functionality -->
<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>
<!--This Id value indicates the application supports Windows 7 functionality-->
<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
<!--This Id value indicates the application supports Windows 8 functionality-->
<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>
<!--This Id value indicates the application supports Windows 8.1 functionality-->
<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/>
<!-- Windows 10 -->
<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/>
version="1.0.0.0"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
publicKeyToken="6595b64144ccf1df"
<ms_asmv3:requestedExecutionLevel level="requireAdministrator" uiAccess="false">
</ms_asmv3:requestedExecutionLevel>
version="12.0.3170.16989"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
publicKeyToken="6595b64144ccf1df"
<requestedExecutionLevel
MSWHEEL_ROLLMSG
MSH_WHEELSUPPORT_MSG
MSH_SCROLL_LINES_MSG
ntdll.dll
msvcrt.dll
.jdbg
TaskDialogIndirect
.madExcept
%exceptMsg%
%bugReport%
Úte%
Útetime%
%computerName%
Þsktop%
%userappdata%
%commonappdata%
cc3290mt.dll
cc3290.dll
screenShot.bmp
madExceptIde_.bpl
wininet.dll
mapi32.dll
Tcpip\Parameters
VxD\MSTCP
IpHlpApi.dll
.jpeg
security.dll
secur32.dll
winhttp.dll
WinHttpOpen
WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpSetOption
WinHttpWriteData
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpQueryAuthSchemes
WinHttpSetCredentials
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpCloseHandle
hXXps://
hXXp://
%userappdata%\
BugReport
screenShot.png
operating system
00000000
<tr><td><button onClick="history.back();" style="height:19.5pt;"> 
<button onClick="document.getElementById('bugReport').style.visibility='visible';this.style.visibility='hidden';" style="height:19.5pt;"> 
<textarea id="bugReport" readonly cols="80" rows="20" style="width:100%;height:100%;
Software\Microsoft\Windows
idapi32.dll
GetThreadReport
GetCpuRegisters
kernelbase.dll
madExcept32.dll
c:\sources\madshi\madExcept32.dll
\madExcept\Dlls\madExcept32.dll
ReportLeaksNow
GetLeakReport
ShowLeakReport
madExcept32.dll has the wrong version.
ReportFault
@System@@StartExe$qqrp23System@PackageInfoTablep17System@TLibModule
setupapi.dll
psapi.dll
%s[%d]
%s_%d
USER32.DLL
SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
uxtheme.dll
DWMAPI.DLL
clWebSnow
clWebFloralWhite
clWebLavenderBlush
clWebOldLace
clWebIvory
clWebCornSilk
clWebBeige
clWebAntiqueWhite
clWebWheat
clWebAliceBlue
clWebGhostWhite
clWebLavender
clWebSeashell
clWebLightYellow
clWebPapayaWhip
clWebNavajoWhite
clWebMoccasin
clWebBurlywood
clWebAzure
clWebMintcream
clWebHoneydew
clWebLinen
clWebLemonChiffon
clWebBlanchedAlmond
clWebBisque
clWebPeachPuff
clWebTan
clWebYellow
clWebDarkOrange
clWebRed
clWebDarkRed
clWebMaroon
clWebIndianRed
clWebSalmon
clWebCoral
clWebGold
clWebTomato
clWebCrimson
clWebBrown
clWebChocolate
clWebSandyBrown
clWebLightSalmon
clWebLightCoral
clWebOrange
clWebOrangeRed
clWebFirebrick
clWebSaddleBrown
clWebSienna
clWebPeru
clWebDarkSalmon
clWebRosyBrown
clWebPaleGoldenrod
clWebLightGoldenrodYellow
clWebOlive
clWebForestGreen
clWebGreenYellow
clWebChartreuse
clWebLightGreen
clWebAquamarine
clWebSeaGreen
clWebGoldenRod
clWebKhaki
clWebOliveDrab
clWebGreen
clWebYellowGreen
clWebLawnGreen
clWebPaleGreen
clWebMediumAquamarine
clWebMediumSeaGreen
clWebDarkGoldenRod
clWebDarkKhaki
clWebDarkOliveGreen
clWebDarkgreen
clWebLimeGreen
clWebLime
clWebSpringGreen
clWebMediumSpringGreen
clWebDarkSeaGreen
clWebLightSeaGreen
clWebPaleTurquoise
clWebLightCyan
clWebLightBlue
clWebLightSkyBlue
clWebCornFlowerBlue
clWebDarkBlue
clWebIndigo
clWebMediumTurquoise
clWebTurquoise
clWebCyan
clWebPowderBlue
clWebSkyBlue
clWebRoyalBlue
clWebMediumBlue
clWebMidnightBlue
clWebDarkTurquoise
clWebCadetBlue
clWebDarkCyan
clWebTeal
clWebDeepskyBlue
clWebDodgerBlue
clWebBlue
clWebNavy
clWebDarkViolet
clWebDarkOrchid
clWebMagenta
clWebDarkMagenta
clWebMediumVioletRed
clWebPaleVioletRed
clWebBlueViolet
clWebMediumOrchid
clWebMediumPurple
clWebPurple
clWebDeepPink
clWebLightPink
clWebViolet
clWebOrchid
clWebPlum
clWebThistle
clWebHotPink
clWebPink
clWebLightSteelBlue
clWebMediumSlateBlue
clWebLightSlateGray
clWebWhite
clWebLightgrey
clWebGray
clWebSteelBlue
clWebSlateBlue
clWebSlateGray
clWebWhiteSmoke
clWebSilver
clWebDimGray
clWebMistyRose
clWebDarkSlateBlue
clWebDarkSlategray
clWebGainsboro
clWebDarkGray
clWebBlack
windows
MAPI32.DLL
RICHED20.DLL
%s%s%s%s%s%s%s%s%s%s
\SYSTEM\CurrentControlSet\Control\Keyboard Layouts\
crSQLWait
%s (%s)
imm32.dll
System\CurrentControlSet\Control\Keyboard Layouts\%.8x
[Uninstaller][%s] - %s
[%s][%s][%s] - %s
%s, ClassID: %s
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
%systemroot%
Windows NT
Windows 2003 Server
shlwapi.dll
explorer.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IObitUninstall
Shell32.dll
LiveUpdate.exe
IObitLiveUpdate.exe
7.0.0.0
sqlite3.dll
ProductStatistics.dll
datastate.dll
SysRest.dll
AUpdate.exe
DatabaseDownload.exe
Uninstaller_Uac.dat
Main.ini
Load Main.ini Error :
Read Main.ini Error :
Shcore.dll
DPI - IsWindows8Point1OrGreater 11111
DPI - IsWindows8Point1OrGreater 2222
PNG, ShareImageData.RefCount <= 0
\Rd_Control\RdScrollBar.pas
supports
importNode
5U?UIU%U-U
One of the arguments passed to the method was not valid
The method performed an arithmetic operation that produces a numeric overflow
A write operation is not allowed on the specified file
The specified property is not supported by the format of the image
\Rd_Control\GdiPlus.pas
gdiplus.dll
Does not support the pixel format images.
layer_%d
MSFTEDIT.DLL
C:\Builds\TP\indysockets\lib\System\IdStreamVCL.pas
C:\Builds\TP\indysockets\lib\System\IdGlobal.pas
%s, %.2d %s %.4d %s %s
WS2_32.DLL
getservbyport
WSAAsyncGetServByPort
WSAJoinLeaf
MSWSOCK.DLL
WSARecvMsg
WSASendMsg
Wship6.dll
Fwpuclnt.dll
127.0.0.1
C:\Builds\TP\indysockets\lib\System\IdStack.pas
C:\Builds\TP\indysockets\lib\Core\IdIOHandler.pas
0.0.0.0
C:\Builds\TP\indysockets\lib\Core\IdIOHandlerStack.pas
ISO_646.irv:1991
ISO_646.basic:1983
ISO_646.irv:1983
csISO16Portuguese
csISO84Portuguese2
windows-936
csShiftJIS
ISO-8859-1-Windows-3.0-Latin-1
csWindows30Latin1
ISO-8859-1-Windows-3.1-Latin-1
csWindows31Latin1
ISO-8859-2-Windows-Latin-2
csWindows31Latin2
ISO-8859-9-Windows-Latin-5
csWindows31Latin5
csMicrosoftPublishing
Windows-31J
csWindows31J
windows-1250
windows-1251
windows-1252
windows-1253
windows-1254
windows-1255
windows-1256
windows-1257
windows-1258
HTTPS
TIdEncoder3to4.Encode: Calculated length exceeded (expected
C:\Builds\TP\indysockets\lib\Protocols\IdCoder3to4.pas
TIdEncoder3to4.Encode: Calculated length not met (expected
CommentURL
C:\Builds\TP\indysockets\lib\Protocols\IdZLibCompressorBase.pas
Mozilla/3.0 (compatible; Indy Library)
%d%s%d
C:\Builds\TP\indysockets\lib\Protocols\IdSSLOpenSSLHeaders.pas
libeay32.dll
ssleay32.dll
libssl32.dll
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_PrivateKey
SSL_CTX_use_certificate
SSL_CTX_use_certificate_file
SSL_get_peer_certificate
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_check_private_key
X509_STORE_CTX_get_current_cert
DES_set_key
RSA_generate_key
RSA_check_key
i2d_PrivateKey_bio
X509_set_pubkey
X509_REQ_set_pubkey
PEM_write_bio_PKCS8PrivateKey
PEM_read_bio_PrivateKey
EVP_PKEY_type
EVP_PKEY_new
EVP_PKEY_free
EVP_PKEY_assign
C:\Builds\TP\indysockets\lib\Protocols\IdSSLOpenSSL.pas
C:\Builds\TP\indysockets\lib\Protocols\IdHTTP.pas
https
HTTP/1.0 200 OK
HTTP/
gb2312 csgb2312 gbk cp936 ms936 windows-936
shift_jis ms_kanji csshiftjis
windows-874
us-ascii ascii us ansi_x3.4-1968 iso-ir-6 ansi_x3.4-1986 iso_646.irv:1991 iso646-us ibm367 cp367 csascii
IcsNtlmMsgs (c) 2004-2010 F. Piette V6.01
%s;q=%s
%s, %s;q=%s
%s, %s
TIcsURL (c) 1997-2010 F. Piette V6.04
http:
D:\SVn\Downloadsrc\ics7\OverbyteIcsWndControl.pas
MsgLow not defined
Msg value out of bound
Msg not registered
TIcsBufferHandler.Remove: Invalid Len
TIcsBufferHandler.Remove: nothing to remove
Unable to load wsock32.dll -
Winsock startup error wsock32.dll -
ws2_32.dll
Unable to load ws2_32.dll -
Cannot change Port if not closed
Cannot change LocalPort if not closed
Winsock Resolve Port: Invalid Port.
Winsock Resolve Port: Invalid Proto.
Winsock Resolve Port: Cannot convert port '
GetPeerPort
D:\SVn\Downloadsrc\ics7\OverbyteIcsWSocket.pas
setsockopt(IPPROTO_TCP, TCP_NODELAY)
Connect: No Port Specified
Connect (Invalid operation in OnChangeState)
listen: port not assigned
TCustomWSocket.Shutdown
Operation would block
Operation now in progress
Operation already in progress
Socket operation on non-socket
Protocol not supported
Socket type not supported
Operation not supported on socket
Protocol family not supported
Address family not supported by protocol family
WinSock DLL cannot support this application
Can't change socks port if not closed
Listening is not supported thru socks server
TCP is the only protocol supported thru socks server
command not supported
address type not supported
THttpCli (c) 1997-2010 F. Piette V7.08
%2.2d %s %4.4d %2.2d:%2.2d:%2.2d
FMsg_WM_HTTP_LOGIN:
application/x-www-form-urlencoded
Mozilla/4.0 (compatible; ICS)
State = httpReady
State = httpNotConnected
State = httpConnected
State = httpDnsLookup
State = httpDnsLookupDone
State = httpWaitingHeader
State = httpWaitingBody
State = httpBodyReceived
State = httpWaitingProxyConnect
State = httpClosing
State = httpAborting
PrepareNTLMAuth end, FStatusCode = %d FProxyAuthNTLMState=%d FAuthNTLMState=%d
Login
httpChunkDone, end of document
HTTP/1.0
HTTP/1.1
HTTP component
HTTP component has nothing to post or put
document.htm
Insupported HTTP version
update.ept
update.spt
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_CURRENT_CONFIG
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced SystemCare_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced SystemCare 8_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced SystemCare 7_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced SystemCare 6_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced SystemCare 5_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced SystemCare Beta_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced SystemCare Ultimate_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Driver Booster_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Driver Booster Beta_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IObit Malware Fighter_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Smart Defrag_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Smart Defrag 2_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Smart Defrag 3_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Smart Defrag 4_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Smart Defrag 2 Pro_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Smart Defrag 3 Pro_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Smart Defrag 4 Pro_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iFreeUp_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iFreeUp Beta_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FormatPackage_is1
update\update.spt
hXXp://ascstats.iobit.com/multi_app/app_%S.php?action=insert
\IObit\iobitpromotion.ini
1111111111111111
Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice
Chrome
FIREFOX
Firefox
IE.HTTP
Portuguese(PT-BR)=Portugu
Portuguese(PT-PT)=Portugu
Please read the following important information
Easily and quickly update important programs
Windows Tweak eBook
The must-have guide for Windows systems
Still writing down your passwords? <a>Not safe!</a>
Dashlane's secure password manager is trusted by <a>over 7 million people</a> worldwide.
Try Dashlane for <a>FREE</a> and never forget another password!
The must-have guide for windows 10, 8, 7, Vista, XP
Lan_WindowsEbook_M
Lan_MsgBoxEnterEMail_M
Lan_MsgBoxAddrIncorr_M
Lan_MsgBoxReter_M
Lan_MsgBox100MB_M
lbl_CheckEmail.Caption
lbl_DownloadFinished.Caption
\SOFTWARE\Lavasoft\Web Companion
\SOFTWARE\Mozilla\Mozilla Firefox
RegisterCom.dll
Portuguese (PT-BR)
Portuguese (PT-PT)
iexplore.exe
\IObitUninstaler.exe"
\History.txt"
license.dat
PostHttp_ICS_Mail ErrMsg:
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
{"app":"%s","email":"%s","iu":%s,"asc":%s,"db":%s,"imf":%s,"sd":%s,"lang":"%s","lan":"%s","po":"%s"}
hXXp://webcompanion.com/terms
hXXp://VVV.iobit.com/en/eula-bd.php
hXXp://VVV.iobit.com/en/eula-db.php
hXXp://VVV.iobit.com/en/eula.php
hXXp://webcompanion.com/privacy
hXXp://VVV.iobit.com/en/privacy.php
hXXp://VVV.iobit.com/privacy.html
hXXps://VVV.dashlane.com/terms
hXXps://VVV.dashlane.com/privacy
hXXp://VVV.iobit.com/de/eula.php
hXXp://VVV.iobit.com/fr/eula.php
hXXp://VVV.iobit.com/it/eula.php
hXXp://VVV.iobit.com/es/eula.php
hXXp://VVV.iobit.com/nl/eula.php
hXXp://VVV.iobit.com/pt/eula.php
hXXp://VVV.iobit.com/sv/eula.php
hXXp://ascstats.iobit.com/other/installer/insert.php
IObit\iobitpromotion.ini
Portuguese(PT-PT)
Portuguese(PT-BR)
  Real-Time Web Protection
Yes, I agree to install Web Companion and accept its <a>EULA</a> and <a>Privacy Policy</a>.
No, I don't want free web protection.
Web Protection You Can Trust
ASC;10.5.0.0;DB;5.0.0.0;IMF;5.3.0.0;SD;5.7.0.0;
DoMSG_PROBeginEND
hXXp://ascstats.iobit.com/multi_app.php?action=insert
hXXp://ascstats.iobit.com/other/iu7dashlanelb.php
Portable Network Graphics
Borland.Sprig
Open SSL Support DLL Delphi and C  Builder interface
hXXp://VVV.indyproject.org/
1993 - 2004
66006666
Hebrew (Windows)
Thai (Windows)
Turkish (Windows)
Vietnamese (Windows)
Western European (Windows)"GetCoding must be overridden in %s
Baltic (Windows)
Central European (Windows)
Cyrillic (Windows)
Greek (Windows)
Error creating SSL context. Could not load root certificate.
Could not load certificate.#Could not load key, check password.
SSL status: "%s"
Arabic (Windows)
Transparent proxy cannot bind. UDP Not supported by this proxy.$Buffer terminator must be specified.!Buffer start position is invalid.
Reply Code is not valid: %s
Reply Code already exists: %s
Unknown Protocol(Request method requires HTTP version 1.1DThis authentication method is already registered with class name %s.KUnsupported hash algorithm. This implementation supports only MD5 encoding.$Error accepting connection with SSL.
Command not supported.
Address type not supported."%d: Circular links are not allowed
File "%s" not found
Object type not supported.
No encoding specified.)UDP is not support in this SOCKS version.
Request rejected or failed.5Request rejected because SOCKS server cannot connect.QRequest rejected because the client program and identd report different user-ids.
Stack already created.1Only one TIdAntiFreeze can exist per application.&Cannot change IPVersion when connected$Can not bind in port range (%d - %d)
Connection Closed Gracefully.;Could not bind socket. Address and port are already in use.
Invalid Port Range (%d - %d)
%s is not a valid service.
%s is not a valid IPv6 address:The requested IPVersion / Address family is not supported.
Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.
Operation would block.
Operation now in progress.
Operation already in progress.
Socket operation on non-socket.
Protocol not supported.
Socket type not supported."Operation not supported on socket.
Protocol family not supported.0Address family not supported by protocol family.
Address already in use. Cannot assign requested address. Microsoft MSXML is not installed4Failed attempting to retrieve time zone information.-Error on call to Winsock2 library function %s&Error on loading Winsock2 library (%s)
Resolving hostname %s.
Connecting to %s.
Socket Error # %d
JPEG error #%d
JPEG Image File)"%s" DOMImplementation already registered;Property or Method "%s" is not supported by DOM Vendor "%s"
Invalid Image trailerAInternal error: Extension Instance does not match Extension Label,Unsupported Application Extension block size
Unknown GIF block type'Object type not supported for operation
Unsupported PixelFormat
Invalid stream operation
Color table is emptyOThis operation is not valid because the current image contains no valid header.4The new size provided for image resizing is invalid.oThe "Portable Network Graphics" could not be created because invalid image type parameters have being provided.
Invalid extension introducerúiled to allocate memory for GIF DIB
Circular decoder table entry/Variant does not reference an automation object7Dispatch methods do not support more than 64 parametersjThis "Portable Network Graphics" image is not valid because it contains invalid pieces of data (crc error)yThe "Portable Network Graphics" image could not be loaded because one of its main piece of data (ihdr) might be corruptedUThis "Portable Network Graphics" image is invalid because it has missing image parts.[Could not decompress the image because it contains invalid compressed data.
The file being readed is not a valid "Portable Network Graphics" image because it contains an invalid header. This file may be corruped, try obtaining it again.nThis "Portable Network Graphics" image is not supported or it might be invalid.
This "Portable Network Graphics" image is not supported because either it's width or height exceeds the maximum size, which is 65535 pixels length.
There is no such palette entry.dThis "Portable Network Graphics" image contains an unknown critical part which could not be decoded.pThis "Portable Network Graphics" image is encoded with an unknown compression scheme which could not be decoded.cThis "Portable Network Graphics" image uses an unknown interlace scheme which could not be decoded.-The chunks must be compatible to be assigned.]The program tried to add a existent critical chunk to the current image which is not allowed.IIt's not allowed to add a new chunk because the current image is invalid.
UTF-7"%s requires Windows Vista or later %s requires themes to be enabled
Button%d
RadioButton%d
OLE error %.8x.Method '%s' not supported by automation object
Value must be between %d and %d
Invalid clipboard format Clipboard does not support Icons
Cannot open clipboard: %s
Text exceeds memo capacity.There is no default printer currently selected/Menu '%s' is already being used by another form
- Dock zone has no controlLError loading dock zone from the stream. Expecting version %d, but found %d.
Error setting %s.Count8Listbox (%s) style must be virtual in order to set Count
"%s" is an invalid path
%s property out of range
%s on %s@GroupIndex cannot be less than a previous menu item's GroupIndex5Cannot create form. No MDI forms are currently active*A control cannot have itself as its parent
Unsupported clipboard format
Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window$Parent given is not a parent of '%s'
$No help viewer that supports filters
''%s'' is not a valid date#''%s'' is not a valid date and time#''%s'' is not a valid integer value
''%s'' is not a valid time
No help found for %s
List index out of bounds (%d) Out of memory while expanding memory stream
Error reading %s%s%s: %s
Failed to get data for '%s'
Resource %s not found
%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group
Property %s does not exist
Thread creation error: %s
Thread Error: %s (%d)-Cannot terminate an externally created thread,Cannot wait for an externally created thread%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates
Cannot create file "%s". %s
Cannot open file "%s". %s
Unable to write to %s
Invalid file name - %s
Invalid stream format$''%s'' is not a valid component name
Invalid data type for '%s'
Item not found ($0%x) List capacity out of bounds (%d)
List count out of bounds (%d)
Invalid destination array"Character index out of bounds (%d)
Start index out of bounds (%d)
Invalid count (%d)
Invalid destination index (%d)
Ancestor for '%s' not found
Cannot assign a %s to a %s
Bits index out of range'List is locked during an active ForEach*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread
Class %s not found
A class named %s already exists
Interface not supported
Object lock not owned(Monitor support function not initialized
%s (%s, line %d)
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
System Error. Code: %d.
Invalid variant operation%Invalid variant operation (%s%.8x)
%s5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)
Operation not supported
External exception %x
Invalid pointer operation
Invalid class typecast0Access violation at address %p. %s of address %p
Operation aborted(Exception %s in module %s at %p.
Application Error1Format '%s' invalid or incompatible with argument
No argument for format '%s'"Variant method calls not supported
('%s' is not a valid floating point value
'%s' is not a valid GUID value
I/O error %d
Integer overflow Invalid floating point operation
Section 2. License Grant and Prohibited Uses. IObit hereby grants you, subject to the terms and conditions of this Agreement, a limited, non-exclusive, non-transferable and non-sublicensable license to use the number of copies of the Product which you have paid on the corresponding number of computers, running a validly licensed copy of the operating system for which the product was designed, for your personal use or for the internal business use of your company. You may make a single copy of the Product for archival purposes and may use such copy only when the original copy is not in use. You may not remove or alter any copyright notices on any copies of the Product. You may not use the Product on a computer network or allow concurrent use of the Product by more than one individual. You may not rent, lease or otherwise transfer the Product. Unless permitted by law, you may not reverse engineer, decompile, or disassemble the Product or attempt to do so. Any supplemental code that IObit may provide you in connection with any support services agreed upon between the parties shall be considered part of the Product and shall be subject to the terms and conditions of this Agreement. You must comply with all applicable laws regarding use of the Product.
Section 3. Limited Warranty. IObit warrants and represents to you that the Product will substantially conform to and operate in accordance with its documentation for a period of sixty (60) days from the date you accept the terms of this Agreement and complete the download of the Product (
). This Limited Warranty applies only if the nonconformance is reported to IObit during the Warranty Period and if IObit is able to confirm the substantial non-conformance. It is void if the non-conformance of the Product is the result of accident, abuse, misapplication, or inappropriate use of the Product. The exclusive remedy for breach of this warranty shall be, at IObit
software, you may use the Product for testing purpose. The Beta Software IS BELIEVED TO CONTAIN DEFECTS AND A PRIMARY PURPOSE OF THIS BETA TESTING LICENSE IS TO OBTAIN FEEDBACK ON SOFTWARE PERFORMANCE AND THE IDENTIFICATION OF DEFECTS. You are advised to safeguard important data, to use caution and not to rely in any way on the correct functioning or performance of software and/or accompanying materials. SUBJECT TO THE PROVISIONS OF SECTION 3 ABOVE, THE PRODUCT is being licensed on an
Section 7. Export Control. The United States controls the export of products and information. You agree to comply with such restrictions and not to export or re-export the Product to countries or persons prohibited under the export control laws. By downloading the Product, you are agreeing that you are not in a country where such export is prohibited or are a person or entity to which such export is prohibited. You are responsible for compliance with the laws of your local jurisdiction regarding the import, export or re-export of the Product.
s online support center (available at hXXp://VVV.iobit.com/en/onlinefeedback.php) or by calling our customer service department at the toll-free number IObit has provided you. In the event that IObit is unable to resolve a complaint to your satisfaction, this section explains how claims can be resolved through mediation, arbitration or litigation. It includes an arbitration provision.
Before beginning a lawsuit, mediation or arbitration, you and IObit agree to send a written notice (a claim notice) to each party against whom a claim is asserted, in order to provide an opportunity to resolve the claim informally or through mediation. Go to hXXp://VVV.iobit.com/en/sampleclaim.php for a sample claim notice. The claim notice must describe the claim and state the specific relief demanded.
Notice to IObit must include your name, address, the name of the Product at issue, the date of download or purchase of the Product, the email address you previously provided to us, if any, and the license code IObit provided to you, if any. The notice must be sent to customercare@iobit.com. If the claim proceeds to arbitration, the amount of any relief demanded in a claim notice will not be disclosed to the arbitrator until after the arbitrator rules.
Before beginning mediation, you or IObit must first send a claim notice. If you live within the United States, within thirty days after sending or receiving a claim notice, you or IObit may submit the claim to JAMS (1-800-352-5267, jamsadr.com), the American Arbitration Association (
) (1-800-778-7879, adr.org), or another mutually agreed upon mediator, for mediation. If you live outside of the United States, you may contact IObit for information on potential mediators. IObit will pay the fees of the mediator.
You or IObit may otherwise elect to arbitrate any claim at any time unless it has been filed in court and trial has begun or final judgment has been entered. Either you or IObit may delay enforcing or not exercise rights under this Arbitration provision, including the right to arbitrate a claim, without waiving the right to exercise or enforce those rights.
If either party elects to resolve a claim by arbitration, that claim will be arbitrated on an individual basis. There will be no right or authority for any claims to be arbitrated on a class action basis or on bases involving claims brought in a purported representative capacity on behalf of the general public, other licensees or other persons similarly situated.
The arbitrator's authority is limited to claims between you and IObit alone. Claims may not be joined or consolidated unless you and IObit agree in writing. An arbitration award and any judgment confirming it will apply only to the specific case and cannot be used in any other case except to enforce the award. Notwithstanding any other provision and without waiving the right to appeal such decision, if any portion of these limitations on Arbitration is deemed invalid or unenforceable, then the entire Arbitration provision (other than this sentence) will not apply.
You may reject this Arbitration provision by sending a rejection notice to IObit at: customercare@iobit.com. Your rejection notice must be sent within 30 days after your first download or purchase of the Product. Your rejection notice must state that you reject the Arbitration provision and must include your name, address, the date of download or purchase of the Product, the name of the Product, the email address you previously provided to IObit, if any, and the license code IObit provided to you, if any. If your rejection notice complies with these requirements, this Arbitration provision will not apply to you, except for any claims subject to pending litigation or arbitration at the time you send your rejection notice. Rejection of this Arbitration provision will not affect your other rights or responsibilities under this Agreement. Rejecting this Arbitration provision will not affect your ability to use the Product.
This Claims Resolution provision will survive termination of this Agreement or your license to use the Product. If any portion of this Claims Resolution provision, except as otherwise provided in the Limitations on Arbitration provisions above, is deemed invalid or unenforceable, it will not invalidate the remaining portions of this Claims Resolution provision.
Lan_PleaseRead_M=Please read the following important information:
Lan_WhatNewsThreeDesc_M=Easily and quickly update important programs
Lan_WindowsEbook_M= Windows Tweak eBook
Lan_theMust_M=The must-have guide for Windows systems
Lan_MsgBoxEnterEMail_M=Please enter your email address to get your gift.
Lan_MsgBoxAddrIncorr_M=Email address is incorrect!
Lan_MsgBoxReter_M=The installation directory you entered is invalid, please enter a valid one like C:\App.
Lan_MsgBox100MB_M=Your system partition doesn
Lan_dashlaneDescOne_M=Still writing down your passwords? <a>Not safe!</a>
Lan_dashlaneDescTwo_M=Dashlane's secure password manager is trusted by <a>over 7 million people</a> worldwide.
Lan_dashlaneDescThree_M=<a>Try Dashlane for FREE</a> and never forget another password!
lbl_CheckEmail.Caption=Now check your email to activate your subscription and get the $9 ebook!
lbl_DownloadFinished.Caption=Please click the Finish button below to run it now!
Ada_name=Web Protection You Can Trust
Ada_3M=  Real-Time Web Protection
Ada_Detail=Install Web Companion to improve my Internet Protection and Set Bing
Ada_YesM=Yes, I agree to install Web Companion and accept its <a>EULA</a> and <a>Privacy Policy</a>
Ada_NoM=No, I don't want free web protection.
ker webbl
Lan_WhatNewsFourDesc_M=Bli av med webbl
Lan_WindowsEbook_M=Prenumerera p
r Windows-system
Lan_MsgBoxEnterEMail_M=Ange din e-postadress, f
Lan_MsgBoxAddrIncorr_M=E-postadressen
Lan_MsgBoxReter_M=Installationsmappen du angav
Lan_MsgBox100MB_M=Din systempartition har inte tillr
Lan_dashlaneDescTwo_M=Dashlane Secure Password Manager
lbl_CheckEmail.Caption=Kontrollera din e-postadress f
lbl_DownloadFinished.Caption=Klicka p
rda vanliga problem (t.ex. n
Ada_Detail=Install Web Companion to improve my Internet Protection and Set Bing? by Microsoft? as my homepage, new tabs, and default search engine on compatible browsers.
nner att installera Web Companion och acceptera dess <a>EULA</a> och <a>sekretesspolicy</a>.
Ada_NoM=Nej, jag vill inte ha gratis webbskydd.
Lan_WindowsEbook_M=Windows Tweak e-Kitab
Lan_theMust_M=Windows sistemleri i
Lan_MsgBoxEnterEMail_M=Hediyenizi almak i
Lan_MsgBoxAddrIncorr_M=E-posta adresi do
Lan_MsgBoxReter_M=Girdi
Lan_MsgBox100MB_M=Sistem disk b
lbl_CheckEmail.Caption=
lbl_DownloadFinished.Caption=Onu
(1,000,000 ).
Web Koruma
in Web Arkada
Ada_YesM=Evet, Web Arkada
r, bedelsiz web koruma istemiyorum.
Lan_WindowsEbook_M=Tweak eBook Windows
w Windows
Lan_MsgBoxEnterEMail_M=Prosz
Lan_MsgBoxAddrIncorr_M=Adres email jest nieprawid
Lan_MsgBoxReter_M=Podany katalog instalacyjny jest nieprawid
Lan_MsgBox100MB_M=Partycja systemowa nie ma wystarczaj
lbl_DownloadFinished.Caption=Prosz
lbl_CheckEmail.Caption=Teraz sprawdzi
Web Companion
na zainstalowanie Web Companion i zaakceptowanie <a> MOWY LICENCYJNEJ </a> oraz <a> Polityki prywatno
n importante:
cil los programas importantes
Lan_WindowsEbook_M=Windows Tweak eBook
a para los sistemas Windows
Lan_MsgBoxEnterEMail_M=Por favor, introduzca su direcci
Lan_MsgBoxAddrIncorr_M=
Lan_MsgBoxReter_M=La ruta de instalaci
Lan_MsgBox100MB_M=La partici
Lan_dashlaneDescTwo_M=Dashlane Secure Password manager es usado por m
lbl_DownloadFinished.Caption=
s grande (  1.000.000).
n Web en Tiempo Real
Instalar Web Companion para mejorar su protecci
squeda por defecto en sus navegadores web?.
, acepto instalar Web Companion y acepto sus <a>T
n web gratuita.
ti Windows sistem
Lan_MsgBoxEnterEMail_M=
Lan_MsgBoxAddrIncorr_M=El. pa
Lan_MsgBoxReter_M=
Lan_MsgBox100MB_M=Sistemos skaidinyje n
(1 000 000 ).
diekite "Web Companion", jei norite pagerinti savo interneto apsaug
diegti "Web Companion" ir priimti jo <a>EULA</ a> ir <a>privatumo politik
Lan_WhatnewsFourTitle_M=Snele en veilige webbrowser
Windows systeemgids die u niet wil missen
Lan_MsgBoxEnterEMail_M=Voer uw e-mailadres in om het cadeau te krijgen.
Lan_MsgBoxAddrIncorr_M=Het e-mailadres is onjuist!
Lan_MsgBoxReter_M=De installatiemap die u heeft opgegeven is ongeldig. Voer een geldige map in, bijv. C:\App.
Lan_MsgBox100MB_M=Uw systeemschijf heeft onvoldoende vrije ruimte (100MB). Ruim uw PC op om ruimte te cre
lbl_CheckEmail.Caption=Controleer nu uw e-mail om uw inschrijving te activeren en ontvang de $9 Ebook!
lbl_DownloadFinished.Caption=Klik op Voltooien om IObit Uninstaller op te starten!
Lan_WindowsEbook_M= Windows
Lan_theMust_M=Windows
C:\App
Lan_MsgBox100MB_M=
Web Companion
Lan_PleaseRead_M= Veuillez lire les informations importantes suivantes:
jour rapide et facile de programmes importants
Lan_WindowsEbook_M=eBook de r
glages Windows
mes Windows
Lan_MsgBoxEnterEMail_M=Entrez votre adresse courriel pour obtenir votre cadeau.
Lan_MsgBoxAddrIncorr_M= L'adresse courriel est incorrecte!
Lan_MsgBoxReter_M=Le r
Lan_MsgBox100MB_M=Votre partition syst
crivez toujours vos mots de passe? <a>C'est pas s
Lan_dashlaneDescTwo_M= Le gestionnaire de mot de passe s
Lan_dashlaneDescThree_M<a>Essayez Dashlane GRATUITEMENT</a> et n'oubliez plus jamais un mot de passe!
lbl_CheckEmail.Caption=V
lbl_DownloadFinished.Caption=Veuillez cliquer sur le bouton Terminer ci-dessous pour le lancer maintenant!
Ada_3M=  Protection Web en Temps R
Ada_Detail=Installer Web Companion pour am
Ada_YesM=Oui, j'accepte d'installer Web Companion et j'accepte son <a>CLUF</a> et sa <a>Politique de Confidentialit
Ada_NoM=Non, je ne veux pas de protection Web gratuite.
Lan_MsgBoxEnterEMail_M=
Lan_MsgBoxReter_M=C
Lan_theMust_M=A Windows-rendszerek k
Lan_MsgBoxEnterEMail_M=k
Lan_MsgBoxReter_M=A telep
Lan_MsgBox100MB_M=A sz
lbl_CheckEmail.Caption=Ellen
lbl_DownloadFinished.Caption=K
webes v
ti a Web Companion programot az Internetes v
Ada_YesM=Igen, elfogadom a Web Companion telep
Windows
C:\App.
Windows
(1,000,000 ).
Ada_3M=  Web
Web Companion,
kroz Windows sisteme
Lan_MsgBoxEnterEMail_M=Upi
Lan_MsgBoxAddrIncorr_M=E-meil adresa je neta
Lan_MsgBoxReter_M=Instalacioni direktorijum kojeg ste uneli je neispravan. Unesite ipravan direktoriju kao npr: C:\App.
Lan_MsgBox100MB_M=Va
lbl_CheckEmail.Caption=Sada proverite Va
lbl_DownloadFinished.Caption=Kliknite na dugme "Zavr
Ada_3M=  Web za
Ada_4M=  Kompatibilnost sa brojnim web pretra
Ada_Detail=Instalirajte Web Companion da unapredite za
em se sa instalacijom Web Companion, prihvatam <a>EULA</a> i <a>Politiku privatnosti</a>.
elim besplatnu web za
Lan_theMust_M=Tarpeellinen opas Windows-j
Lan_MsgBoxEnterEMail_M=Anna s
Lan_MsgBoxAddrIncorr_M=S
Lan_MsgBoxReter_M=Antamasi asennushakemisto on virheellinen, anna kelvollinen, kuten C:\App.
Lan_MsgBox100MB_M=J
lbl_CheckEmail.Caption=Tarkista s
lbl_DownloadFinished.Caption=Klikkaa Valmis-painiketta k
Ada_Detail=Asenna Web Companion Internetin suojauksen parantamiseksi ja aseta Microsoft Bing kotisivukseni. Uudet v
ksyn Web Companion asennuksen ja hyv
Lan_PleaseRead_M=Jekk joghgbok aqra sewwa l-informazzjoni importanti
Lan_WhatNewsThreeDesc_M=J'abdejtja malajr u facilment programmi importanti
Lan_theMust_M=Il-gwida tajba ghall-Windows systems
Lan_MsgBoxEnterEMail_M=Jekk joghgbok dahhal l-e-mail address biex tiehu ir-rigal.
Lan_MsgBoxAddrIncorr_M=L-Email address mhux tajjeb!
Lan_MsgBoxReter_M=Id-direttorju li dahhalt mhux tajjeb dahhal wiehed tajjeb bhall C:\App.
Lan_MsgBox100MB_M=Fis-sistema m'ghandekx spazzju bizzejjed (100MB). Naddaf il-komputer biex ikollok spazzju fejn tkun tista t'installa l-program.
Lan_dashlaneDescOne_M=Ghadek tikteb il-passwords? <a>M'hux safe!</a>
Lan_dashlaneDescTwo_M=Is-secure password manager tad-Dashlane huwa avdat<a>aktar minn 7 miljun persuna</a> madwar id-dinja.
Lan_dashlaneDescThree_M=<a>Ipprova d-Dashlane FREE</a> u ma' tinsa password ohra qatt!
Ada_3M= Protezzjoni Real-Time Web
Ada_Detail=Installa l-Web Companion biex ittejjeb il-protezzjoni ta
Ada_YesM=Iva, jiena naccetta l-Web Companion u naccetta l-<a>EULA</a> u l-<a>Privacy Policy</a>.
Ada_NoM=Le, jiena mar-ridx il-web protection.
Lan_WindowsEbook_M=Windows Tweek eBook
ha" guide for Windows systemer
Lan_MsgBoxEnterEMail_M=Vennligst angi din e-postadresse for
Lan_MsgBoxAddrIncorr_M=E-postadressen er ikke korrekt!
Lan_MsgBoxReter_M=Installasjonsomr
det du anga er ikke korrekt. Vennligst angi en riktig adresse som f.eks. C:\App.
Lan_MsgBox100MB_M=Systempartisjonen din har ikke nok ledig plass (100 MB). Vennligst rengj
Lan_dashlaneDescOne_M=Skriver du fremdeles ned dine passord? <a>Ikke sikkert!</a>
Lan_dashlaneDescTwo_M=Dashlanes administrator for sikre passord stoles p
v Dashane gratis</a> og aldri glem et passord igjen!
lbl_CheckEmail.Caption=Sjekk e-posten din n
lbl_DownloadFinished.Caption=Vennligst klikk p
DB_4M=  Reparasjon av vanlige problemer (f.eks. nettverk og lyd)
ii importante:
i rapid programele importante
Lan_WindowsEbook_M= Carte electronic
Windows Tweak
Lan_theMust_M=Ghidul recomandat pentru sistemele Windows
Lan_MsgBoxEnterEMail_M=Introduce
Lan_MsgBoxAddrIncorr_M=Adresa de e-mail este incorect
Lan_MsgBoxReter_M=Directorul de instalare pe care l-a
Lan_MsgBox100MB_M=Parti
lbl_CheckEmail.Caption=Verific
lbl_DownloadFinished.Caption=Click mai jos pe butonul Terminat pentru a rula acum!
my Windows
Lan_MsgBoxEnterEMail_M=Zadajte svoju e-mailov
Lan_MsgBoxAddrIncorr_M=E-mailov
Lan_MsgBoxReter_M=In
Lan_MsgBox100MB_M=V
lbl_CheckEmail.Caption=Skontrolujte si teraz svoj e-mail na aktiv
lbl_DownloadFinished.Caption=Pre spustenie kliknite na "Dokon
Ada_3M=  Webov
talujte Web Companion na zlep
ciou Web Companion a prij
[Portuguese(PT-PT)]
o importante
Lan_WhatNewsThreeDesc_M=Atualize facilmente e rapidamente programas importantes
rio para sistemas Windows
Lan_MsgBoxEnterEMail_M=Por favor digite o seu endere
Lan_MsgBoxAddrIncorr_M=O endere
Lan_MsgBoxReter_M=O direct
lido, como por exemplo C:\App.
Lan_MsgBox100MB_M=A sua parti
Lan_FinsishDec_M=O IObit Uninstaller foi instalado com sucesso! Por favor clique em Terminar para o executar.
lbl_CheckEmail.Caption=Agora, verifique o seu e-mail para ativar a sua subscri
lbl_DownloadFinished.Caption=Clique no bot
o Concluir abaixo para execut
es Seguras com drivers WHQL certificados.
Ada_Detail=Instale o Web Companion para melhorar a minha Prote
Ada_YesM=Sim, Eu concordo em instalar o Web Companion e aceito o seu <a>EULA</a> e <a>Pol
important:
Lan_WhatNewsThreeDesc_M=Actualitza programes importants de manera f
Lan_theMust_M=La guia imprescindible per a sistemes Windows
Lan_MsgBoxEnterEMail_M=Introdueix la teva adre
Lan_MsgBoxAddrIncorr_M=L'adre
Lan_MsgBoxReter_M=El directori d'instal
lat correctament! Fes clic a Finalitza per executar-lo.
lbl_CheckEmail.Caption=Ara rebr
lbl_DownloadFinished.Caption=Si et plau, fes clic a sota al bot
Finalitzat per executar ara!
s d'1.000.000).
web en temps real
lar Web Companion per millorar la protecci
lar Web Companion i n'accepto el seu <a>CLUF</a> i <a>Pol
web gratu
Lan_WindowsEbook_M=
Lan_MsgBoxAddrIncorr_M=!
Lan_MsgBoxReter_M=C:\App
lbl_DownloadFinished.Caption=!
(1,000,000 )
Web Companion
, Web Companion
Lan_theMust_M=Vodnik za sisteme Windows, ki ga morate imeti
Lan_MsgBoxEnterEMail_M=Da dobite darilo, vnesite svoj e-po
Lan_MsgBoxAddrIncorr_M=E-po
Lan_MsgBoxReter_M=Namestitveni imenik, ki ste ga vnesli, je neveljaven, vnesite veljavno enoto, kot je C:\App.
lbl_CheckEmail.Caption=Sedaj preverite va
lbl_DownloadFinished.Caption=Za takoj
Ada_Detail=Namestite Web Companion, da izbolj
Ada_YesM=Da, strinjam se namestitvijo Web Companion in se sprejemam <a>EULA</a> in <a>Pravilnik o zasebnosti</a>.
Windows
(1.000.000 ).
C:\App.
Lan_WindowsEbook_M=Windows Tweak
Lan_theMust_M=Windows
Ada_name=Web Protection
[Portuguese(PT-BR)]
o importante:
Lan_WhatNewsThreeDesc_M=Atualize os programas importantes de maneira f
Lan_WindowsEbook_M=e-Book de Ajustes para Windows
Lan_theMust_M=O guia essencial para sistemas Windows
Lan_MsgBoxEnterEMail_M=Por favor, digite seu endere
Lan_MsgBoxReter_M=A pasta de instala
Lan_MsgBox100MB_M=Sua parti
Lan_FinsishDec_M=O IObit Uninstaller foi instalado com sucesso! Por favor, clique em Concluir para execut
lbl_CheckEmail.Caption=Verifique seu e-mail para ativar sua assinatura e ganhe um e-book de $9!
lbl_DownloadFinished.Caption=Por favor, clique em Concluir para executar agora!
o Web em Tempo Real
Ada_Detail=Instalar o Web Companion para melhorar sua Prote
Ada_YesM=Sim, eu aceito instalar o Web Companion e concordo com seu <a>Contrato de Licen
o web gratuita.
Lan_theMust_M=La guida da avere per sistemi Windows
Lan_MsgBoxEnterEMail_M=Metti l'indirizzo email per avere il tuo regalo.
Lan_MsgBoxAddrIncorr_M=Email non corretta!
Lan_MsgBoxReter_M=Percorso di installazione non corretto, mettine uno corretto come C:\App.
Lan_MsgBox100MB_M=Non c'
Lan_dashlaneDescOne_M=Scrivi ancora le tue passwords? <a>Non sicuro!</a>
Lan_dashlaneDescTwo_M=Dashlane secure password manager
le tue password!
lbl_CheckEmail.Caption=Ora controlla la tua email per attivare il tuo abbonamento e ottenere l'ebook $ 9!
lbl_DownloadFinished.Caption=Si prega di fare clic sul seguente pulsante Fine per eseguire ora!
DB_3M=  Aggiornamenti sicuri Certificati WHQL.
SD_2M=  Porta la performance dell'Hard Disk al massimo.
Ada_3M=  Protezione Web in Tempo Reale
Ada_Detail=Installa Web Companion per migliorare la protezione Internet e imposta Bing? di Microsoft? come homepage, per nuove pagine e come motore di ricerca nei miei Browser web
Ada_YesM=Si, accetto di installare Web Companion e accetto la sua <a>EULA</a> e la <a>Politica della Privacy</a>.
Ada_NoM=No, non voglio la protezione web gratuita
Lan_theMust_M=De onmisbare gids voor Windows systemen
Lan_MsgBoxEnterEMail_M=Gelieve uw email adres in te voeren om uw geschenk te ontvangen.
Lan_MsgBoxAddrIncorr_M=Foutief email adres!
Lan_MsgBoxReter_M=De ingevoerde installatiemap is ongeldig, gelieve een geldige in te voeren zoals C:\App.
Lan_MsgBox100MB_M=Uw systeem partitie heeft niet genoeg vrije ruimte (100MB). Gelieve uw computer op te ruimen om meer beschikbare ruimte vrij te maken om de installatie verder te zetten.
lbl_CheckEmail.Caption=Controleer uw email nu om uw abonnement te activeren en de $9 ebook te ontvangen!
lbl_DownloadFinished.Caption=Klik op de onderstaande "Voltooien" toets om het nu uit te voeren!
DB_1M=  Grote stuurprogramma database ( 1.000.000).
Ada_3M=  Real-Tijd Web Bescherming
Ada_Detail=Web Companion installeren om uw Internet bescherming te verhogen en Bing instellen als mijn thuispagina door Microsoft, nieuwe tab bladen, en standaard zoekmachine op ondersteunde browsers.
Ada_YesM=Ja, ik ga akkoord met de installatie van Web Companion en aanvaardt de <a>EULA</a> en <a>Privacy Policy</a>.
Ada_NoM=Neen, ik wil geen gratis web bescherming.
ka pro Windows syst
Lan_MsgBoxEnterEMail_M=Pros
Lan_MsgBoxReter_M=Zadan
Lan_MsgBox100MB_M=Syst
lbl_CheckEmail.Caption=Nyn
lbl_DownloadFinished.Caption=Kliknut
Ada_Detail=Instalovat Web Companion pro zlep
Web Companion a p
Ada_NoM=Ne, nechci webovou ochranu zdarma.
r Windows Systeme
Lan_MsgBoxEnterEMail_M=Bitte E-Mail-Adresse eintragen, um Geschenk zu erhalten.
Lan_MsgBoxAddrIncorr_M=E-Mail-Adresse ung
Lan_MsgBoxReter_M=Das angegebene Installationsverzeichnis ist ung
Lan_MsgBox100MB_M=Nicht gen
Lan_dashlaneDescOne_M=Notieren Sie sich immer noch Ihre Passw
Lan_dashlaneDescTwo_M=Dashlane's sicherem Passwort-Manager vertrauen <a>mehr als 7.000.000 Nutzer</a> weltweit.
Lan_dashlaneDescThree_M=<a>Testen Sie Dashlane KOSTENFREI</a> und Sie vergessen nie wieder ein Passwort!
lbl_CheckEmail.Caption=Zur Aktivierung Ihres Abonnements jetzt nach E-Mails schauen und das 9$-Ebook bekommen!
lbl_DownloadFinished.Caption=Bitte zum jetzt Ausf
Ada_Detail=Web Companion zur Verbesserung der Internetsicherheit installieren, und Bing? von Microsoft? als Startseite setzen. Neue Tabs, und voreingestellte Suchmaschine bei kompatiblen Browsern.
Ada_YesM=Ja, Web Companion installieren, ich akzeptiere <a>EULA</a> und <a>Datenschutzerkl
Lan_WindowsEbook_M=Windows Tweak e-bog
rlig guide for Windows-systemer
Lan_MsgBoxEnterEMail_M=Indtast venligst en gyldig e-mail-adressefor at modtage din gave.
Lan_MsgBoxAddrIncorr_M=e-mail-adresse er ukorrekt!
Lan_MsgBoxReter_M=Installeringsmappen du indtastede er ugyldig. V
Lan_MsgBox100MB_M=Din sytempartion har ikke nok fri plads (100MB). rens venligst din komputer for at frig
lbl_CheckEmail.Caption=Tjek din e-mail nu for at aktivere dit abonnement og f
lbl_DownloadFinished.Caption=Klik p
rre driverdatabase (1.000.000 )<br>
DB_4M=  Retter almindelige problemer (f.eks netv
Ada_3M=  Webbeskyttelse i Realtid
r Web Companion for at forbedre min Internetbeskyttelse og s
Ada_YesM=Ja! Jeg accepterer at installere Web Companion og accepterer dens <a>Slutbrugeraftale</a> og <a>Privatlivspolitik</a>.
nsker ikke den fire webbeskyttelse.
C:\App
ASC_3M=   Web
1,000,000 
Ada_YesM=Web Companion
Lan_WindowsEbook_M= Windows uzlabo
matu par Windows sist
Lan_MsgBoxEnterEMail_M=L
Lan_MsgBoxAddrIncorr_M=E-pasta adrese ir nepareiza!
Lan_MsgBoxReter_M=Ievad
lbl_CheckEmail.Caption=Tagad p
lbl_DownloadFinished.Caption=L
t Web Companion, lai uzlabotu manu interneta aizsardz
t Web Companion un akcept
1 000 000).
7.0.0.553
2005-2017
7.0.1


Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.


Manual removal*

  1. Terminate malicious process(es) (How to End a Process With the Task Manager):

    iobituninstaller.tmp:3956
    %original file name%.exe:1828
    iobituninstaller.exe:2500
    60e55700152b6a96e00148bb935f45e3136bd24c.del:3744

  2. Delete the original Trojan file.
  3. Delete or disinfect the following files created/modified by the Trojan:

    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-GHOVR.tmp\RdZone.dll (673 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-GHOVR.tmp\Setup.exe (33248 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-GHOVR.tmp\_isetup\_shfoldr.dll (47 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-GHOVR.tmp\IUInstaller\Setup.exe (33248 bytes)
    C:\ProgramData\COMODOCPSP\cwsguard\CwsGuard32.dll (10 bytes)
    C:\ProgramData\COMODOCPSP\cwsguard\CwsGuard64.dll (10 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\TarDE50.tmp (2712 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CabDE4F.tmp (53 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\wrapped.sandboxed\60e55700152b6a96e00148bb935f45e3136bd24c.del (84360 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D84E548583BE1EE7DB5A935821009D26_5B98B6CD6E69202676965CF5B0E2A7A7 (1552 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D84E548583BE1EE7DB5A935821009D26_5B98B6CD6E69202676965CF5B0E2A7A7 (1 bytes)
    C:\ProgramData\COMODOCPSP\cwsguard\GuardConfig.ini (113 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\wrapped.sandboxed\cis_temp_82c7a4.exe (1944 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EA618097E393409AFA316F0F87E2C202_71BF8055C056FCBA449EB93F604FD873 (1 bytes)
    C:\ProgramData\COMODOCPSP\cwsguard\NewestGuardConfig.ini (10 bytes)
    C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EA618097E393409AFA316F0F87E2C202_71BF8055C056FCBA449EB93F604FD873 (1496 bytes)
    C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-GVCM7.tmp\iobituninstaller.tmp (50 bytes)
    C:\iobituninstaller.exe (5823 bytes)
    C:\%original file name%.exe (2040823 bytes)

  4. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
  5. Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

No votes yet

x

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Enjoy unique new features, lightning fast scans and a simple yet beautiful new look in our best antivirus yet!

For a quicker, lighter and more secure experience, download the all new adaware antivirus 12 now!

Download adaware antivirus 12
No thanks, continue to lavasoft.com
close x

Discover the new adaware antivirus 12

Our best antivirus yet

Download Now